last executing test programs: 23.41895375s ago: executing program 3 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') r4 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000004c0)}], 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x20040084) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4e90}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)) pidfd_getfd(0xffffffffffffffff, r4, 0x0) 21.10678839s ago: executing program 3 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4040814) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) shutdown(r0, 0x1) 20.80855339s ago: executing program 3 (id=25): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x0) read$FUSE(r3, &(0x7f00000014c0)={0x2020}, 0x2020) 20.555822599s ago: executing program 3 (id=27): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000180)={@val={0x70, 0x2}, @void, @eth={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x24, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, {0x3a00, 0xe558, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xc5}}}}}}}}, 0x36) 20.160031933s ago: executing program 3 (id=31): unshare(0x22020400) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 19.778309496s ago: executing program 4 (id=33): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1210802, &(0x7f0000000140), 0x83, 0x5f4, &(0x7f00000005c0)="$eJzs3c1vVFUbAPDnTqelpfC2kDcqLqSJMZAoLS1giHEBW2Ma/IgbN1ZaECnQ0BotklAS3JgYN8aYuHIh/hdKZMtKVy7cuDIkRAlLE8fc6b2l08609Gtu0/v7JdPee87cnnM7fXrOPXPOnQBKayD9Uok4EBFTSURfMreQV40sc2D+eY8eXj+bPpKo1d76K4kkS8ufn2Tfe7ODuyPil5+T2N+xvNzp2WsXxyYnJ65m+0Mzl6aGpmevHblwaez8xPmJyyMvj5w8cfzEyeGj6zqvG8tSdkXEhx/3fT767vff/pMM//D7aBKn4rXsiYvPY7MMxED9d5Isz+o9udmFFaQj+ztZ/BIn1QIrxJrkr19nRDwdfdERj1+8vvjsjUIrB2ypWhJRA0oq2UD8b+RYoGh5PyC/tl96HVwppFcCtMOD0/MDAI8eXt/bGP/V+bHB6K6PDex+lMTiYZ0kItY3MtdoT0Tcuzt669zd0VuxReNwQHNzNyPimWbtf1KP//7ojv56/Fca4j/tF5zJvqfpb66z/KVDxeIf2mc+/rtXjP9oEf/vLYr/99dZ/sDjzQ96GuK/Z72nBAAAAAAAAKV153REvNTs/f/KwvyfaDL/pzciTm1C+QNL9pe//1+5vwnFAE08OB3xatP5v5V89m9/R7a1tz4foDM5d2Fy4mhE/C8iDkfnrnR/eIUyjnyx/5tWeQPZ/L/8kZZ/L5sLmNXjfnVX4zHjYzNjGz1vIOLBzYhnq63n/6Xtf9Kk/U//H0w9YRn7X7h9Zllitih+9fgHtkrtu4hDTdv/x3etSFa+P8dQvT8wlPcKlnvu0y9/bFX+euPfLSZg49L2f/fK8d+fLL5fz/Tayzg2W621yltv/78rebt+y5muLO2TsZmZq8MRXcnrHWlqQ/rI2usMO1EeD3m8pPF/+PmVx/+a9f97ImJuyc9O/m5cU5x76t/eP1rVR/8fipPG//ia2v+1b4zc7v+pVflP1v4fr7f1h7MU438w7+s8TLsa05uEY7VZVrvrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7QSUi9kRSGVzYrlQGByN6I+L/sbsyeWV65sVzVz66PJ7m1T//v5J/0m/f/H6Sf/5//6L9kSX7xyJiX0R81dFT3x88e2VyvOiTBwAAAAAAAAAAAAAAAAAAgG2it8X6/9SfHUXXDthy1aIrABSmSfz/WkQ9gPbT/kN5iX8oL/EP5SX+obzEP5SX+IfyEv9QXuIfAAAAAAB2lH0H7/yWRMTcKz31R6ory+sstGbAVqsUXQGgMGu4xc/erawH0H6m/kB5ucYHktZZ3Qtfmh60wpGrmjq7gYMBAAAAAAAAAAAAoHQOHbD+H8rK+n8orzWs/wd2mHz9/8GC6wG0n2t8IFZZyd90/f+qRwEAAAAAAAAAAAAAm2l69trFscnJias23tke1WjnRq1Wu5H+FWyX+hS70bPRn5NPhd8ep7NsI1/r92RHFfc/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPRfAAAA//+jpiFc") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 17.102856968s ago: executing program 3 (id=36): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17.06519089s ago: executing program 4 (id=38): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r5, @in={{0x2, 0x4e24, @empty}}, 0xe, 0x1}, &(0x7f0000000200)=0x90) 15.786030614s ago: executing program 4 (id=43): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 12.743876329s ago: executing program 4 (id=54): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x84d8, 0x2}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="18349ff0707332657eaaad2904dd1d1d86dd", 0x12, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) 6.183485256s ago: executing program 0 (id=77): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2c040004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0xa, 0x20004, 0x6}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 5.839372398s ago: executing program 0 (id=79): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket(0x10, 0xe, 0x9) 4.791911514s ago: executing program 0 (id=82): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711242000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000", @ANYRESHEX=r4, @ANYRES16=r1], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2b, 0x5, 0x2, 0x0, 0x8, 0x3, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x89ff]}}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chown(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) 4.195839435s ago: executing program 1 (id=85): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 4.101189448s ago: executing program 2 (id=86): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x5, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x73b, 0x10000, 0x2, 0x800024}, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r2, 0x0, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x2, 0x10000, 0x0, r3}, &(0x7f0000000100)=0x10) 3.991857682s ago: executing program 2 (id=87): syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 3.936912194s ago: executing program 4 (id=88): r0 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5529, &(0x7f0000006080)="$eJzs3L1vW1UUAPDjpOk3JUIMbH1SVSmRalOnH4KtQCs+RKuqwMAEju1abm2/KHadkImBETHwnyCQmBj5GxiY2RADiA0J5HdfSgNUqhQnJsnvJz2fd6+vzzvXqiqd9yIHcGQtZr//WolzcSoi5iPibERxXimPwo0UXoqI8xEx98RRKecfTxyPiNMRcW6SPOWslG99eWl84dov7/z23Q8njp356tsfZ7drYNYuRkR/LZ1v9FPMOyk+KOcb424R+1fHZUxv9B+W4zzFjfZqkWGjsb2uUcQrnbQ+X3s0nMT7vUZzEjvd+8X82iBdcDjubOcpPvCgsV6MW+3VInaHeRE7W6muza30f9vWcJTytMp8nxTpYzTajml9e7Od9rP2sIjNwaicT3nzVntzEsdlLC8XzbzXKupY3cUX/T/3bnfwaDMbt9eH3XyQXavVX6nVr1fr63mrPWpfrTb6retXs6VOb7KsOmo3+jc6ed7ptWvNvL+cLXWazWq9ni3dbK92G4OsXq9dqV2uXlsuzy5lb975IOu1sqVJfL07eDTq9obZ/Xw9S59YzlZqV15dzi7Us/du383u3rt16/bd9z+6+eGd126//Ua56F9lZUsrl1dWqvXL1ZX68hHa/2dl0VPcP+xKZdYFABw8+n9gFi7GwuPz6fb/6/ci9r7/j2fq/9O8/v/pDlT/e/j6/42XI2a6f9gV/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJH108LXbxUni2l8ppx/rpx6oRxXImIuIv78D/NxfEfO+TLPwlPWL/yjhu8rUWSYXONEeZyOiBvl8cfze/0tAAAAwOH1zafnv0jdenpZnHVB7Kd002bu7MdTyleJiIXFn6eUbW7y8uKUkhX/vo/F5pSyFTewTk4pWbrldmxa2Z7J/I5w8olQSWFuX8sBAAD2xc5OYH+7EAAAAPbT57MugNmoxPajzO1nwcVf3v/9QPDUjhEAAABwAFVmXQAAAACw54r+3+//AQAAwOGWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C927id3aSCOA+i35VfBf5EY917FHRzDI7h0aTiAl+AALvAKXoB4BNx5BAOGzoggXZh02kbzXlKGacuHGUIXM5MMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABD+tbs1p8/vP7YN+d46qdMbwAAAIAuh2a3bt8sU/1pPv88n3qZ61VE1BHRNXafxaObzFnOaX7f/+n6/uaPNnyJaBPO3zHPx5OIeJOPHy+G/hUAAADg/7XfbFdptJ5ellM3iDGlSZv62dtCeVVENMvvhdLqc96rQmHt//sh3hdKayewFoXC0pTbQ6m0v9I+7pdZu8VVUaWi7vzYpZHF+g4AAIxodlOMOwoBAABgTO+mbgDTqOLXUuZlKXCeiry89/imBgAAAPyDqqkbAAAAAAyuHf+PtP/fyf5/AAAAMI20/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDOjS79X6zXfXNOZ7ufM2X7q906N8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAn+zPOwqEQBiEwd71ncnc/7DSoLGhSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXM/rXVUUQDAz8z7E9sqxihZRETBhW5s+lpbuxMXSnDhRxBC+lpjX/3TBrGliNm4k6y7EV2KCErc9Tt03UI3dddFFhVcK3feTN40CfhUnHkmvx/cuedNhrnnzpCQM3cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLLz1iTupM38OM7LfXcf3VxL/b09fXJ76/5SainOqp15Q4nPvhfqH7LFiDjRXjIAAAAcDZ2qvo+IB73tldTn80X936uOSaX7t0+N47Ke/6wqWffW/1Xtn9ovPz98bneg+fE46aQX10fDU/tT6f5Xc5x1T//lEd3iyhePUDrFDcnf3Xx2p1dcz+zrO3fe7hfhXBPZAgD/xMmqL4Pq96HUD9pMDIAjo1srvKv6vzPfbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATdjZjBNVnEXEUncSJ/ce3Vw7qL+9dX+paudu3dqKLyfnTKfoRcTF9dHwVKOzmW3Xrt+4vDoaDa82H7wYEW2N/mY5/cvvT3FwRCvX55AEWfl928igc+me7v1SXt7sWbga/5+gtR9JAAAcUr2ypfrgQW97Je3LFiL++O7x+v+VWhxT1v8PPzh3tz5Wvf4fNDbD2be8ceWT5WvXb7y2fmX10vDS8KPXTw/eGJw5f/bs+eXiWcmyJyYAAAD8O/2y1ev/fGH/+v/xWhxT1v+ffjP4oj5WR/1/oMmiX9uZAAAAHG3PvPT7b9kB+7N+Pz5f3di4Ohhvdz+fHm9bSPVvmytbvf7vLLSdFQAAANCEnc3ssfX/C7U4plz/f/L753+sn7MTEcfK9f+Tax+PLjQ3nZnWxJ8Ttz1HAAAA2nWsbPX1/17x/n+++8pDHhGvvjyOy38DOFX933nnqx/qY9Xf/z/T3BRnUr44vh5FvxjRXWw7IwAAAA6zJ8qWiv1fe9srH/50/L2+9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmvZnAAAA//9gHC7O") ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xbffffbf9) 3.868435216s ago: executing program 2 (id=89): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2c040004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0xa, 0x20004, 0x6}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 3.574012436s ago: executing program 1 (id=90): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, 0x0, 0x1b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r4) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.415912512s ago: executing program 2 (id=91): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f0000000000)={[{@errors_remount}, {@nouid32}, {@noquota}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f00000003c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145042, 0x0) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x7b2f6560, 0x8) sendfile(r0, r0, 0x0, 0x80000000c) 2.433647285s ago: executing program 1 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x141a82, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000a00ac1414aa140019800800010004000000080002"], 0x44}}, 0x8000) 2.357749868s ago: executing program 1 (id=93): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket(0x10, 0xe, 0x9) 2.128589856s ago: executing program 2 (id=94): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="020304000100090104006bd648c6000c2f01fe80000000000000000000000000002eff0200000000000000000000000000013c", @ANYBLOB], 0x1043) 1.701989451s ago: executing program 32 (id=36): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.475563279s ago: executing program 1 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001340)="0e"}) 1.15774865s ago: executing program 4 (id=97): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x0, "f60921f2"}, @main=@item_4={0x3, 0x0, 0xb, "f307a616"}]}}, 0x0}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.14604614s ago: executing program 2 (id=98): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x12, @string={0x12, 0x3, "180aee28de4732da317525378933021c"}}, 0x0, 0x0}, 0x0) 1.099943962s ago: executing program 0 (id=99): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, 0x0, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 453.686864ms ago: executing program 1 (id=100): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLJJ++tL8qv1pbVqtAhBMWnSqj14USqIVBT0UI8x2ZbQbSNNFFuLTUU8CVLQs3gU/Qu8iSDqSfDqyZMUivbS1lNkZmeSTbp5odlk0+7nAzP7PDPP5nm+eebl2Xl2A+hYA9kqidgZEX9ERF89u7jAQP3l5vWL47euXxxPYm7uzb+TvNyN6xfHy6Ll+3YUmcE0Iv0kKSpZbPr8hdNjtVr1XJEfnjnz7vD0+QvPvH9m7FT1VPXs6NGjRw6PPP/c6LMtiTOL68b+j6YO7Hvl7SuvjZ+48s4v32Xt3Vnsb4yjVQaywP+Zyy3d92SrK2uzXfm6N18n3W1uDGvWFRFZd1Xy878vumKh8/ri5Y/b2jhgQ2X3pt7ld8/OAfewJNZastJwzQDufuWNPvv8Wy6bMOzYMq69WP8AlMV9s1jqe7ojLcpU5j/ftt5ARJyY/ferbIkNeg4BANDos/Evj/dEb3x469tXs7FH3/yeNB7IX//M17uLOZT+iPh/ROyJiPsiYm9E3B+Rl30wIh5aZ3tuH/+kV9f5J1eUjf9eKOa2Fo//ytFf9HcVuV15/JXk5GSteqj4nwxGpTfLj6xQxw/Hfv98uX2N479syeovx4JFO652L3lANzE2MxaV9US94NrliP3dzeJP5mcCkojYFxH759+1pgme3WVi8qlvDixXaPX4V9CCeaa5r7PwZrP4Z2NJ/KWkcX5y8rb5yeFtUaseGi6Pitv9+tunbyxX/7rib4Fr1fprQ/8vLdKfNM7XTre2/js8/tOe5K36PHPRUR+MzcycG4noSY7nG3uKsvn20YX3lvmyfHb8Dx5sfv7viYUKHo6I7CB+JCIejYjHirY/HhFPRMTBFWL8+aXV44+0Tf1/OWKi6fVv/vhf0v/nL5wuL40LW1ZMdJ3+6fvl6l9b/x/JU4PFlvz6t4pmzelu0uQ7/b8BAADA3STNvwOfpEPz6TQdGqp/h39v/C+tTU3PPH1y6r2zE/XvyvdHJS2fdPUVz0Nrk7XqSDJb/MVKcixq1dHiWXH5vPRw8dz4i67teX5ofKo20ebYodPtWOb8z/zV1e7WARtse9Otoz2b3hCgDZbOo6eLs5deDxcDuFf5vTZ0rlXO/3Sz2gFsPvd/6FzNzv9LS/LmAuDe5P4Pncv5Dx0q/bHdLQDayP0fOtKqP95vT2Jb45aelQv3bJE2tyyxVTslT0SUiXRLtEdigxLtvjIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0xn8BAAD//1be2cI=") 63.180318ms ago: executing program 0 (id=101): prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000feb000/0x14000)=nil) 0s ago: executing program 0 (id=102): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) chmod(&(0x7f0000000200)='./file0\x00', 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. syzkaller login: [ 65.695637][ T4173] cgroup: Unknown subsys name 'net' [ 65.840441][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.384084][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.813913][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.859955][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.997806][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.033400][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.041415][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.050561][ T4189] device bridge_slave_0 entered promiscuous mode [ 69.062940][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.070102][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.078335][ T4189] device bridge_slave_1 entered promiscuous mode [ 69.098293][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 69.118094][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 69.171751][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.190826][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.200696][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.208208][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.216503][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.260758][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.269476][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.277891][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.284967][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.292062][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.300305][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.332633][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.340131][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.348564][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.358457][ T4189] team0: Port device team_slave_0 added [ 69.388975][ T4189] team0: Port device team_slave_1 added [ 69.408093][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.415834][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.424141][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.439847][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.462910][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.470374][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.479480][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.500711][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.508217][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.534481][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.551383][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.562487][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.574381][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.604631][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.611620][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.638134][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.665483][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.675237][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.682333][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.691493][ T4200] device bridge_slave_0 entered promiscuous mode [ 69.709731][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.717340][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.725907][ T4200] device bridge_slave_1 entered promiscuous mode [ 69.735753][ T4186] team0: Port device team_slave_0 added [ 69.743405][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.770672][ T4187] team0: Port device team_slave_0 added [ 69.779310][ T4192] team0: Port device team_slave_0 added [ 69.787547][ T4192] team0: Port device team_slave_1 added [ 69.801039][ T4186] team0: Port device team_slave_1 added [ 69.829611][ T4187] team0: Port device team_slave_1 added [ 69.874038][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.883595][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.890701][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.917347][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.933494][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.941398][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.955912][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.962932][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.989248][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.002369][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.015657][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.022671][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.049058][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.061478][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.068757][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.098172][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.110397][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.118138][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.144562][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.174774][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.181759][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.208097][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.226172][ T4200] team0: Port device team_slave_0 added [ 70.240444][ T4200] team0: Port device team_slave_1 added [ 70.322579][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.329765][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.356049][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.377826][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.385209][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.391875][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.399949][ T4187] Cannot create hsr debugfs directory [ 70.409131][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.416772][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.423573][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.431342][ T4192] Cannot create hsr debugfs directory [ 70.453203][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.460705][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.488089][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.502781][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.510720][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.517717][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.525376][ T4186] Cannot create hsr debugfs directory [ 70.564709][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 70.564709][ T1348] Bluetooth: hci2: command 0x0409 tx timeout [ 70.594006][ T1348] Bluetooth: hci3: command 0x0409 tx timeout [ 70.600134][ T1348] Bluetooth: hci1: command 0x0409 tx timeout [ 70.650154][ T1348] Bluetooth: hci4: command 0x0409 tx timeout [ 70.657700][ T4200] device hsr_slave_0 entered promiscuous mode [ 70.665149][ T4200] device hsr_slave_1 entered promiscuous mode [ 70.672026][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.679902][ T4200] Cannot create hsr debugfs directory [ 70.942996][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.958883][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.969828][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.980703][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.047388][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.078652][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.092457][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.112317][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.139318][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.151842][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.168257][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.182744][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.237861][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.267883][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.282885][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.302630][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.337205][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.346457][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.358024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.366724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.375847][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.386254][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.393537][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.403184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.414774][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.423492][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.430660][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.440899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.453565][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.460301][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.468431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.509687][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.521364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.531323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.541527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.556609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.578891][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.588940][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.599280][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.619889][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.632120][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.656583][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.667102][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.678757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.691937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.704368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.712852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.737981][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.747669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.759349][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.774504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.783528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.792702][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.800033][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.812266][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.823207][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.834989][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.854434][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.865566][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.874855][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.882158][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.934925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.943736][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.953304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.965046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.974484][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.985432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.994738][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.009800][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.057931][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.068733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.078310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.088656][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.098311][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.105468][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.118872][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.128259][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.143196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.153128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.166676][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.173956][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.182896][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.191758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.213356][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.222965][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.238128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.253237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.262287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.285405][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.300944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.310784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.325211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.332847][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.341380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.351384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.366558][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.388441][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.401987][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.413425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.431525][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.438743][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.455622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.469684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.478385][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.487650][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.496318][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.503401][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.511969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.544065][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.552816][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.572197][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.581951][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.597165][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.623379][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.640420][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.650742][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 72.652005][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.667282][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.677021][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.685083][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 72.690643][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.700634][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 72.706892][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 72.715592][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.724723][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 72.754096][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.764868][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.786118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.813681][ T4189] device veth0_vlan entered promiscuous mode [ 72.831904][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.844291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.853715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.863939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.872422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.883156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.892730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.912592][ T4189] device veth1_vlan entered promiscuous mode [ 72.929144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.939656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.947955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.957233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.966841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.975663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.983601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.994813][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.025925][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.052905][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.076994][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.086271][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.093453][ T1261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.115784][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.133232][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.142444][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.181603][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.191015][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.207725][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.214911][ T1261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.223353][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.233129][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.240851][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.249851][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.259457][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.273326][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.289226][ T4192] device veth0_vlan entered promiscuous mode [ 73.309492][ T4189] device veth0_macvtap entered promiscuous mode [ 73.321738][ T4189] device veth1_macvtap entered promiscuous mode [ 73.331423][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.342437][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.351992][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.361383][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.371106][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.402149][ T4192] device veth1_vlan entered promiscuous mode [ 73.427469][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.435512][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.445670][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.461828][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.470671][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.482124][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.491497][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.500703][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.509668][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.518603][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.532000][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.545875][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.563253][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.573111][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.581926][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.591254][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.600400][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.633748][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.642884][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.652503][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.661795][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.678530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.688283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.697227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.705206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.712778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.722028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.733708][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.785952][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.798362][ T4192] device veth0_macvtap entered promiscuous mode [ 73.817313][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.832077][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.841896][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.858122][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.867036][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.875373][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.883383][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.893593][ T4186] device veth0_vlan entered promiscuous mode [ 73.910890][ T4192] device veth1_macvtap entered promiscuous mode [ 73.936542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.971963][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.987551][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.007999][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.042386][ T4186] device veth1_vlan entered promiscuous mode [ 74.053257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.062619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.074245][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.086932][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.099651][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.125403][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.135395][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.146268][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.156165][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.179840][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.187535][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.200537][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.210513][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.221235][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.230944][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.252061][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.305549][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.318158][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.330496][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.344780][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.362396][ T4186] device veth0_macvtap entered promiscuous mode [ 74.380341][ T4187] device veth0_vlan entered promiscuous mode [ 74.399319][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.410632][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.420846][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.435054][ T4186] device veth1_macvtap entered promiscuous mode [ 74.443530][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.467681][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.500393][ T4187] device veth1_vlan entered promiscuous mode [ 74.519722][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.531362][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.542070][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.553258][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.566124][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.574337][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.582817][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.591760][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.603129][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.615154][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.653746][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.667360][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.678684][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.690132][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.701562][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.724473][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 74.730996][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 74.741905][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.751191][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.761004][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.764462][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 74.782724][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 74.787437][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.803084][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.805602][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 74.825140][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.838530][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.872699][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.881389][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.891639][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.892740][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.914583][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.923349][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.924790][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.949070][ T4187] device veth0_macvtap entered promiscuous mode [ 74.960626][ T4187] device veth1_macvtap entered promiscuous mode [ 74.985344][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.996154][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.004822][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.013412][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.022924][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.073510][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.096242][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.107008][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.115520][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.139441][ T4200] device veth0_vlan entered promiscuous mode [ 75.156635][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.175702][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.192915][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.205732][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.216109][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.226745][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.239111][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.269313][ T4200] device veth1_vlan entered promiscuous mode [ 75.277724][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.302111][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.318191][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.335406][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.347588][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.360230][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.368853][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.380335][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.392103][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.402267][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.414200][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.431757][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.464028][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.472806][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.483585][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.492914][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.502326][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.513053][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.522254][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.540256][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.552009][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.561796][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.572097][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.593405][ T4200] device veth0_macvtap entered promiscuous mode [ 75.641210][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.652264][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.683609][ T4200] device veth1_macvtap entered promiscuous mode [ 75.700287][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.713449][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.728111][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.739544][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.780278][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.840615][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.867718][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.888785][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.900332][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.923896][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.940859][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.950948][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.975399][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.015143][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.034166][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.052258][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.089448][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.110894][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.149042][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.169887][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.180444][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.201121][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.211633][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.232722][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.276328][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.307353][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.335655][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.383352][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.411243][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.426603][ T4278] loop0: detected capacity change from 0 to 256 [ 76.433701][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.442798][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.463139][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.471264][ T4269] loop1: detected capacity change from 0 to 40427 [ 76.498413][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.554388][ T4278] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 76.579704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.631742][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.672161][ T4269] F2FS-fs (loop1): Found nat_bits in checkpoint [ 76.684109][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.691805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.789524][ T26] audit: type=1800 audit(1774725366.402:2): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7" name="file1" dev="loop0" ino=1048586 res=0 errno=0 [ 76.810661][ T1326] Bluetooth: hci1: command 0x0419 tx timeout [ 76.830236][ T1326] Bluetooth: hci3: command 0x0419 tx timeout [ 76.881535][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.884750][ T1326] Bluetooth: hci2: command 0x0419 tx timeout [ 76.908391][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.953495][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.973746][ T1326] Bluetooth: hci0: command 0x0419 tx timeout [ 76.990581][ T4269] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 77.007202][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 77.024262][ T1296] attempt to access beyond end of device [ 77.024262][ T1296] loop0: rw=1, want=304, limit=256 [ 77.040006][ T4283] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 77.061457][ T4269] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.071962][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.106793][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.145955][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.298240][ T4189] attempt to access beyond end of device [ 78.298240][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 78.414019][ T1326] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.471966][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.564123][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.804675][ T1326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.833885][ T1326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.874072][ T1326] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.891812][ T4305] loop0: detected capacity change from 0 to 256 [ 78.898309][ T1326] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.898361][ T1326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.928748][ T1326] usb 3-1: config 0 descriptor?? [ 79.014154][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 79.056330][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 79.073565][ T4305] FAT-fs (loop0): Directory bread(block 64) failed [ 79.080620][ T4305] FAT-fs (loop0): Directory bread(block 65) failed [ 79.094174][ T4305] FAT-fs (loop0): Directory bread(block 66) failed [ 79.104188][ T4305] FAT-fs (loop0): Directory bread(block 67) failed [ 79.110965][ T4305] FAT-fs (loop0): Directory bread(block 68) failed [ 79.126946][ T4305] FAT-fs (loop0): Directory bread(block 69) failed [ 79.134160][ T4305] FAT-fs (loop0): Directory bread(block 70) failed [ 79.140903][ T4305] FAT-fs (loop0): Directory bread(block 71) failed [ 79.148246][ T4305] FAT-fs (loop0): Directory bread(block 72) failed [ 79.155467][ T4305] FAT-fs (loop0): Directory bread(block 73) failed [ 79.440374][ T1326] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x4 [ 79.457627][ T1326] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 79.491490][ T1326] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 79.533886][ T4231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.647655][ T4314] loop3: detected capacity change from 0 to 256 [ 80.396435][ T23] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 80.412023][ T4314] ======================================================= [ 80.412023][ T4314] WARNING: The mand mount option has been deprecated and [ 80.412023][ T4314] and is ignored by this kernel. Remove the mand [ 80.412023][ T4314] option from the mount to silence this warning. [ 80.412023][ T4314] ======================================================= [ 81.102931][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.183784][ C0] sched: RT throttling activated [ 81.191230][ T4314] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 82.207028][ T23] usb 5-1: Product: syz [ 82.211274][ T23] usb 5-1: Manufacturer: syz [ 82.222063][ T23] usb 5-1: SerialNumber: syz [ 82.311520][ T23] usb 5-1: config 0 descriptor?? [ 82.344751][ T23] usb 5-1: can't set config #0, error -71 [ 82.401673][ T23] usb 5-1: USB disconnect, device number 2 [ 82.986505][ T4330] overlayfs: missing 'lowerdir' [ 84.054160][ T4175] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 85.184396][ T4175] usb 3-1: device firmware changed [ 85.213096][ T21] usb 3-1: USB disconnect, device number 2 [ 85.221333][ T4350] loop1: detected capacity change from 0 to 128 [ 85.260588][ T4353] netlink: 188 bytes leftover after parsing attributes in process `syz.0.24'. [ 85.404798][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.592867][ T4350] EXT4-fs (loop1): Test dummy encryption mode enabled [ 85.644081][ T4350] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 85.667049][ T4350] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.014429][ T21] usb 3-1: device descriptor read/64, error -71 [ 86.250984][ T4379] loop1: detected capacity change from 0 to 512 [ 87.167788][ T4381] loop4: detected capacity change from 0 to 1024 [ 87.181473][ T1107] cfg80211: failed to load regulatory.db [ 87.323702][ T4379] EXT4-fs (loop1): Ignoring removed bh option [ 87.396020][ T4379] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 87.477708][ T4379] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.32: corrupted in-inode xattr [ 87.492928][ T4379] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.32: couldn't read orphan inode 15 (err -117) [ 87.509504][ T4379] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 87.787718][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.850742][ T4381] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.33: bad orphan inode 458752 [ 87.923578][ T4381] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.077303][ T4371] loop0: detected capacity change from 0 to 40427 [ 88.190776][ T4371] F2FS-fs (loop0): invalid crc value [ 88.214238][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.228029][ T4387] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 88.265471][ T4371] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.282698][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.343849][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.418023][ T21] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.469985][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.531100][ T21] usb 3-1: config 0 descriptor?? [ 88.543443][ T4371] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 88.634289][ T21] usb 3-1: can't set config #0, error -71 [ 88.664645][ T21] usb 3-1: USB disconnect, device number 4 [ 88.783664][ T4390] loop2: detected capacity change from 0 to 1024 [ 88.827362][ T4390] EXT4-fs (loop2): Ignoring removed orlov option [ 88.891036][ T4390] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 88.980485][ T4390] System zones: 0-1, 3-12 [ 89.072364][ T4390] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,jqfmt=vfsv1,auto_da_alloc=0x0000000001800000,,errors=continue. Quota mode: none. [ 89.487989][ T4390] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 89.835914][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 90.081897][ T4409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 90.105974][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 90.141306][ T4409] device vlan2 entered promiscuous mode [ 90.152943][ T4409] device dummy0 entered promiscuous mode [ 90.159134][ T4407] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 90.676341][ T4419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.679706][ T4434] loop0: detected capacity change from 0 to 512 [ 91.696657][ T4419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.738781][ T4434] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 91.975195][ T4434] EXT4-fs (loop0): 1 truncate cleaned up [ 91.980918][ T4434] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,bsdgroups,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 92.349729][ T26] audit: type=1800 audit(1774725381.962:3): pid=4434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.46" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 92.612675][ T4419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.803488][ T4419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.060076][ T4451] input: syz0 as /devices/virtual/input/input5 [ 93.156100][ T4419] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.196137][ T4419] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.232632][ T4419] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.282381][ T4419] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.470950][ T4463] device syzkaller0 entered promiscuous mode [ 94.017591][ T4468] loop1: detected capacity change from 0 to 512 [ 94.069219][ T4468] EXT4-fs (loop1): Ignoring removed nobh option [ 94.163198][ T4468] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 94.189740][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 94.228069][ T4468] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.831119][ T4481] loop2: detected capacity change from 0 to 40427 [ 96.029468][ T4481] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 96.036916][ T4481] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.049742][ T4481] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x216 [ 96.071540][ T4481] F2FS-fs (loop2): invalid crc value [ 96.184082][ T4481] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 96.373626][ T4481] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.380913][ T4481] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.375874][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.457925][ T4488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.629775][ T4492] loop0: detected capacity change from 0 to 1024 [ 97.773669][ T4492] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.821820][ T4492] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3885: comm syz.0.62: Allocating blocks 385-513 which overlap fs metadata [ 97.851229][ T4492] EXT4-fs (loop0): pa ffff88807389a460: logic 16, phys. 129, len 24 [ 97.860032][ T4492] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 7 [ 98.170898][ T4505] loop1: detected capacity change from 0 to 1024 [ 98.270852][ T4505] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.381184][ T4505] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,journal_ioprio=0x0000000000000006,noinit_itable,nogrpid,nodiscard,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 98.530380][ T4505] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.709216][ T4516] loop1: detected capacity change from 0 to 512 [ 98.816742][ T4516] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 98.839571][ T4516] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.183641][ T4526] loop1: detected capacity change from 0 to 512 [ 99.197460][ T4523] loop0: detected capacity change from 0 to 256 [ 99.251758][ T4523] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x4ea91ace, utbl_chksum : 0xe619d30d) [ 99.275653][ T4523] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 99.304008][ T4526] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 99.338429][ T4526] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 99.359099][ T4526] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 99.402834][ T4526] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 99.470481][ T4526] EXT4-fs (loop1): failed to initialize system zone (-117) [ 99.486927][ T4523] attempt to access beyond end of device [ 99.486927][ T4523] loop0: rw=524288, want=408, limit=256 [ 99.531324][ T4526] EXT4-fs (loop1): mount failed [ 99.553586][ T4523] attempt to access beyond end of device [ 99.553586][ T4523] loop0: rw=524288, want=664, limit=256 [ 99.565086][ T4523] attempt to access beyond end of device [ 99.565086][ T4523] loop0: rw=0, want=288, limit=256 [ 99.581150][ T26] audit: type=1800 audit(1774725389.192:4): pid=4523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.71" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 99.822135][ T4534] loop1: detected capacity change from 0 to 128 [ 99.901699][ T4534] FAT-fs (loop1): FAT read failed (blocknr 128) [ 99.934357][ T4259] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.970900][ T4538] loop0: detected capacity change from 0 to 128 [ 100.061734][ T4538] attempt to access beyond end of device [ 100.061734][ T4538] loop0: rw=3, want=144, limit=128 [ 100.079766][ T4538] attempt to access beyond end of device [ 100.079766][ T4538] loop0: rw=2051, want=250, limit=128 [ 100.140669][ T4540] loop1: detected capacity change from 0 to 1024 [ 100.183551][ T4540] EXT4-fs (loop1): Ignoring removed bh option [ 100.226642][ T4540] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,errors=remount-ro,inode_readahead_blks=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 100.256813][ T4259] usb 3-1: Using ep0 maxpacket: 16 [ 100.394329][ T4259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.578357][ T4259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.590359][ T4259] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 100.600424][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.610676][ T4259] usb 3-1: config 0 descriptor?? [ 101.217330][ T4259] ntrig 0003:1B96:0008.0002: item fetching failed at offset 5/7 [ 101.250716][ T4259] ntrig 0003:1B96:0008.0002: parse failed [ 101.271356][ T4259] ntrig: probe of 0003:1B96:0008.0002 failed with error -22 [ 101.337108][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.380873][ T4553] loop0: detected capacity change from 0 to 512 [ 101.389171][ T4551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.435481][ T4259] usb 3-1: USB disconnect, device number 5 [ 101.481172][ T4553] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 101.495713][ T4553] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.771538][ T4561] loop1: detected capacity change from 0 to 256 [ 101.803123][ T4561] FAT-fs (loop1): bogus logical sector size 5 [ 101.839814][ T4561] FAT-fs (loop1): Can't find a valid FAT filesystem [ 102.433365][ T4573] attempt to access beyond end of device [ 102.433365][ T4573] loop2: rw=3, want=144, limit=128 [ 102.473260][ T4573] attempt to access beyond end of device [ 102.473260][ T4573] loop2: rw=2051, want=250, limit=128 [ 102.822302][ T4581] set_capacity_and_notify: 1 callbacks suppressed [ 102.822318][ T4581] loop2: detected capacity change from 0 to 512 [ 102.931601][ T4582] hub 9-0:1.0: USB hub found [ 102.939269][ T4582] hub 9-0:1.0: 1 port detected [ 103.092753][ T4581] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.596764][ T4581] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nouid32,noquota,nodiscard,dioread_nolock,. Quota mode: writeback. [ 103.651046][ T4581] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.973043][ T4571] loop4: detected capacity change from 0 to 40427 [ 104.308257][ T4571] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64) [ 104.334883][ T4571] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 104.421047][ T4571] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 104.484777][ T4571] F2FS-fs (loop4): invalid crc value [ 104.533261][ T4571] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.765271][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.777435][ T4571] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 104.790431][ T4571] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 104.798966][ T4602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.190718][ T4614] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.226432][ T4614] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.273922][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.284211][ T4231] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.298525][ T4607] chnl_net:caif_netlink_parms(): no params data found [ 105.353001][ T4607] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.360385][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.373405][ T4607] device bridge_slave_0 entered promiscuous mode [ 105.385715][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.393011][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.404315][ T4607] device bridge_slave_1 entered promiscuous mode [ 105.433063][ T4607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.446241][ T4607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.473110][ T4607] team0: Port device team_slave_0 added [ 105.482553][ T4607] team0: Port device team_slave_1 added [ 105.503460][ T4607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.510724][ T4607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.514575][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 105.542359][ T4607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.566328][ T4607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.573423][ T4607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.606967][ T4607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.663308][ T4607] device hsr_slave_0 entered promiscuous mode [ 105.664467][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.681281][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.692662][ T4607] device hsr_slave_1 entered promiscuous mode [ 105.702836][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.713176][ T4607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.720091][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.730670][ T4607] Cannot create hsr debugfs directory [ 105.737010][ T13] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 105.737042][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.764435][ T13] usb 5-1: config 0 descriptor?? [ 105.824109][ T4231] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 105.839781][ T4231] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 105.850992][ T4231] usb 3-1: Manufacturer: syz [ 105.870872][ T4231] usb 3-1: config 0 descriptor?? [ 105.971811][ T4621] loop1: detected capacity change from 0 to 512 [ 106.059988][ T4607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.084634][ T4607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.106134][ T4607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.127471][ T4607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.258859][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.266306][ T4607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.274856][ T4607] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.282401][ T4607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.298177][ T13] ntrig 0003:1B96:0008.0003: item fetching failed at offset 5/7 [ 106.314826][ T13] ntrig 0003:1B96:0008.0003: parse failed [ 106.324256][ T13] ntrig: probe of 0003:1B96:0008.0003 failed with error -22 [ 106.347479][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.363687][ T4621] ------------[ cut here ]------------ [ 106.365918][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.369880][ T4621] WARNING: CPU: 0 PID: 4621 at mm/page_alloc.c:5476 __alloc_pages+0x39f/0x480 [ 106.392442][ T4621] Modules linked in: [ 106.396490][ T4621] CPU: 0 PID: 4621 Comm: syz.1.100 Not tainted syzkaller #0 [ 106.404748][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 106.414974][ T4621] RIP: 0010:__alloc_pages+0x39f/0x480 [ 106.420765][ T4621] Code: 31 ff e9 b1 fe ff ff e8 ff fe 07 08 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fd ff ff 4c 89 e7 e8 86 c2 09 00 e9 42 fd ff ff <0f> 0b 45 31 ff e9 ee fe ff ff 65 44 8b 2d 67 ab 4d 7e 41 83 fd 08 [ 106.448580][ T4621] RSP: 0018:ffffc9000328f380 EFLAGS: 00010246 [ 106.541746][ T23] usb 5-1: USB disconnect, device number 3 [ 106.633852][ T4621] RAX: ffffc9000328f3c0 RBX: 1ffff92000651e74 RCX: 0000000000000000 [ 106.642265][ T4621] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000328f3e8 [ 106.728407][ T4621] RBP: ffffc9000328f470 R08: ffffc9000328f3e7 R09: ffffc9000328f3c0 [ 106.773937][ T4621] R10: dffffc0000000000 R11: fffff52000651e7d R12: dffffc0000000000 [ 106.781987][ T4621] R13: 0000000000000000 R14: 0000000000040c40 R15: 000000000000000c [ 106.815811][ T4621] FS: 00007fe19863a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 106.853850][ T4621] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.860757][ T4621] CR2: 0000000000000000 CR3: 0000000055cc5000 CR4: 00000000003506f0 [ 106.887818][ T4621] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.933862][ T4621] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.942064][ T4621] Call Trace: [ 106.984325][ T4621] [ 106.987341][ T4621] ? zone_statistics+0x170/0x170 [ 106.992565][ T4621] kmalloc_large_node+0x7d/0x190 [ 107.009956][ T4621] __kmalloc_node+0x232/0x3b0 [ 107.017610][ T4621] ext4_expand_extra_isize_ea+0xd26/0x19b0 [ 107.023528][ T4621] __ext4_expand_extra_isize+0x301/0x3e0 [ 107.034063][ T4621] __ext4_mark_inode_dirty+0x469/0x700 [ 107.050610][ T4621] ext4_evict_inode+0xa8d/0x1090 [ 107.055825][ T4621] ? _raw_spin_unlock+0x24/0x40 [ 107.060762][ T4621] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 107.092596][ T4621] ? do_raw_spin_unlock+0x11d/0x230 [ 107.098029][ T4621] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 107.104028][ T4621] evict+0x4c9/0x8d0 [ 107.107995][ T4621] ? proc_nr_inodes+0x320/0x320 [ 107.114046][ T4621] ? do_raw_spin_unlock+0x11d/0x230 [ 107.119346][ T4621] ? _raw_spin_unlock+0x24/0x40 [ 107.126492][ T4621] ? iput+0x706/0x8a0 [ 107.130564][ T4621] ext4_orphan_cleanup+0xad2/0x1320 [ 107.136484][ T4621] ? ext4_orphan_del+0xbf0/0xbf0 [ 107.141483][ T4621] ? errseq_check_and_advance+0x62/0x120 [ 107.147708][ T4621] ext4_fill_super+0x8e25/0x95a0 [ 107.152821][ T4621] ? ext4_mount+0x40/0x40 [ 107.157792][ T4621] ? set_blocksize+0x1f3/0x370 [ 107.162809][ T4621] ? sb_set_blocksize+0xa5/0xe0 [ 107.168944][ T4621] mount_bdev+0x287/0x3c0 [ 107.173347][ T4621] ? ext4_mount+0x40/0x40 [ 107.178300][ T4621] legacy_get_tree+0xe6/0x180 [ 107.183032][ T4621] ? ext4_errno_to_code+0x160/0x160 [ 107.188751][ T4621] vfs_get_tree+0x88/0x270 [ 107.193227][ T4621] do_new_mount+0x24a/0xa40 [ 107.198200][ T4621] __se_sys_mount+0x2e3/0x3d0 [ 107.202937][ T4621] ? __x64_sys_mount+0xc0/0xc0 [ 107.208285][ T4621] ? lockdep_hardirqs_on+0x94/0x140 [ 107.213581][ T4621] ? __x64_sys_mount+0x1c/0xc0 [ 107.218876][ T4621] do_syscall_64+0x4c/0xa0 [ 107.223346][ T4621] ? clear_bhb_loop+0x30/0x80 [ 107.229215][ T4621] ? clear_bhb_loop+0x30/0x80 [ 107.235711][ T4621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.241679][ T4621] RIP: 0033:0x7fe19a3e1a8a [ 107.246752][ T4621] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.267261][ T4621] RSP: 002b:00007fe198639e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.282393][ T4621] RAX: ffffffffffffffda RBX: 00007fe198639ee0 RCX: 00007fe19a3e1a8a [ 107.292113][ T4621] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fe198639ea0 [ 107.300820][ T4621] RBP: 00002000000009c0 R08: 00007fe198639ee0 R09: 0000000000800718 [ 107.309251][ T4621] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 107.323112][ T4621] R13: 00007fe198639ea0 R14: 000000000000048d R15: 0000200000000200 [ 107.332845][ T4621] [ 107.342788][ T4621] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.350304][ T4621] CPU: 0 PID: 4621 Comm: syz.1.100 Not tainted syzkaller #0 [ 107.357682][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.367752][ T4621] Call Trace: [ 107.371053][ T4621] [ 107.374017][ T4621] dump_stack_lvl+0x188/0x250 [ 107.378912][ T4621] ? show_regs_print_info+0x20/0x20 [ 107.384267][ T4621] ? load_image+0x400/0x400 [ 107.388788][ T4621] panic+0x2e5/0x810 [ 107.392701][ T4621] ? bpf_jit_dump+0xd0/0xd0 [ 107.397230][ T4621] ? __alloc_pages+0x39f/0x480 [ 107.402038][ T4621] __warn+0x248/0x2b0 [ 107.406193][ T4621] ? __alloc_pages+0x39f/0x480 [ 107.410978][ T4621] report_bug+0x1b7/0x2e0 [ 107.415419][ T4621] handle_bug+0x3a/0x70 [ 107.419683][ T4621] exc_invalid_op+0x16/0x40 [ 107.424210][ T4621] asm_exc_invalid_op+0x16/0x20 [ 107.429077][ T4621] RIP: 0010:__alloc_pages+0x39f/0x480 [ 107.434486][ T4621] Code: 31 ff e9 b1 fe ff ff e8 ff fe 07 08 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fd ff ff 4c 89 e7 e8 86 c2 09 00 e9 42 fd ff ff <0f> 0b 45 31 ff e9 ee fe ff ff 65 44 8b 2d 67 ab 4d 7e 41 83 fd 08 [ 107.454138][ T4621] RSP: 0018:ffffc9000328f380 EFLAGS: 00010246 [ 107.460248][ T4621] RAX: ffffc9000328f3c0 RBX: 1ffff92000651e74 RCX: 0000000000000000 [ 107.468244][ T4621] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000328f3e8 [ 107.476233][ T4621] RBP: ffffc9000328f470 R08: ffffc9000328f3e7 R09: ffffc9000328f3c0 [ 107.484237][ T4621] R10: dffffc0000000000 R11: fffff52000651e7d R12: dffffc0000000000 [ 107.492215][ T4621] R13: 0000000000000000 R14: 0000000000040c40 R15: 000000000000000c [ 107.500206][ T4621] ? zone_statistics+0x170/0x170 [ 107.505174][ T4621] kmalloc_large_node+0x7d/0x190 [ 107.510138][ T4621] __kmalloc_node+0x232/0x3b0 [ 107.514834][ T4621] ext4_expand_extra_isize_ea+0xd26/0x19b0 [ 107.520673][ T4621] __ext4_expand_extra_isize+0x301/0x3e0 [ 107.526476][ T4621] __ext4_mark_inode_dirty+0x469/0x700 [ 107.532141][ T4621] ext4_evict_inode+0xa8d/0x1090 [ 107.537088][ T4621] ? _raw_spin_unlock+0x24/0x40 [ 107.541952][ T4621] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 107.548155][ T4621] ? do_raw_spin_unlock+0x11d/0x230 [ 107.553446][ T4621] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 107.559354][ T4621] evict+0x4c9/0x8d0 [ 107.563273][ T4621] ? proc_nr_inodes+0x320/0x320 [ 107.568135][ T4621] ? do_raw_spin_unlock+0x11d/0x230 [ 107.573441][ T4621] ? _raw_spin_unlock+0x24/0x40 [ 107.578301][ T4621] ? iput+0x706/0x8a0 [ 107.582322][ T4621] ext4_orphan_cleanup+0xad2/0x1320 [ 107.587538][ T4621] ? ext4_orphan_del+0xbf0/0xbf0 [ 107.592489][ T4621] ? errseq_check_and_advance+0x62/0x120 [ 107.598142][ T4621] ext4_fill_super+0x8e25/0x95a0 [ 107.603115][ T4621] ? ext4_mount+0x40/0x40 [ 107.607519][ T4621] ? set_blocksize+0x1f3/0x370 [ 107.612377][ T4621] ? sb_set_blocksize+0xa5/0xe0 [ 107.617237][ T4621] mount_bdev+0x287/0x3c0 [ 107.621575][ T4621] ? ext4_mount+0x40/0x40 [ 107.625913][ T4621] legacy_get_tree+0xe6/0x180 [ 107.630600][ T4621] ? ext4_errno_to_code+0x160/0x160 [ 107.635818][ T4621] vfs_get_tree+0x88/0x270 [ 107.640266][ T4621] do_new_mount+0x24a/0xa40 [ 107.644796][ T4621] __se_sys_mount+0x2e3/0x3d0 [ 107.649686][ T4621] ? __x64_sys_mount+0xc0/0xc0 [ 107.654468][ T4621] ? lockdep_hardirqs_on+0x94/0x140 [ 107.659670][ T4621] ? __x64_sys_mount+0x1c/0xc0 [ 107.664461][ T4621] do_syscall_64+0x4c/0xa0 [ 107.668880][ T4621] ? clear_bhb_loop+0x30/0x80 [ 107.673559][ T4621] ? clear_bhb_loop+0x30/0x80 [ 107.678467][ T4621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.684400][ T4621] RIP: 0033:0x7fe19a3e1a8a [ 107.688874][ T4621] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.708767][ T4621] RSP: 002b:00007fe198639e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.717197][ T4621] RAX: ffffffffffffffda RBX: 00007fe198639ee0 RCX: 00007fe19a3e1a8a [ 107.725258][ T4621] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fe198639ea0 [ 107.733270][ T4621] RBP: 00002000000009c0 R08: 00007fe198639ee0 R09: 0000000000800718 [ 107.741346][ T4621] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 107.749335][ T4621] R13: 00007fe198639ea0 R14: 000000000000048d R15: 0000200000000200 [ 107.757360][ T4621] [ 107.760734][ T4621] Kernel Offset: disabled [ 107.765361][ T4621] Rebooting in 86400 seconds..