Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. 2024/04/03 02:39:35 fuzzer started 2024/04/03 02:39:35 dialing manager at 10.128.0.169:30003 [ 82.151953][ T28] audit: type=1400 audit(1712111975.399:87): avc: denied { node_bind } for pid=5052 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 82.179699][ T28] audit: type=1400 audit(1712111975.429:88): avc: denied { name_bind } for pid=5052 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.560412][ T28] audit: type=1400 audit(1712111975.809:89): avc: denied { mounton } for pid=5060 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 82.577642][ T5060] cgroup: Unknown subsys name 'net' [ 82.583300][ T28] audit: type=1400 audit(1712111975.809:90): avc: denied { mount } for pid=5060 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.612459][ T28] audit: type=1400 audit(1712111975.839:91): avc: denied { unmount } for pid=5060 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.768088][ T5060] cgroup: Unknown subsys name 'rlimit' [ 82.908967][ T28] audit: type=1400 audit(1712111976.159:92): avc: denied { mounton } for pid=5060 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 82.948030][ T28] audit: type=1400 audit(1712111976.159:93): avc: denied { mount } for pid=5060 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 82.971524][ T28] audit: type=1400 audit(1712111976.159:94): avc: denied { setattr } for pid=5060 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.011476][ T28] audit: type=1400 audit(1712111976.159:95): avc: denied { create } for pid=5060 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.032272][ T28] audit: type=1400 audit(1712111976.159:96): avc: denied { write } for pid=5060 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.067146][ T5061] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). 2024/04/03 02:39:37 syscalls: 3868 2024/04/03 02:39:37 code coverage: enabled 2024/04/03 02:39:37 comparison tracing: enabled 2024/04/03 02:39:37 extra coverage: enabled 2024/04/03 02:39:37 delay kcov mmap: enabled 2024/04/03 02:39:37 setuid sandbox: enabled 2024/04/03 02:39:37 namespace sandbox: enabled 2024/04/03 02:39:37 Android sandbox: enabled 2024/04/03 02:39:37 fault injection: enabled 2024/04/03 02:39:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/03 02:39:37 net packet injection: enabled 2024/04/03 02:39:37 net device setup: enabled 2024/04/03 02:39:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/03 02:39:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/03 02:39:37 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/03 02:39:37 USB emulation: enabled 2024/04/03 02:39:37 hci packet injection: enabled 2024/04/03 02:39:37 wifi device emulation: enabled 2024/04/03 02:39:37 802.15.4 emulation: enabled 2024/04/03 02:39:37 swap file: enabled [ 84.677406][ T5060] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/04/03 02:39:38 starting 5 executor processes [ 86.164276][ T5075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.173820][ T5075] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.188168][ T5075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.215460][ T5083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.224678][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.231297][ T5080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.233115][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.240003][ T5080] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.247918][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.253799][ T5080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.260789][ T5083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.270413][ T5080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.274390][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.293351][ T5083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.302485][ T5075] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.318087][ T5075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.326783][ T5075] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.334481][ T5075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.400763][ T5080] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.403487][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.417809][ T5080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.425909][ T5080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.437639][ T5080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.445976][ T5080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.458039][ T5080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.461424][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.483734][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.493852][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.502556][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.510607][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.132048][ T5078] chnl_net:caif_netlink_parms(): no params data found [ 87.206034][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 87.294864][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 87.491171][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 87.506365][ T5085] chnl_net:caif_netlink_parms(): no params data found [ 87.530483][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.538466][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.545837][ T5078] bridge_slave_0: entered allmulticast mode [ 87.553811][ T5078] bridge_slave_0: entered promiscuous mode [ 87.564556][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.571879][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.579426][ T5077] bridge_slave_0: entered allmulticast mode [ 87.586534][ T5077] bridge_slave_0: entered promiscuous mode [ 87.614356][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.621716][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.629074][ T5078] bridge_slave_1: entered allmulticast mode [ 87.636148][ T5078] bridge_slave_1: entered promiscuous mode [ 87.644388][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.651685][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.659057][ T5077] bridge_slave_1: entered allmulticast mode [ 87.666980][ T5077] bridge_slave_1: entered promiscuous mode [ 87.775599][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.783197][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.790580][ T5072] bridge_slave_0: entered allmulticast mode [ 87.798053][ T5072] bridge_slave_0: entered promiscuous mode [ 87.840429][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.854492][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.867161][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.877527][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.885024][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.892599][ T5072] bridge_slave_1: entered allmulticast mode [ 87.900068][ T5072] bridge_slave_1: entered promiscuous mode [ 87.979438][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.061610][ T5078] team0: Port device team_slave_0 added [ 88.088432][ T5077] team0: Port device team_slave_0 added [ 88.097989][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.156959][ T5078] team0: Port device team_slave_1 added [ 88.180103][ T5077] team0: Port device team_slave_1 added [ 88.189076][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.212205][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.221525][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.228947][ T5088] bridge_slave_0: entered allmulticast mode [ 88.236015][ T5088] bridge_slave_0: entered promiscuous mode [ 88.244494][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.251844][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.259625][ T5085] bridge_slave_0: entered allmulticast mode [ 88.266679][ T5085] bridge_slave_0: entered promiscuous mode [ 88.294087][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.301913][ T5075] Bluetooth: hci0: command tx timeout [ 88.308328][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.334394][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.378340][ T5075] Bluetooth: hci1: command tx timeout [ 88.398410][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.405617][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.416501][ T5088] bridge_slave_1: entered allmulticast mode [ 88.423969][ T5088] bridge_slave_1: entered promiscuous mode [ 88.444739][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.452498][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.459882][ T5075] Bluetooth: hci2: command tx timeout [ 88.465258][ T5085] bridge_slave_1: entered allmulticast mode [ 88.472983][ T5085] bridge_slave_1: entered promiscuous mode [ 88.496714][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.503764][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.529788][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.540500][ T5075] Bluetooth: hci4: command tx timeout [ 88.540529][ T5083] Bluetooth: hci3: command tx timeout [ 88.554548][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.561659][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.587700][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.601723][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.608763][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.634851][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.649438][ T5072] team0: Port device team_slave_0 added [ 88.675002][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.728132][ T5072] team0: Port device team_slave_1 added [ 88.736683][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.763766][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.776703][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.808450][ T5078] hsr_slave_0: entered promiscuous mode [ 88.815025][ T5078] hsr_slave_1: entered promiscuous mode [ 88.897884][ T5088] team0: Port device team_slave_0 added [ 88.908619][ T5088] team0: Port device team_slave_1 added [ 88.929775][ T5085] team0: Port device team_slave_0 added [ 88.964094][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.971295][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.997919][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.026490][ T5085] team0: Port device team_slave_1 added [ 89.055922][ T5077] hsr_slave_0: entered promiscuous mode [ 89.063056][ T5077] hsr_slave_1: entered promiscuous mode [ 89.069854][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.077942][ T5077] Cannot create hsr debugfs directory [ 89.084337][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.091338][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.117483][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.168042][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.175039][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.202033][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.233561][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.240786][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.267906][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.281578][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.291803][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.318340][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.338052][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.345126][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.371169][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.509998][ T5072] hsr_slave_0: entered promiscuous mode [ 89.516581][ T5072] hsr_slave_1: entered promiscuous mode [ 89.523347][ T5072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.531277][ T5072] Cannot create hsr debugfs directory [ 89.560665][ T5088] hsr_slave_0: entered promiscuous mode [ 89.567099][ T5088] hsr_slave_1: entered promiscuous mode [ 89.573699][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.581909][ T5088] Cannot create hsr debugfs directory [ 89.703337][ T5085] hsr_slave_0: entered promiscuous mode [ 89.711302][ T5085] hsr_slave_1: entered promiscuous mode [ 89.718361][ T5085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.725945][ T5085] Cannot create hsr debugfs directory [ 90.244377][ T5078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.268146][ T5078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.291535][ T5078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.304306][ T5078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.366144][ T5077] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.378526][ T5075] Bluetooth: hci0: command tx timeout [ 90.404577][ T5077] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.416483][ T5077] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.445864][ T5077] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.458882][ T5075] Bluetooth: hci1: command tx timeout [ 90.537424][ T5075] Bluetooth: hci2: command tx timeout [ 90.583582][ T5088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.598383][ T5088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.618025][ T5075] Bluetooth: hci3: command tx timeout [ 90.628156][ T5075] Bluetooth: hci4: command tx timeout [ 90.650563][ T5088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.662431][ T5088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.725876][ T5085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.747821][ T5085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.774052][ T5085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.787235][ T5085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.833595][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.943018][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.962585][ T5072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.010239][ T5072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.023466][ T5072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.039898][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.047531][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.088906][ T5072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.138324][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.145479][ T5074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.171333][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.287977][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.332638][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.339882][ T5074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.370174][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.377515][ T5074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.397112][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.433410][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.555148][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.563882][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 91.563900][ T28] audit: type=1400 audit(1712111984.809:116): avc: denied { sys_module } for pid=5078 comm="syz-executor.2" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 91.605863][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.684921][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.692214][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.719708][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.727404][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.797605][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.804765][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.820824][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.828077][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.956711][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.066974][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.202209][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.261468][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.268771][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.371012][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.378290][ T5074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.406725][ T5078] veth0_vlan: entered promiscuous mode [ 92.461823][ T5075] Bluetooth: hci0: command tx timeout [ 92.468916][ T5078] veth1_vlan: entered promiscuous mode [ 92.538073][ T5075] Bluetooth: hci1: command tx timeout [ 92.560159][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.570824][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.619654][ T5075] Bluetooth: hci2: command tx timeout [ 92.676321][ T5078] veth0_macvtap: entered promiscuous mode [ 92.692784][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.700201][ T5075] Bluetooth: hci4: command tx timeout [ 92.700261][ T5083] Bluetooth: hci3: command tx timeout [ 92.765647][ T5078] veth1_macvtap: entered promiscuous mode [ 92.969007][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.985862][ T5077] veth0_vlan: entered promiscuous mode [ 93.011539][ T5088] veth0_vlan: entered promiscuous mode [ 93.059721][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.074463][ T5077] veth1_vlan: entered promiscuous mode [ 93.093996][ T5078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.105017][ T5078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.115216][ T5078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.124769][ T5078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.200614][ T5088] veth1_vlan: entered promiscuous mode [ 93.291611][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.311080][ T5077] veth0_macvtap: entered promiscuous mode [ 93.363790][ T5077] veth1_macvtap: entered promiscuous mode [ 93.469983][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.481704][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.510380][ T5085] veth0_vlan: entered promiscuous mode [ 93.554029][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.565044][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.577111][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.591573][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.602367][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.616492][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.631065][ T5077] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.639990][ T5077] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.651046][ T5077] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.660376][ T5077] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.706726][ T5088] veth0_macvtap: entered promiscuous mode [ 93.730327][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.739469][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.758504][ T5085] veth1_vlan: entered promiscuous mode [ 93.793097][ T5088] veth1_macvtap: entered promiscuous mode [ 93.808599][ T28] audit: type=1400 audit(1712111987.049:117): avc: denied { mounton } for pid=5078 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 93.810887][ T5072] veth0_vlan: entered promiscuous mode [ 93.887001][ T28] audit: type=1400 audit(1712111987.079:118): avc: denied { mount } for pid=5078 comm="syz-executor.2" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 93.915910][ T24] cfg80211: failed to load regulatory.db [ 93.976309][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.987057][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.998596][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.009103][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.021299][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 02:39:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) listxattr(&(0x7f0000001480)='./file0\x00', 0x0, 0xdeff) [ 94.085323][ T28] audit: type=1400 audit(1712111987.329:119): avc: denied { read write } for pid=5078 comm="syz-executor.2" name="loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.113073][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.125997][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.139087][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.151001][ T28] audit: type=1400 audit(1712111987.329:120): avc: denied { open } for pid=5078 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.178257][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.188236][ T28] audit: type=1400 audit(1712111987.329:121): avc: denied { ioctl } for pid=5078 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.197328][ T28] audit: type=1400 audit(1712111987.439:122): avc: denied { map_create } for pid=5157 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.222721][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.250958][ T5072] veth1_vlan: entered promiscuous mode [ 94.252901][ T28] audit: type=1400 audit(1712111987.439:123): avc: denied { bpf } for pid=5157 comm="syz-executor.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.281135][ T5085] veth0_macvtap: entered promiscuous mode [ 94.284475][ T28] audit: type=1400 audit(1712111987.489:124): avc: denied { map_read map_write } for pid=5157 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.327734][ T28] audit: type=1400 audit(1712111987.509:125): avc: denied { prog_load } for pid=5157 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.360912][ T5088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.366170][ T5074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:39:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x2, 0x0, 0xffffffff, 0x60c}) [ 94.380092][ T5074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.391394][ T5088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.400622][ T5088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.410235][ T5088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.473767][ T5085] veth1_macvtap: entered promiscuous mode [ 94.540632][ T5083] Bluetooth: hci0: command tx timeout [ 94.618153][ T5083] Bluetooth: hci1: command tx timeout [ 94.626519][ T5072] veth0_macvtap: entered promiscuous mode 02:39:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff46, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) unshare(0x28000080) syz_clone(0xe036c480, 0x0, 0x0, 0x0, 0x0, 0x0) [ 94.697779][ T5083] Bluetooth: hci2: command tx timeout [ 94.771143][ T5072] veth1_macvtap: entered promiscuous mode [ 94.777954][ T5083] Bluetooth: hci3: command tx timeout [ 94.783411][ T5083] Bluetooth: hci4: command tx timeout [ 94.847066][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.877361][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:39:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001c00010000000000000000000700000053"], 0x30}}, 0x0) [ 94.897343][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.915457][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.929381][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.943939][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.958059][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.988990][ T5128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.994275][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.007496][ T5128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.020656][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.032541][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.046120][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.056789][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.067864][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.078649][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.089448][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.103769][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 02:39:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) [ 95.131777][ T5166] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 02:39:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10000) mkdirat(r0, &(0x7f0000000100)='./bus\x00', 0x0) [ 95.212207][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 02:39:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x64) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 95.257398][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.299034][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.342657][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.367929][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 02:39:48 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000f40)="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", 0x1000, 0x4040000, &(0x7f0000000040)={0xa, 0x4e22, 0x1f, @private2, 0x6}, 0x1c) [ 95.383999][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.410998][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 02:39:48 executing program 1: clock_gettime(0x0, &(0x7f0000000700)) rt_sigtimedwait(&(0x7f0000000640), 0x0, 0x0, 0x8) [ 95.435206][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.448891][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.465274][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 02:39:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x2, 0x0, 0xffffffff, 0x60c}) [ 95.512915][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.542060][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.553377][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.590693][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.640380][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.653256][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.670214][ T5072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.679099][ T5072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 02:39:48 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={0x0}}, 0x0) [ 95.693412][ T5072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.709656][ T5072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.741572][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.770393][ T5085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.797489][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.809817][ T5085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.835540][ T5085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.852099][ T5085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.900864][ T5182] Zero length message leads to an empty skb 02:39:49 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) [ 95.974479][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.986470][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:39:49 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000), 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) [ 96.186053][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.211961][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.327002][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.345912][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:39:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="85"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='!', &(0x7f0000000000)=@udp6}, 0x20) [ 96.387900][ T5128] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.432459][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.472514][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:39:49 executing program 3: r0 = syz_open_dev$video(&(0x7f00000003c0), 0x4, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000400)={0xd7, "28162b855323c687321556160ac4d9d2f8d3e693b6ad70301430006222e6fcb1"}) [ 96.530463][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.554018][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:39:49 executing program 1: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f0000000140)={[{@fsync_mode_posix}, {@noinline_data}, {@discard}, {@inline_dentry}]}, 0x1, 0x54f3, &(0x7f000000ab40)="$eJzs3M9rI+UbAPAn7XZ/f/dbRNDbDixCC5uw6XYXvVXdxR/Ypfjj4EnTZBqym2RKk6a1Jw8exYP/iSh48ujf4MGzt8WD4k1QMjPRrSgITRu7/Xxg8sz75s0zz5tD4ZkpCeDMWkx++akS1+JSRMxHxNWI/LxSHrm1IjwfEdcjYu6Jo1LO/zFxPiIuR8S1cfIiZ6V86/Oboxt3fnzz52++u3Duyhdffz+7XQOz9kJE9LaL871eEbN2ER+W841RJ4+91VEZizd6j8pxVsS9dDPPsNeYrGvk8Xa7WJ9t7w7GcavbaI5ju7OVz2/3iwsORu1JnvwDDxs7+biVbuaxM8jy2D4o6to/KP62HQyGRZ5Wme+jPH0Mh5NYzKf7abGf7Ud5bPaH5XyRN2ul++M4KmN5uWhm3VZex+ZRvun/trc6/d39ZJTuDDpZP7lTq79Yq9+t1neyVjpMV6uNXuvuarLU7o6XVYdpo7fWzrJ2N601s95ystRuNqv1erJ0L93sNPpJvV67XbtVvbNcnt1MXnvwXtJtJUvj+EqnvzvsdAfJVraTFJ9YTlZqt19aTm7Uk3fWN5KNt+/fX99494N77z94ef2NV8tFh8t6nK4mSyu3Vlaq9VvVlfryGdr/J2XRU9w/HEll1gUAnD76f2AWTnv/H/r/qThV/e+krLPa/x/D/uFI9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfWDwtfvp6fLBbjK+X8/8qpZ8pxJSLmIuK3vzEf5w/lnC/zLPzD+oW/1PBtJfIM42tcKI/LEbFWHr/+/7i/BQAAAHh6ffXx9c+Kbr14WZx1QZyk4qbN3NUPp5SvEhELi4+nlG1u/PLslJLFcxFxLvanlC2/gXVxSsmKW27nppXtX5k/FC4+ESpFmDvRcgAAgBNxuBM42S4EAACAk/TprAtgNioxeZQ5eRac/+f9nw8ELx0aAQAAAKdQZdYFAAAAAMcu7//9/h8AAAA83Yrf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5n535yUoeiOACfFvoe74+RGOduxRkswyU4dGhYgJtgCbgFN8AacOYSDBjaEq3BxKS3bSTfl7SX25Afp4TJuZcUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuvRcrOaP91cPbXO2u3bS3A0AAABwzKZYzcsX02r+r75+Vl+6qOdZROQRcax3H8WvRuaozim+eH/xqYaniDJh/xm/6+NvRFzXx+t5198CAAAAnK71YjmruvXqNB26IPpULdrk/28S5WURUUxfEqXl+9NlorDy9z2Ou0Rp5QLWJFFYteQ2TpX2LaPGMPkwZNWQ91oOAADQi2Yn0G8XAgAAQJ9uhy6AYWRx2Mo87AWX/7x/3xD805gBAAAAP1A2dAEAAABA58r+3/P/AAAA4LRVz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS5tiNV8vlrO2OdtdO2nuBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Y3/eUSAEwiAM9q7vTOb+h5UGTU1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnft5jaOKAwD+ZmZna6viGmUPEVHwoBe73dbWXj0owYN/ghDSbY1u/dHmYEsRcvEmOfciehQRlHjr/9BzC73UWw57iCAeI/MrmfwAt4TMbJLPB9687w6bed83CSHfeS8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZfLATJ9mhV8Rxee7R5r2lrH+8p888WHsyn7UsjppM+nh4vf4i6reXCAAAAKdHUtX3IYSn6fpC1se9vP5Pq/dkNf9PLxZxVc/vrfurvqr9s/bnHxuvbg/UK8bJLnp9eTy6sD+VztHNckb8u1XYc/ql//3CTn7n82cvSf4NiT9efWWS5vcz+uHhww+7eXjmqBIHAA7rfNWXQfX3UNYP20wMgFOjUyu8q/o/6bWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATJqvh+SqOQgjznZ0483jz3tJB/YO1J/NVu3L//lr9mtkl0hDC9eXx6EKDc5l1t+/c/WJxPB7daj54I4TQ3uhl8OkU7wmhzQwFhw3i8md9VvI5HkHLv5gAADhx0rJldf3TdH0hOxfNhbD18+76/+1aHKas/zc+u/KoPla9/h82NsPZN1i5+fXg9p277y7fXLwxujH68r2Lw/eHl65evnx1kD8rGXhiAgAAwOF0y1av/+O5/ev/52pxmLL+/+bH4Xf1sRL1/4F2Fv3azgQAAOB0e/nNf/6ODjgfdbvh28WVlVvD4rj9+mJxbCHVZ3ambPX6P5lrOysAAACgCZPVaNf6/7VaHKZc/3/hl9d+q18zCSGcLdf/zy99Nb7W3HRmWhP/Ttz2HAEAAGjX2bLV1//TfP9/vL3lIQ4hvPNWEZcfAzhV/Z989P2v9bHq+/8vNTfFmRT3i/uR9/0QOv22MwIAAOAke65sWbH/V7q+8Pnv5z7p2v8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LT/AgAA//8Yl0ni") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)={0x10001}) 02:39:49 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/nvme', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) [ 96.678130][ T5128] usb 3-1: Using ep0 maxpacket: 8 [ 96.721966][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 96.721985][ T28] audit: type=1400 audit(1712111989.959:132): avc: denied { read } for pid=5191 comm="syz-executor.3" name="video4" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.792148][ T28] audit: type=1400 audit(1712111989.969:133): avc: denied { open } for pid=5191 comm="syz-executor.3" path="/dev/video4" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 02:39:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 02:39:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x100, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00', 0x0) [ 96.867587][ T5128] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 96.880506][ T5128] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.917492][ T28] audit: type=1400 audit(1712111990.009:134): avc: denied { ioctl } for pid=5191 comm="syz-executor.3" path="/dev/video4" dev="devtmpfs" ino=853 ioctlcmd=0x561a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.917533][ T5128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.056729][ T28] audit: type=1400 audit(1712111990.249:135): avc: denied { create } for pid=5198 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 02:39:50 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 02:39:50 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="4dcdc7c6223e00000000ffff80f3", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) [ 97.172683][ T28] audit: type=1400 audit(1712111990.289:136): avc: denied { bind } for pid=5195 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.281287][ T28] audit: type=1400 audit(1712111990.289:137): avc: denied { write } for pid=5195 comm="syz-executor.0" path="socket:[6011]" dev="sockfs" ino=6011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.416378][ T28] audit: type=1400 audit(1712111990.659:138): avc: denied { create } for pid=5204 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.474035][ T28] audit: type=1400 audit(1712111990.689:139): avc: denied { ioctl } for pid=5204 comm="syz-executor.4" path="socket:[7265]" dev="sockfs" ino=7265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.503386][ T28] audit: type=1400 audit(1712111990.689:140): avc: denied { write } for pid=5204 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 02:39:50 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1}, 0xc) r4 = accept(r1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000)="e7", 0x1, 0x2000c0d5, 0x0, 0x30) [ 97.513194][ T5207] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.525293][ T28] audit: type=1400 audit(1712111990.699:141): avc: denied { write } for pid=5206 comm="syz-executor.0" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 02:39:50 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x1, 0x9, 0x0, 0x0, 0x0, {0x7}}, 0x14}}, 0x48095) syz_genetlink_get_family_id$devlink(&(0x7f0000001800), 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x8000) 02:39:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x0) 02:39:51 executing program 3: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x1, 0x803, 0x0) socket(0x1, 0x803, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4004880) 02:39:51 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 98.113227][ T5217] batadv0: entered promiscuous mode [ 98.130300][ T5217] macsec1: entered promiscuous mode [ 98.143064][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.155783][ T5217] macsec1: entered allmulticast mode [ 98.172911][ T5217] batadv0: entered allmulticast mode 02:39:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8010aebb, &(0x7f0000000200)) [ 98.193935][ T5217] batadv0: left allmulticast mode [ 98.205243][ T5217] batadv0: left promiscuous mode [ 98.306692][ T5222] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:39:51 executing program 3: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0xf0ff1f00000000) 02:39:51 executing program 3: clock_getres(0x5, &(0x7f00000001c0)) 02:39:51 executing program 4: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x21, 0x25dfdbfc}, 0x1c}}, 0x14) [ 98.707926][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.747425][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.762157][ T7] usb 1-1: Product: syz [ 98.779897][ T7] usb 1-1: Manufacturer: syz [ 98.791265][ T7] usb 1-1: SerialNumber: syz 02:39:52 executing program 3: ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x7f) r0 = syz_io_uring_setup(0x68e3, &(0x7f00000023c0)={0x0, 0xcd42, 0x0, 0x1}, &(0x7f0000002440), &(0x7f0000002480)) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000002d00)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) socket$kcm(0x29, 0x6, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000005280)={0x2, 0x0, @empty}, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) [ 98.806833][ T5194] loop1: detected capacity change from 0 to 40427 02:39:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='!', &(0x7f0000000000)=@udp6}, 0x20) [ 98.873298][ T5194] ======================================================= [ 98.873298][ T5194] WARNING: The mand mount option has been deprecated and [ 98.873298][ T5194] and is ignored by this kernel. Remove the mand [ 98.873298][ T5194] option from the mount to silence this warning. [ 98.873298][ T5194] ======================================================= [ 98.918924][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:39:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) [ 99.032375][ T5194] F2FS-fs (loop1): Found nat_bits in checkpoint 02:39:52 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000680)=""/55, 0x37, 0x2100, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000840)={&(0x7f0000000740), 0xc, 0x0}, 0x0) setsockopt(r0, 0x0, 0x0, &(0x7f0000000880), 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000003600), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) 02:39:52 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1}, 0xc) r3 = accept(r1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)="e7", 0x1, 0x2000c0d5, 0x0, 0x30) [ 99.215750][ T5074] usb 3-1: USB disconnect, device number 2 02:39:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) [ 99.416955][ T5194] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 02:39:52 executing program 2: r0 = msgget(0x2, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000300)=""/110) 02:39:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 02:39:52 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 02:39:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) [ 99.657642][ T5127] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:39:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000f40)="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", 0x1000, 0x4040000, &(0x7f0000000040)={0xa, 0x4e22, 0x1f, @private2, 0x6}, 0x1c) [ 99.922509][ T5074] usb 1-1: USB disconnect, device number 2 02:39:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffe23, &(0x7f0000000240)={0x0, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfef4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0f0000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100706c7567"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000001c40)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00$\x00\a\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000700020072b704001800020000008000000000cdfc2a1da87018cda9ec1ef1e188e9652f2e597ad9bcb57fe77dd1a4071f8dce718431082069e07684e0e86b8938572ca00347cd88ecdbf6be78cfeec9ce21aab6e62decbffbff64cf42f5359a3d2995ee7c715a635d026267d1a1f16b65f76646c6bc81bf055c21b96d71498093ba736e5ef268dc6a9e6656f9c71d628b63ebeafedfbde2c23ac0b1a656d7932e0fe74cddb0468b49207a3f75b66570b0606eae53b2c866513e0a3d00"/215], 0x44}, 0x1, 0x81000000}, 0x0) 02:39:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x0) [ 100.017893][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.099481][ T5260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:39:53 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x11) 02:39:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) [ 100.288194][ T7] usb 5-1: Using ep0 maxpacket: 8 02:39:53 executing program 3: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006880)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f2ff000008000100753332000c0002000800040000003787"], 0x38}}, 0x0) 02:39:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000000030603000014000300020a0004090300f006e8ffff13060000080007"], 0x44}, 0x2, 0x1000000}, 0x0) [ 100.448067][ T7] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 100.473908][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 02:39:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 02:39:53 executing program 3: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 100.538571][ T5272] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.542036][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:39:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x12}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)) 02:39:54 executing program 3: sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000008000000d1185784db00", @ANYRES32=0x41424344], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="3a0f32"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="c54c1be00a35b536fcd5decb36b852c60ed6573b33fcb0b5ca28664d792b540681e4a4a8dea0d8ac066ac0fdac18636c55f760928764c9f28abdc727521c2b00679d911a7fa55c249f6db0dc84f7f72b299c38b8e92b0c4def2bafe5ada4afce8bdf3c1bc1291d4e1b14a6089a01eee966683f514c2c3d470add4be2d24ab229cc6e4133ad9d6296a4", 0x89}, {&(0x7f0000000180)="c5", 0x1}], 0x2}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xcb}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x300}, 0x24}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 100.779516][ T5127] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 100.795487][ T5127] ath9k_htc: Failed to initialize the device [ 100.848796][ T5074] usb 1-1: ath9k_htc: USB layer deinitialized 02:39:54 executing program 1: syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@none, 0x0, 0x0, 'XRm'}]}}}, 0x12) 02:39:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 02:39:54 executing program 2: mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef) write$binfmt_aout(r2, 0x0, 0xad7) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) 02:39:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000f40)="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", 0x1000, 0x4040000, &(0x7f0000000040)={0xa, 0x4e22, 0x1f, @private2, 0x6}, 0x1c) 02:39:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800003c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) write$cgroup_pid(r1, &(0x7f0000000980), 0x12) 02:39:54 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000002c0)={r1, 0x0, 0xfffffffffffff000, 0x1000}) 02:39:54 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000b00)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x52ec6c01bf592d32, 0x44}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x37b0, 0x5c}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) close(r2) 02:39:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffe23, &(0x7f0000000240)={0x0, 0x10}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfef4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0f00000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100706c7567"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000001c40)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00$\x00\a\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000700020072b704001800020000008000000000cdfc2a1da87018cda9ec1ef1e188e9652f2e597ad9bcb57fe77dd1a4071f8dce718431082069e07684e0e86b8938572ca00347cd88ecdbf6be78cfeec9ce21aab6e62decbffbff64cf42f5359a3d2995ee7c715a635d026267d1a1f16b65f76646c6bc81bf055c21b96d71498093ba736e5ef268dc6a9e6656f9c71d628b63ebeafedfbde2c23ac0b1a656d7932e0fe74cddb0468b49207a3f75b66570b0606eae53b2c866513e0a3d00"/215], 0x44}, 0x1, 0x81000000}, 0x0) 02:39:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 02:39:54 executing program 2: r0 = semget(0x0, 0x1, 0x10) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x5, 0x1000}, {0x0, 0x100, 0x800}, {0x1, 0xfff8, 0x1000}, {0x2, 0xffff, 0x2000}, {0x1, 0x0, 0x800}, {0x3, 0x8fb, 0x1000}, {0x7, 0x20}], 0x7, &(0x7f0000000040)) semop(0x0, &(0x7f0000000080)=[{0x0, 0x6}, {0x1, 0x200, 0x800}, {0x3, 0xffff, 0x800}, {0x3, 0x1, 0x1000}, {0x1, 0x7}, {0x4, 0x7, 0x800}, {0x2, 0x1}, {0x1, 0x20e, 0x800}, {0x1, 0x3, 0x1800}], 0x9) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140)) clock_nanosleep(0x4, 0x1, &(0x7f00000001c0), &(0x7f0000000200)) r2 = semget(0x1, 0x4, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semget(0x3, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000380)=""/180) [ 101.709918][ T5309] ------------[ cut here ]------------ [ 101.709937][ T5310] [ 101.715513][ T5310] ================================ [ 101.715524][ T5310] WARNING: inconsistent lock state [ 101.717840][ T5309] WARNING: CPU: 0 PID: 5309 at kernel/softirq.c:362 __local_bh_enable_ip+0xc3/0x120 [ 101.722932][ T5310] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted [ 101.728032][ T5309] Modules linked in: [ 101.737380][ T5310] -------------------------------- [ 101.737389][ T5310] inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage. [ 101.744054][ T5309] CPU: 0 PID: 5309 Comm: syz-executor.1 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 101.747905][ T5310] syz-executor.0/5310 [HC0[0]:SC0[0]:HE0:SE1] takes: [ 101.752991][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 101.759808][ T5310] ffff8880b953e698 [ 101.769752][ T5309] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 101.776395][ T5310] (&rq->__lock [ 101.786429][ T5309] Code: 00 e8 81 6c 0b 00 e8 4c 69 42 00 fb 65 8b 05 cc 34 b2 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 4e e9 b0 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 73 67 42 00 eb 99 48 89 ef e8 f9 df 19 00 eb a2 [ 101.790127][ T5310] ){?.-.}-{2:2} [ 101.795990][ T5309] RSP: 0018:ffffc900034ff5c8 EFLAGS: 00010046 [ 101.799425][ T5310] , at: raw_spin_rq_lock_nested+0x29/0x130 [ 101.819013][ T5309] [ 101.822540][ T5310] {IN-HARDIRQ-W} state was registered at: [ 101.828755][ T5309] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff1f3d467 [ 101.834537][ T5310] lock_acquire+0x1b1/0x540 [ 101.836849][ T5309] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88cb2754 [ 101.842545][ T5310] _raw_spin_lock_nested+0x31/0x40 [ 101.850496][ T5309] RBP: ffffffff88cb2754 R08: 0000000000000000 R09: ffffed100449f68a [ 101.855085][ T5310] raw_spin_rq_lock_nested+0x29/0x130 [ 101.863130][ T5309] R10: ffff8880224fb453 R11: 0000000000000002 R12: fffffffffffffffe [ 101.868329][ T5310] scheduler_tick+0xa2/0x650 [ 101.876293][ T5309] R13: ffff8880224fb450 R14: ffff8880224fb448 R15: 0000000023700e53 [ 101.881739][ T5310] update_process_times+0x199/0x220 [ 101.889715][ T5309] FS: 00007f1f08df36c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 101.894369][ T5310] tick_periodic+0x7e/0x230 [ 101.902322][ T5309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.907581][ T5310] tick_handle_periodic+0x45/0x120 [ 101.916492][ T5309] CR2: 0000001b30524000 CR3: 000000007aaa2000 CR4: 00000000003506f0 [ 101.921076][ T5310] timer_interrupt+0x4e/0x80 [ 101.927652][ T5309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.932830][ T5310] __handle_irq_event_percpu+0x22c/0x750 [ 101.940783][ T5309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.945434][ T5310] handle_irq_event+0xab/0x1e0 [ 101.953472][ T5309] Call Trace: [ 101.953485][ T5309] [ 101.959166][ T5310] handle_edge_irq+0x263/0xd10 [ 101.967203][ T5309] ? show_regs+0x8c/0xa0 [ 101.972025][ T5310] __common_interrupt+0xe1/0x250 [ 101.975291][ T5309] ? __warn+0xe5/0x390 [ 101.978204][ T5310] common_interrupt+0xab/0xd0 [ 101.983030][ T5309] ? __local_bh_enable_ip+0xc3/0x120 [ 101.987246][ T5310] asm_common_interrupt+0x26/0x40 [ 101.992244][ T5309] ? report_bug+0x3c0/0x580 [ 101.996375][ T5310] console_flush_all+0xa19/0xd70 [ 102.001295][ T5309] ? handle_bug+0x3d/0x70 [ 102.006550][ T5310] console_unlock+0xae/0x290 [ 102.011637][ T5309] ? exc_invalid_op+0x17/0x50 [ 102.016114][ T5310] vprintk_emit+0x11a/0x5a0 [ 102.021114][ T5309] ? asm_exc_invalid_op+0x1a/0x20 [ 102.025507][ T5310] vprintk+0x7f/0xa0 [ 102.030157][ T5309] ? sock_hash_delete_elem+0x1f4/0x260 [ 102.034811][ T5310] _printk+0xc8/0x100 [ 102.039381][ T5309] ? sock_hash_delete_elem+0x1f4/0x260 [ 102.044380][ T5310] calibrate_delay+0x3fe/0x1300 [ 102.048338][ T5309] ? __local_bh_enable_ip+0xc3/0x120 [ 102.053790][ T5310] start_kernel+0x326/0x490 [ 102.057843][ T5309] sock_hash_delete_elem+0x1f4/0x260 [ 102.063272][ T5310] x86_64_start_reservations+0x18/0x30 [ 102.068194][ T5309] ? __pfx_bpf_map_delete_elem+0x10/0x10 [ 102.073449][ T5310] x86_64_start_kernel+0xb2/0xc0 [ 102.078016][ T5309] ___bpf_prog_run+0x3e51/0xae80 [ 102.083362][ T5310] common_startup_64+0x13e/0x148 [ 102.088890][ T5309] __bpf_prog_run32+0xc1/0x100 [ 102.094584][ T5310] irq event stamp: 206 [ 102.099596][ T5309] ? __pfx___bpf_prog_run32+0x10/0x10 [ 102.104852][ T5310] hardirqs last enabled at (203): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 102.109855][ T5309] ? __pfx_lock_acquire+0x10/0x10 [ 102.114594][ T5310] hardirqs last disabled at (204): [] __schedule+0x2644/0x5c70 [ 102.118644][ T5309] ? __pfx___cant_migrate+0x10/0x10 [ 102.123987][ T5310] softirqs last enabled at (206): [] sock_hash_delete_elem+0x1f4/0x260 [ 102.134200][ T5309] bpf_trace_run4+0x176/0x460 [ 102.139196][ T5310] softirqs last disabled at (205): [] sock_hash_delete_elem+0xcb/0x260 [ 102.148284][ T5309] ? __pfx_bpf_trace_run4+0x10/0x10 [ 102.153453][ T5310] [ 102.153453][ T5310] other info that might help us debug this: [ 102.153463][ T5310] Possible unsafe locking scenario: [ 102.153463][ T5310] [ 102.163400][ T5309] ? rcu_is_watching+0x12/0xc0 [ 102.168114][ T5310] CPU0 [ 102.168121][ T5310] ---- [ 102.177889][ T5309] ? kvm_sched_clock_read+0x11/0x20 [ 102.183059][ T5310] lock(&rq->__lock); [ 102.183077][ T5310] [ 102.191109][ T5309] __bpf_trace_sched_switch+0x13e/0x190 [ 102.198539][ T5310] lock(&rq->__lock [ 102.203280][ T5309] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 102.206537][ T5310] ); [ 102.206544][ T5310] [ 102.206544][ T5310] *** DEADLOCK *** [ 102.206544][ T5310] [ 102.209801][ T5309] ? psi_task_switch+0x2d9/0x900 [ 102.214969][ T5310] 2 locks held by syz-executor.0/5310: [ 102.219013][ T5309] __schedule+0x2266/0x5c70 [ 102.222447][ T5310] #0: ffff8880b953e698 [ 102.227969][ T5309] ? __pfx___lock_acquire+0x10/0x10 [ 102.232033][ T5310] (&rq->__lock [ 102.238085][ T5309] ? __pfx_lock_acquire+0x10/0x10 [ 102.240584][ T5310] ){?.-.}-{2:2} [ 102.248747][ T5309] ? __print_lock_name+0x1a0/0x260 [ 102.253672][ T5310] , at: raw_spin_rq_lock_nested+0x29/0x130 [ 102.259120][ T5309] ? __pfx___schedule+0x10/0x10 [ 102.263595][ T5310] #1: ffffffff8d7b08e0 [ 102.267723][ T5309] ? schedule+0x298/0x350 [ 102.272893][ T5310] (rcu_read_lock [ 102.276327][ T5309] ? __pfx_lock_release+0x10/0x10 [ 102.281348][ T5310] ){....}-{1:2} [ 102.284870][ T5309] ? plist_check_prev_next+0x12a/0x1a0 [ 102.290045][ T5310] , at: bpf_trace_run4+0x107/0x460 [ 102.295825][ T5309] ? futex_wait_queue+0x41/0x1f0 [ 102.300647][ T5310] [ 102.300647][ T5310] stack backtrace: [ 102.300658][ T5310] CPU: 1 PID: 5310 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 102.304780][ T5309] schedule+0xe7/0x350 [ 102.309083][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 102.312780][ T5309] futex_wait_queue+0xfc/0x1f0 [ 102.317775][ T5310] Call Trace: [ 102.317787][ T5310] [ 102.321212][ T5309] __futex_wait+0x291/0x3c0 [ 102.326642][ T5310] dump_stack_lvl+0x116/0x1f0 [ 102.331733][ T5309] ? __pfx___futex_wait+0x10/0x10 [ 102.336646][ T5310] mark_lock+0x923/0xc60 [ 102.342512][ T5309] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 102.352557][ T5310] ? __pfx___lock_acquire+0x10/0x10 [ 102.356621][ T5309] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.366769][ T5310] ? __pfx_mark_lock+0x10/0x10 [ 102.371531][ T5309] futex_wait+0xe9/0x380 [ 102.374789][ T5310] ? __pfx_mark_lock+0x10/0x10 [ 102.377707][ T5309] ? __pfx_futex_wait+0x10/0x10 [ 102.382177][ T5310] ? __local_bh_enable_ip+0xc3/0x120 [ 102.386833][ T5309] ? __might_fault+0x13b/0x190 [ 102.391827][ T5310] ? disable_trace_on_warning+0x19/0x70 [ 102.396045][ T5309] ? __pfx_lock_release+0x10/0x10 [ 102.401913][ T5310] ? report_bug+0xf4/0x580 [ 102.407176][ T5309] do_futex+0x22b/0x350 [ 102.412441][ T5310] ? handle_bug+0x3d/0x70 [ 102.417181][ T5309] ? __pfx_do_futex+0x10/0x10 [ 102.421392][ T5310] ? exc_invalid_op+0x17/0x50 [ 102.426132][ T5309] __x64_sys_futex+0x1e1/0x4c0 [ 102.430985][ T5310] mark_held_locks+0x9f/0xe0 [ 102.436291][ T5309] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 102.441087][ T5310] ? sock_hash_delete_elem+0x1f4/0x260 [ 102.446618][ T5309] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.451640][ T5310] lockdep_hardirqs_on_prepare+0x137/0x420 [ 102.456037][ T5309] do_syscall_64+0xd2/0x260 [ 102.460168][ T5310] ? sock_hash_delete_elem+0x1f4/0x260 [ 102.464480][ T5309] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 102.469122][ T5310] trace_hardirqs_on+0x36/0x40 [ 102.473776][ T5309] RIP: 0033:0x7f1f0807dde9 [ 102.478515][ T5310] __local_bh_enable_ip+0xa4/0x120 [ 102.483082][ T5309] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 102.489470][ T5310] sock_hash_delete_elem+0x1f4/0x260 [ 102.494906][ T5309] RSP: 002b:00007f1f08df3178 EFLAGS: 00000246 [ 102.500170][ T5310] ? __pfx_bpf_map_delete_elem+0x10/0x10 [ 102.505963][ T5309] ORIG_RAX: 00000000000000ca [ 102.510452][ T5310] ___bpf_prog_run+0x3e51/0xae80 [ 102.515884][ T5309] RAX: ffffffffffffffda RBX: 00007f1f081abf88 RCX: 00007f1f0807dde9 [ 102.521787][ T5310] __bpf_prog_run32+0xc1/0x100 [ 102.526521][ T5309] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f081abf88 [ 102.530916][ T5310] ? __pfx___bpf_prog_run32+0x10/0x10 [ 102.535996][ T5309] RBP: 00007f1f081abf80 R08: 00007f1f08df36c0 R09: 00007f1f08df36c0 [ 102.555599][ T5310] ? __pfx_lock_acquire+0x10/0x10 [ 102.560859][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f081abf8c [ 102.566902][ T5310] ? __pfx___cant_migrate+0x10/0x10 [ 102.572508][ T5309] R13: 000000000000000b R14: 00007ffe9f6bba70 R15: 00007ffe9f6bbb58 [ 102.577162][ T5310] bpf_trace_run4+0x176/0x460 [ 102.582084][ T5309] [ 102.590030][ T5310] ? __pfx_bpf_trace_run4+0x10/0x10 [ 102.594771][ T5309] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.594784][ T5309] CPU: 0 PID: 5309 Comm: syz-executor.1 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 102.594815][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 102.594831][ T5309] Call Trace: [ 102.594842][ T5309] [ 102.594852][ T5309] dump_stack_lvl+0x3d/0x1f0 [ 102.594888][ T5309] panic+0x6f5/0x7a0 [ 102.594928][ T5309] ? __pfx_panic+0x10/0x10 [ 102.594965][ T5309] ? show_trace_log_lvl+0x363/0x500 [ 102.595012][ T5309] ? __local_bh_enable_ip+0xc3/0x120 [ 102.595052][ T5309] check_panic_on_warn+0xab/0xb0 [ 102.595100][ T5309] __warn+0xf1/0x390 [ 102.595124][ T5309] ? __local_bh_enable_ip+0xc3/0x120 [ 102.595156][ T5309] report_bug+0x3c0/0x580 [ 102.595186][ T5309] handle_bug+0x3d/0x70 [ 102.595212][ T5309] exc_invalid_op+0x17/0x50 [ 102.595238][ T5309] asm_exc_invalid_op+0x1a/0x20 [ 102.595280][ T5309] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 102.595349][ T5309] Code: 00 e8 81 6c 0b 00 e8 4c 69 42 00 fb 65 8b 05 cc 34 b2 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 4e e9 b0 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 73 67 42 00 eb 99 48 89 ef e8 f9 df 19 00 eb a2 [ 102.595376][ T5309] RSP: 0018:ffffc900034ff5c8 EFLAGS: 00010046 [ 102.595399][ T5309] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff1f3d467 [ 102.595417][ T5309] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88cb2754 [ 102.595436][ T5309] RBP: ffffffff88cb2754 R08: 0000000000000000 R09: ffffed100449f68a [ 102.595454][ T5309] R10: ffff8880224fb453 R11: 0000000000000002 R12: fffffffffffffffe [ 102.595473][ T5309] R13: ffff8880224fb450 R14: ffff8880224fb448 R15: 0000000023700e53 [ 102.595493][ T5309] ? sock_hash_delete_elem+0x1f4/0x260 [ 102.595532][ T5309] ? sock_hash_delete_elem+0x1f4/0x260 [ 102.595567][ T5309] sock_hash_delete_elem+0x1f4/0x260 [ 102.595602][ T5309] ? __pfx_bpf_map_delete_elem+0x10/0x10 [ 102.595635][ T5309] ___bpf_prog_run+0x3e51/0xae80 [ 102.595679][ T5309] __bpf_prog_run32+0xc1/0x100 [ 102.595709][ T5309] ? __pfx___bpf_prog_run32+0x10/0x10 [ 102.595740][ T5309] ? __pfx_lock_acquire+0x10/0x10 [ 102.595781][ T5309] ? __pfx___cant_migrate+0x10/0x10 [ 102.595813][ T5309] bpf_trace_run4+0x176/0x460 [ 102.595842][ T5309] ? __pfx_bpf_trace_run4+0x10/0x10 [ 102.595870][ T5309] ? rcu_is_watching+0x12/0xc0 [ 102.595910][ T5309] ? kvm_sched_clock_read+0x11/0x20 [ 102.595947][ T5309] __bpf_trace_sched_switch+0x13e/0x190 [ 102.595977][ T5309] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 102.596009][ T5309] ? psi_task_switch+0x2d9/0x900 [ 102.596045][ T5309] __schedule+0x2266/0x5c70 [ 102.596084][ T5309] ? __pfx___lock_acquire+0x10/0x10 [ 102.596124][ T5309] ? __pfx_lock_acquire+0x10/0x10 [ 102.596164][ T5309] ? __print_lock_name+0x1a0/0x260 [ 102.596195][ T5309] ? __pfx___schedule+0x10/0x10 [ 102.596231][ T5309] ? schedule+0x298/0x350 [ 102.596261][ T5309] ? __pfx_lock_release+0x10/0x10 [ 102.596299][ T5309] ? plist_check_prev_next+0x12a/0x1a0 [ 102.596332][ T5309] ? futex_wait_queue+0x41/0x1f0 [ 102.596370][ T5309] schedule+0xe7/0x350 [ 102.596402][ T5309] futex_wait_queue+0xfc/0x1f0 [ 102.596441][ T5309] __futex_wait+0x291/0x3c0 [ 102.596479][ T5309] ? __pfx___futex_wait+0x10/0x10 [ 102.596518][ T5309] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 102.596554][ T5309] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.596595][ T5309] futex_wait+0xe9/0x380 [ 102.596633][ T5309] ? __pfx_futex_wait+0x10/0x10 [ 102.596679][ T5309] ? __might_fault+0x13b/0x190 [ 102.596708][ T5309] ? __pfx_lock_release+0x10/0x10 [ 102.596748][ T5309] do_futex+0x22b/0x350 [ 102.596780][ T5309] ? __pfx_do_futex+0x10/0x10 [ 102.596815][ T5309] __x64_sys_futex+0x1e1/0x4c0 [ 102.596849][ T5309] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 102.596885][ T5309] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.596923][ T5309] do_syscall_64+0xd2/0x260 [ 102.596964][ T5309] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 102.597005][ T5309] RIP: 0033:0x7f1f0807dde9 [ 102.597026][ T5309] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 102.597052][ T5309] RSP: 002b:00007f1f08df3178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.597083][ T5309] RAX: ffffffffffffffda RBX: 00007f1f081abf88 RCX: 00007f1f0807dde9 [ 102.597103][ T5309] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f081abf88 [ 102.597120][ T5309] RBP: 00007f1f081abf80 R08: 00007f1f08df36c0 R09: 00007f1f08df36c0 [ 102.597140][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f081abf8c [ 102.597161][ T5309] R13: 000000000000000b R14: 00007ffe9f6bba70 R15: 00007ffe9f6bbb58 [ 102.597184][ T5309] [ 102.603056][ T5309] Kernel Offset: disabled [ 103.107353][ T5309] Rebooting in 86400 seconds..