last executing test programs: 6.506243054s ago: executing program 0 (id=1562): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) 3.365639132s ago: executing program 0 (id=1637): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 2.346991375s ago: executing program 0 (id=1664): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0xfff}}, [0x81, 0x95, 0x8001, 0xaf, 0x6, 0x1, 0x0, 0x6, 0x9, 0x9, 0x80000001, 0x7, 0x2, 0x1fffe000000, 0x5]}, &(0x7f0000000000)=0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x5, 0x3}, 0xc) 2.161493562s ago: executing program 0 (id=1667): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.07253014s ago: executing program 0 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000200000004000002041001"], 0x101c}, 0x1, 0xffffffffff600000}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x21, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, @hopopts={0x33}]}}}}}, 0x0) 1.9703177s ago: executing program 0 (id=1674): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) 1.469259475s ago: executing program 4 (id=1688): syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00f6147e29d9db0edf1c0e1e1e856a2f57395c7b5416875305c865efdb1d36003837bc0f48040261051c8859eb72cb94ee9cd275474255518229431c76e22e7dbe7ebfe11aedef211b443e2fbce69896e5b92d40472e544578b65a85b16491a43c76a302837e355e0715a00e823653f1aae658babc5476d7c5214e48ea577e36ff1131bc"], 0x1, 0x5e11, &(0x7f000000bcc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 1.181773102s ago: executing program 2 (id=1693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xfe, 0x700, 0x0, 0x13, {[@window={0xe, 0x3, 0x2}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) 1.068588932s ago: executing program 3 (id=1694): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x10}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0b06c90007000a00"], 0xe) 1.067450142s ago: executing program 1 (id=1695): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000000)=r0, 0x4) 987.06645ms ago: executing program 4 (id=1696): socket$rxrpc(0x21, 0x2, 0xa) set_mempolicy(0x4003, &(0x7f00000004c0)=0x2007e, 0x8) syz_usb_connect(0x2, 0xa6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffd5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 939.607404ms ago: executing program 3 (id=1697): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000010a0501"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 846.682082ms ago: executing program 3 (id=1698): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, r2, 0x400000}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) 832.131114ms ago: executing program 1 (id=1699): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="001c000000000cdc00000b"], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x36, &(0x7f00000007c0)={@empty, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x806, 0x3, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0xd0, 0x100, @void}}}}}}}, 0x0) 802.773407ms ago: executing program 1 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="240003"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000018c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x4c}}, 0x0) 801.808427ms ago: executing program 2 (id=1701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037f43d223b3c1b324debec40e57a07f7bd417eb48821996aff1e7154e746be4d7686455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d13"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a40)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x2, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 742.073272ms ago: executing program 1 (id=1702): syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="042ff904"], 0x3fc) 681.332498ms ago: executing program 3 (id=1703): r0 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000080)=""/4096) 681.034887ms ago: executing program 2 (id=1704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 663.115269ms ago: executing program 3 (id=1705): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="0000000200"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0xd, 0x2, "28c4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 616.283884ms ago: executing program 1 (id=1706): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x514202, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 616.130613ms ago: executing program 2 (id=1707): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x10}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0b06c90007000a00"], 0xe) 513.165103ms ago: executing program 2 (id=1708): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000d000900010073008030000000"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000010a0501"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 448.194059ms ago: executing program 2 (id=1709): syz_mount_image$ocfs2(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_buffered}, {@noacl}]}, 0x1, 0x4436, &(0x7f0000004480)="$eJzs3b9PHFceAPA3Az6Dz/aBz4VPOulWOkt3uosQuMkPLAVjbAw2ceTEVpRmvcDaJllYC5YohQvSWUoVKUWUwkqkdFQWRVrnT0iT0qktJUWaSJGsEO3uLDDDrtggFoLz+RTMzvf9hO/M27fFMnGicm9uKTe3lCss5Mozd5bO5T4ol5bniyHeJ03HP7J/49OeTlwnB33t/Zldv3j5rVvnQvhm9rtn6+vr66GqOzQ1tOX1zz89mNl6bIgzbar9Nu9tr7wbQji9bV5VXSGEd74OIQohXEhio8mxN4RwItTLbj34+HZuj2bz+GnxfP751MO14bOTq4/WWv/uUQifl/7x0t35H/7dNfz9//ZoeAAAAAAAAAAAAAAAAAAADrnxG9dvvjk4FJ5EoXs12v593fHk2Or7set75l+d/2UBAAAAAAAAAAAAAAAAAADgD2rz+/+56FST7/+PJceRFu3XX+/8HOmciTeuj10aHEqe/x5tK38lCf14oSv0N3nue/b57xcy7Zs//337OLvVmF9j3L4QxQOp8zgeGAjhy+TB72eiY3GpvFT5/53y8sLsnk3j0Ernv/70/lR2qqGX28//aKb/zj///+/brqbq+e29u8ReaOn8d7Ws99VHUVv5v5hptx/5Z/fS+e+uxXq3VhiprwnV/H/SvXP+xzL9dyr/J0MIuag611xqBajuYarxVvsV0tL5P1KLpZbO5A/Z6v7/JZP/S5n+D2r9X8m+EdFUOv9/qcV6UjU27//+eOf7/3Km/4PIf3X+K97/25LO/9F6sDtVpfaXbHf9H8/0v+f5Ty7Om3Eyz5NR6gpYjerxVv+vjrR0/nu2lW9+/ovb2v9dybTfr89/jXEbn/8ay/9/o/rnP5pL57+3Zb127/+JTLtOr/8jtf0fu5XO/7FaLL137qv9bDf/k5n+O5X/2q6kp5H/zfXk16P1+Bf2f21J5/+v9WC8tcZK7Wdt/xftvP+/mun/IPZ/1fmvxJ0d9UWRzv/xlvWq+f+2jff/a5l2nc9/CIO72E70dWIih1A6/yda1qvd/z07538q067T+f9PJzsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOARGk2NfiOKB1HkcDwyEcDE5PxOORdOF2fx0qTzz/lIIY0k8F05Fd0vl6UIpP7dQni3mC6VSeSaES0n56dATLZXKlfx84f7ljb56o3vFwmJluliohBDGk/g/w4lGX9NzlfnC/RDClY2yv8Xlxfv3Cgv52bnF1wYHBwfDxMYc+qPih5XiQqU+er00hMmNtn3RlsnViq9uzOV49F55eXGhUKrFr21pUyrPFEpb2kwlZZ+G/qiyuLwwU6gU86Xy3cZ4B2kkOY5N3Hj7xrWhbeW3o/pxdH+nBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv9GT41c9CCN31s7jxsvoialb/8dPi+fzzqYdrw2cnVx+tPWtVDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSMUoDQRQG4DdjoXYew2rZ7WxXFNHCFcET6DE8jB7FS3iHFCnSpgiBZBbCZhe2Sarvax7Mz8x7MA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmeXrvPt7qJiLF1eYy4u/rf3GYv5T6cz9+/+IMM3I6z6/dw2PdlH9PR/ldOVq2eZeuV9+fMVJ7v4M9Ge7TXt/nenKuqX2bmq/vexMpVxHRlvw25VxV894CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMsOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UUfRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArwAAAP//xWwfIw==") 393.337824ms ago: executing program 4 (id=1710): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 281.412684ms ago: executing program 4 (id=1711): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0xe}, {0x9f78, 0x2dc2}]}) 254.073277ms ago: executing program 4 (id=1712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="240003"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000018c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x4c}}, 0x0) 176.234024ms ago: executing program 4 (id=1713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0xfe, 0x700, 0x0, 0x13, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) 56.83µs ago: executing program 1 (id=1714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x101, 0x900, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40) 0s ago: executing program 3 (id=1715): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000010c0)) kernel console output (not intermixed with test programs): ave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.391646][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.397609][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.399849][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.406630][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.437191][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.439581][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.442144][ T4303] device bridge_slave_0 entered promiscuous mode [ 37.510756][ T4293] device hsr_slave_0 entered promiscuous mode [ 37.554400][ T4293] device hsr_slave_1 entered promiscuous mode [ 37.590571][ T4306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.594329][ T4294] team0: Port device team_slave_0 added [ 37.597784][ T4294] team0: Port device team_slave_1 added [ 37.600711][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.602599][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.605148][ T4303] device bridge_slave_1 entered promiscuous mode [ 37.613566][ T4306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.641289][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.643061][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.655124][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.671493][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.685308][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.687144][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.694505][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.720622][ T4295] device hsr_slave_0 entered promiscuous mode [ 37.749218][ T4295] device hsr_slave_1 entered promiscuous mode [ 37.799208][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.801472][ T4295] Cannot create hsr debugfs directory [ 37.805145][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.814182][ T4306] team0: Port device team_slave_0 added [ 37.829603][ T4306] team0: Port device team_slave_1 added [ 37.877060][ T4303] team0: Port device team_slave_0 added [ 37.884761][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.886774][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.894229][ T4306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.902771][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.905184][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.913960][ T4306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.920628][ T4303] team0: Port device team_slave_1 added [ 37.990729][ T4294] device hsr_slave_0 entered promiscuous mode [ 38.030325][ T4294] device hsr_slave_1 entered promiscuous mode [ 38.069171][ T4294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.071207][ T4294] Cannot create hsr debugfs directory [ 38.160634][ T4306] device hsr_slave_0 entered promiscuous mode [ 38.219337][ T4306] device hsr_slave_1 entered promiscuous mode [ 38.269193][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.271244][ T4306] Cannot create hsr debugfs directory [ 38.273497][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.275435][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.282660][ T4303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.288485][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.291064][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.297858][ T4303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.430606][ T4303] device hsr_slave_0 entered promiscuous mode [ 38.469737][ T4303] device hsr_slave_1 entered promiscuous mode [ 38.509037][ T4303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.511130][ T4303] Cannot create hsr debugfs directory [ 38.601665][ T4295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.650888][ T4295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.693450][ T4295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.720983][ T4295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.749373][ T4310] Bluetooth: hci3: command tx timeout [ 38.750990][ T4310] Bluetooth: hci4: command tx timeout [ 38.751023][ T4302] Bluetooth: hci2: command tx timeout [ 38.752629][ T4310] Bluetooth: hci0: command tx timeout [ 38.754107][ T4302] Bluetooth: hci1: command tx timeout [ 38.807967][ T4293] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.850658][ T4293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.912731][ T4293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.963131][ T4293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.024241][ T4306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.050940][ T4306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.090806][ T4306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.170426][ T4306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.266740][ T4294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.316166][ T4294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.350739][ T4294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.386320][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.388390][ T4294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.475487][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.478750][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.496369][ T4293] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.507983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.513332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.516233][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.518287][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.531854][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.542072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.552828][ T4303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.581492][ T4303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.621451][ T4303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.671380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.674289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.676919][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.679320][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.681622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.684592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.688052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.694744][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.699682][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.703790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.706420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.709784][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.711711][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.713947][ T4303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.785807][ T4293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.788582][ T4293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.807606][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.810789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.813957][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.817642][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.821655][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.824254][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.826918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.832000][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.835029][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.838060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.841792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.844361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.846858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.849466][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.851487][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.853713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.856311][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.858557][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.861151][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.863985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.866531][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.922720][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.926676][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.937081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.941969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.944644][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.946599][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.948765][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.952559][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.955035][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.956840][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.959374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.962123][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.964852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.967512][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.970792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.973475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.976096][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.979938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.982780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.985366][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.987864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.990815][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.997536][ T4295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.001649][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.023550][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.026179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.028578][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.034004][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.037755][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.046632][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.051253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.060876][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.078666][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.098210][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.116006][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.118189][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.130969][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.148026][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.154428][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.156538][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.160154][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.162587][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.165711][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.168086][ T1771] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.170087][ T1771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.174452][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.177045][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.185511][ T1771] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.187519][ T1771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.190402][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.193874][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.196277][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.205581][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.208071][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.211662][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.214538][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.238112][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.247411][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.251410][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.254090][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.257598][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.266511][ T1771] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.268340][ T1771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.271933][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.274659][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.276942][ T1771] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.278611][ T1771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.282115][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.284028][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.286163][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.293053][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.305963][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.309618][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.312549][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.316152][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.324681][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.327458][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.331276][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.333920][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.371090][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.374870][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.377071][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.381368][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.384160][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.386864][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.391092][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.393636][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.396253][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.398786][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.401843][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.413205][ T4295] device veth0_vlan entered promiscuous mode [ 40.420480][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.425846][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.429199][ T4295] device veth1_vlan entered promiscuous mode [ 40.431762][ T4293] device veth0_vlan entered promiscuous mode [ 40.434079][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.436759][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.442281][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.444992][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.447912][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.455853][ T4303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.460485][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.467909][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.471275][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.473741][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.476239][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.478689][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.481914][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.491986][ T4293] device veth1_vlan entered promiscuous mode [ 40.551074][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.554247][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.556869][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.562977][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.566780][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.571328][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.574531][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.577208][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.581527][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.584239][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.586556][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.592744][ T4293] device veth0_macvtap entered promiscuous mode [ 40.597964][ T4293] device veth1_macvtap entered promiscuous mode [ 40.602427][ T4306] device veth0_vlan entered promiscuous mode [ 40.607779][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.610654][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.616171][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.621946][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.625990][ T4295] device veth0_macvtap entered promiscuous mode [ 40.633869][ T4306] device veth1_vlan entered promiscuous mode [ 40.637808][ T4295] device veth1_macvtap entered promiscuous mode [ 40.661869][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.664052][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.666622][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.668839][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.686225][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.693921][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.696633][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.710475][ T4306] device veth0_macvtap entered promiscuous mode [ 40.713093][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.715983][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.720767][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.733065][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.736058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.738862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.742152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.744845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.747508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.752485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.755462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.761293][ T4306] device veth1_macvtap entered promiscuous mode [ 40.765719][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.768535][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.773247][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.785622][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.793482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.796308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.799815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.804720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.806962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.812684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.814921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.817813][ T4295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.823849][ T4295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.826159][ T4295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.828335][ T4295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.831495][ T4302] Bluetooth: hci0: command tx timeout [ 40.831530][ T4302] Bluetooth: hci2: command tx timeout [ 40.831552][ T4302] Bluetooth: hci4: command tx timeout [ 40.831585][ T4302] Bluetooth: hci3: command tx timeout [ 40.839735][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.839748][ T4309] Bluetooth: hci1: command tx timeout [ 40.852869][ T4293] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.855263][ T4293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.857590][ T4293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.861065][ T4293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.874248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.877132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.893878][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.896570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.936268][ T4294] device veth0_vlan entered promiscuous mode [ 40.940581][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.943505][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.946066][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.951213][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.954893][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.958531][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.962559][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.965067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.967839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.995939][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.000220][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.002902][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.005550][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.010257][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.020870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.023636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.026957][ T4294] device veth1_vlan entered promiscuous mode [ 41.044018][ T4306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.046473][ T4306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.048830][ T4306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.056778][ T4306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.085998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.089365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.092262][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.095409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.112312][ T4294] device veth0_macvtap entered promiscuous mode [ 41.132639][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.135565][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.140398][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.144220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.155630][ T1771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.157845][ T1771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.171960][ T4294] device veth1_macvtap entered promiscuous mode [ 41.191173][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.193381][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.197100][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.200191][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.202656][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.211203][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.213743][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.216314][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.226071][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.229801][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.232668][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.237298][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.259462][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.261868][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.264200][ T4303] device veth0_vlan entered promiscuous mode [ 41.267425][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.270496][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.273189][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.276346][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.279794][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.283369][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.285993][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.288633][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.295358][ T1771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.307122][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.310437][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.313115][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.317931][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.320567][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.323247][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.327004][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.336731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.340233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.348095][ T4303] device veth1_vlan entered promiscuous mode [ 41.372922][ T4294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.375275][ T4294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.385657][ T4294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.388169][ T4294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.439663][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.441956][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.448035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.478939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.481579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.497553][ T4303] device veth0_macvtap entered promiscuous mode [ 41.544446][ T4303] device veth1_macvtap entered promiscuous mode [ 41.550837][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.553071][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.559223][ T4376] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 41.571352][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.573946][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.581382][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.598209][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.601023][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.607227][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.621837][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.624606][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.627329][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.636503][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.640337][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.643251][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.645910][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.651387][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.664516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.667082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.670977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.741208][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.743504][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.743856][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.748285][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.759237][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.768372][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.772065][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.779635][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.784512][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.790948][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.797073][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.816054][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.822898][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.829404][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.861751][ T4303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.864160][ T4303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.866512][ T4303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.868686][ T4303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.014608][ T1771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.014649][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.038811][ T1771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.063594][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.078139][ T1771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.080511][ T1771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.083612][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.091174][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.253205][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.309818][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.346584][ T4385] loop0: detected capacity change from 0 to 32768 [ 42.348865][ T4385] ======================================================= [ 42.348865][ T4385] WARNING: The mand mount option has been deprecated and [ 42.348865][ T4385] and is ignored by this kernel. Remove the mand [ 42.348865][ T4385] option from the mount to silence this warning. [ 42.348865][ T4385] ======================================================= [ 42.378586][ T4385] (syz.0.7,4385,0):ocfs2_initialize_super:2073 ERROR: Invalid number of node slots (0) [ 42.382895][ T4385] (syz.0.7,4385,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 42.439174][ T4379] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.728350][ T4418] loop1: detected capacity change from 0 to 512 [ 42.817347][ T4418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.835887][ T4427] loop0: detected capacity change from 0 to 512 [ 42.838675][ T4427] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.857782][ T4427] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 42.893204][ T4427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 42.895791][ T4427] System zones: 1-12 [ 42.911630][ T4309] Bluetooth: hci1: command tx timeout [ 42.913023][ T4427] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.21: corrupted in-inode xattr [ 42.913181][ T4309] Bluetooth: hci3: command tx timeout [ 42.917798][ T4309] Bluetooth: hci4: command tx timeout [ 42.919326][ T4309] Bluetooth: hci2: command tx timeout [ 42.920769][ T4309] Bluetooth: hci0: command tx timeout [ 42.926603][ T4427] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.21: couldn't read orphan inode 15 (err -117) [ 42.938115][ T4427] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.947499][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 43.025091][ T4414] loop4: detected capacity change from 0 to 40427 [ 43.038188][ T4414] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 43.040221][ T4414] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 43.096551][ T4414] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.117145][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 43.151069][ T4432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 43.160232][ T4414] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 43.162388][ T4414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.164204][ T4437] device geneve2 entered promiscuous mode [ 43.197201][ T4293] EXT4-fs (loop0): unmounting filesystem. [ 43.547529][ T4458] loop0: detected capacity change from 0 to 64 [ 43.583019][ T4458] process 'syz.0.34' launched './file2' with NULL argv: empty string added [ 43.625895][ T4453] loop2: detected capacity change from 0 to 4096 [ 43.979583][ T4476] loop2: detected capacity change from 0 to 512 [ 44.022222][ T4476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.089359][ T4476] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.40: Directory hole found for htree leaf block 0 [ 44.113667][ T4485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.47'. [ 44.220428][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 44.239652][ T4491] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 44.242381][ T4491] Zero length message leads to an empty skb [ 44.370287][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.373952][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.386522][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.601769][ T4516] loop0: detected capacity change from 0 to 16 [ 44.605378][ T4514] tmpfs: Bad value for 'mpol' [ 44.616886][ T4516] erofs: (device loop0): mounted with root inode @ nid 36. [ 44.858723][ T4527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.68'. [ 44.861550][ T4527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.68'. [ 44.897824][ T4527] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.970991][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 45.000400][ T4302] Bluetooth: hci0: command tx timeout [ 45.001941][ T4302] Bluetooth: hci2: command tx timeout [ 45.003461][ T4302] Bluetooth: hci4: command tx timeout [ 45.004868][ T4302] Bluetooth: hci3: command tx timeout [ 45.006357][ T4302] Bluetooth: hci1: command tx timeout [ 45.012090][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 45.056004][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 45.080722][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.107489][ T4518] loop3: detected capacity change from 0 to 32768 [ 45.107880][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.109913][ T4518] XFS: ikeep mount option is deprecated. [ 45.140454][ T4526] dccp_close: ABORT with 26 bytes unread [ 45.199552][ T4518] XFS (loop3): Mounting V5 Filesystem [ 45.300801][ T4546] loop1: detected capacity change from 0 to 4096 [ 45.303774][ T4546] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 45.327970][ T4518] XFS (loop3): Ending clean mount [ 45.351859][ T4518] XFS (loop3): Quotacheck needed: Please wait. [ 45.377914][ T4518] XFS (loop3): Quotacheck: Done. [ 45.499147][ T4306] XFS (loop3): Unmounting Filesystem [ 45.657550][ T4569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.716669][ T4569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.074733][ T4594] loop3: detected capacity change from 0 to 512 [ 46.105556][ T4594] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.120118][ T4594] EXT4-fs (loop3): shut down requested (2) [ 46.148593][ T4575] loop2: detected capacity change from 0 to 32768 [ 46.153032][ T4575] XFS: ikeep mount option is deprecated. [ 46.177117][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 46.264722][ T4575] XFS (loop2): Mounting V5 Filesystem [ 46.408410][ T4575] XFS (loop2): Ending clean mount [ 46.414166][ T4575] XFS (loop2): Quotacheck needed: Please wait. [ 46.450413][ T4575] XFS (loop2): Quotacheck: Done. [ 46.523482][ T4295] XFS (loop2): Unmounting Filesystem [ 46.716586][ T4641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.117'. [ 46.923690][ T4653] capability: warning: `syz.0.123' uses deprecated v2 capabilities in a way that may be insecure [ 47.012509][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.089281][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.122655][ T4656] loop4: detected capacity change from 0 to 16384 [ 47.139802][ T4656] REISERFS warning (device loop4): super-6504 reiserfs_getopt: the option "nolargeio" requires an argument [ 47.139802][ T4656] [ 47.263444][ T4651] loop1: detected capacity change from 0 to 32768 [ 47.268009][ T4651] XFS: ikeep mount option is deprecated. [ 47.297344][ T4651] XFS (loop1): Mounting V5 Filesystem [ 47.319042][ T3873] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 47.403687][ T4651] XFS (loop1): Ending clean mount [ 47.425533][ T4677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.130'. [ 47.437821][ T4651] XFS (loop1): Quotacheck needed: Please wait. [ 47.454976][ T4651] XFS (loop1): Quotacheck: Done. [ 47.505573][ T4294] XFS (loop1): Unmounting Filesystem [ 47.650436][ T4689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 47.679907][ T3873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.682825][ T3873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 47.686261][ T3873] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 47.705854][ T3873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.720328][ T3873] usb 1-1: config 0 descriptor?? [ 47.967531][ T4707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.013299][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.020166][ T4707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.053231][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.201523][ T4723] netlink: 'syz.2.151': attribute type 11 has an invalid length. [ 48.208471][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.215265][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.217281][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.231308][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.233996][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.235909][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.237797][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.249872][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.251901][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.253809][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.255909][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.257782][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.261394][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.263718][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.265489][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.267569][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.270733][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.272704][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.274865][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.285409][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.287460][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.294190][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.295993][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.297859][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.300344][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.302243][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.304096][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.305948][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.307764][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.311029][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.313220][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.314992][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.328062][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.330882][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.332800][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.334687][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.336537][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.338330][ T3873] uclogic 0003:5543:0005.0001: unknown main item tag 0x0 [ 48.342390][ T3873] uclogic 0003:5543:0005.0001: No inputs registered, leaving [ 48.351776][ T3873] uclogic 0003:5543:0005.0001: hidraw0: USB HID v0.03 Device [HID 5543:0005] on usb-dummy_hcd.0-1/input0 [ 48.407495][ T1984] usb 1-1: USB disconnect, device number 2 [ 48.719765][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 48.820787][ T4763] dccp_invalid_packet: P.Data Offset(6) too small [ 48.941861][ T4771] loop2: detected capacity change from 0 to 1024 [ 48.968324][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.029367][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.176358][ T4777] loop0: detected capacity change from 0 to 4096 [ 49.181538][ T4777] EXT2-fs (loop0): error: couldn't mount because of unsupported optional features (142c0) [ 49.185757][ T4783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.219189][ T4783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.247663][ T4379] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.272724][ T4777] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 49.275336][ T4777] overlayfs: missing 'lowerdir' [ 49.399206][ T4796] loop0: detected capacity change from 0 to 8 [ 49.425060][ T4796] unable to read fragment index table [ 49.609954][ T4810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.621256][ T4812] netlink: 'syz.1.194': attribute type 4 has an invalid length. [ 49.649452][ T4810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.739506][ T4823] loop2: detected capacity change from 0 to 256 [ 49.797037][ T4823] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 49.816275][ T4827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.823556][ T4823] CIFS mount error: No usable UNC path provided in device string! [ 49.823556][ T4823] [ 49.826407][ T4823] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 49.870678][ T4827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.222647][ T4854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.279845][ T4854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.501476][ T4879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.523370][ T4878] loop1: detected capacity change from 0 to 1024 [ 50.532656][ T4879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.778196][ T4895] loop1: detected capacity change from 0 to 1024 [ 51.432859][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.463360][ T4954] netlink: 104 bytes leftover after parsing attributes in process `syz.1.264'. [ 51.479334][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.513675][ T4958] loop4: detected capacity change from 0 to 47 [ 51.593481][ T39] kworker/u4:2: attempt to access beyond end of device [ 51.593481][ T39] loop4: rw=1, sector=48, nr_sectors = 2 limit=47 [ 51.597376][ T39] Buffer I/O error on dev loop4, logical block 24, lost async page write [ 52.057836][ T4996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 52.748246][ T5044] UBIFS error (pid: 5044): cannot open "(null)", error -22 [ 52.756345][ T5042] binder: 5039:5042 tried to acquire reference to desc 0, got 1 instead [ 52.780056][ T5042] binder: 5039:5042 got transaction with invalid data ptr [ 52.782251][ T5042] binder: 5039:5042 transaction call to 5039:0 failed 5/29201/-14, size 48-24 line 3342 [ 52.805924][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.002469][ T5066] netlink: 'syz.2.315': attribute type 4 has an invalid length. [ 53.006932][ T5064] capability: warning: `syz.1.316' uses 32-bit capabilities (legacy support in use) [ 53.254500][ T5089] loop2: detected capacity change from 0 to 128 [ 53.278419][ T5089] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 53.285311][ T5089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.638716][ T5115] loop2: detected capacity change from 0 to 4096 [ 53.659350][ T4309] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 53.700230][ T5115] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.747037][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 54.006058][ T5145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.350'. [ 54.237636][ T5169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.240752][ T5166] binder: 5162:5166 tried to acquire reference to desc 0, got 1 instead [ 54.244115][ T5166] binder: 5162:5166 got transaction with invalid parent offset or type [ 54.246609][ T5166] binder: 5162:5166 transaction call to 5162:0 failed 10/29201/-22, size 112-24 line 3448 [ 54.265216][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.280023][ T5169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.398426][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.367'. [ 54.732838][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.756396][ T5212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.379'. [ 54.774610][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.530827][ T5240] loop4: detected capacity change from 0 to 40427 [ 55.539919][ T5240] F2FS-fs (loop4): Unrecognized mount option "errors=continue" or missing value [ 55.589013][ T4379] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.665828][ T5275] loop1: detected capacity change from 0 to 128 [ 55.667782][ T27] audit: type=1326 audit(55.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.2.410" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5499e8 code=0x0 [ 55.733850][ T5278] netlink: 104 bytes leftover after parsing attributes in process `syz.4.412'. [ 56.885144][ T5303] loop2: detected capacity change from 0 to 4096 [ 56.888566][ T5303] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 56.976279][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.009302][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.093718][ T27] audit: type=1326 audit(57.060:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.2.428" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5499e8 code=0x0 [ 57.116570][ T5316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'. [ 57.162162][ T5292] loop3: detected capacity change from 0 to 32768 [ 57.167614][ T5292] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.419 (5292) [ 57.187020][ T5292] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 57.191187][ T5292] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 57.193952][ T5292] BTRFS info (device loop3): using free space tree [ 57.319640][ T5292] BTRFS info (device loop3): enabling ssd optimizations [ 57.461501][ T4306] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 57.777167][ T5362] netlink: 40 bytes leftover after parsing attributes in process `syz.4.440'. [ 57.777472][ T5363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.809438][ T5363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.847887][ T5363] syz_tun: refused to change device tx_queue_len [ 57.852377][ T5363] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 57.983750][ T5371] loop2: detected capacity change from 0 to 2048 [ 58.032618][ T5376] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.157072][ T5386] netlink: 40 bytes leftover after parsing attributes in process `syz.4.452'. [ 58.404287][ T27] audit: type=1326 audit(58.370:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5399 comm="syz.1.457" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff887499e8 code=0x0 [ 58.449098][ T5408] syz.3.460 uses old SIOCAX25GETINFO [ 58.524404][ T5413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'. [ 58.556146][ T5417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.465'. [ 58.965037][ T5406] loop4: detected capacity change from 0 to 32768 [ 59.096765][ T5441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'. [ 59.214004][ T5447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.254618][ T5452] netlink: 36 bytes leftover after parsing attributes in process `syz.3.483'. [ 59.259343][ T5447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.392616][ T5463] loop1: detected capacity change from 0 to 512 [ 59.436318][ T4620] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.442170][ T5463] cgroup2: Unknown parameter 'pids_localevents' [ 59.483261][ T5468] loop3: detected capacity change from 0 to 64 [ 59.654761][ T5471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.699304][ T5471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.737887][ T5457] loop0: detected capacity change from 0 to 32768 [ 59.798584][ T5457] XFS (loop0): Mounting V5 Filesystem [ 59.869565][ T5457] XFS (loop0): Ending clean mount [ 59.873432][ T5457] XFS (loop0): Quotacheck needed: Please wait. [ 59.929867][ T5457] XFS (loop0): Quotacheck: Done. [ 60.058363][ T5469] loop1: detected capacity change from 0 to 32768 [ 60.118685][ T5504] bridge0: port 3(syz_tun) entered blocking state [ 60.147438][ T5504] bridge0: port 3(syz_tun) entered disabled state [ 60.154182][ T5504] device syz_tun entered promiscuous mode [ 60.156476][ T5504] bridge0: port 3(syz_tun) entered blocking state [ 60.157772][ T5469] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 60.158744][ T5504] bridge0: port 3(syz_tun) entered forwarding state [ 60.165595][ T5469] XFS (loop1): Mounting V5 Filesystem [ 60.194022][ T5469] XFS (loop1): null uuid in log - IRIX style log [ 60.198451][ T5469] XFS (loop1): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x41. [ 60.227949][ T5469] XFS (loop1): failed to locate log tail [ 60.229643][ T5469] XFS (loop1): log mount/recovery failed: error -74 [ 60.300163][ T5469] XFS (loop1): log mount failed [ 60.328724][ T5517] loop2: detected capacity change from 0 to 256 [ 60.599605][ T5533] loop3: detected capacity change from 0 to 128 [ 60.603001][ T5533] affs: Error parsing options [ 60.774225][ T5489] XFS (loop0): Unmounting Filesystem [ 61.128541][ T4351] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.257290][ T4351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.289529][ T5573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.339183][ T5573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.388794][ T4351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.402178][ T4302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.405831][ T4302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.408397][ T4302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.412670][ T4302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.415111][ T4302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.418028][ T4302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.493831][ T5584] loop3: detected capacity change from 0 to 164 [ 61.508500][ T5584] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 61.516179][ T4351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.740332][ T5577] chnl_net:caif_netlink_parms(): no params data found [ 62.103932][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.105956][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.108561][ T5577] device bridge_slave_0 entered promiscuous mode [ 62.132307][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.134214][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.148056][ T5577] device bridge_slave_1 entered promiscuous mode [ 62.527230][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.535371][ T5649] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 62.591293][ T5649] team0: Port device geneve1 added [ 62.601910][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.761654][ T5577] team0: Port device team_slave_0 added [ 62.782218][ T5577] team0: Port device team_slave_1 added [ 62.882948][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.887207][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.901945][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.947501][ T5674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.562'. [ 63.054398][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.056245][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.081104][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.242775][ T5577] device hsr_slave_0 entered promiscuous mode [ 63.260128][ T5577] device hsr_slave_1 entered promiscuous mode [ 63.309692][ T5577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.311719][ T5577] Cannot create hsr debugfs directory [ 63.422448][ T5700] loop2: detected capacity change from 0 to 764 [ 63.445419][ T5702] loop3: detected capacity change from 0 to 16 [ 63.452477][ T5702] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 63.469115][ T4302] Bluetooth: hci0: command tx timeout [ 63.664196][ T5710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 64.130027][ T5744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.584'. [ 64.316390][ T5748] netlink: 'syz.3.585': attribute type 4 has an invalid length. [ 64.511807][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.516682][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.683054][ T5767] loop3: detected capacity change from 0 to 1024 [ 64.709442][ T5767] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.714301][ T5771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.595'. [ 64.727917][ T5767] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.741928][ T5767] JBD2: no valid journal superblock found [ 64.743836][ T5767] EXT4-fs (loop3): error loading journal [ 64.870062][ T4351] device hsr_slave_0 left promiscuous mode [ 64.910250][ T4351] device hsr_slave_1 left promiscuous mode [ 65.059554][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.061523][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.064533][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.066573][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.078824][ T4302] Bluetooth: latency 112 > max_latency 13 [ 65.126292][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.198757][ T4351] device bridge_slave_0 left promiscuous mode [ 65.202072][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.325181][ T5774] loop2: detected capacity change from 0 to 32768 [ 65.332190][ T5774] XFS (loop2): Mounting V5 Filesystem [ 65.370348][ T4351] device veth1_macvtap left promiscuous mode [ 65.373023][ T4351] device veth0_macvtap left promiscuous mode [ 65.374818][ T4351] device veth1_vlan left promiscuous mode [ 65.376533][ T4351] device veth0_vlan left promiscuous mode [ 65.388453][ T5774] XFS (loop2): Ending clean mount [ 65.400215][ T5774] XFS (loop2): Quotacheck needed: Please wait. [ 65.429858][ T5774] XFS (loop2): Quotacheck: Done. [ 65.475906][ T5774] XFS (loop2): User initiated shutdown received. [ 65.478149][ T5774] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe0/0x15c (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 65.482354][ T5774] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 65.491228][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.521130][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.549629][ T4302] Bluetooth: hci0: command tx timeout [ 65.927953][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.969926][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.685009][ T5774] syz.2.597 (5774): drop_caches: 2 [ 66.708514][ T5774] syz.2.597 (5774): drop_caches: 2 [ 67.149192][ T4309] Bluetooth: hci3: command tx timeout [ 67.236089][ T4295] XFS (loop2): Unmounting Filesystem [ 67.364655][ T4351] team0 (unregistering): Port device team_slave_1 removed [ 67.531621][ T4351] team0 (unregistering): Port device team_slave_0 removed [ 67.631569][ T4302] Bluetooth: hci0: command tx timeout [ 67.706340][ T4351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.920000][ T4351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.632891][ T111] cfg80211: failed to load regulatory.db [ 69.709077][ T4309] Bluetooth: hci0: command tx timeout [ 70.424212][ T4351] bond0 (unregistering): Released all slaves [ 70.961670][ T5824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'. [ 71.115115][ T5577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.169424][ T5577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.185863][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.221686][ T5577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.223885][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.233963][ T5840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.292848][ T5577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.320927][ T5840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.432885][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.443368][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.466679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.469801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.473842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.476854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.485669][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.487803][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.490599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.493256][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.495767][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.497913][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.508816][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.524125][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.527173][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.540355][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.555371][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.575928][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.591756][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.594794][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.597881][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.608293][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.617041][ T5577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.624153][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.640243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.642997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.652159][ T5859] loop3: detected capacity change from 0 to 8192 [ 71.869466][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.871789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.882452][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 71.899858][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.973452][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.976341][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.009180][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.012093][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.015102][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.022874][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.035294][ T5577] device veth0_vlan entered promiscuous mode [ 72.065742][ T5577] device veth1_vlan entered promiscuous mode [ 72.102380][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.139435][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.156015][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.158711][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.162903][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.176433][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.200718][ T5577] device veth0_macvtap entered promiscuous mode [ 72.214276][ T5577] device veth1_macvtap entered promiscuous mode [ 72.265101][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.268040][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.294751][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.297937][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.306410][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.324068][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.326728][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.340104][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.351993][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.383190][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.383744][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.384126][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.384526][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.387308][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.387327][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.387337][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.387348][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.387358][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.387368][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.387378][ T5577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.387388][ T5577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.388389][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.388483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.389063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.401283][ T5577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.401337][ T5577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.401358][ T5577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.401379][ T5577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.518740][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.518780][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.562990][ T5876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.617538][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.617582][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.620464][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.755859][ T5919] loop2: detected capacity change from 0 to 1024 [ 72.967163][ T5939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 73.057019][ T5947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.077004][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.114416][ T5947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.130516][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.175357][ T5958] bridge: RTM_NEWNEIGH with invalid ether address [ 73.405766][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.408539][ T5973] bridge0: port 3(syz_tun) entered blocking state [ 73.410631][ T5973] bridge0: port 3(syz_tun) entered disabled state [ 73.426482][ T5973] device syz_tun entered promiscuous mode [ 73.428637][ T5973] bridge0: port 3(syz_tun) entered blocking state [ 73.430648][ T5973] bridge0: port 3(syz_tun) entered forwarding state [ 73.437846][ T5973] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 73.449677][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.817171][ T6002] device syz_tun left promiscuous mode [ 73.824018][ T6002] bridge0: port 3(syz_tun) entered disabled state [ 73.846813][ T6006] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 73.882727][ T6002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.886303][ T6002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.888367][ T6002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.903552][ T6002] device bridge_slave_0 left promiscuous mode [ 73.905390][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.968841][ T6002] device bridge_slave_1 left promiscuous mode [ 73.970976][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.033854][ T6002] bond0: (slave bond_slave_0): Releasing backup interface [ 74.072594][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.095561][ T6002] bond0: (slave bond_slave_1): Releasing backup interface [ 74.099250][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.206285][ T6002] team0: Port device team_slave_0 removed [ 74.231861][ T6002] team0: Port device team_slave_1 removed [ 74.240991][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.246619][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.255587][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.257626][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.445786][ T6037] loop0: detected capacity change from 0 to 128 [ 74.454359][ T6037] zonefs (loop0) ERROR: Not a zoned block device [ 74.520427][ T4379] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.949463][ T6040] loop2: detected capacity change from 0 to 32768 [ 74.960250][ T6040] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.691 (6040) [ 74.981250][ T6040] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 74.989132][ T6040] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 74.991736][ T6040] BTRFS info (device loop2): turning off barriers [ 74.993489][ T6040] BTRFS info (device loop2): enabling auto defrag [ 74.995278][ T6040] BTRFS info (device loop2): force zlib compression, level 3 [ 74.997203][ T6040] BTRFS info (device loop2): enabling ssd optimizations [ 75.023973][ T6040] BTRFS info (device loop2): using spread ssd allocation scheme [ 75.026040][ T6040] BTRFS info (device loop2): using free space tree [ 75.027734][ T6040] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 75.034801][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.048515][ T6040] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 75.075820][ T6072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.089336][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.099282][ T6040] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 75.129788][ T6072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.135059][ T6040] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 75.138520][ T6040] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 75.142349][ T6040] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 75.146165][ T6040] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 75.153857][ T6040] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 75.157983][ T6040] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 75.221479][ T6054] loop0: detected capacity change from 0 to 32768 [ 75.239818][ T6054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.699 (6054) [ 75.257951][ T6054] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.267755][ T6054] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 75.275197][ T6054] BTRFS info (device loop0): using free space tree [ 75.277724][ T4295] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 75.506060][ T6054] BTRFS info (device loop0): enabling ssd optimizations [ 75.703854][ T5577] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.717429][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.778268][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.064831][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.107980][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.951641][ T6188] loop4: detected capacity change from 0 to 32768 [ 76.954827][ T6188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.744 (6188) [ 76.974722][ T6188] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.981594][ T6188] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 76.983924][ T6188] BTRFS info (device loop4): using free space tree [ 77.037832][ T6188] BTRFS info (device loop4): enabling ssd optimizations [ 77.074667][ T4303] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.274069][ T6245] loop2: detected capacity change from 0 to 64 [ 77.406294][ T6256] binder: 6255:6256 got transaction to invalid handle, 3 [ 77.408488][ T6256] binder: 6256:6255 cannot find target node [ 77.416186][ T6256] binder: 6255:6256 transaction async to 0:0 failed 13/29201/-22, size 0-0 line 3054 [ 77.418295][ T6256] binder: 6255:6256 ioctl c0306201 20000400 returned -14 [ 77.440168][ T6241] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.509801][ T6261] IPVS: wlc: TCP [::]:0 - no destination available [ 77.541563][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.560561][ T6265] netlink: 'syz.3.771': attribute type 1 has an invalid length. [ 77.570002][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.576100][ T6265] dccp_invalid_packet: P.Data Offset(102) too large [ 77.644139][ T6269] loop3: detected capacity change from 0 to 512 [ 77.679547][ T6269] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.718129][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 78.067140][ T6291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.119378][ T6291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.513510][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.532403][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.781500][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.810260][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.160533][ T6359] trusted_key: encrypted_key: master key parameter '@' is invalid [ 79.616548][ T6393] netlink: 'syz.0.830': attribute type 4 has an invalid length. [ 79.656746][ T6393] netlink: 'syz.0.830': attribute type 4 has an invalid length. [ 79.694704][ T6399] loop2: detected capacity change from 0 to 256 [ 79.701258][ T6399] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=8195, location=8195 [ 79.728018][ T6399] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=8451, location=8451 [ 79.746185][ T6399] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 79.752807][ T6399] UDF-fs: Scanning with blocksize 512 failed [ 79.764167][ T6399] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=8195, location=8195 [ 79.790340][ T6399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.796773][ T6399] UDF-fs: error (device loop2): udf_read_inode: (ino 49) failed !bh [ 79.804182][ T6399] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=3, partition=0 [ 80.050096][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.102396][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.126651][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.162693][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.357768][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.374839][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.982963][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.011298][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.186184][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 81.244941][ T6483] netlink: 116 bytes leftover after parsing attributes in process `syz.0.873'. [ 81.302017][ T6487] loop1: detected capacity change from 0 to 512 [ 81.313636][ T6487] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.321689][ T6487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.335455][ T6487] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.361336][ T6487] EXT4-fs (loop1): 1 truncate cleaned up [ 81.366623][ T6487] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.412070][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 81.535795][ T6505] loop1: detected capacity change from 0 to 64 [ 81.717940][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.779339][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.821378][ T6523] loop0: detected capacity change from 0 to 2048 [ 82.497350][ T6548] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 82.882058][ T6577] loop4: detected capacity change from 0 to 1024 [ 82.887756][ T6577] hfsplus: session requires an argument [ 82.892525][ T6577] hfsplus: unable to parse mount options [ 82.927081][ T4379] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.000495][ T6583] loop3: detected capacity change from 0 to 256 [ 83.002832][ T6583] FAT-fs (loop3): Unrecognized mount option "nonumme=lower" or missing value [ 83.127031][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 83.355434][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.389480][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.397953][ T6611] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.933'. [ 83.592868][ T6621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.937'. [ 83.595103][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.939'. [ 84.001140][ T6651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'. [ 84.644825][ T6670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.959'. [ 84.755877][ T6675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.963'. [ 85.015717][ T6694] netlink: 36 bytes leftover after parsing attributes in process `syz.4.972'. [ 85.417053][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.469625][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.502995][ T6700] loop0: detected capacity change from 0 to 32768 [ 85.514649][ T6700] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.975 (6700) [ 85.532471][ T6700] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 85.540550][ T6700] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 85.545568][ T6700] BTRFS info (device loop0): setting nodatacow, compression disabled [ 85.551457][ T6700] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 85.558351][ T6700] BTRFS info (device loop0): force lzo compression, level 0 [ 85.564187][ T6700] BTRFS info (device loop0): metadata ratio 8 [ 85.567362][ T6700] BTRFS info (device loop0): doing ref verification [ 85.573191][ T6700] BTRFS info (device loop0): metadata ratio 32769 [ 85.575119][ T6700] BTRFS info (device loop0): turning off barriers [ 85.580450][ T6700] BTRFS info (device loop0): enabling ssd optimizations [ 85.584757][ T6700] BTRFS info (device loop0): using spread ssd allocation scheme [ 85.589568][ T6700] BTRFS info (device loop0): turning on barriers [ 85.592516][ T6700] BTRFS info (device loop0): using free space tree [ 85.748009][ T5577] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.344983][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.363810][ T6799] __nla_validate_parse: 6 callbacks suppressed [ 86.363825][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 86.382552][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.608534][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 86.788224][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 86.883356][ T6814] loop0: detected capacity change from 0 to 32768 [ 86.923311][ T6829] bridge: RTM_NEWNEIGH with invalid ether address [ 86.928350][ T6829] bridge: RTM_NEWNEIGH with invalid ether address [ 86.946040][ T6814] XFS (loop0): Mounting V5 Filesystem [ 87.014243][ T6814] XFS (loop0): Ending clean mount [ 87.016902][ T6814] XFS (loop0): Quotacheck needed: Please wait. [ 87.059055][ T6814] XFS (loop0): Quotacheck: Done. [ 87.157600][ T5577] XFS (loop0): Unmounting Filesystem [ 87.306949][ T6858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.359270][ T6858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.496774][ T6860] bridge: RTM_NEWNEIGH with invalid ether address [ 87.499244][ T6861] bridge: RTM_NEWNEIGH with invalid ether address [ 87.928274][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.971379][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.202605][ T6890] bridge: RTM_NEWNEIGH with invalid ether address [ 88.205209][ T6890] bridge: RTM_NEWNEIGH with invalid ether address [ 88.356400][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.456582][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.547835][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.554420][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.599323][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.601261][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.073659][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.111663][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.310047][ T6942] bridge: RTM_NEWNEIGH with invalid ether address [ 89.315975][ T6942] bridge: RTM_NEWNEIGH with invalid ether address [ 89.327171][ T6944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.360351][ T6944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.808105][ T6978] bridge: RTM_NEWNEIGH with invalid ether address [ 89.813250][ T6978] bridge: RTM_NEWNEIGH with invalid ether address [ 89.977810][ T4309] Bluetooth: hci5: sending frame failed (-49) [ 89.981330][ T4302] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 90.207293][ T7005] bridge: RTM_NEWNEIGH with invalid ether address [ 90.215068][ T7005] bridge: RTM_NEWNEIGH with invalid ether address [ 90.543716][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 90.665946][ T7033] bridge: RTM_NEWNEIGH with invalid ether address [ 90.668644][ T7033] bridge: RTM_NEWNEIGH with invalid ether address [ 90.995767][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'. [ 91.102632][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 91.123375][ T7061] bridge: RTM_NEWNEIGH with invalid ether address [ 91.138593][ T7064] bridge: RTM_NEWNEIGH with invalid ether address [ 91.178404][ T7068] netlink: 'syz.3.1132': attribute type 7 has an invalid length. [ 91.286376][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1137'. [ 91.289849][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.292273][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.295074][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.296989][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.302750][ T7079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1134'. [ 91.351674][ T7083] random: crng reseeded on system resumption [ 91.368755][ T7083] Restarting kernel threads ... done. [ 91.388060][ T7079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1134'. [ 91.477341][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 91.494153][ T7079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1134'. [ 91.574190][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1141'. [ 91.649166][ T7096] bridge: RTM_NEWNEIGH with invalid ether address [ 91.651754][ T7096] bridge: RTM_NEWNEIGH with invalid ether address [ 91.920949][ T7098] loop3: detected capacity change from 0 to 32768 [ 91.936769][ T7098] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 91.940722][ T7098] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 91.985027][ T7098] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 91.993470][ T5346] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 91.995497][ T5346] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 92.058226][ T5346] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 62ms [ 92.061928][ T5346] gfs2: fsid=syz:syz.0: jid=0: Done [ 92.063491][ T7098] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 92.463145][ T7118] bridge: RTM_NEWNEIGH with invalid ether address [ 92.470597][ T7118] bridge: RTM_NEWNEIGH with invalid ether address [ 92.480638][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1152'. [ 92.603992][ T7102] loop1: detected capacity change from 0 to 32768 [ 92.616542][ T7102] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1146 (7102) [ 92.626231][ T7102] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.641598][ T7102] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 92.644146][ T7102] BTRFS info (device loop1): enabling auto defrag [ 92.645890][ T7102] BTRFS info (device loop1): disabling auto defrag [ 92.661834][ T7102] BTRFS info (device loop1): max_inline at 0 [ 92.663537][ T7102] BTRFS info (device loop1): enabling ssd optimizations [ 92.671961][ T7102] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 92.674516][ T7102] BTRFS info (device loop1): use lzo compression, level 0 [ 92.676462][ T7102] BTRFS info (device loop1): using free space tree [ 92.711911][ T7145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1157'. [ 92.788549][ T7145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1157'. [ 92.794804][ T4294] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.884552][ T7104] loop4: detected capacity change from 0 to 32768 [ 92.895314][ T7104] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 92.897622][ T7104] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 92.944538][ T7104] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 92.956157][ T6757] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 92.961876][ T6757] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 93.018584][ T7145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1157'. [ 93.036564][ T6757] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 74ms [ 93.043728][ T6757] gfs2: fsid=syz:syz.0: jid=0: Done [ 93.046342][ T7104] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 93.051945][ T7104] gfs2: fsid=syz:syz.0: ri_addr = 18 [ 93.051945][ T7104] ri_length = 1 [ 93.051945][ T7104] ri_data0 = 19 [ 93.051945][ T7104] ri_data = 524288 [ 93.051945][ T7104] ri_bitbytes = 515 [ 93.051945][ T7104] start=0 len=515 offset=128 [ 93.069116][ T7104] gfs2: fsid=syz:syz.0: R: n:18 f:00 b:0/0 i:0 q:0 r:0 e:0 [ 93.071394][ T7104] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 93.071394][ T7104] RG = 18 [ 93.071394][ T7104] function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 829 [ 93.076475][ T7104] gfs2: fsid=syz:syz.0: G: s:UN n:3/12 f:n t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0 [ 93.078693][ T7104] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 93.084316][ T7104] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 93.086765][ T7104] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 93.099970][ T7104] gfs2: fsid=syz:syz.0: File system withdrawn [ 93.102857][ T7104] CPU: 1 PID: 7104 Comm: syz.4.1147 Not tainted 6.1.111-syzkaller #0 [ 93.105056][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 93.107964][ T7104] Call trace: [ 93.109205][ T7104] dump_backtrace+0x1c8/0x1f4 [ 93.110471][ T7104] show_stack+0x2c/0x3c [ 93.111671][ T7104] dump_stack_lvl+0x108/0x170 [ 93.112817][ T7104] dump_stack+0x1c/0x58 [ 93.113875][ T7104] gfs2_withdraw+0xdcc/0x140c [ 93.115114][ T7104] gfs2_consist_rgrpd_i+0x14c/0x1a0 [ 93.116555][ T7104] gfs2_ri_update+0x9e4/0x1398 [ 93.117694][ T7104] gfs2_rindex_update+0x2d4/0x39c [ 93.118953][ T7104] init_inodes+0x208/0x2d8 [ 93.120022][ T7104] gfs2_fill_super+0x16fc/0x1ef8 [ 93.121315][ T7104] get_tree_bdev+0x360/0x54c [ 93.122553][ T7104] gfs2_get_tree+0x54/0x1b4 [ 93.123552][ T7104] vfs_get_tree+0x90/0x274 [ 93.124667][ T7104] do_new_mount+0x278/0x8fc [ 93.125722][ T7104] path_mount+0x590/0xe5c [ 93.126814][ T7104] __arm64_sys_mount+0x45c/0x594 [ 93.128053][ T7104] invoke_syscall+0x98/0x2c0 [ 93.129309][ T7104] el0_svc_common+0x138/0x258 [ 93.130299][ T7104] do_el0_svc+0x64/0x218 [ 93.131315][ T7104] el0_svc+0x58/0x168 [ 93.132267][ T7104] el0t_64_sync_handler+0x84/0xf0 [ 93.133614][ T7104] el0t_64_sync+0x18c/0x190 [ 93.370357][ T7163] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 93.451475][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1165'. [ 93.535055][ T7159] loop1: detected capacity change from 0 to 32768 [ 93.550883][ T7159] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 93.553323][ T7159] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 93.576975][ T7159] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 18 extents in 0ms [ 93.611723][ T7174] loop0: detected capacity change from 0 to 2048 [ 93.651377][ T7174] loop0: p1 < > p2 p3 p4 < p5 > [ 93.654404][ T7174] loop0: p2 size 4194304 extends beyond EOD, truncated [ 93.656736][ T7174] loop0: p3 start 4284289 is beyond EOD, truncated [ 93.663273][ T7174] loop0: p5 size 4194304 extends beyond EOD, truncated [ 93.706276][ T7174] VFS: could not find a valid V7 on loop0p1. [ 93.713981][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.724320][ T7159] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 93.771057][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.826433][ T7190] bridge: RTM_NEWNEIGH with invalid ether address [ 93.843487][ T7190] bridge: RTM_NEWNEIGH with invalid ether address [ 93.849254][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1177'. [ 94.005262][ T4379] udevd[4379]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 94.013597][ T4379] udevd[4379]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 94.016168][ T4620] udevd[4620]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 94.040344][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 94.214548][ T7224] bridge: RTM_NEWNEIGH with invalid ether address [ 94.217121][ T7224] bridge: RTM_NEWNEIGH with invalid ether address [ 94.265276][ T4302] Bluetooth: latency 112 > max_latency 13 [ 94.345941][ T7231] binder: 7230:7231 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 94.697751][ T7229] loop2: detected capacity change from 0 to 40427 [ 94.718195][ T7229] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 94.723823][ T7229] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 94.739473][ T7229] F2FS-fs (loop2): invalid crc value [ 94.771068][ T7229] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.808683][ T7250] bridge: RTM_NEWNEIGH with invalid ether address [ 94.811658][ T7250] bridge: RTM_NEWNEIGH with invalid ether address [ 94.833440][ T7229] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 94.835386][ T7229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.860938][ T7239] loop3: detected capacity change from 0 to 32768 [ 94.893983][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.929290][ T7239] JFS: charset not found [ 94.969394][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.010063][ T7265] netlink: 'syz.1.1209': attribute type 29 has an invalid length. [ 95.013101][ T7265] netlink: 'syz.1.1209': attribute type 29 has an invalid length. [ 95.017931][ T7265] netlink: 'syz.1.1209': attribute type 29 has an invalid length. [ 95.188499][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.239993][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.512059][ T7281] bridge: RTM_NEWNEIGH with invalid ether address [ 95.514538][ T7281] bridge: RTM_NEWNEIGH with invalid ether address [ 95.965295][ T7307] bridge: RTM_NEWNEIGH with invalid ether address [ 95.968827][ T7307] bridge: RTM_NEWNEIGH with invalid ether address [ 96.178790][ T7323] loop3: detected capacity change from 0 to 128 [ 96.249240][ T7209] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.279132][ T4309] Bluetooth: hci1: command tx timeout [ 96.351292][ T4302] Bluetooth: to_multiplier 0 < 10 [ 96.393167][ T7335] __nla_validate_parse: 6 callbacks suppressed [ 96.393182][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1242'. [ 96.416509][ T7338] bridge: RTM_NEWNEIGH with invalid ether address [ 96.426812][ T7338] bridge: RTM_NEWNEIGH with invalid ether address [ 96.543745][ T7350] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 96.580338][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1247'. [ 96.787437][ T4309] Bluetooth: to_multiplier 0 < 10 [ 96.975213][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1257'. [ 97.123586][ T7364] loop2: detected capacity change from 0 to 32768 [ 97.127171][ T7364] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1254 (7364) [ 97.132446][ T7364] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 97.135292][ T7364] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 97.145456][ T7364] BTRFS info (device loop2): enabling auto defrag [ 97.147124][ T7364] BTRFS info (device loop2): ignoring bad roots [ 97.151134][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1260'. [ 97.153690][ T7364] BTRFS info (device loop2): unrecognized rescue option 'isuperflags' [ 97.156097][ T7364] BTRFS error (device loop2): unrecognized rescue value isuperflags [ 97.167625][ T7364] BTRFS error (device loop2): open_ctree failed [ 97.169992][ T7209] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (7209) [ 97.323510][ T4302] Bluetooth: to_multiplier 0 < 10 [ 97.340462][ T7383] block nbd2: shutting down sockets [ 97.366045][ T7389] loop4: detected capacity change from 0 to 512 [ 97.410017][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 97.535599][ T7400] ipt_CLUSTERIP: Please specify destination IP [ 97.543719][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1271'. [ 97.657771][ T4302] Bluetooth: latency 112 > max_latency 13 [ 97.770608][ T7420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1278'. [ 97.804855][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1281'. [ 98.044263][ T4309] Bluetooth: latency 112 > max_latency 13 [ 98.060267][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1287'. [ 98.114108][ T7442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.139593][ T7442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.197379][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 98.425411][ T4302] Bluetooth: latency 112 > max_latency 13 [ 98.440793][ T4309] Bluetooth: hci2: command tx timeout [ 98.830295][ T4302] Bluetooth: hci1: command tx timeout [ 98.846598][ T4302] Bluetooth: latency 112 > max_latency 13 [ 99.028159][ T7509] loop1: detected capacity change from 0 to 4096 [ 99.153483][ T7515] loop4: detected capacity change from 0 to 128 [ 99.268414][ T4302] Bluetooth: latency 112 > max_latency 13 [ 99.389031][ T4302] Bluetooth: hci4: command tx timeout [ 99.742660][ T4302] Bluetooth: latency 112 > max_latency 13 [ 100.061726][ T4309] Bluetooth: latency 112 > max_latency 13 [ 100.116419][ T7576] loop3: detected capacity change from 0 to 1024 [ 100.144549][ T7576] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 100.160527][ T7576] EXT4-fs (loop3): invalid journal inode [ 100.162110][ T7576] EXT4-fs (loop3): can't get journal size [ 100.170650][ T7576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.219816][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 100.256021][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.289641][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.313457][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.316814][ T7589] loop1: detected capacity change from 0 to 1024 [ 100.344885][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.463927][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.480266][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.487604][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.509430][ T4309] Bluetooth: hci2: command tx timeout [ 100.539128][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.888398][ T4309] Bluetooth: to_multiplier 0 < 10 [ 100.909383][ T4309] Bluetooth: hci3: command tx timeout [ 100.909407][ T4302] Bluetooth: hci1: command tx timeout [ 101.008840][ T7612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.051088][ T7612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.219836][ T4309] Bluetooth: to_multiplier 0 < 10 [ 101.324448][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.344431][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.421062][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.459318][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.527951][ T7622] loop3: detected capacity change from 0 to 32768 [ 101.534027][ T7622] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1376 (7622) [ 101.540447][ T7622] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.543239][ T7622] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 101.545651][ T7622] BTRFS info (device loop3): enabling auto defrag [ 101.547474][ T7622] BTRFS info (device loop3): doing ref verification [ 101.556528][ T7622] BTRFS info (device loop3): use no compression [ 101.558155][ T7622] BTRFS info (device loop3): force clearing of disk cache [ 101.569152][ T7622] BTRFS info (device loop3): disabling free space tree [ 101.658085][ T7659] loop2: detected capacity change from 0 to 256 [ 101.661638][ T7659] UDF-fs: bad mount option "=" or missing value [ 101.682813][ T7622] BTRFS info (device loop3): enabling ssd optimizations [ 101.685587][ T7622] BTRFS info (device loop3): rebuilding free space tree [ 101.704873][ T7622] BTRFS info (device loop3): disabling free space tree [ 101.707347][ T7622] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.711196][ T4379] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.711357][ T7622] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.754477][ T7622] BTRFS info (device loop3): balance: start -d -m [ 101.760146][ T7622] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 101.836778][ T7622] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 101.925002][ T4309] Bluetooth: to_multiplier 0 < 10 [ 102.003331][ T7676] __nla_validate_parse: 15 callbacks suppressed [ 102.003348][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 102.091413][ T7678] loop2: detected capacity change from 0 to 4096 [ 102.097298][ T7622] BTRFS info (device loop3): found 9 extents, stage: move data extents [ 102.102109][ T7678] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 102.110164][ T4309] Bluetooth: hci4: command tx timeout [ 102.125623][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.160777][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.164857][ T7678] ntfs3: loop2: ino=0, ntfs_iget5 [ 102.168179][ T7678] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 102.185303][ T7622] BTRFS info (device loop3): found 1 extents, stage: update data pointers [ 102.237806][ T7622] BTRFS info (device loop3): balance: ended with status: 0 [ 102.239570][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.286137][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.585872][ T4309] Bluetooth: to_multiplier 0 < 10 [ 102.589608][ T4310] Bluetooth: hci2: command tx timeout [ 102.663020][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 102.765252][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.798526][ T4306] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.809487][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.952691][ T4310] Bluetooth: to_multiplier 0 < 10 [ 102.989071][ T4310] Bluetooth: hci1: command tx timeout [ 103.045250][ T7723] loop4: detected capacity change from 0 to 256 [ 103.098642][ T7723] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfc19a825, utbl_chksum : 0xe619d30d) [ 103.103598][ T7723] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 2199023255554) [ 103.124349][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 103.283440][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.319301][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.340801][ T7743] loop2: detected capacity change from 0 to 1024 [ 103.426414][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.469926][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.477998][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1431'. [ 103.686046][ T7771] overlayfs: missing 'lowerdir' [ 103.773300][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 103.986718][ T7796] loop2: detected capacity change from 0 to 1024 [ 103.989409][ T7796] EXT4-fs: Ignoring removed orlov option [ 103.991578][ T7795] "syz.4.1450" (7795) uses obsolete ecb(arc4) skcipher [ 103.993546][ T7796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.032326][ T7796] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.080502][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 104.118521][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 104.137640][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.164261][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.169191][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.191212][ T4310] Bluetooth: hci4: command tx timeout [ 104.210469][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.574283][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'. [ 104.679108][ T4309] Bluetooth: hci2: command tx timeout [ 104.818423][ T7848] loop2: detected capacity change from 0 to 256 [ 104.821275][ T7850] loop0: detected capacity change from 0 to 256 [ 104.824805][ T7850] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.827732][ T7850] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 104.837993][ T7850] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 104.844034][ T7848] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 104.886494][ T7848] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 104.890338][ T7848] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 104.901461][ T7848] UDF-fs: Scanning with blocksize 512 failed [ 104.904473][ T7848] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 104.913693][ T7848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.989115][ T4310] Bluetooth: hci3: command tx timeout [ 104.998638][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 105.035837][ T7858] syz.4.1480 (7858): /proc/7857/oom_adj is deprecated, please use /proc/7857/oom_score_adj instead. [ 105.069183][ T4309] Bluetooth: hci1: command tx timeout [ 105.200447][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 105.461132][ T7892] dccp_v4_rcv: dropped packet with invalid checksum [ 105.653084][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 105.673768][ T7878] loop2: detected capacity change from 0 to 32768 [ 105.748290][ T7878] XFS (loop2): Mounting V5 Filesystem [ 105.826611][ T7878] XFS (loop2): Ending clean mount [ 105.936363][ T4295] XFS (loop2): Unmounting Filesystem [ 105.982925][ T7930] overlayfs: unrecognized mount option "smackfshat=" or missing value [ 106.702961][ T7976] ptrace attach of "./syz-executor exec"[7982] was attempted by ""[7976] [ 106.758264][ T4310] Bluetooth: hci2: command tx timeout [ 106.946891][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.990830][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.012379][ T8003] __nla_validate_parse: 3 callbacks suppressed [ 107.012394][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1545'. [ 107.149148][ T4309] Bluetooth: hci1: command tx timeout [ 107.197714][ T8016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1548'. [ 107.574417][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 107.735335][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1563'. [ 107.790834][ T8020] loop2: detected capacity change from 0 to 32768 [ 107.799191][ T8020] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 scanned by syz.2.1552 (8020) [ 107.810404][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.817376][ T8020] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 107.823051][ T8020] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 107.827875][ T8020] BTRFS info (device loop2): use zlib compression, level 3 [ 107.832258][ T8020] BTRFS info (device loop2): using free space tree [ 107.870230][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.000170][ T8020] BTRFS info (device loop2): enabling ssd optimizations [ 108.074466][ T4295] BTRFS info (device loop2): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 108.358225][ T8085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.389314][ T8085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.714357][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.784635][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.091258][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.119591][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.373520][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.393118][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.657590][ T8137] loop4: detected capacity change from 0 to 40427 [ 109.662363][ T8137] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 109.664621][ T8137] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 109.696375][ T8137] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.733297][ T8137] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 109.735197][ T8137] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 109.823802][ T8153] bridge0: port 3(syz_tun) entered blocking state [ 109.825647][ T8153] bridge0: port 3(syz_tun) entered disabled state [ 109.828060][ T8153] device syz_tun entered promiscuous mode [ 109.845564][ T8153] bridge0: port 3(syz_tun) entered blocking state [ 109.847265][ T8153] bridge0: port 3(syz_tun) entered forwarding state [ 109.865184][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.899267][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.992815][ T8161] loop2: detected capacity change from 0 to 512 [ 109.998729][ T8161] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 110.001362][ T8161] UDF-fs: Scanning with blocksize 512 failed [ 110.003947][ T8161] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 110.005932][ T8161] UDF-fs: Scanning with blocksize 1024 failed [ 110.008760][ T8161] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 110.015957][ T8161] UDF-fs: Scanning with blocksize 2048 failed [ 110.018341][ T8161] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 110.023340][ T8161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.056047][ T8161] 9pnet_virtio: no channels available for device @ [ 110.388411][ T8185] [U] [ 110.389343][ T8185] [U] [ 110.390093][ T8185] [U] [ 110.390806][ T8185] [U] [ 110.394891][ T8185] [U] [ 110.395623][ T8185] [U] [ 110.396308][ T8185] [U] [ 110.397025][ T8185] [U] [ 110.418234][ T8185] [U] [ 110.418939][ T8185] [U] [ 110.419687][ T8185] [U] [ 110.440104][ T8184] [U] [ 110.576892][ T8201] loop1: detected capacity change from 0 to 64 [ 110.752256][ T8209] loop3: detected capacity change from 0 to 4096 [ 110.820772][ T8218] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.834982][ T27] audit: type=1326 audit(110.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8216 comm="syz.0.1637" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17499e8 code=0x0 [ 110.869337][ T8209] NILFS (loop3): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 110.872401][ T8209] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 111.390532][ T8214] loop2: detected capacity change from 0 to 32768 [ 111.396271][ T8214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1636 (8214) [ 111.425425][ T8214] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.428065][ T8214] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 111.431060][ T8214] BTRFS info (device loop2): using free space tree [ 111.476398][ T8257] netlink: 'syz.4.1655': attribute type 1 has an invalid length. [ 111.480773][ T8257] dccp_invalid_packet: P.Data Offset(102) too large [ 111.629436][ T8214] BTRFS info (device loop2): enabling ssd optimizations [ 111.756064][ T4295] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.786259][ T8289] loop1: detected capacity change from 0 to 512 [ 111.790357][ T8239] loop3: detected capacity change from 0 to 40427 [ 111.795010][ T8239] F2FS-fs (loop3): Unrecognized mount option "errors=continue" or missing value [ 111.803881][ T8289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.909507][ T8289] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.919485][ T8289] EXT4-fs (loop1): 1 truncate cleaned up [ 111.921159][ T8289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.990695][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 112.101949][ T8305] netlink: 'syz.0.1668': attribute type 1 has an invalid length. [ 112.116380][ T8305] dccp_invalid_packet: P.Data Offset(102) too large [ 112.449792][ T8329] netlink: 'syz.2.1681': attribute type 12 has an invalid length. [ 112.546214][ T8336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1684'. [ 112.580085][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 112.647129][ T8314] loop1: detected capacity change from 0 to 32768 [ 112.679012][ T8314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1673 (8314) [ 112.723464][ T8314] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.726391][ T8314] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 112.728697][ T8314] BTRFS info (device loop1): using free space tree [ 112.850419][ T8340] syz.3.1686 (8340): drop_caches: 2 [ 112.968199][ T8314] BTRFS info (device loop1): enabling ssd optimizations [ 113.025872][ T8344] loop4: detected capacity change from 0 to 32768 [ 113.108010][ T4294] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.138712][ T4309] Bluetooth: to_multiplier 0 < 10 [ 113.234725][ T8378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1697'. [ 113.260055][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 113.465854][ T4302] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 113.508425][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.542611][ T4302] Bluetooth: to_multiplier 0 < 10 [ 113.559327][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.630843][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 113.670548][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1708'. [ 113.845133][ T8399] loop1: detected capacity change from 0 to 32768 [ 113.858781][ T8399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1706 (8399) [ 113.885033][ T8399] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.895209][ T8399] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 113.897353][ T8399] BTRFS info (device loop1): using free space tree [ 114.042414][ T8405] loop2: detected capacity change from 0 to 32768 [ 114.081907][ T8399] BTRFS info (device loop1): enabling ssd optimizations [ 114.137862][ T4294] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.149911][ T8405] JBD2: Journal too short (blocks 2-1024). [ 114.151825][ T8405] JBD2: recovery failed [ 114.155078][ T8405] (syz.2.1709,8405,0):ocfs2_journal_load:1111 ERROR: Failed to load journal! [ 114.170330][ T8405] (syz.2.1709,8405,0):ocfs2_check_volume:2425 ERROR: ocfs2 journal load failed! -5 [ 114.178631][ T8405] (syz.2.1709,8405,0):ocfs2_check_volume:2481 ERROR: status = -5 [ 114.225720][ T8405] (syz.2.1709,8405,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 114.247075][ T8405] ------------[ cut here ]------------ [ 114.248848][ T8405] kernel BUG at fs/jbd2/checkpoint.c:333! [ 114.250621][ T8405] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 114.252805][ T8405] Modules linked in: [ 114.253881][ T8405] CPU: 0 PID: 8405 Comm: syz.2.1709 Not tainted 6.1.111-syzkaller #0 [ 114.256117][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.258741][ T8405] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 114.260955][ T8405] pc : jbd2_cleanup_journal_tail+0x244/0x248 [ 114.262530][ T8405] lr : jbd2_cleanup_journal_tail+0x244/0x248 [ 114.264188][ T8405] sp : ffff8000213d69e0 [ 114.265213][ T8405] x29: ffff8000213d6a60 x28: 0000000000000000 x27: 1fffe000199cb400 [ 114.267213][ T8405] x26: 1ffff0000427ad42 x25: 1ffff0000427ad40 x24: dfff800000000000 [ 114.269349][ T8405] x23: ffff70000427ad3c x22: 0000000000000000 x21: ffff8000213d6a00 [ 114.271498][ T8405] x20: ffff8000213d6a10 x19: ffff0000cce5a000 x18: ffff8000213d6680 [ 114.273509][ T8405] x17: ffff800018aa4000 x16: ffff80000825fff8 x15: ffff800018589f80 [ 114.275655][ T8405] x14: ffff0000d49fa638 x13: dfff800000000000 x12: 0000000000040000 [ 114.277848][ T8405] x11: 000000000003ffff x10: ffff800023a09000 x9 : ffff800008fb7e24 [ 114.279912][ T8405] x8 : 0000000000040000 x7 : 0000000000000000 x6 : 0000000000000000 [ 114.281932][ T8405] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff80000831e8c8 [ 114.284006][ T8405] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 114.286148][ T8405] Call trace: [ 114.286967][ T8405] jbd2_cleanup_journal_tail+0x244/0x248 [ 114.288414][ T8405] jbd2_journal_flush+0x2ac/0xb2c [ 114.289865][ T8405] ocfs2_journal_shutdown+0x3dc/0xc8c [ 114.291345][ T8405] ocfs2_mount_volume+0x12d8/0x1508 [ 114.292766][ T8405] ocfs2_fill_super+0x3adc/0x4a0c [ 114.294093][ T8405] mount_bdev+0x274/0x370 [ 114.295129][ T8405] ocfs2_mount+0x44/0x58 [ 114.296232][ T8405] legacy_get_tree+0xd4/0x16c [ 114.297428][ T8405] vfs_get_tree+0x90/0x274 [ 114.298668][ T8405] do_new_mount+0x278/0x8fc [ 114.299814][ T8405] path_mount+0x590/0xe5c [ 114.300957][ T8405] __arm64_sys_mount+0x45c/0x594 [ 114.302231][ T8405] invoke_syscall+0x98/0x2c0 [ 114.303410][ T8405] el0_svc_common+0x138/0x258 [ 114.304607][ T8405] do_el0_svc+0x64/0x218 [ 114.305752][ T8405] el0_svc+0x58/0x168 [ 114.306634][ T8405] el0t_64_sync_handler+0x84/0xf0 [ 114.308010][ T8405] el0t_64_sync+0x18c/0x190 [ 114.309112][ T8405] Code: 97e719b6 17ffffd7 95bdcc91 97d50cf3 (d4210000) [ 114.310991][ T8405] ---[ end trace 0000000000000000 ]--- [ 114.394285][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 114.399128][ T4302] Bluetooth: to_multiplier 0 < 10 [ 114.462896][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1719'. [ 114.833081][ T8405] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 114.835146][ T8405] SMP: stopping secondary CPUs [ 114.836554][ T8405] Kernel Offset: disabled [ 114.837777][ T8405] CPU features: 0x080000,02070084,26017203 [ 114.839416][ T8405] Memory Limit: none [ 115.307939][ T8405] Rebooting in 86400 seconds..