last executing test programs: 37.588795721s ago: executing program 3 (id=3357): socket$alg(0x26, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f00000000c0)}, 0x20) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c0400001000010400000000000000", @ANYRES32=r0, @ANYBLOB="10100000000000000800002005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 32.937406247s ago: executing program 3 (id=3360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r0) 32.599307008s ago: executing program 3 (id=3364): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x1c8}, 0x4000c010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 32.177333372s ago: executing program 3 (id=3368): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 30.928118038s ago: executing program 3 (id=3371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f00000001c0)=""/156, &(0x7f0000000040)=0x9c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c00"], 0x20}}, 0x40816) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close(0x3) 30.018862585s ago: executing program 3 (id=3376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 10.864697296s ago: executing program 1 (id=3451): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 9.635347265s ago: executing program 1 (id=3446): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020002000000000000000003000000000100000002000000000000000000000000000001000000000000000200004523039420c95a4e35b05d7c83d355d5fb66e8bb82abe1d07fd283918ba42440019f930300000000000000b2910c3f60e6e8a6c10d392f2e36fc7caa67e0539e1afd2d33e30101000000000000f3fab74dc5b14705508c331579"], 0x0, 0x42, 0x0, 0x1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000a40)={0x1f, 0xd, @none, 0xfa, 0x2}, 0xe) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000412, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x78843, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000180)) 6.862936719s ago: executing program 4 (id=3447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf9c502871e7", @ANYRES64=r4, @ANYBLOB="850b0100609004002000128009000100766c616e00000000100002390c000200100000000d006442549b0e576709a4a943c75b2a4b3db2fd6832f4fb1b4b4af740ffcd1eb0fa272c52d7e1020134de472b121224ed8756c1317bd2cf1ef8676bffda79a8d7f4643bb361fb57f34a93f2828b35fea46a69ae87e2f14b"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 6.860650679s ago: executing program 0 (id=3448): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0xffffffff) 6.799504997s ago: executing program 1 (id=3449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000002400)="80100280", 0x4, 0x20004853, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) 5.812623421s ago: executing program 4 (id=3452): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000100), 0x0, 0x1, 0x0) 5.594557452s ago: executing program 0 (id=3453): syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x20, 0xf, 0xd7, 0x2, {0x5, 0x25, 0x1, 0x1, '\''}}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x6d, 0xf7, 0x80, {0x5, 0x25, 0x1, 0x1, ':'}}}]}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.405039938s ago: executing program 4 (id=3454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6, 0x16, 0x4, 0x2}]}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.218559255s ago: executing program 1 (id=3456): creat(&(0x7f0000000340)='./file0\x00', 0x0) socket$inet6(0xa, 0x400000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) sendfile(r0, r1, 0x0, 0x20fffe85) 4.85473655s ago: executing program 4 (id=3457): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000088000000b0000000010"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 4.370902063s ago: executing program 4 (id=3459): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) 4.163073085s ago: executing program 1 (id=3460): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x560, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 4.070760919s ago: executing program 2 (id=3461): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)={0x50, 0x17, 0x508, 0x70bd2c, 0x25dfdbfe, "", [@generic="55d4d24d86729d9e687527c68051d2fa9e3325b59dcc861aed126fb6d9c309e6ee04a88dfa23e3baa412a05bc2389fb8609de66c79f3b4686a3db0708a40170e"]}, 0x50}], 0x1, 0x0, 0x0, 0x80}, 0x404c000) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 3.734996369s ago: executing program 2 (id=3462): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf9c502871e7", @ANYBLOB="850b0100609004002000128009000100766c616e00000000100002390c000200100000000d006442549b0e576709a4a943c75b2a4b3db2fd6832f4fb1b4b4af740ffcd1eb0fa272c52d7e1020134de472b121224ed8756c1317bd2cf1ef8676bffda79a8d7f4643bb361fb57f34a93f2828b35fea46a69ae87e2f14be5"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3.498087347s ago: executing program 0 (id=3463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.84638469s ago: executing program 2 (id=3464): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x1, 0x0) 2.349076241s ago: executing program 1 (id=3465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000002400)="80100280", 0x4, 0x20004853, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) 2.317633925s ago: executing program 4 (id=3466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6, 0x16, 0x4, 0x2}]}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.138383823s ago: executing program 2 (id=3467): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000b40)={{r0}, "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"}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40095) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x34, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) write$nci(r4, &(0x7f0000000040)=ANY=[], 0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac86fa3e823bff705acd262e2281f2"], 0x3c}}, 0x8000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 1.973034854s ago: executing program 0 (id=3468): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000088000000b0000000010"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 1.723409839s ago: executing program 0 (id=3469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 1.11426861s ago: executing program 2 (id=3470): creat(&(0x7f0000000340)='./file0\x00', 0x0) socket$inet6(0xa, 0x400000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) sendfile(r0, r1, 0x0, 0x20fffe85) 52.388359ms ago: executing program 0 (id=3471): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB, @ANYBLOB="8000260b0a000200"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x560, &(0x7f0000000c00)="$eJzs3c9vI1cdAPDvTH42u212oQeogF2gsKDV2htvu6p6abmAUFWpouLEYRsSbxTWXi+xU5oQifRvAAkkTvAncEDigNQTB24ckTgAohyQCkSgDRIHoxlPEjdxWLN2bDb+fKTZ+fFm5vuevTPv+dmZF8DEuhoRuxExGxFvRcRisT0ppni1M2X7PdzbWdnf21lJot1+829Jnp5ti65jMheKc85HxNe+EvHN5GTc5tb2veVarbpRrJdb9Qfl5tb2jfX68lp1rXq/Urm9dPvmS7derAytrFfqP/vgy+uvff2Xv/jk+7/Z/eJ3s2xdLNK6yzFMnaLPHMbJTEfEa2cRbAymivnsmPPB40kj4iMR8Zn8+l+Mqfx/JwBwnrXbi9Fe7F4HAM67NO8DS9JSRKRp0Qgodfrwno2FtNZotq7fbWzeX+30lV2KmfTueq168/Lc776d7zyTZOtLeVqenq9Xjq3fiojLEfGDuafy9dJKo7Y6niYPAEy8C931f0T8cy5NS6W+Du3xrR4A8MSYH3cGAICRU/8DwORR/wPA5Omj/i++7N8987wAAKPh8z8ATB71PwBMHvU/AEyUN15/PZva+8Xzr1ff3tq813j7xmq1ea9U31wprTQ2HpTWGo21/Jk99Uedr9ZoPFh6ITbfKbeqzVa5ubV9p97YvN+6kz/X+051ZiSlAgD+m8tX3vttEhG7Lz+VT9E1loO6Gs63dIh7AU+WqUEO1kCAJ5rRvmBy9VWF542EX595XoDx6Pkw7/meix/2o/8hiN8Zwf+Vax/vv//fGM9wvujZh8n1eP3/rww9H8DoPXb//x+Gmw9g9Nrt5PiY/7OHSd3eGOWoxADAWRrgJ3zt7w2rEQKM1aMG8x7K9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwzlyMiG9FkpbyscDT7N+0VIp4OiIuxUxyd71WvRkRz8SViJiZy9aXxp1pAGBA6V+SYvyva4vPXzyeOpv8ay6fR8R3fvzmD99ZbrU2lrLtfz/cPncwfFjl6LgBxhUEAPr3p352yuvvSjHv+iD/cG9n5WA6wzye8MGXDgcfXdnf28mnTsp0tNvtdsR83pZY+EcS08Ux8xHxXERMDSH+7rsR8bFe5U/yvpFLxcin3fGjiP30SOOnH4qf5mmdefbyfXQIeYFJ8152/3m11/WXxtV83vv6n8/vUIPL73/zEQf3vv2u+NNFpKke8bNr/mq/MV741VdPbGwvdtLejXhuulf85DB+ckr85/uM//tPfOr7r5yS1v5JxLXoHb87VrlVf1Bubm3fWK8vr1XXqvcrldtLt2++dOvFSjnvoy4f9FSf9NeXrz9zWt6y8i+cEr/zzl84Vv7Zw2M/12f5f/rvt77x6aPVuePxv/DZ3u//s/m89+uf1Ymf7zP+8sLPTx2+O4u/ekr5H/X+X+8z/vt/3l7tc1cAYASaW9v3lmu16sZAC9mn0GGc58RClsX+dj5oLg4W9I+RLxy9LEkkMexyZY2xfnaeOatX9cwXpg/bisM44VRnYaE45YiLkw6pFIMtxKVi4eGogo7nfgSMztFFP+6cAAAAAAAAAAAAAAAApxnF3zCNu4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX/8JAAD//7a0vsc=") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 0s ago: executing program 2 (id=3472): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0xf6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x11}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x5) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c044) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) kernel console output (not intermixed with test programs): process `syz.4.2349'. [ 559.254846][T11161] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 559.374266][T11163] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2350'. [ 559.654249][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2355'. [ 559.965838][T11184] device syzkaller0 entered promiscuous mode [ 560.258043][T11189] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2362'. [ 560.532041][T11197] netlink: 'syz.2.2365': attribute type 13 has an invalid length. [ 560.550268][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 560.573086][T11197] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 560.627309][T11196] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2367'. [ 560.800876][T11199] device syzkaller0 entered promiscuous mode [ 560.863541][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2369'. [ 562.956048][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.962519][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.319898][T11242] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2378'. [ 565.743972][T11252] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2382'. [ 565.758435][T11254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2383'. [ 566.316472][T11269] device syzkaller0 entered promiscuous mode [ 567.266413][T11282] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2395'. [ 567.464890][T11285] netlink: 'syz.3.2396': attribute type 14 has an invalid length. [ 567.491919][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'. [ 567.523707][T11286] device syzkaller0 entered promiscuous mode [ 567.869435][T11294] device syzkaller0 entered promiscuous mode [ 568.607813][T11309] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 568.742239][T11309] device bond3 entered promiscuous mode [ 568.769342][T11309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 568.836172][T11311] netlink: 'syz.1.2406': attribute type 1 has an invalid length. [ 568.910366][T11311] device bond5 entered promiscuous mode [ 568.964571][T11311] 8021q: adding VLAN 0 to HW filter on device bond5 [ 569.115596][T11315] device bridge5 entered promiscuous mode [ 569.130088][T11315] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 569.214936][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 569.996428][T11337] device syzkaller0 entered promiscuous mode [ 570.045813][T11341] device syz_tun entered promiscuous mode [ 570.146979][T11344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2416'. [ 570.329403][T11348] netlink: 'syz.3.2418': attribute type 1 has an invalid length. [ 570.400104][T11348] device bond3 entered promiscuous mode [ 570.451383][T11348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 570.857699][T11362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2423'. [ 571.324710][T11371] netlink: 'syz.0.2427': attribute type 14 has an invalid length. [ 571.371644][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 571.996847][T11381] device syzkaller0 entered promiscuous mode [ 572.239137][T11383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2431'. [ 572.452602][T11385] device syzkaller0 entered promiscuous mode [ 573.111141][T11402] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2440'. [ 573.389578][T11413] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2445'. [ 573.414875][T11411] device syzkaller0 entered promiscuous mode [ 573.732562][T11417] device syzkaller0 entered promiscuous mode [ 574.658115][T11436] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2454'. [ 574.739862][T11440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2456'. [ 575.058199][T11445] device syzkaller0 entered promiscuous mode [ 575.136947][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'. [ 575.217413][T11454] device syzkaller0 entered promiscuous mode [ 576.420189][T11482] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2469'. [ 576.748577][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'. [ 576.814819][T11486] device syz_tun entered promiscuous mode [ 576.904482][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'. [ 577.051002][T11493] device syzkaller0 entered promiscuous mode [ 577.351757][T11497] device syzkaller0 entered promiscuous mode [ 581.727362][T11509] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2480'. [ 581.752833][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'. [ 581.981219][T11544] netlink: 'syz.2.2489': attribute type 10 has an invalid length. [ 582.083501][T11545] device syzkaller0 entered promiscuous mode [ 582.099545][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'. [ 582.110269][T11546] device syzkaller0 entered promiscuous mode [ 583.228417][T11575] device syzkaller0 entered promiscuous mode [ 583.702382][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2501'. [ 583.767775][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2503'. [ 584.365924][T11602] device syzkaller0 entered promiscuous mode [ 584.501735][T11604] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2507'. [ 584.810219][T11610] netlink: 'syz.0.2510': attribute type 10 has an invalid length. [ 584.857553][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 584.951346][T11615] device syzkaller0 entered promiscuous mode [ 585.280671][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 586.166438][T11647] device syzkaller0 entered promiscuous mode [ 586.333393][T11650] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2522'. [ 586.519374][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2524'. [ 586.942650][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 587.835614][T11683] netlink: 'syz.3.2534': attribute type 10 has an invalid length. [ 588.870850][T11694] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2537'. [ 589.112489][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2539'. [ 590.462971][T11742] netlink: 'syz.0.2553': attribute type 10 has an invalid length. [ 592.903535][T11795] sch_fq: defrate 0 ignored. [ 593.162366][T11803] netlink: 'syz.3.2573': attribute type 10 has an invalid length. [ 593.759868][T11815] device syzkaller0 entered promiscuous mode [ 597.777420][T11831] device syzkaller0 entered promiscuous mode [ 602.990887][T11871] device bridge0 entered promiscuous mode [ 603.009778][T11871] device bridge0 left promiscuous mode [ 603.096862][T11873] netlink: 'syz.3.2594': attribute type 14 has an invalid length. [ 603.112176][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 603.362200][T11893] netlink: 'syz.1.2596': attribute type 10 has an invalid length. [ 603.667767][T11903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.776620][T11908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2604'. [ 603.786699][T11903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.887814][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2602'. [ 603.966433][T11901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.062575][T11912] device syzkaller0 entered promiscuous mode [ 605.279545][T11945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2617'. [ 605.870026][T11968] netlink: 'syz.1.2624': attribute type 10 has an invalid length. [ 606.646916][T11991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2633'. [ 607.873548][T12025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2647'. [ 608.883261][T12048] device syzkaller0 entered promiscuous mode [ 612.756555][T12054] device syzkaller0 entered promiscuous mode [ 612.839678][T12063] device syzkaller0 entered promiscuous mode [ 618.936623][T12097] lo speed is unknown, defaulting to 1000 [ 619.305381][T12116] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2675'. [ 619.352659][T12119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2675'. [ 619.407338][T12097] lo speed is unknown, defaulting to 1000 [ 619.735489][T12124] device syzkaller0 entered promiscuous mode [ 623.881453][T12173] device syzkaller0 entered promiscuous mode [ 624.076128][T12180] device syzkaller0 entered promiscuous mode [ 624.402729][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.409124][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.517230][T12188] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2694'. [ 624.583714][T12186] lo speed is unknown, defaulting to 1000 [ 625.037347][T12186] lo speed is unknown, defaulting to 1000 [ 625.062627][T12213] device syzkaller0 entered promiscuous mode [ 625.648483][T12227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2704'. [ 625.979087][T12221] device syzkaller0 entered promiscuous mode [ 629.812597][T12247] device syzkaller0 entered promiscuous mode [ 629.830441][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2710'. [ 629.852218][T12259] bond0: Unable to set down delay as MII monitoring is disabled [ 630.313119][T12265] device syzkaller0 entered promiscuous mode [ 630.570686][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 630.684026][ T4279] block nbd0: Receive control failed (result -1) [ 631.510410][T12293] device syzkaller0 entered promiscuous mode [ 631.987839][T12305] device syzkaller0 entered promiscuous mode [ 632.020879][T12304] lo speed is unknown, defaulting to 1000 [ 632.198034][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2732'. [ 632.349195][T12315] tipc: Enabled bearer , priority 0 [ 632.369194][T12315] device syzkaller0 entered promiscuous mode [ 632.494089][T12315] tipc: Resetting bearer [ 632.517805][T12321] netlink: 'syz.1.2735': attribute type 5 has an invalid length. [ 632.545673][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 632.602193][T12313] tipc: Resetting bearer [ 632.669725][T12313] tipc: Disabling bearer [ 632.752118][T12304] lo speed is unknown, defaulting to 1000 [ 632.781366][T12324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.899698][T12324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.995132][T12324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.568735][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2736'. [ 634.883303][T12344] device syzkaller0 entered promiscuous mode [ 634.911422][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2745'. [ 638.233068][T12361] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.252666][T12361] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.351958][T12364] netlink: 'syz.2.2746': attribute type 16 has an invalid length. [ 638.359849][T12364] netlink: 'syz.2.2746': attribute type 17 has an invalid length. [ 638.403546][T12364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 638.411012][T12364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 638.424542][T12364] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 638.437771][T12364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.962713][T12378] device syzkaller0 entered promiscuous mode [ 639.771755][T12396] device syzkaller0 entered promiscuous mode [ 639.899419][T12394] Bluetooth: MGMT ver 1.22 [ 640.227826][T12403] device syzkaller0 entered promiscuous mode [ 640.258590][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2765'. [ 643.963306][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 644.097027][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2767'. [ 644.247996][T12423] device syz_tun left promiscuous mode [ 644.394823][T12438] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2773'. [ 644.496802][T12444] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2774'. [ 645.199823][T12461] device ip6gretap0 entered promiscuous mode [ 645.292372][T12461] device ip6gretap0 left promiscuous mode [ 645.468562][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2783'. [ 645.736925][T12475] device syzkaller0 entered promiscuous mode [ 645.898938][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'. [ 646.159615][T12493] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 646.361377][T12487] team0: Port device team_slave_0 removed [ 646.402720][T12491] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2787'. [ 647.747986][T12546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.880860][T12546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.952858][T12546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.592340][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2797'. [ 650.740046][T12553] device syzkaller0 entered promiscuous mode [ 650.945443][T12555] device hsr0 entered promiscuous mode [ 652.018254][T12570] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 652.671708][T12626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.822133][T12626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.932428][T12631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.164181][T12591] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.171582][T12591] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.861335][T12591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.929903][T12591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.228985][T12639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2815'. [ 654.627622][T12591] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.637160][T12591] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.646864][T12591] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.656630][T12591] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.867415][T12591] device bond1 left promiscuous mode [ 654.879728][T12591] device bridge1 left promiscuous mode [ 654.919676][T12591] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.928828][T12591] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.937867][T12591] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.946955][T12591] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.981150][T12591] device bond2 left promiscuous mode [ 654.986928][T12591] device bridge2 left promiscuous mode [ 655.028370][T12591] device bond3 left promiscuous mode [ 655.034130][T12591] device bridge3 left promiscuous mode [ 655.078664][T12591] device bond4 left promiscuous mode [ 655.085810][T12591] device bridge4 left promiscuous mode [ 655.155421][T12591] device bond5 left promiscuous mode [ 655.160795][T12591] device bridge5 left promiscuous mode [ 655.251614][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2812'. [ 655.581897][T12647] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 655.670330][T12647] device bond4 entered promiscuous mode [ 655.704070][T12647] 8021q: adding VLAN 0 to HW filter on device bond4 [ 655.766337][T12647] bond4: (slave bridge5): making interface the new active one [ 655.775181][T12647] device bridge5 entered promiscuous mode [ 655.782882][T12647] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 655.818260][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 655.895336][T12656] device syzkaller0 entered promiscuous mode [ 656.497829][T12671] lo speed is unknown, defaulting to 1000 [ 656.753392][T12675] device syzkaller0 entered promiscuous mode [ 656.879489][T12671] lo speed is unknown, defaulting to 1000 [ 656.907947][T12677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.002424][T12677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.076862][T12677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.148113][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'. [ 657.196265][T12682] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2831'. [ 657.516505][T12688] device syzkaller0 entered promiscuous mode [ 658.110804][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2836'. [ 661.096978][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 661.136593][T12700] device team_slave_1 entered promiscuous mode [ 661.143332][T12700] device dummy0 entered promiscuous mode [ 661.152566][T12700] device macvtap2 entered promiscuous mode [ 661.158556][T12700] device team0 entered promiscuous mode [ 661.176025][T12700] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 661.302167][T12715] lo speed is unknown, defaulting to 1000 [ 661.742609][T12715] lo speed is unknown, defaulting to 1000 [ 661.742629][T12727] lo speed is unknown, defaulting to 1000 [ 662.049022][T12739] team0 (unregistering): Port device team_slave_0 removed [ 662.096494][T12739] team0 (unregistering): Failed to send options change via netlink (err -105) [ 662.126294][T12739] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 662.172899][T12739] team0 (unregistering): Port device team_slave_1 removed [ 662.220856][T12739] team0 (unregistering): Failed to send options change via netlink (err -105) [ 662.251179][T12739] team0 (unregistering): Failed to send port change of device dummy0 via netlink (err -105) [ 662.294076][T12739] team0 (unregistering): Port device dummy0 removed [ 662.393204][T12727] lo speed is unknown, defaulting to 1000 [ 662.660861][T12753] lo speed is unknown, defaulting to 1000 [ 662.730303][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.840317][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.931474][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.951082][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2846'. [ 663.102149][T12753] lo speed is unknown, defaulting to 1000 [ 663.224460][T12762] lo speed is unknown, defaulting to 1000 [ 663.542438][T12765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2849'. [ 663.685853][T12762] lo speed is unknown, defaulting to 1000 [ 663.764636][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2850'. [ 663.856543][T12769] device ip6gretap0 entered promiscuous mode [ 663.909277][T12769] device ip6gretap0 left promiscuous mode [ 664.252024][T12778] device syzkaller0 entered promiscuous mode [ 664.309005][T12778] TC_ACT_REPEAT abuse ? [ 664.342136][T12780] netlink: 'syz.1.2856': attribute type 1 has an invalid length. [ 664.372514][T12780] device bond6 entered promiscuous mode [ 664.380355][T12780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 664.392559][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'. [ 664.422239][T12788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2857'. [ 664.431571][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2857'. [ 664.442042][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2857'. [ 664.658613][T12780] bond6: (slave bridge6): making interface the new active one [ 664.667062][T12780] device bridge6 entered promiscuous mode [ 664.689040][T12780] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 664.705299][T12798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.741514][T12797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2862'. [ 664.780216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 664.830604][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.919852][T12792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.987876][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'. [ 665.124392][T12800] lo speed is unknown, defaulting to 1000 [ 665.309956][T12807] device syzkaller0 entered promiscuous mode [ 665.337276][T12817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.399651][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.407012][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.644823][T12824] tipc: Enabling of bearer rejected, failed to enable media [ 665.802984][T12824] device syzkaller0 entered promiscuous mode [ 665.829985][T12800] lo speed is unknown, defaulting to 1000 [ 666.392131][T12841] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2876'. [ 666.948870][T12859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.047619][T12861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.121789][T12859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.508919][T12866] netlink: 'syz.3.2884': attribute type 1 has an invalid length. [ 667.555135][T12866] device bond4 entered promiscuous mode [ 667.561283][T12866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 667.680141][T12866] bond4: (slave bridge6): making interface the new active one [ 667.712029][T12866] device bridge6 entered promiscuous mode [ 667.718933][T12866] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 667.774018][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 667.820083][T12873] device syzkaller0 entered promiscuous mode [ 668.383446][T12885] __nla_validate_parse: 2 callbacks suppressed [ 668.383466][T12885] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2891'. [ 668.447874][T12889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2891'. [ 668.933900][T12897] lo speed is unknown, defaulting to 1000 [ 669.342963][T12897] lo speed is unknown, defaulting to 1000 [ 669.855359][T12908] device syzkaller0 entered promiscuous mode [ 669.958077][T12917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.030879][T12917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.091214][T12922] device ip6gretap0 entered promiscuous mode [ 670.127045][T12910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.130325][T12922] device ip6gretap0 left promiscuous mode [ 670.268809][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 670.282669][T12924] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2904'. [ 670.328880][T12924] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2904'. [ 670.427636][T12926] lo speed is unknown, defaulting to 1000 [ 671.214917][T12948] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2912'. [ 671.237949][T12926] lo speed is unknown, defaulting to 1000 [ 671.525177][T12956] device syzkaller0 entered promiscuous mode [ 671.618323][T12956] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2915'. [ 671.714531][T12959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2916'. [ 671.734759][T12961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2916'. [ 672.341246][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.370756][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.419700][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 672.497007][T12981] lo speed is unknown, defaulting to 1000 [ 672.696539][T12985] device syzkaller0 entered promiscuous mode [ 673.033750][T12981] lo speed is unknown, defaulting to 1000 [ 673.131194][T12991] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2928'. [ 673.578592][T12999] __nla_validate_parse: 2 callbacks suppressed [ 673.578612][T12999] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2932'. [ 674.071550][T13007] netlink: 'syz.3.2936': attribute type 1 has an invalid length. [ 674.170335][T13007] 8021q: adding VLAN 0 to HW filter on device bond5 [ 674.295672][T13026] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 674.307618][T13026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 674.318335][T13026] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 674.326893][T13026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 674.335149][T13026] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 674.344848][T13026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 674.431547][T13017] bond5: (slave veth3): Enslaving as an active interface with a down link [ 674.440562][T13020] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2939'. [ 674.459691][T13020] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.467296][T13020] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.498747][T13007] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2936'. [ 674.553007][T13012] lo speed is unknown, defaulting to 1000 [ 674.563850][T13014] device ip6gretap0 entered promiscuous mode [ 674.576559][T13014] device ip6gretap0 left promiscuous mode [ 674.959536][T13034] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2940'. [ 675.008537][T13034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2940'. [ 675.051025][T13012] lo speed is unknown, defaulting to 1000 [ 675.064337][T13024] lo speed is unknown, defaulting to 1000 [ 675.328636][T13024] lo speed is unknown, defaulting to 1000 [ 675.350097][T13040] lo speed is unknown, defaulting to 1000 [ 675.790329][T13040] lo speed is unknown, defaulting to 1000 [ 676.000577][T13024] chnl_net:caif_netlink_parms(): no params data found [ 676.391959][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 676.649694][T13064] device ip6gretap0 entered promiscuous mode [ 676.706826][T13064] device ip6gretap0 left promiscuous mode [ 676.808221][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.820034][T13024] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.829497][T13024] device bridge_slave_0 entered promiscuous mode [ 676.894106][T13070] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2954'. [ 676.904395][T13071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2954'. [ 676.920420][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.930580][T13024] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.963086][T13024] device bridge_slave_1 entered promiscuous mode [ 677.064170][T13024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.165180][T13024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.195807][T13073] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 677.323891][T13073] device bond6 entered promiscuous mode [ 677.372695][T13073] 8021q: adding VLAN 0 to HW filter on device bond6 [ 677.479974][T13076] bond6: (slave bridge7): making interface the new active one [ 677.489693][T13076] device bridge7 entered promiscuous mode [ 677.522997][T13076] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 677.607818][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 677.697660][T13024] team0: Port device team_slave_0 added [ 677.773284][T13024] team0: Port device team_slave_1 added [ 677.915935][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2960'. [ 678.043296][T13024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.056198][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.086567][T13024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.100745][ T32] tipc: Left network mode [ 678.275006][T13024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.299160][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.361913][T13024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.472030][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 678.555193][T13098] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 678.925081][T13024] device hsr_slave_0 entered promiscuous mode [ 678.959236][T13024] device hsr_slave_1 entered promiscuous mode [ 678.976259][T13024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.990732][T13024] Cannot create hsr debugfs directory [ 679.019058][T13109] lo speed is unknown, defaulting to 1000 [ 679.132458][T13117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2969'. [ 679.248395][T13124] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 679.876832][T13109] lo speed is unknown, defaulting to 1000 [ 680.086354][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2972'. [ 680.552257][T13026] Bluetooth: hci1: command 0x040f tx timeout [ 681.632495][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 681.775209][T13024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 681.894543][ T32] device hsr_slave_0 left promiscuous mode [ 681.916398][ T32] device hsr_slave_1 left promiscuous mode [ 681.934948][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.973508][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.988456][ T32] device bridge_slave_1 left promiscuous mode [ 682.030165][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.066030][ T32] device bridge_slave_0 left promiscuous mode [ 682.087139][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.201736][ T32] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 682.242627][ T32] device bridge6 left promiscuous mode [ 682.632214][T13026] Bluetooth: hci1: command 0x0419 tx timeout [ 682.789914][ T32] bond6 (unregistering): Released all slaves [ 682.877945][ T32] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 684.058101][ T32] bond5 (unregistering): Released all slaves [ 684.333756][ T32] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 684.772045][ T32] bond4 (unregistering): Released all slaves [ 684.829912][ T32] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 685.268607][ T32] bond3 (unregistering): Released all slaves [ 685.332270][ T32] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 685.846840][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.861230][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.870610][ T32] bond2 (unregistering): Released all slaves [ 685.922926][ T32] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 686.463951][ T32] bond1 (unregistering): Released all slaves [ 687.246274][ T32] team0 (unregistering): Port device team_slave_1 removed [ 687.340962][ T32] team0 (unregistering): Port device team_slave_0 removed [ 687.430836][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.512664][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.030471][ T32] team0 (unregistering): Port device dummy0 removed [ 688.124795][ T32] bond0 (unregistering): Released all slaves [ 688.255920][T13169] device syzkaller0 entered promiscuous mode [ 688.274767][T13024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 688.453895][T13264] device ip6gretap0 entered promiscuous mode [ 688.462950][T13264] device ip6gretap0 left promiscuous mode [ 688.533422][T13024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 688.591940][T13024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 688.991247][T13024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.108823][T13024] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.146614][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 689.173307][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.243211][T13275] device syzkaller0 entered promiscuous mode [ 689.250849][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 689.269130][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 689.302762][T13250] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.309993][T13250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.324339][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 689.340659][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 689.357047][T13250] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.364343][T13250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.382153][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 689.391540][T13281] tipc: Enabled bearer , priority 10 [ 689.608852][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 689.624144][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 689.648703][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 689.673352][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 689.709316][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 689.724645][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 689.762957][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 689.790893][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 689.815179][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 689.841362][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.867209][T13294] netlink: 'syz.0.3002': attribute type 1 has an invalid length. [ 689.880032][T13024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.898012][T13294] netlink: 'syz.0.3002': attribute type 2 has an invalid length. [ 689.921433][T13024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 689.937186][T13252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 689.951060][T13252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.973617][T13295] device ip6gretap0 entered promiscuous mode [ 690.002445][T13295] device ip6gretap0 left promiscuous mode [ 691.213060][T13325] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3013'. [ 691.513579][T13325] team0: Port device dummy0 removed [ 691.615459][T13252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 691.630898][T13252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 691.667058][T13337] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 691.803315][T13337] device bond7 entered promiscuous mode [ 691.863991][T13337] 8021q: adding VLAN 0 to HW filter on device bond7 [ 691.900332][T13340] bond7: (slave bridge7): making interface the new active one [ 691.969712][T13340] device bridge7 entered promiscuous mode [ 691.997421][T13340] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 692.039306][T13252] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 692.076493][T13024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.222557][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 692.245233][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 693.422347][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 693.431280][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 693.441531][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 693.449955][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 693.480392][T13024] device veth0_vlan entered promiscuous mode [ 693.556073][T13024] device veth1_vlan entered promiscuous mode [ 693.646571][T13363] device syzkaller0 entered promiscuous mode [ 694.209767][T13371] netlink: 'syz.4.3031': attribute type 10 has an invalid length. [ 694.256187][T13024] device veth0_macvtap entered promiscuous mode [ 694.341957][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 694.381361][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 694.410896][T13024] device veth1_macvtap entered promiscuous mode [ 694.455963][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 694.474989][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 694.564610][T13366] loop0: detected capacity change from 0 to 32768 [ 694.728353][T13366] XFS (loop0): Mounting V5 Filesystem [ 694.923904][T13366] XFS (loop0): Ending clean mount [ 694.991297][T13366] XFS (loop0): Quotacheck needed: Please wait. [ 695.102023][T13366] XFS (loop0): Quotacheck: Done. [ 695.292327][ T4267] XFS (loop0): Unmounting Filesystem [ 696.021015][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3038'. [ 696.034629][T13379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.085553][ T4279] block nbd1: Receive control failed (result -1) [ 696.099444][T13379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.053156][T13379] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.081839][T13379] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.112013][T13379] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.128222][T13379] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.289460][T13379] device erspan0 left promiscuous mode [ 697.472121][T13379] device team0 left promiscuous mode [ 697.483365][T13379] device team_slave_1 left promiscuous mode [ 697.698347][T13381] device hsr0 entered promiscuous mode [ 697.730620][T13400] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3039'. [ 697.900191][T13400] team0: Port device dummy0 removed [ 697.979220][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.108584][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.225593][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.258307][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.274708][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.372452][T13413] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 698.382992][T13413] SQUASHFS error: Failed to read block 0x0: -5 [ 698.470589][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.173310][T13024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.278269][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 699.322826][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 699.363001][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.405623][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.442158][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.486343][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.531971][T13024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.568029][T13024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.618626][T13024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.681861][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 699.695215][T13415] device syzkaller0 entered promiscuous mode [ 699.712812][T13415] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 699.878463][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 699.882158][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 699.892873][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 699.904597][ T26] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 699.927791][ T26] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 699.938209][T13024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.938410][T13024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.938441][T13024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.938470][T13024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.069578][ T26] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 700.089032][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.106243][ T26] usb 1-1: Product: syz [ 700.127960][ T26] usb 1-1: Manufacturer: syz [ 700.146360][ T26] usb 1-1: SerialNumber: syz [ 700.201221][ T26] usb 1-1: config 0 descriptor?? [ 700.235371][ T26] appledisplay 1-1:0.0: Could not find int-in endpoint [ 700.251214][ T26] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 700.319991][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3048'. [ 700.335229][T13231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.350935][T13449] device syzkaller0 entered promiscuous mode [ 700.354186][T13231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.396239][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 700.409498][ T4279] block nbd2: Receive control failed (result -1) [ 700.453542][ T7392] usb 1-1: USB disconnect, device number 7 [ 700.629352][T13242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.644225][T13242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.675606][T13231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 700.885536][T13454] netlink: 'syz.4.3050': attribute type 10 has an invalid length. [ 700.929636][T13456] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2929'. [ 701.266722][T13463] loop3: detected capacity change from 0 to 256 [ 701.818794][T13466] lo speed is unknown, defaulting to 1000 [ 701.853822][T13469] device syzkaller0 entered promiscuous mode [ 702.892515][T13026] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 702.923089][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 702.938446][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 702.948586][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 702.958059][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 702.974338][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 703.283578][T13466] lo speed is unknown, defaulting to 1000 [ 703.393726][T13478] lo speed is unknown, defaulting to 1000 [ 704.958140][T13486] loop3: detected capacity change from 0 to 512 [ 705.031967][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 705.099184][T13486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 705.108814][T13486] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.208182][T13486] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #2: comm syz.3.3060: corrupted inode contents [ 705.225772][T13486] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #2: comm syz.3.3060: mark_inode_dirty error [ 705.238771][T13486] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #2: comm syz.3.3060: corrupted inode contents [ 705.254217][T13486] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.3060: mark_inode_dirty error [ 705.364783][T13487] device syzkaller0 entered promiscuous mode [ 705.696089][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 705.829091][T13478] lo speed is unknown, defaulting to 1000 [ 705.838050][T13495] device bond_slave_0 entered promiscuous mode [ 705.844954][T13495] device bond_slave_1 entered promiscuous mode [ 705.853497][T13495] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 705.880244][T13495] device bond_slave_0 left promiscuous mode [ 705.886391][T13495] device bond_slave_1 left promiscuous mode [ 706.180750][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 706.245067][ T4279] block nbd3: Receive control failed (result -1) [ 706.440031][T13504] device bridge0 entered promiscuous mode [ 706.483594][T13504] device bridge0 left promiscuous mode [ 706.603100][T13478] chnl_net:caif_netlink_parms(): no params data found [ 706.724335][T13507] device syzkaller0 entered promiscuous mode [ 706.942318][T13478] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.008376][T13478] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.028406][T13478] device bridge_slave_0 entered promiscuous mode [ 707.122870][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 707.159889][T13478] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.171693][T13478] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.215419][T13478] device bridge_slave_1 entered promiscuous mode [ 707.269732][T13519] netlink: 'syz.1.3068': attribute type 10 has an invalid length. [ 707.385448][T13519] team0: Port device dummy0 added [ 707.452903][T13478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.510520][T13478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.630060][T13523] device syzkaller0 entered promiscuous mode [ 709.192141][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 711.278863][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 713.444123][T13545] device syzkaller0 entered promiscuous mode [ 718.017078][T13478] team0: Port device team_slave_0 added [ 718.024980][T13558] netlink: 'syz.2.3075': attribute type 1 has an invalid length. [ 718.128609][T13568] device syzkaller0 entered promiscuous mode [ 718.173969][T13478] team0: Port device team_slave_1 added [ 718.234191][T13478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.241307][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.326761][T13478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.346491][T13478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.357517][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.431171][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3079'. [ 718.462676][T13478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.513824][ T4279] block nbd4: Receive control failed (result -1) [ 718.653172][T13597] netlink: 'syz.4.3083': attribute type 10 has an invalid length. [ 718.745594][T13478] device hsr_slave_0 entered promiscuous mode [ 718.773790][T13478] device hsr_slave_1 entered promiscuous mode [ 718.793329][T13478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.800963][T13478] Cannot create hsr debugfs directory [ 718.888380][T13600] device syzkaller0 entered promiscuous mode [ 719.492895][T13602] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3085'. [ 719.987183][T13478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.324617][T13478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.390550][T13620] device syzkaller0 entered promiscuous mode [ 720.537383][T13478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.559309][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3095'. [ 720.643719][ T4279] block nbd5: Receive control failed (result -1) [ 720.927287][T13478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.008705][T13634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3097'. [ 721.162335][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3098'. [ 721.285417][T13638] device ip6gretap0 entered promiscuous mode [ 721.322756][T13638] device ip6gretap0 left promiscuous mode [ 721.494764][T13478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 721.529843][T13478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 721.604762][T13478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 721.637032][T13478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 721.694675][T13644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3104'. [ 721.780812][T13646] loop1: detected capacity change from 0 to 1024 [ 721.853681][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3105'. [ 721.918705][T13646] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 721.950715][T13646] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 722.023231][T13645] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.3103: lblock 0 mapped to illegal pblock 0 (length 1) [ 722.142879][T13659] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.3103: lblock 0 mapped to illegal pblock 0 (length 1) [ 722.209933][T13659] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.3103: lblock 0 mapped to illegal pblock 0 (length 1) [ 722.335959][T13478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.399374][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.417306][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.430100][T13024] EXT4-fs (loop1): unmounting filesystem. [ 722.447092][T13478] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.503263][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 722.577193][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.608977][T13244] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.616340][T13244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.650787][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 722.740080][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 722.750466][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 722.762941][T13244] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.770661][T13244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.786970][T13671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3109'. [ 722.828373][T13672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3110'. [ 722.857321][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 722.932754][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 722.974008][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 723.010807][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3111'. [ 723.030948][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 723.093674][ T4279] block nbd6: Receive control failed (result -1) [ 723.134163][T13677] netlink: 'syz.3.3113': attribute type 1 has an invalid length. [ 723.143614][T13677] netlink: 'syz.3.3113': attribute type 2 has an invalid length. [ 723.144246][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 723.207681][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 723.237282][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 723.269141][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 723.295886][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 723.332450][T13478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 723.417635][T13478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 723.472601][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 723.502595][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 723.511726][T13684] __nla_validate_parse: 1 callbacks suppressed [ 723.538807][T13684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3115'. [ 723.622905][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3117'. [ 723.695473][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.803659][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.844437][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.892010][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.924503][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.974538][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.000190][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.033502][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.603124][T13714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3122'. [ 724.730556][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 724.744720][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 724.796523][T13478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.905514][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 724.928166][T13718] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3124'. [ 724.942756][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 724.956075][T13720] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.3126'. [ 725.005694][T13717] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3123'. [ 725.075442][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 725.137602][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 725.185814][T13478] device veth0_vlan entered promiscuous mode [ 725.259331][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 725.271089][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 725.281183][T13726] netlink: 'syz.3.3128': attribute type 1 has an invalid length. [ 725.298129][T13726] netlink: 'syz.3.3128': attribute type 2 has an invalid length. [ 725.338185][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3129'. [ 725.354006][T13478] device veth1_vlan entered promiscuous mode [ 725.425870][T13731] device ip6gretap0 entered promiscuous mode [ 725.467236][T13731] device ip6gretap0 left promiscuous mode [ 725.568414][T13735] loop1: detected capacity change from 0 to 128 [ 725.653245][T13735] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 725.684274][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 725.701571][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 725.731629][T13478] device veth0_macvtap entered promiscuous mode [ 725.742182][T13735] hpfs: filesystem error: improperly stopped [ 725.752559][T13735] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 725.760564][T13735] hpfs: You really don't want any checks? You are crazy... [ 725.788090][T13478] device veth1_macvtap entered promiscuous mode [ 725.796132][T13735] hpfs: Code page index out of array [ 725.810364][T13737] tipc: Enabled bearer , priority 0 [ 725.818546][T13735] hpfs: code page support is disabled [ 725.843738][T13735] hpfs: hpfs_map_4sectors(): unaligned read [ 725.853707][T13737] tipc: Resetting bearer [ 725.870419][T13735] hpfs: hpfs_map_4sectors(): unaligned read [ 725.880744][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.902899][T13735] hpfs: filesystem error: unable to find root dir [ 725.910887][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.951923][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.979707][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.010051][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.023198][T13735] hpfs: hpfs_map_4sectors(): unaligned read [ 726.055192][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.085557][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.116511][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.140370][T13478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.207572][T13736] tipc: Disabling bearer [ 726.241439][T13740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3133'. [ 726.261288][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 726.283336][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 726.308875][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 726.338495][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 726.362420][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.402496][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.433168][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.484578][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.552634][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.603006][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.615073][T13749] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3136'. [ 726.626948][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.638252][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.655436][T13478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.690832][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 726.732498][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 726.812963][T13754] device syzkaller0 entered promiscuous mode [ 726.823102][T13478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.870024][T13478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.908338][T13478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.948065][T13478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.005407][T13754] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3137'. [ 727.443641][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.451512][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.546189][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 727.618785][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.628661][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.773215][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 728.167893][T13786] netlink: 'syz.0.3054': attribute type 1 has an invalid length. [ 728.778083][T13796] __nla_validate_parse: 3 callbacks suppressed [ 728.778101][T13796] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3147'. [ 728.813360][T13799] netlink: 'syz.1.3148': attribute type 1 has an invalid length. [ 728.922980][T13803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 728.936110][T13803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 728.945006][T13803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 728.967006][T13805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 728.974897][T13805] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 728.983688][T13805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 729.181914][T13801] lo speed is unknown, defaulting to 1000 [ 729.225494][T13809] device bond_slave_0 entered promiscuous mode [ 729.231815][T13809] device bond_slave_1 entered promiscuous mode [ 729.293107][T13809] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 729.323485][T13809] device bond_slave_0 left promiscuous mode [ 729.329541][T13809] device bond_slave_1 left promiscuous mode [ 729.449853][T13811] infiniband syz0: set down [ 729.462850][T13811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.531460][T13801] lo speed is unknown, defaulting to 1000 [ 729.690027][T13813] device syzkaller0 entered promiscuous mode [ 729.733276][ T4314] lo speed is unknown, defaulting to 1000 [ 729.739596][ T4314] lo speed is unknown, defaulting to 1000 [ 731.042291][T13026] Bluetooth: hci5: command 0x0409 tx timeout [ 733.131844][T13026] Bluetooth: hci5: command 0x041b tx timeout [ 733.518691][T13828] device ip6gretap0 entered promiscuous mode [ 733.527657][T13828] device ip6gretap0 left promiscuous mode [ 733.764465][T13839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3159'. [ 733.974668][T13847] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3160'. [ 734.014022][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3160'. [ 734.131610][T13853] netlink: 'syz.0.3162': attribute type 1 has an invalid length. [ 734.230922][T13801] chnl_net:caif_netlink_parms(): no params data found [ 734.279708][T13855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3163'. [ 734.550324][T13865] netlink: 'syz.0.3164': attribute type 1 has an invalid length. [ 734.728812][T13801] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.761647][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.781223][T13801] device bridge_slave_0 entered promiscuous mode [ 734.801950][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.809092][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.836672][T13801] device bridge_slave_1 entered promiscuous mode [ 734.853544][T13865] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3164'. [ 734.872330][T13869] device syzkaller0 entered promiscuous mode [ 734.931883][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3167'. [ 734.974826][T13872] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3166'. [ 735.192194][T13805] Bluetooth: hci5: command 0x040f tx timeout [ 735.224279][T13801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.304363][T13876] device syzkaller0 entered promiscuous mode [ 735.320114][T13801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.431064][T13801] team0: Port device team_slave_0 added [ 735.466351][T13801] team0: Port device team_slave_1 added [ 735.550917][T13801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.573766][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.664408][T13801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.712503][T13801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.738942][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.805533][T13801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.835559][T13894] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3174'. [ 735.866209][T13897] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3175'. [ 737.281890][T13805] Bluetooth: hci5: command 0x0419 tx timeout [ 739.535525][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'. [ 739.756374][T13895] team0: Port device team_slave_0 removed [ 740.002165][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3177'. [ 740.016090][T13801] device hsr_slave_0 entered promiscuous mode [ 740.040058][T13801] device hsr_slave_1 entered promiscuous mode [ 740.072247][T13801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.101384][T13801] Cannot create hsr debugfs directory [ 740.121380][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'. [ 740.305723][T13905] device syzkaller0 entered promiscuous mode [ 740.505291][T13919] device syzkaller0 entered promiscuous mode [ 740.530432][T13919] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3181'. [ 741.422404][T13935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.519712][T13936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.584174][T13936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.766157][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3185'. [ 744.832464][T13939] tipc: Enabled bearer , priority 0 [ 744.855947][T13939] device syzkaller0 entered promiscuous mode [ 745.013409][T13939] tipc: Resetting bearer [ 745.024000][T13938] tipc: Resetting bearer [ 745.108387][T13938] tipc: Disabling bearer [ 745.121009][T13948] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3188'. [ 745.202534][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3188'. [ 745.222843][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3190'. [ 745.707240][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3194'. [ 745.994778][T13973] device ip6gretap0 entered promiscuous mode [ 746.012643][T13973] device ip6gretap0 left promiscuous mode [ 746.085390][T13974] device syzkaller0 entered promiscuous mode [ 746.108437][T13801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 746.239512][T13801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 746.284830][T13801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 746.316704][T13977] netlink: 'syz.0.3198': attribute type 1 has an invalid length. [ 746.361551][T13801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 746.376107][T13977] netlink: 'syz.0.3198': attribute type 2 has an invalid length. [ 746.861675][T13801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.872320][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 746.892129][T13985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3203'. [ 746.906517][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 747.215872][T13987] team0: Port device team_slave_0 removed [ 747.259211][T13989] device bond_slave_0 entered promiscuous mode [ 747.265512][T13989] device bond_slave_1 entered promiscuous mode [ 747.274568][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.281379][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.314741][T13989] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 747.370219][T13989] device bond_slave_0 left promiscuous mode [ 747.376329][T13989] device bond_slave_1 left promiscuous mode [ 747.586205][T13997] tipc: Enabled bearer , priority 0 [ 747.619501][T14009] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3208'. [ 747.653675][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 747.677599][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 747.728425][T13996] tipc: Resetting bearer [ 747.755123][T13801] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.793723][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 747.812626][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 747.851600][T13244] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.858926][T13244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.916534][T13998] device syzkaller0 entered promiscuous mode [ 747.932970][T13998] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 747.975680][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.004723][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.047163][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.076991][T13244] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.084237][T13244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.114777][T13993] tipc: Resetting bearer [ 748.120759][T14020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3210'. [ 748.181903][T13993] tipc: Disabling bearer [ 748.296671][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 748.326704][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 748.350035][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 748.381441][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 748.411199][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 748.571707][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 748.606121][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 748.659950][T13801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 748.732985][T13801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.804810][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 748.828099][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.870964][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 748.910633][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.961974][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 749.562711][T14049] device syzkaller0 entered promiscuous mode [ 750.086995][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 750.098881][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 750.145304][T13801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.186035][T14062] __nla_validate_parse: 4 callbacks suppressed [ 750.186052][T14062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3224'. [ 750.330019][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3227'. [ 750.377564][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 750.406044][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 750.515274][T13801] device veth0_vlan entered promiscuous mode [ 750.562766][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 750.584801][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 750.632245][T13801] device veth1_vlan entered promiscuous mode [ 750.653389][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 750.674738][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 750.811305][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 751.030507][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 751.657859][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 751.736763][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 751.824935][T13801] device veth0_macvtap entered promiscuous mode [ 751.919031][T13801] device veth1_macvtap entered promiscuous mode [ 751.954343][T14091] loop1: detected capacity change from 0 to 64 [ 752.150438][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 752.334802][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 752.994186][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.077665][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.132089][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.182919][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.249439][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.321782][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.377810][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.417626][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.474309][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.530003][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.589781][T13801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.683104][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 753.822512][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.233247][ T27] audit: type=1800 audit(1772878971.060:170): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3231" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 754.294871][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.322225][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.381907][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.417481][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.470709][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.502063][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.546125][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.601851][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.632324][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.642966][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.670980][T13801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.717893][T13801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.757862][T13801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.810055][T13801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.848667][T13801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.935744][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 754.951182][T13246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 755.001666][T14128] tipc: Started in network mode [ 755.035055][T14128] tipc: Node identity c6a00c5fb1e2, cluster identity 4711 [ 755.062246][T14128] tipc: Enabled bearer , priority 0 [ 755.117135][T14129] device syzkaller0 entered promiscuous mode [ 755.170106][T14139] tipc: Resetting bearer [ 755.243184][T14126] tipc: Resetting bearer [ 755.343080][T14126] tipc: Disabling bearer [ 755.666569][T13250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.719714][T13250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.780377][T13236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 756.131602][T13250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.144486][T13250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.177412][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 757.023779][T14176] device syzkaller0 entered promiscuous mode [ 757.329984][T14188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3145'. [ 758.007387][T14201] loop2: detected capacity change from 0 to 1024 [ 758.190854][T14207] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 758.394919][T14207] device bond1 entered promiscuous mode [ 758.400917][T14207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 758.641019][T14216] bond1: (slave bridge1): making interface the new active one [ 758.680599][T14216] device bridge1 entered promiscuous mode [ 758.717996][T14216] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 758.770746][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 758.793727][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'. [ 758.991699][T13805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 759.013064][T13805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 759.022563][T13805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 759.031512][T13805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 759.042944][T13805] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 759.050298][T13805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 759.132051][T14228] tipc: Started in network mode [ 759.136999][T14228] tipc: Node identity 3a5ff43db3bb, cluster identity 4711 [ 759.152302][T14228] tipc: Enabled bearer , priority 0 [ 759.185214][T14230] device syzkaller0 entered promiscuous mode [ 759.213675][T14228] device syzkaller0 entered promiscuous mode [ 759.326763][T14224] lo speed is unknown, defaulting to 1000 [ 759.335017][T14233] tipc: Resetting bearer [ 759.394522][T14227] tipc: Resetting bearer [ 759.571068][T14227] tipc: Disabling bearer [ 759.801969][T14224] lo speed is unknown, defaulting to 1000 [ 760.014279][T14250] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 760.025423][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3272'. [ 760.092460][T14256] bridge0: port 3(veth3) entered blocking state [ 760.098903][T14256] bridge0: port 3(veth3) entered disabled state [ 760.141632][T14256] device veth3 entered promiscuous mode [ 760.249198][T14250] bridge0: port 4(dummy0) entered blocking state [ 760.266506][T14250] bridge0: port 4(dummy0) entered disabled state [ 760.304766][T14250] device dummy0 entered promiscuous mode [ 760.311156][T14256] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3271'. [ 760.858047][T14256] device dummy0 left promiscuous mode [ 760.878705][T14256] bridge0: port 4(dummy0) entered disabled state [ 761.187596][T14263] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3273'. [ 761.198197][T13803] Bluetooth: hci3: command 0x0409 tx timeout [ 761.275460][T14264] team0: Port device dummy0 removed [ 761.281470][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 761.648428][T14276] device bond_slave_0 entered promiscuous mode [ 761.654763][T14276] device bond_slave_1 entered promiscuous mode [ 761.710485][T14276] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 761.763120][T14276] device bond_slave_0 left promiscuous mode [ 761.769191][T14276] device bond_slave_1 left promiscuous mode [ 761.945414][T14282] netlink: 'syz.2.3280': attribute type 1 has an invalid length. [ 761.990753][T14289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3280'. [ 762.010108][T14287] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3281'. [ 762.300936][T14224] chnl_net:caif_netlink_parms(): no params data found [ 762.758816][T14309] device syzkaller0 entered promiscuous mode [ 762.787276][T14224] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.808757][T14224] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.863071][T14224] device bridge_slave_0 entered promiscuous mode [ 763.093233][T14224] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.112190][T14224] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.144432][T14224] device bridge_slave_1 entered promiscuous mode [ 763.167659][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3287'. [ 763.182325][T14318] device syzkaller0 entered promiscuous mode [ 763.273420][T13803] Bluetooth: hci3: command 0x041b tx timeout [ 763.287739][T14224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.399042][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3289'. [ 763.492013][T13803] block nbd10: Receive control failed (result -107) [ 763.658387][T14326] loop3: detected capacity change from 0 to 4096 [ 763.743023][T14224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.924842][T14224] team0: Port device team_slave_0 added [ 763.969435][T14224] team0: Port device team_slave_1 added [ 764.087120][T14224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.115439][T14224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.257193][T14224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.268797][ T4271] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 764.279340][ T4271] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 764.301257][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3293'. [ 764.332478][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3293'. [ 764.639819][T14340] team0: Port device team_slave_0 removed [ 764.680446][T14224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.691015][T14224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.758329][T14224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.807363][T14342] netlink: 'syz.3.3294': attribute type 1 has an invalid length. [ 764.856918][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'. [ 764.893368][T14348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3296'. [ 764.965401][T14342] device bond7 entered promiscuous mode [ 765.004516][T14342] 8021q: adding VLAN 0 to HW filter on device bond7 [ 765.105844][T14344] bond7: (slave bridge8): making interface the new active one [ 765.121962][T14344] device bridge8 entered promiscuous mode [ 765.158061][T14344] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 765.178846][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 765.232973][T14354] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3297'. [ 765.286068][T14357] device team_slave_1 entered promiscuous mode [ 765.313260][T14357] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 765.352657][T14357] device team_slave_1 left promiscuous mode [ 765.358719][T13803] Bluetooth: hci3: command 0x040f tx timeout [ 765.413825][T14353] device syzkaller0 entered promiscuous mode [ 765.463400][T14224] device hsr_slave_0 entered promiscuous mode [ 765.473534][T14224] device hsr_slave_1 entered promiscuous mode [ 765.480544][T14224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.488908][T14224] Cannot create hsr debugfs directory [ 765.733564][T14367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3303'. [ 765.944370][T14372] loop3: detected capacity change from 0 to 64 [ 766.024189][T14372] syz.3.3306: attempt to access beyond end of device [ 766.024189][T14372] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 766.102876][T14372] Buffer I/O error on dev loop3, logical block 512, async page read [ 766.142433][T14372] syz.3.3306: attempt to access beyond end of device [ 766.142433][T14372] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 766.194724][T14372] Buffer I/O error on dev loop3, logical block 56576, async page read [ 766.389727][T14224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.474272][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'. [ 766.502394][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'. [ 766.604633][T14224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.631879][ T7392] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 766.836604][ T7392] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 766.863112][ T7392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.871265][ T7392] usb 1-1: Product: syz [ 766.891245][ T7392] usb 1-1: Manufacturer: syz [ 766.896039][ T7392] usb 1-1: SerialNumber: syz [ 766.903204][ T7392] usb 1-1: config 0 descriptor?? [ 766.915906][T14224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.965428][T14393] device syzkaller0 entered promiscuous mode [ 767.125498][ T7392] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 767.158346][T14224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.241475][T14395] device team_slave_1 entered promiscuous mode [ 767.250768][T14395] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 767.262306][T14395] device team_slave_1 left promiscuous mode [ 767.432094][T13803] Bluetooth: hci3: command 0x0419 tx timeout [ 767.702965][T14224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 767.835571][T14224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 767.858714][T14224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 767.877602][T14224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 768.348534][T14224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.465326][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 768.500599][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 768.542609][T14415] tipc: Started in network mode [ 768.547570][T14415] tipc: Node identity 46f40a1e3099, cluster identity 4711 [ 768.566485][T14415] tipc: Enabled bearer , priority 0 [ 768.728912][ T7392] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 769.172639][ T7392] usb 1-1: USB disconnect, device number 8 [ 769.232520][T14416] device syzkaller0 entered promiscuous mode [ 769.288814][T14224] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.312948][T14415] tipc: Resetting bearer [ 769.393590][T14414] tipc: Resetting bearer [ 769.473404][T14414] tipc: Disabling bearer [ 769.531592][T14409] vivid-000: disconnect [ 769.603063][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 769.642068][T14408] vivid-000: reconnect [ 769.655429][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 769.726701][T13250] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.733979][T13250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.845715][T14423] __nla_validate_parse: 1 callbacks suppressed [ 769.845733][T14423] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.3324'. [ 769.905638][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 769.942795][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 770.000627][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 770.052205][T13250] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.059408][T13250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.138243][T14427] netlink: 'syz.3.3326': attribute type 1 has an invalid length. [ 770.232162][T14427] device bond8 entered promiscuous mode [ 770.241393][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3327'. [ 770.266515][T14427] 8021q: adding VLAN 0 to HW filter on device bond8 [ 770.333092][T14431] bond8: (slave bridge9): making interface the new active one [ 770.354392][T13803] block nbd11: Receive control failed (result -1) [ 770.402403][T14431] device bridge9 entered promiscuous mode [ 770.431051][T14431] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 770.476035][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 770.492726][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 770.524594][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 770.566969][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 770.596182][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 770.631137][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 770.664504][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 770.760612][T14432] device syzkaller0 entered promiscuous mode [ 770.916961][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 770.940574][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 770.971460][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 770.993971][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 771.024249][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 771.064758][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 771.109923][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 771.654079][T14454] tipc: Enabled bearer , priority 0 [ 771.672783][T14454] device syzkaller0 entered promiscuous mode [ 771.708109][T14454] tipc: Resetting bearer [ 771.787987][T14453] tipc: Resetting bearer [ 771.908365][T14453] tipc: Disabling bearer [ 771.947686][T14462] loop1: detected capacity change from 0 to 256 [ 771.987486][T14462] exfat: Deprecated parameter 'utf8' [ 772.057851][T14462] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 772.102206][ T127] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 772.301976][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 772.309911][ T127] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.339678][T14467] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.3338'. [ 772.356577][ T127] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 772.413770][ T127] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 772.432492][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3339'. [ 772.452103][T14224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.455899][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.465547][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 772.477339][T14469] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3339'. [ 772.484685][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 772.501879][ T127] usb 1-1: Product: syz [ 772.529102][ T127] usb 1-1: Manufacturer: syz [ 772.549349][ T127] usb 1-1: SerialNumber: syz [ 772.754335][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 772.788279][ T127] usb 1-1: 0:2 : does not exist [ 772.810085][ T127] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 772.823627][T14473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.005774][T14473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.026651][T14483] device syzkaller0 entered promiscuous mode [ 773.033270][ T127] usb 1-1: USB disconnect, device number 9 [ 773.178335][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3343'. [ 773.344721][T13975] udevd[13975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 774.014695][T14499] loop0: detected capacity change from 0 to 512 [ 774.189930][T14499] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 774.199404][T14499] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.005254][T13478] EXT4-fs (loop0): unmounting filesystem. [ 775.530934][T14510] loop0: detected capacity change from 0 to 512 [ 775.707668][T14510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 775.817999][T14510] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.957576][T14510] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.3348: corrupted inode contents [ 776.074062][T14510] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #2: comm syz.0.3348: mark_inode_dirty error [ 776.131184][T14510] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.3348: corrupted inode contents [ 776.187337][T14510] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.3348: mark_inode_dirty error [ 776.354189][T13478] EXT4-fs (loop0): unmounting filesystem. [ 781.230822][T14518] device syzkaller0 entered promiscuous mode [ 781.415026][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3354'. [ 781.951998][ T7392] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 782.171427][ T7392] usb 3-1: Using ep0 maxpacket: 16 [ 782.195161][ T7392] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.213621][ T7392] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 782.262312][ T7392] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.271431][ T7392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.288440][ T7392] usb 3-1: Product: syz [ 782.294227][ T7392] usb 3-1: Manufacturer: syz [ 782.298961][ T7392] usb 3-1: SerialNumber: syz [ 782.528040][ T7392] usb 3-1: 0:2 : does not exist [ 782.544921][ T7392] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 782.598394][ T7392] usb 3-1: USB disconnect, device number 7 [ 782.842368][T14528] udevd[14528]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.511859][ T127] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 783.744903][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 783.754539][ T127] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 783.762966][ T127] usb 3-1: config 0 has no interface number 0 [ 783.769125][ T127] usb 3-1: config 0 interface 184 has no altsetting 0 [ 783.801075][ T127] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 783.810534][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.821423][ T127] usb 3-1: Product: syz [ 783.825714][ T127] usb 3-1: Manufacturer: syz [ 783.830358][ T127] usb 3-1: SerialNumber: syz [ 783.859602][ T127] usb 3-1: config 0 descriptor?? [ 783.873420][ T127] smsc75xx v1.0.0 [ 784.504982][ T127] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 784.517143][ T127] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 785.359099][ T127] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 785.370383][ T127] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 785.380753][ T127] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 785.403538][ T127] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 785.414344][ T127] usb 3-1: USB disconnect, device number 8 [ 786.013599][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'. [ 786.035860][T14541] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.3357'. [ 786.102020][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 786.123095][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 786.198690][T14224] device veth0_vlan entered promiscuous mode [ 786.236145][T13248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 786.273805][T13248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 786.302446][T14224] device veth1_vlan entered promiscuous mode [ 786.364417][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3360'. [ 786.374472][T13248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 786.383215][T13248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 786.391234][T13248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 786.445561][T14550] device syzkaller0 entered promiscuous mode [ 786.487478][T14554] device syzkaller0 entered promiscuous mode [ 786.523496][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 786.542102][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 786.566916][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 786.656820][T14224] device veth0_macvtap entered promiscuous mode [ 786.750558][T14224] device veth1_macvtap entered promiscuous mode [ 786.781363][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.901764][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.981784][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.022885][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.051976][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.079038][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.103331][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3367'. [ 787.121896][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.140560][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.164159][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.189197][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.231854][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.262580][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.302755][T14224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.317567][T13803] block nbd12: Receive control failed (result -1) [ 787.366164][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 787.403390][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 787.411500][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 787.501307][T13250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 787.545699][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.579292][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.612612][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.652001][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.672054][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.701760][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.711679][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.754084][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.776631][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.799837][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.821429][T14224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.847315][T14224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.874473][T14224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.891600][T14577] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.3369'. [ 787.917088][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 787.973651][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 788.094826][T14224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.171845][T14224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.222452][T14224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.271833][T14224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.572097][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3371'. [ 789.153395][T14626] netlink: 'syz.2.3374': attribute type 1 has an invalid length. [ 789.153602][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.238911][T14626] device bond1 entered promiscuous mode [ 789.247671][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.286273][T14626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 789.379486][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 789.421148][T14633] device syzkaller0 entered promiscuous mode [ 789.456893][T14626] bond1: (slave bridge1): making interface the new active one [ 789.511209][T14626] device bridge1 entered promiscuous mode [ 789.545640][T14626] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 789.659105][T13231] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 789.760458][T14639] device syzkaller0 entered promiscuous mode [ 789.806626][T13231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.815090][T13231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.134331][T13231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 795.149178][T14664] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3381'. [ 795.172461][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'. [ 795.408832][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 795.702210][T14718] loop2: detected capacity change from 0 to 512 [ 795.840871][T14722] netlink: 'syz.0.3388': attribute type 1 has an invalid length. [ 795.849835][T14718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 795.938289][T14718] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.036459][T14722] device bond1 entered promiscuous mode [ 796.048034][T14718] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.3387: corrupted inode contents [ 796.099394][T14722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 796.125458][T14718] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #2: comm syz.2.3387: mark_inode_dirty error [ 796.190665][T14718] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.3387: corrupted inode contents [ 796.224075][T14729] bond1: (slave bridge1): making interface the new active one [ 796.268840][T14729] device bridge1 entered promiscuous mode [ 796.289372][T14718] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3387: mark_inode_dirty error [ 796.320454][T14729] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 796.350446][T13231] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 796.454732][T14225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 796.467461][T14225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 796.476463][T14225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 796.494479][T13801] EXT4-fs (loop2): unmounting filesystem. [ 796.500481][T14225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 796.515622][T13805] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 796.524584][T13805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 796.742554][ T4271] device syz_tun left promiscuous mode [ 796.968554][T14732] lo speed is unknown, defaulting to 1000 [ 796.997811][T14737] loop1: detected capacity change from 0 to 32768 [ 797.469749][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3396'. [ 797.504003][T14746] device bond_slave_0 entered promiscuous mode [ 797.510308][T14746] device bond_slave_1 entered promiscuous mode [ 797.548120][T14746] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 797.673979][T14746] device bond_slave_0 left promiscuous mode [ 797.680097][T14746] device bond_slave_1 left promiscuous mode [ 797.902062][T14732] lo speed is unknown, defaulting to 1000 [ 798.286980][T14759] lo speed is unknown, defaulting to 1000 [ 798.552111][T13803] Bluetooth: hci4: command 0x0409 tx timeout [ 798.658138][T14774] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.3405'. [ 798.726980][T14732] chnl_net:caif_netlink_parms(): no params data found [ 798.917452][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3408'. [ 798.920523][T14759] lo speed is unknown, defaulting to 1000 [ 798.987491][T14782] netlink: 'syz.0.3407': attribute type 1 has an invalid length. [ 798.995900][ T6783] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 799.110136][T14782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 799.184945][T14794] loop2: detected capacity change from 0 to 7 [ 799.192694][ T6783] usb 2-1: Using ep0 maxpacket: 32 [ 799.207036][ T6783] usb 2-1: string descriptor 0 read error: -22 [ 799.211643][T14735] Dev loop2: unable to read RDB block 7 [ 799.219587][ T6783] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 799.222453][T14735] loop2: AHDI p1 p2 p3 [ 799.237173][ T6783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.246283][T14735] loop2: partition table partially beyond EOD, truncated [ 799.265473][T14735] loop2: p1 start 1818582900 is beyond EOD, truncated [ 799.279406][T14735] loop2: p3 start 335544320 is beyond EOD, truncated [ 799.288452][T14790] bond2: (slave veth3): Enslaving as an active interface with a down link [ 799.299974][ T6783] usb 2-1: MIDIStreaming interface descriptor not found [ 799.330446][T14794] Dev loop2: unable to read RDB block 7 [ 799.338703][T14794] loop2: AHDI p1 p2 p3 [ 799.346041][T14782] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3407'. [ 799.364639][T14794] loop2: partition table partially beyond EOD, truncated [ 799.379267][T14732] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.387037][T14794] loop2: p1 start 1818582900 is beyond EOD, truncated [ 799.402219][T14794] loop2: p3 start 335544320 is beyond EOD, truncated [ 799.421994][T14732] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.447005][T14732] device bridge_slave_0 entered promiscuous mode [ 799.509218][T14732] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.537259][T14732] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.583306][ T7392] usb 2-1: USB disconnect, device number 15 [ 799.591431][T14732] device bridge_slave_1 entered promiscuous mode [ 799.732108][T14732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.775077][T14732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.801484][T14800] device bond_slave_0 entered promiscuous mode [ 799.807824][T14800] device bond_slave_1 entered promiscuous mode [ 799.823011][T14800] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 799.847942][T14800] device bond_slave_0 left promiscuous mode [ 799.853995][T14800] device bond_slave_1 left promiscuous mode [ 799.980256][T14732] team0: Port device team_slave_0 added [ 800.029995][T14732] team0: Port device team_slave_1 added [ 800.152163][T14732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.170144][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.279995][T14732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.354975][T14732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.432764][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.535826][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3413'. [ 800.545401][T14809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3413'. [ 800.554473][T14809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3413'. [ 800.583384][T13803] Bluetooth: hci1: command 0x0406 tx timeout [ 800.632263][T13803] Bluetooth: hci4: command 0x041b tx timeout [ 801.237595][T14732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.103060][T14732] device hsr_slave_0 entered promiscuous mode [ 802.255528][T14732] device hsr_slave_1 entered promiscuous mode [ 802.321905][T14732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.371623][T14732] Cannot create hsr debugfs directory [ 802.392900][T14818] netlink: 'syz.4.3418': attribute type 1 has an invalid length. [ 802.543508][T14823] device syzkaller0 entered promiscuous mode [ 802.712192][T13803] Bluetooth: hci4: command 0x040f tx timeout [ 803.129347][T14838] device bond_slave_0 entered promiscuous mode [ 803.135653][T14838] device bond_slave_1 entered promiscuous mode [ 803.173008][T14838] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 803.205686][T14838] device bond_slave_0 left promiscuous mode [ 803.211862][T14838] device bond_slave_1 left promiscuous mode [ 803.858880][T14732] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.142865][T14867] loop0: detected capacity change from 0 to 32768 [ 804.791927][T13803] Bluetooth: hci4: command 0x0419 tx timeout [ 805.205386][T14732] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.249669][T14875] device syzkaller0 entered promiscuous mode [ 805.373165][T14732] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.811933][T14881] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3432'. [ 807.834564][T14732] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.382044][T14732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 808.414954][T14732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 808.597078][T14732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 808.661356][T14732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 808.699885][T14911] loop2: detected capacity change from 0 to 32768 [ 808.718562][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.725001][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.494126][T14732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.568732][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 809.585472][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 809.646838][T14732] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.863664][T14928] loop1: detected capacity change from 0 to 1024 [ 809.873199][T14928] EXT4-fs: Ignoring removed bh option [ 809.883222][T14928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 811.772093][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 811.897113][T14928] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 811.922989][ T27] audit: type=1800 audit(1772879028.760:171): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3446" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 812.086841][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 812.200037][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.207266][ T4546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.306825][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 812.363389][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 812.383206][T13024] EXT4-fs (loop1): unmounting filesystem. [ 812.403036][ T4546] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.410213][ T4546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.492494][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 812.532337][T14940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3447'. [ 812.908000][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 813.035941][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 813.285547][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 813.303719][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 813.334274][T14944] device syzkaller0 entered promiscuous mode [ 813.384420][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 813.398068][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 813.434442][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 813.465844][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 813.488357][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 813.721571][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 813.740548][T13225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 813.793154][T14732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 813.942175][ T127] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 813.970219][T14965] netlink: 'syz.2.3455': attribute type 1 has an invalid length. [ 814.038885][T14965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 814.138139][T14960] bond2: (slave veth5): Enslaving as an active interface with a down link [ 814.193639][T14971] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3455'. [ 814.275894][T14969] loop1: detected capacity change from 0 to 32768 [ 814.511812][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 814.525868][ T127] usb 1-1: string descriptor 0 read error: -22 [ 814.532572][ T127] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 814.548329][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.629661][ T127] usb 1-1: MIDIStreaming interface descriptor not found [ 815.026114][ T127] usb 1-1: USB disconnect, device number 10 [ 815.226493][T14983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3461'. [ 815.275976][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 815.297150][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 815.329296][T14732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.369936][T14798] udevd[14798]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 815.463230][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 815.484877][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 815.555320][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 815.565331][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 815.576391][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3462'. [ 815.590915][T14732] device veth0_vlan entered promiscuous mode [ 815.612854][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 815.626287][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 815.695700][T14732] device veth1_vlan entered promiscuous mode [ 815.768416][T14988] loop1: detected capacity change from 0 to 512 [ 815.915057][T14988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 815.924560][T14988] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.957816][T14988] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.3460: corrupted inode contents [ 815.971165][T14988] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.3460: mark_inode_dirty error [ 815.986970][T14988] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.3460: corrupted inode contents [ 816.002088][T14988] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3460: mark_inode_dirty error [ 816.097252][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 816.170842][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 816.608808][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 816.633557][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 816.686023][T14732] device veth0_macvtap entered promiscuous mode [ 816.744588][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3463'. [ 816.789493][T14732] device veth1_macvtap entered promiscuous mode [ 816.869277][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.921223][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.956806][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.990798][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.032690][T13024] EXT4-fs (loop1): unmounting filesystem. [ 817.054307][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.103265][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.201974][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.253538][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.270945][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.294355][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.305149][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.326263][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.360720][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.389802][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.444858][T14732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.488018][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 817.505136][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 817.560501][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 817.610461][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 817.647182][T15001] netlink: 'syz.2.3467': attribute type 1 has an invalid length. [ 817.709634][T15001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 817.772957][T15006] bond3: (slave veth7): Enslaving as an active interface with a down link [ 817.809529][T15015] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3467'. [ 817.837092][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.868982][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.922423][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.971896][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.011496][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.091137][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.152477][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.193920][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.277668][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.342721][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.398634][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.460502][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.488085][T15043] loop2: detected capacity change from 0 to 32768 [ 818.496168][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.538124][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.584186][T14732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.749347][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 818.813171][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 818.866515][T15025] device syzkaller0 entered promiscuous mode [ 818.975403][T15043] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root [ 818.975403][T15043] [ 818.990317][T15043] ERROR: (device loop2): remounting filesystem as read-only [ 819.153837][T13801] ------------[ cut here ]------------ [ 819.160032][T13801] kernel BUG at fs/jfs/inode.c:175! [ 819.202026][T13801] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 819.208186][T13801] CPU: 1 PID: 13801 Comm: syz-executor Not tainted syzkaller #0 [ 819.215860][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 819.225955][T13801] RIP: 0010:jfs_evict_inode+0x42d/0x430 [ 819.231552][T13801] Code: e6 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 ad af e6 fe e9 16 fe ff ff e8 b3 c4 95 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff [ 819.251208][T13801] RSP: 0018:ffffc90003a77ac0 EFLAGS: 00010293 [ 819.257330][T13801] RAX: ffffffff82ecadfd RBX: ffff888054bd4e30 RCX: ffff88801774bb80 [ 819.265342][T13801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888054bd4e30 [ 819.273437][T13801] RBP: 0000000000000001 R08: ffffffff90af642f R09: 1ffffffff215ec85 [ 819.281436][T13801] R10: dffffc0000000000 R11: fffffbfff215ec86 R12: dffffc0000000000 [ 819.289438][T13801] R13: dffffc0000000000 R14: ffff888054bd4ab8 R15: ffff888054bd4e58 [ 819.297432][T13801] FS: 000055556295d500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 819.306391][T13801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.312996][T13801] CR2: 00007f0addb456b8 CR3: 000000007bfe5000 CR4: 00000000003506e0 [ 819.320994][T13801] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 819.330448][T13801] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 819.338806][T13801] Call Trace: [ 819.342131][T13801] [ 819.345168][T13801] ? evict+0x4c3/0x8d0 [ 819.349272][T13801] ? jfs_write_inode+0x220/0x220 [ 819.354250][T13801] evict+0x4c9/0x8d0 [ 819.358184][T13801] ? proc_nr_inodes+0x2f0/0x2f0 [ 819.363162][T13801] ? do_raw_spin_unlock+0x11d/0x230 [ 819.368406][T13801] ? do_raw_spin_unlock+0x11d/0x230 [ 819.373640][T13801] evict_inodes+0x60c/0x6a0 [ 819.378186][T13801] ? clear_inode+0x150/0x150 [ 819.382812][T13801] generic_shutdown_super+0x93/0x340 [ 819.388209][T13801] kill_block_super+0x7c/0xe0 [ 819.392931][T13801] deactivate_locked_super+0x93/0xf0 [ 819.398242][T13801] cleanup_mnt+0x42c/0x4b0 [ 819.402725][T13801] ? lockdep_hardirqs_on+0x94/0x140 [ 819.407944][T13801] task_work_run+0x1d0/0x260 [ 819.412566][T13801] ? task_work_cancel+0x220/0x220 [ 819.417621][T13801] ? exit_to_user_mode_loop+0x3b/0x110 [ 819.423125][T13801] exit_to_user_mode_loop+0xe6/0x110 [ 819.428465][T13801] exit_to_user_mode_prepare+0xee/0x180 [ 819.434047][T13801] syscall_exit_to_user_mode+0x16/0x40 [ 819.439537][T13801] do_syscall_64+0x58/0xa0 [ 819.443983][T13801] ? clear_bhb_loop+0x60/0xb0 [ 819.448686][T13801] ? clear_bhb_loop+0x60/0xb0 [ 819.453397][T13801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.459399][T13801] RIP: 0033:0x7f6b9f19d9d7 [ 819.463937][T13801] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 819.483742][T13801] RSP: 002b:00007ffdc7ce3798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 819.492965][T13801] RAX: 0000000000000000 RBX: 00007f6b9f231f90 RCX: 00007f6b9f19d9d7 [ 819.500961][T13801] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc7ce3850 [ 819.508956][T13801] RBP: 00007ffdc7ce3850 R08: 00007ffdc7ce4850 R09: 00000000ffffffff [ 819.516962][T13801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc7ce48e0 [ 819.524961][T13801] R13: 00007f6b9f231f90 R14: 00000000000c7f0c R15: 00007ffdc7ce4920 [ 819.532959][T13801] [ 819.536026][T13801] Modules linked in: [ 819.550923][T14732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.559080][T13801] ---[ end trace 0000000000000000 ]--- [ 819.565427][T13801] RIP: 0010:jfs_evict_inode+0x42d/0x430 [ 819.571040][T13801] Code: e6 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 ad af e6 fe e9 16 fe ff ff e8 b3 c4 95 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff [ 819.605051][T14732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.615386][T14732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.682390][T14732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.694964][T15051] loop0: detected capacity change from 0 to 512 [ 819.847619][T15051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 819.857011][T15051] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.886394][T15051] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.3471: corrupted inode contents [ 819.899389][T15051] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #2: comm syz.0.3471: mark_inode_dirty error [ 819.912629][T15051] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.3471: corrupted inode contents [ 819.925522][T15051] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.3471: mark_inode_dirty error [ 819.979978][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3473'. [ 820.151845][T13801] RSP: 0018:ffffc90003a77ac0 EFLAGS: 00010293 [ 820.166926][T13801] RAX: ffffffff82ecadfd RBX: ffff888054bd4e30 RCX: ffff88801774bb80 [ 820.204537][T14732] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 820.268754][T13478] EXT4-fs (loop0): unmounting filesystem. [ 820.278365][T13229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.280992][T14732] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 820.300143][T13229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.358676][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.397409][T13229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.406096][T13229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.419588][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 820.511942][T13801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888054bd4e30 [ 820.523527][T13801] RBP: 0000000000000001 R08: ffffffff90af642f R09: 1ffffffff215ec85 [ 820.531655][T13801] R10: dffffc0000000000 R11: fffffbfff215ec86 R12: dffffc0000000000 [ 820.541497][T13801] R13: dffffc0000000000 R14: ffff888054bd4ab8 R15: ffff888054bd4e58 [ 820.552000][T13801] FS: 000055556295d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 820.561130][T13801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.568658][T13801] CR2: 00007fecd09e7000 CR3: 000000007bfe5000 CR4: 00000000003506f0 [ 820.577367][T13801] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 820.585724][T13801] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 820.594108][T13801] Kernel panic - not syncing: Fatal exception [ 820.600881][T13801] Kernel Offset: disabled [ 820.605220][T13801] Rebooting in 86400 seconds..