last executing test programs: 4.593712456s ago: executing program 2: syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2236805, &(0x7f0000000180)={[{@gid}, {@uid}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@noquota}, {@discard}, {@integrity, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nodiscard}, {@usrquota}, {@grpquota}, {@errors_remount}, {@gid}, {@noquota}, {@noquota}, {@noquota}, {@noquota}], [{@fsmagic}]}, 0x5, 0x60d2, &(0x7f000000c4c0)="$eJzs3b2PHGcdB/Dfvt5LSHJKEQULoYsTXkKIX4MxBEhSQEGTArlFti6XyMIBZBvkRBa+6BoKKv4CEBIlQpSIgooqBS0dFRISRjYSKBWD5u55fLPrXe+Z8+2s7/l8pPPMb57Z22fuu7Mvnpl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIb3/rO6c7EXHxx2nBWsQnohfRjVip6/WIWFlfy+v3I+K52GmOZyNisBRR337nn6cjXo2Ij56KuHP35ka9+Mw++/HN3/7lV9994q0//2Zw8j+/u957bdp6N2787N+/v3WwbQYAAIDSVFVVddLH/GPp83237U4BAHORX/+rJC8/8vXP//bWHxapP2q1Wq1Wz6Fuqia71SwiYqt5m/o9g8PxAPCY2YqP2+4CLZJ/0foR8UTbnQAWWqftDnAo7ty9udFJ+Xaarwfru+35XJCR/Lc6967vmDadZfwck3k9vrajF89M6c/KnPqwSHL+3fH8L+62D9N6h53/vEzLf7h76VNxcv698fzHHJ38uxPzL1XOv/9Q+ffkDwAAAAAACyz///9ay8d/lw6+KfvyoOO/63PqAwAAAAAAAAA8agcd/+8e4/8BAADAwqo/q9d+8dTesmnfxVYvv9CJeHJsfaAw6WKZ1bb7AQAAAAAAAAAAAAAl6e+ew3uhEzGIiCdXV6uqqn+axuuHddDbP+5K334oWdtP8gAAsOujp8au5e9ELEfEhfRdf4PV1dWqWl5ZrVarlaX8fna4tFytND7X5mm9bGm4jzfE/WFV/7Llxu2aZn1entU+/vvq+xpWvX107BEZpL/mlOaWwgaAZPfV6I5XpCOmqp6e9uYDRtj/jx77P/vR9uMUAAAAOHxVVVWd9HXex9Ix/27bnQIA5iK//o8fFziUOuJwf79arV7U+k8L1h+1uti6qZrsVrOIiK3mber3DIbjB4DHzFZ83HYXaJH8i9aPiOfa7gSw0Dptd4BDcefuzY1OyrfTfD1I47vnc0FG8t/q7Nwu337SdJbxc0zm9fjajl48M6U/z86pD4sk598dz//ibvswrXfY+c/LtPzr7VxroT9ty/n3xvMfc3Ty707Mv1Q5//5D5d+TPwAAAAAALLD8//9rjv/mTQYAAAAAAACAx86duzc38nWv+fj/pyas5/rPoynn35F/kXL+3bH8Pz+2Xq8xf/vNvfz/dffmxq+v/+OTebrf/JfyTCc9sjrpEdFJ99Tpp+lBtu5+24PesL6nQafb66dzfqrBO3E5rsRmnBpZt5v+Hnvtp0fa654ORtrPjLT372s/O9I+SN87UK3k9hOxET+IK/H2TnvdtjRj+5dntFcz2nP+Pft/kXL+/cZPnf9qau+MTWu3P+zet983p5Pu543Ln/7pqcPfnJm2o3dv25rq7TveQn92/iZPDONH1zavnrhx6fr1q6cjTUaWnok0ecRy/oOdn6W95/8Xdtvz835zf7394fCh818U29Gfmv8Ljfl6e1+ac9/akPMfpp+c/9upffL+/zjnP33/f7mF/gAAAAAAAAAAAAAAAMCDVFW1c4noGxFxLl3/09a1mQDAfOXX/yrJy9VqdZH13/+5WP1Rq9WPuG6qJnu9WUTEH5u3qd8z/GTSLwMAFtl/I+KvbXeC1si/YPn7/urpi213Bpira+9/8L1LV65sXr3Wdk8AAAAAAAAAgP9XHv9zvTH+84sRsTa23sj4r2/G+kHH/+znmXsDjD7igb6n2O4Oe93GcOPPx8743Cemjf99PB48/nd/xv0NZrQPZ7QvzWhfnrh0L62JF3o05Pyfb4x3Xud/bGz49RLGfx0f874EOf/jjcdznf/nxtZr5l/9cuHy39rvitvRHcn/5PX3fnjy2vsfvHL5vUvvbr67+f2zp0+fOnvu3Pnz50++c/nK5qndfw+n1wsg55/HvnYeaFly/jlz+Zcl5/+ZVMu/LDn/z6Za/mXJ+ef3e/IvS84/f/aRf1ly/i+lWv5lyfl/IdXyL0vO/+VUy78sOf8vplr+Zcn5v5Jq+Zcl538i1fIvS87/ZKr3kb+vhz9Ccv75CJf9vyw5/3xmg/zLkvM/k2r5lyXnfzbV8i9Lzv/VVMu/LDn/L6Va/mXJ+Z9LtfzLkvP/cqrlX5ac//lUy78sOf+vpFr+Zcn5fzXV8i9Lzv+1VMu/LDn/r6Va/mXJ+X891fIvS87/G6mWf1ly/q+nWv5l2fv+fzNmzJjJM20/MwEAAAAAAAAAAAAA4+ZxOnHb2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/I8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHvXmPkOuv7gZ/Zi712CDEQgpO/gU1iQnCW7PoSX/jXxYRrA5QCCYVesF3v2iz4htcugSLZNFAiYVRUUTV90RYQaiNVFVbFC1pRmhdVL69K+4K+qagqITWqAgpISG1F2WrmPM/jmfHsnF3veD17ns9Hin/enTNzzpx5Zna/63x3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGh39xvnPtsoiqL5X+uPLUXxgubfN01uaX3udTf7CAEAAIDV+t/Wn8/flj5xaBlXatvm717xj19fXFxcLN4/+rvjX1xcTBdMFsX4xqJoXRZd+fcPNNq3CZ4oJhojbR+PVOx+tOLysYrLxysu31Bx+caKyycqLr/mBFxjU/nzmNaNbW/9dUt5Sovbi/HWZdt7XOuJxsaRkfiznJZG6zqL48eL+eJkMVfMdGxfbttobf/Nu5v7elsR9zXStq9tzRXyw08ei8fQCOd4e8e+rt5m9P03FJM/+uEnj/3x+efu7DUrT0PH7ZXHef89zeP8dPhMeayNYmM6J/E4R9qOc1uPx2S04zgbres1/959nM8v8zhHrx7mmup+zCeKkdbfv906T2PtP9ZL52lb+Nx/3VsUxaWrh929zTX7KkaKzR2fGbn6+EyUK7J5G82l9OJibEXr9O5lrNPmnN3euU67nxPx8b87XG9siWNof5i+/6kN1zzuK12nUfNeL/Vc6V6Dg36uDMsajOvi2607/WTPNbg93P9P3rf0Guy5dnqswXS/29bgPVVrcGTDaOuY04PQaF3n6hrc2bH9aGtPjdZ89r7+a3D6/Kmz0wsf/8Rr508dPTF3Yu707p07Z3bv3bt///7p4/Mn52bKP6/zbA+/zcVIeg7cE85dfA68umvb9qW6+OXBPQ8n+jwPt3RtO+jn4Vj3nWuszRPy2jVdPjcebZ70icsjxRLPsdbjs2P1z8N0v9ueh2Ntz8OeX1N6PA/HlvE8bG5zdsfyvmcZa/uv1zHcqK8FW9rWYPf3I91rcNDfjwzLGpwI6+Jfdyz9tWBbON4np1b6/cjoNWsw3d3w2tP8TPp+f2J/a/Ral3c1L7hlQ3FhYe7cg48fPX/+3M4ijDXxkra10r1eN7fdp+Ka9Tqy4vV6aP4VT97V4/NbwrmaeG3zj4klH6vmNnse7P9Ytb669T6fHZ/dVYQxYGt9Pnt9NW+ez5Ql+5zP5jafnl799+Ipl7a9/o4v8fobc/9Py/2lm3pidHysfP6OprMz3vF63PlQjbVeuxqtfT8/vbzX4/Hw31q/Ht/e5/V4a9e2g349Hu++c/H1uFH1047V6X48J8I6OTnT//W4uc3WXStdk2N9X4/vDbMRzv9rQlJIuaht7Sy1btO+xsbGw/0ai3voXKe7O7YfD9msua+nd13fOr3/3vK2RtO9u2qt1ulk17aDXqfp9Wqpddqo+unb9el+PCfCurh9d/912tzmmT2rf+3cFP/a9tq5oWoNjo9uaB7zeFqE5ev94qa4Bh8sjhVnipPFbOvSDa311Gjta+qh5a3BDeG/tX6t3NpnDd7fte2g12D6OrbU2muMXXvnB6D78ZwI6+Kph/qvweY2b9o32O9d7w+fSdu0fe/a/fO1pX7mdVfXabqRP/NqHuff7Ov/s9nmNif3rzRn9j9PD4TP3NLjPHU/f5d6Ts0Wa3OetobjfG7/0uepeTzNbb54YJnr6VBRFBc/+nDr573h31f+/MJ3vt7x7y69/k3n4kcf/sGtx/92JccPwPr303JsLr/Wtf3L1HL+/R8AAABYF2LuHwkzkf8BAACgNmLuj/9XeCL/AwAAQG3E3D8WZpJJ/t/6pufmf3qxSM38xSBenk7DI+V2seM6Ez6eXLyq+fmHvzr347+8uLx9jxRF8ZNHfqPn9lsficdVmgzHeeXNnZ+/9ooXl7X/I49d3a69v/6lcPvx/ix3GfSq4M4URfHN2z7f2s/kBy635jOPHGnN91x68onmNs8fKD+O13/2JeX2fxDKv4eOH+24/rPhPHwvzJm39z4f8Xpfu/yabfved3V/8XqNe17YuttPfbC83fh7cr7wRLl9PM9LHf9ffe7przW3f/xVvY//4kjv43863O5Xw/zvl5fbtz8GzY/j9T4Tjj/uL17vwa98q+fxX/lsuf3Zt5TbHQkz7v/+8PH2tzw3336+Hm8c7bhfxVvL7eL+Z77z263L4+3F2+8+/onDlzvOR/f6eOafy9uZ7to+fj7uJ/qLrv03b6d9fcb9P/1bRzrOc9X+r7zn2Zc3b7d7/w90bTfadf3u39j0h5/5fM/9xeM59GdnO+7PoXeH53HY/1MfDOsxXP4/Vz7fsd/oyLs7X3/i9l/acrHj/kRv+1G5/yuvP9Ga/zH549+/5QW3vvDSK5vnrii+/d7y9qr2f+KPznQc/5fv2NF6POLlsaPfvf+lxP2f+9jU6TMLF+Zn285q63fnvKM8no0TmzY3j/e28Nra/fHhM+c/NHducmZypigm6/sr9K7bV8L8QTkurfT6Ox4Lj+ddv/fNzff90+fi5//l0fLzl99eft16ddjuC+HzW8rHb7Gxyv0/dfcdred345ny444e+wBs2/6f+5e1Ybj/3d8XxPV+9qUfap2H5mWtrxvxeb3K4//ubHk73wjndTH8ZuZ77ri6v/bt4+9GuPze8vm+6vMXXubi4/on4fF+5/fK24/HFe/vd8P3Md/a2vl6F9fHNy6OdN9+67d4XAqvJ8Wl8vK4VTzfl5+/o+fhxd9DUly6s/Xx76TbuXNFd3MpCx9fmD45f/rC49Pn5xbOTy98/BOHT525cPr84dbv8jz84arrX3192tx6fZqd27unmNlUFMWZYmYNXrBuzPE3/7a84z/72LHZfTP3zc4dP3rh+PnHzs6dO3FsYeHY3OzCfUePH5/7WNX152cP7tx1YPe+XVMn5mcP7j9wYPeBqfnTZ5qHUR5Uhb0zH5k6fe5w6yoLB/cc2PnQQ3tmpk6dmZ07uG9mZupC1fVbX5ummtf+9alzcyePnp8/NTe1MP+JuYM7D+zdu6vytwGeOnt8YXL63IXT0xcW5s5Nl/dl8nzr082vfVXXp54W/q38frZbo/xFfMW7Htibfj9r01c/teRNlZt0/QLR58LvovmHF53dv5yPY+4fDzPJJP8DAABADmLu3xBmIv8DAABAbcTcvzHMRP4HAACA2oi5fyLMJJP8r/+v/7+8/n95uf5/Xv3/sx8te6Xrvf8f+/P6/3m4yf3/Ve9f/1//v379/+X359f78ev/6/9zrWHr/8fcv6kossz/AAAAkIOY+zeHmcj/AAAAUBsx998SZiL/AwAAQG3E3P+CMJPq/N+r8r3u6P8vq/+/q6pwVf/+v/f/1/8v1mf/Pz44+v/ZWHH//n2Pdnyo/x/o/+v/6//r/+v/s2rjS15ys/r/MfffGmbi3/8BAACgNmLuf2GYifwPAAAAtRFz/21hJvI/AAAA1EbM/VvCTDLJ//r/3v9f/1//v9b9/9W+/386mFH9/3XC+//3p/9f4br7/xP6/+ux/z8+2OMf7v5/5eHr/3NDDNv7/8fc/6Iwk0zyPwAAAOQg5v4Xh5nI/wAAAFAbMfe/JMxE/gcAAIDaiLn/9jCTTPK//r/+v/6//r/+f+/9V7//f/k3/f/hov/fn/5/Be//n1f/f8DHP9z9/0G////4m7uvr/9PL8PW/4+5/6VhJpnkfwAAAMhBzP13hJnI/wAAAFAbMfe/LMxE/gcAAIDaiLl/a5hJJvlf/1//X/9f/1//v/f+q/v/Jf3/4aL/35/+fwX9f/1//f/l9f97fPOr/08vw9b/j7n/zjCTTPI/AAAA5CDm/rvCTOR/AAAAqI2Y+/9fmIn8DwAAALURc/+2MJNM8r/+v/6//n9e/f8HNuj/6//Xm/5/f/r/FfT/9f/1/5f5/v/XWkn/f2PVjVEbw9b/j7n/5WEmmeR/AAAAyEHM/a8IM5H/AQAAoDZi7n9lmIn8DwAAALURc/9kmEkm+V//v179/z/966deWej/6/9X7L+m/f+4DPT/M6f/35/+fwX9f/1//f816f+Tj2Hr/8fcf3eYSSb5HwAAAHIQc/89YSbyPwAAANRGzP33hpnI/wAAAFAbMfdvDzPJJP/r/9er/x/p/+v/99t/Tfv/if5/3vT/e2h7kur/V9D/1//Pvv8fv/vV/2cwhq3/H3P/q8JMMsn/AAAAkIOY++8LM5H/AQAAoDZi7n91mIn8DwAAALURc//9YSaZ5H/9f/1//X/9f/3/3vvX/1+f9P/70/+voP+v/599/9/7/zNYw9b/j7n/NWEmmeR/AAAAyEHM/TvCTOR/AAAAqI34/2+W/9+r/A8AAAB1FHP/VJhJJvlf/1//P6f+f0P/X/9f/7/26tr/37TSG1qC/n8F/X/9f/1//X8Gatj6/zH3vzbMJJP8DwAAADmIuf/BMBP5HwAAAGoj5v7pMBP5HwAAAGoj5v6ZMJNM8r/+v/5/Tv1/7/+v/6//X3917f8Piv5/Bf1//f+69f+LQv+fm2rY+v8x9+8MM8kk/wMAAEAOYu7fFWYi/wMAAEBtxNy/O8xE/gcAAIDaiLl/T5hJJvlf/1//X/9f/1//v/f+9f/XJ/3//vT/K+j/6//Xrf/v/f+5yYat/x9z/0NhJpnkfwAAAMhBzP17w0zkfwAAAKiNmPv3hZnI/wAAAFAbMffvDzPJJP/r/9ek//+bf9+xb/1//f9++x9M/3+T/n+Y+v/Dpab9/+6nxXXT/6+g/6//r/+v/89ADVv/P+b+A2EmmeR/AAAAyEHM/a8LM5H/AQAAoDZi7v//YSbyPwAAANRGzP0/E2aSSf7X/69J/7+L/r/+f7/9e/9//f86q2n/f2D0/yvo/+v/6//r/zNQN77/H/+2vP5/zP0Hw0wyyf8AAACQg5j7fzbMRP4HAACA2oi5//VhJvI/AAAA1EbM/YfCTDLJ//r/+v/6//r/N6b///qi2zD2/5uLR/+/XvT/+9P/r6D/r/+v/6//z0AN2/v/x9z/hjCTTPI/AAAA5CDm/ofDTOR/AAAAqI2Y+98YZiL/AwAAQG3E3P+mMJNM8r/+v/6//r/+v/f/771//f/1Sf+/P/3/Cvr/+v/6//r/DNSw9f9j7n9zmEkm+R8AAAByEHP/W8JM5H8AAACojZj73xpmIv8DAABAbcTc/7Ywk0zyv/6//r/+v/6//n/v/ev/r0/6//3p/1fQ/9f/1//X/2eghq3/H3P/z4WZZJL/AQAAIAcx9z8SZiL/AwAAQG3E3P/2MBP5HwAAAGoj5v53hJlkkv/1//X/9f/1//X/e+9f/3990v/vT/+/gv6//r/+v/4/AzVs/f+Y+98ZZpJJ/gcAAIAcxNz/82Em8j8AAADURsz97wozkf8BAACgNmLu/4Uwk0zyv/6//r/+v/5/Fv3/5pX0/7Og/9+f/n+FHv3/jfr/+v/6//r/XLdh6//H3P/uMJNM8j8AAADkIOb+94SZyP8AAABQGzH3vzfMRP4HAACA2oi5/9Ewk0zyv/5/lv3/dJf1/0v6/xn0/73/fzb0//vT/6/g/f/1//X/9f8ZqGHr/8fc/1iYSSb5HwAAAHIQc//7wkzkfwAAAKiNmPt/McxE/gcAAIDaiLn//WEmmeR//f8s+//e/3/N+v9jHesjp/7/RNvjmdal/r/+/xrQ/+9P/7+C/r/+/zD3/8Nq3rTE9fX/GUbD1v+Puf8DYSaZ5H8AAADIQcz9vxRmIv8DAABAbcTc/8thJvI/AAAA1EbM/b8SZpJJ/tf/1//X//f+//m8//8l/f8M6P/3p/9fQf9f/3+Y+/8V9P8ZRsPW/4+5/1fDTDLJ/wAAAJCDmPs/GGYi/wMAAEBtxNx/OMxE/gcAAIDaiLn/SJhJJvlf/7+7/x/fUVX/X/9f/79+/X/v/5+DwfX/X3ZrUej/6//r/+v/6//r/7Maw9b/j7n/aJhJJvkfAAAAchBz/6+Fmcj/AAAAUBsx9x8LM5H/AQAAoDZi7p8NM8kk/+v/e///QfX/f6L/r/8f6P/3pv+/Nrz/f3/6/xX0//X/9f/1/xmoYev/x9w/F2aSSf4HAACAGks/Do65/3iYifwPAAAAtRFz/4kwE/kfAAAAaiPm/g+FmWSS//X/9f+9///N6P+PdWyv/1/S/9f/HwT9//70/yvo/+v/6//r/zNQw9b/j7l/Pswkk/wPAAAAOYi5/8NhJvI/AAAA1EbM/R8JM5H/AQAAoDZi7j8ZZpJJ/tf/1//Pvf/fKIpL3v9f/7/X/vX/1yf9//70/yvo/+v/6//r/zNQw9b/j7n/VJhJJvkfAAAAchBz/+kwE/kfAAAAaiPm/jNhJvI/AAAA1EbM/WfDTDLJ//r/+v+59/+Lm/L+/53b/x9799Fk11ntcfjYZVvS6N6PwJgRQxjxFZgyo4oxA8DkYEzOYHIOJueck8k552xyjiYaqkS5tdZS6KO9Jeuoz97vep7JulJdcVp2Y9cf1a9e/f8p+n/9/y4c6u+vurhff97+/053vvYe+n/9v/5/kv5f/6//51xL6/9z9987bmmy/wEAAKCD3P33iVvsfwAAABhG7v77xi32PwAAAAwjd/+1cUuT/a//1//r//X/Z/X/N+n/9f/r5v3/afr/Gfp//b/+X//PTi2t/8/df7+4pcn+BwAAgA5y998/brH/AQAAYBi5+x8Qt9j/AAAAMIzc/Q+MW5rsf/2//l//r//3/v/2z9f/r5P+f5r+f4b+X/+v/9f/s1NL6/9z9z8obmmy/wEAAKCD3P0PjlvsfwAAABhG7v6HxC32PwAAAAwjd/9D45Ym+1//r//X/+v/9f/bP1//v043bk7/M0H/f5j+f8ZM/7/Z6P+nXHA/v/23t56v/zz0//p/Dlta/5+7/2FxS5P9DwAAAB3k7n943GL/AwAAwDBy918Xt9j/AAAAMIzc/Y+IW5rsf/2//l//r//X/2//fP3/Onn/f9ql9/93/P973bNv/+/9/2ne/9f/6/8519L6/9z918ctTfY/AAAAdJC7/5Fxi/0PAAAAw8jd/6i4xf4HAACAYeTuf3Tc0mT/6//b9P8HtYv+X/+v/9f/j07/P837/zMO/jF3on6o/9f/6//1/1yapfX/ufsfE7c02f8AAADQQe7+x8Yt9j8AAAAMI3f/4+IW+x8AAACGkbv/8XFLk/2v/2/T/3v/X/+v/9f/t6D/n6b/nzHK+/+387tm3/38pdr316//1/9z2NL6/9z9T4hbmux/AAAA6CB3/xPjFvsfAAAAhpG7/0lxi/0PAAAAw8jd/+S4pcn+1//r/9fR/+cn6P/1//p//f80/f80/f+MUfr/22nf/fzav379v/6fw5bW/+fuf0rc0mT/AwAAQAe5+58at9j/AAAAMIzc/U+LW+x/AAAAGEbu/qfHLU32v/5f/7+O/t/7//p//b/+/8Lo/6fp/2fo//X/+n/9Pzu1tP4/d/8NcUuT/Q8AAAAd5O5/Rtxi/wMAAMAwcvc/M26x/wEAAGAYufufFbc02f/6f/2//l//r//f/vn6/3XS/0/T/8/Q/+v/9f/6f3ZqQf3/Gb/q+ObZcUuT/Q8AAAAd5O5/Ttxi/wMAAMAwcvc/N26x/wEAAGAYufufF7c02f/6/8X0/wc531j9/4nNZqP/3zTt/0+c8fezvi/1//r/I6D/n6b/n6H/1//r//X/7NSC+v+DH+fuf37c0mT/AwAAQAe5+18Qt9j/AAAAMIzc/S+MW+x/AAAAGEbu/hfFLU32v/5/Mf3/gbH6f+//n/v90an/9/7/Yfr/o6H/n6b/n6H/1//r//X/7NTS+v/c/S+Om665+nb/FgEAAICFyd3/krilyZ//AwAAQAe5+18at9j/AAAAsFI3HPqZ3P0vi1ua7H/9/277/2vO+Dn9v/7/3O8P/b/+X/9/+en/p+n/Z+j/9f/6f/0/O7W0/j93/8vjlib7HwAAADrI3X9j3GL/AwAAwDBy978ibrH/AQAAYBi5+18ZtzTZ//p/7//r/y+u/7/tnxL6/1P0/6fo/5dF/z9N/z9D/6//32//f+z0/6n/ZwwX0f+fPHnyusve/+fuf1Xc0mT/AwAAQAe5+18dt9j/AAAAMIzc/a+JW+x/AAAAGEbu/tfGLU32v/6/af+f3+r6/wPe/9f/b/t8/f866f+n6f9n6P/1/97/1/+zU0t7/z93/+vilib7HwAAADrI3f/6uMX+BwAAgGHk7n9D3GL/AwAAwDBy978xbmmy//X/Tft/7//r//X/R93/37rR/x+JVfT/J87/+Uvv/6/X/+v/J7Tr/+92l7N+qP/X/3PY0vr/3P1vilua7H8AAADoIHf/m+MW+x8AAACGkbv/LXGL/Q8AAADDyN3/1rjpqib7X/+v/9f/6//1/9s//4jf/79ms9no/3dgFf3/hKX3/97/1/9Padf/n0P/r//nsKX1/7n73xa3NNn/AAAA0EHu/rfHLfY/AAAADCN3/zviFvsfAAAAhpG7/51xS5P9r//X/+v/9f/D9//Xr6L/9/7/juj/p+n/Z+j/9f/6f/0/R2Jf/X/u/nfFLU32PwAAAHSQu//dcYv9DwAAAMPI3f+euMX+BwAAgGHk7n9v3NJk/+v/9f/6f/3/scX1/8fP+s9r8v6//n9H9P/T9P8z9P/6f/3/Dfp/dmlp7//n7n9f3NJk/wMAAEAHufvfH7f+p1v7HwAAAIaRu/8DcYv9DwAAAMPI3f/BuKXJ/tf/6//1//r/4d//1/+3ov+fpv+fof/X/+v/vf/PTi2t/8/d/6G4pcn+BwAAgA5y9384brH/AQAAYBi5+z8St9j/AAAAMIzc/TfFLU32v/5f/6//1//r/0/9PdT/j0H/P+1o+v8T+n/9f/XzV8R/C/T/+v+5X8+Yltb/5+7/aNzSZP8DAABAB7n7Pxa32P8AAAAwjNz9H49b7H8AAABYpau2/Fzu/k/ELU32v/5f/6//1//r/7d/vv5/nfT/07z/P0P/f5H9/B3O+tHa3v8/999f+n/9P7u3tP4/d/8n45Ym+x8AAAA6yN3/qbjF/gcAAIBh5O7/dNxi/wMAAMAwcvd/Jm5psv/1//p//b/+X/+//fP1/+uk/5+m/5+h/9/r+/lr//r1//p/Dlta/5+7/7NxS5P9DwAAAB3k7v9c3GL/AwAAwDBy938+brH/AQAAYBgHuz/jsob7X/+v/9f/6//1/9s/X/+/Tvr/afr/Gfp//b/+X//PTi2t///Cwa86vvli3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+X/+/jv7/5MmT1+n/9f9n/35O9/836/8p+v9p+v8Z+n/9v/5f/89OLa3/z93/1bilyf4HAACADnL3fy1usf8BAABgGLn7vx632P8AAAAwjNz934hbmux//f8C+v/j+n/v/+v/N97/1//viP5/mv5/xoj9//EL/+3vu5+/VPv++vX/+n8OW1r/n7v/m3FLk/0PAAAAHeTu/1bcYv8DAADAMHL3fztusf8BAABgGLn7vxO3NNn/+v+j6/9v+2vX5f3/E5vtX7/+X/+v/9f/X276/2n6/xkj9v8XYd/9/Nq/fv2//p/Dltb/5+7/btzSZP8DAABAB7n7vxe32P8AAAAwjNz9349b7H8AAAAYRu7+H8QtTfa//n8B7/8P2P97/3/794f+f9H9/5X6/zHo/6fp/7f+K/s0/b/+X/+/o/4/v5v1/90trf/P3f/DuKXJ/gcAAIAOcvf/KG6x/wEAAGAYuft/HLfY/wAAADCM3P03xy1n7P/pUGzd9P/6f/2//l//v/3z9f/rpP+fdqH9/7HNpfX/aYH9/zT9v/5f/+/9f3Zqaf1/7v6fxC3+/B8AAABW5+rz/Hzu/p/GLfY/AAAADCN3/8/iFvsfAAAAhpG7/+dxyy1X7utLOlL6f/2//l//r//f/vn6/3XS/0/z/v8M/f8u+vm76v/H6P83G/0/l25p/X/u/l/ELf78HwAAAIaRu/+XcYv9DwAAAMPI3f+ruMX+BwAAgGHk7v913NJk/+v/9f+X2P8fpJn6/1P0/6fo/7fT/x8N/f80/f8M/b/3//X/3v9np5bW/+fu/03c0mT/AwAAQAe5+38bt9j/AAAAMIzc/b+LW+x/AAAAGEbu/t/HLU32/976//hLrf+/6P5/c8Wy+n/v/+v/9f/6/0XR/0/T/8/Q/+v/9f/6f3Zqaf1/7v4/xC1N9j8AAAB0kLv/j3GL/Q8AAADDyN3/p7jF/gcAAIBh5O7/c9zSZP97/391/f/S3v/X/+v/9f/6/0XR/0/T/29Xf6P0//p//b/+n51aWv+fu/8vcUuT/Q8AAAAd5O7/a9xi/wMAAMAwcvffErfY/wAAADCM3P1/i1ua7H/9v/5f/6//1/9v/3z9/zrp/6fts/+/+//Nf6z3//fe/+eXoP/X/+v/2Yml9f+5+/8etzTZ/wAAANBB7v5/xC32PwAAAAwjd/8/4xb7HwAAAIaRu/9fcUuT/T/T/x+r/0f9/yT9/9lfv/5/+/eH/l//r/+//PT/07z/P0P/7/1//b/+n51aWv+fu//fcUuT/Q8AAAAd5O6/NW6x/wEAAGAYufv/E7fY/wAAADCM3P3/jVua7H/v/+v/9f/6f/3/9s/X/6+T/n+a/n+G/l//r//X/7NTS+v/c/f/LwAA//+cql+w") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0/file0\x00', 0x18808, &(0x7f0000000840)={[{@uni_xlateno}, {@shortname_win95}, {@fat=@time_offset={'time_offset', 0x3d, 0x33a}}, {@fat=@dos1xfloppy}, {@fat=@usefree}, {@utf8}, {@fat=@errors_continue}, {@shortname_win95}, {@fat=@quiet}, {@uni_xlateno}, {@shortname_mixed}, {@utf8}, {@fat=@sys_immutable}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}]}, 0xfe, 0x2ca, &(0x7f0000000940)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x26) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40047211, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 2.702146819s ago: executing program 1: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000000480)={[{@codepage={'codepage', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@type={'type', 0x3d, "aa5448a3"}}]}, 0x4, 0x339, &(0x7f00000004c0)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/104, 0x4d) 2.502625403s ago: executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/224, 0xe0}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 2.457366873s ago: executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000200000001c002d800800020004000000050004000000000005000100000000000c000600000000000000000008000300", @ANYRES32=r2], 0x44}}, 0x0) 2.295324944s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}}, 0x0) 2.175273429s ago: executing program 0: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x2, 0x6, &(0x7f0000000240)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xae}}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) 2.137478121s ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.100475956s ago: executing program 2: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000000480)={[{@codepage={'codepage', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@type={'type', 0x3d, "aa5448a3"}}]}, 0x4, 0x339, &(0x7f00000004c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/104, 0x4d) 2.032160828s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2009) 1.799224975s ago: executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x48800) r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 850.781755ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 849.847526ms ago: executing program 3: r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 687.17917ms ago: executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000200000001c002d800800020004000000050004000000000005000100000000000c000600000000000000000008000300", @ANYRES32=r2], 0x44}}, 0x0) 634.485698ms ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) 610.139507ms ago: executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, @default}, 0x1c) 576.294168ms ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a0000000000000000000000080018024e224e21080017004e204e23"], 0x2c}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r1 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000300)={0x8008, 0x2}, 0x10, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400), 0x10) r8 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f0000000140)={0x18, {{0x29, 0x0, 0x3e000000, @private2}}}, 0x88) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x3b, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@private1}}, 0xe8) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14, 0x80000) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x5, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmmsg$inet(r11, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @multicast2}}}], 0x20}}], 0x1, 0x0) r13 = socket$nl_audit(0x10, 0x3, 0x9) ptrace$poke(0x4, 0x0, &(0x7f00000000c0), 0x833) statx(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x4000, 0x400, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="931db9597a2d3d9dd8bc3fb8fcc0bffde6aada8a0e5d71", 0x17}, {&(0x7f0000000100)}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="2800000000004a023711000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=0xee00, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="1400000000000000de07177953576500", @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x4}, 0x20008000) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r16 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r16, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r15, 0x400448c9, 0x0) 519.485517ms ago: executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000022"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x3, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "32dc36e99b61574f"}}, 0x48}}, 0x0) 518.643566ms ago: executing program 3: bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000700)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r0, 0x8001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) fallocate(r0, 0x8, 0x0, 0x0) mkdir(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x1, 0x200, &(0x7f0000000880)="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"}) 481.175296ms ago: executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x13) 425.189897ms ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x54, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {0x4}}]}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0438734a8c60193fd311c59a68e1890dc223bbc4913978f85781299b0e10826596ccf2340a9fd942821711c6efdda8d99bb90552bf17a098c56dd42647a777680c11c634b131e84f5eb3efc41b2176c3d940430e3f12c6b6f3ba3cfa8136b6e32841f7e3999e4284d538974b373aa3b60afe0e54d0d4a02e755ba1fad3691e1194ef7674760a38abda844f696e0c4372f7d34e6e4389652b21"], 0x1, 0x177, &(0x7f0000000240)="$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") 423.995992ms ago: executing program 4: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x890b, &(0x7f0000000040)={'wlan0\x00'}) 360.483627ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2009) 325.978173ms ago: executing program 4: r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 325.3834ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000000540)={[{@nodiscard}, {}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@grpjquota}, {@data_err_abort}]}, 0x5, 0x5a0, &(0x7f0000000600)="$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") chdir(&(0x7f0000000380)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 224.096185ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r7], 0x20}, 0x1, 0x6}, 0x0) 223.033749ms ago: executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$pppl2tp(0x18, 0x1, 0x1) 176.445522ms ago: executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000080)) 155.729858ms ago: executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000200000001c002d800800020004000000050004000000000005000100000000000c000600000000000000000008000300", @ANYRES32=r2], 0x44}}, 0x0) 1.64886ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_sync_file_exit\x00'}, 0x10) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='contention_begin\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2}}, &(0x7f00000014c0)=""/218, 0x1a, 0xda, 0x1}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSETD(r6, 0x541b, &(0x7f0000000ec0)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002a40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESHEX=r7, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002c40)={0x2020, 0x0, 0x0}, 0x2020) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) write$FUSE_INIT(r7, &(0x7f0000002280)={0x50, 0xfffffffffffffff5, r8}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x1000) 0s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a0000000000000000000000080018024e224e21080017004e204e23"], 0x2c}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r1 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000300)={0x8008, 0x2}, 0x10, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400), 0x10) r8 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f0000000140)={0x18, {{0x29, 0x0, 0x3e000000, @private2}}}, 0x88) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x3b, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@private1}}, 0xe8) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14, 0x80000) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x5, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmmsg$inet(r11, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @multicast2}}}], 0x20}}], 0x1, 0x0) r13 = socket$nl_audit(0x10, 0x3, 0x9) ptrace$poke(0x4, 0x0, &(0x7f00000000c0), 0x833) statx(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x4000, 0x400, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="931db9597a2d3d9dd8bc3fb8fcc0bffde6aada8a0e5d71", 0x17}, {&(0x7f0000000100)}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="2800000000004a023711000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=0xee00, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="1400000000000000de07177953576500", @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x4}, 0x20008000) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r16 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r16, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r15, 0x400448c9, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. 2024/05/28 07:11:03 fuzzer started 2024/05/28 07:11:03 dialing manager at 10.128.0.169:30010 [ 52.120226][ T5088] cgroup: Unknown subsys name 'net' [ 52.320281][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/05/28 07:11:05 starting 5 executor processes [ 53.472150][ T5094] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.590365][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.601054][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.610237][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.618878][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.621417][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.628159][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.634211][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.640802][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.649960][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.656056][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.662634][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.669701][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.684211][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.688645][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.694956][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.699717][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.706378][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.712923][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.719530][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.733384][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.734166][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.750163][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.751594][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.761203][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.765705][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.780534][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.795396][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.804471][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.812636][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.825505][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.411023][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 55.536520][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 55.557535][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 55.578325][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 55.590162][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.598698][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.606168][ T5109] bridge_slave_0: entered allmulticast mode [ 55.613030][ T5109] bridge_slave_0: entered promiscuous mode [ 55.622249][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 55.673102][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.682132][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.689641][ T5109] bridge_slave_1: entered allmulticast mode [ 55.697186][ T5109] bridge_slave_1: entered promiscuous mode [ 55.810045][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.859599][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.923197][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.931005][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.938486][ T5122] bridge_slave_0: entered allmulticast mode [ 55.946076][ T5122] bridge_slave_0: entered promiscuous mode [ 55.981212][ T5109] team0: Port device team_slave_0 added [ 56.010258][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.018965][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.027049][ T5122] bridge_slave_1: entered allmulticast mode [ 56.033775][ T5122] bridge_slave_1: entered promiscuous mode [ 56.050957][ T5109] team0: Port device team_slave_1 added [ 56.067284][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.074399][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.081755][ T5118] bridge_slave_0: entered allmulticast mode [ 56.089324][ T5118] bridge_slave_0: entered promiscuous mode [ 56.097245][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.104375][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.115213][ T5108] bridge_slave_0: entered allmulticast mode [ 56.122006][ T5108] bridge_slave_0: entered promiscuous mode [ 56.147791][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.155086][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.162266][ T5107] bridge_slave_0: entered allmulticast mode [ 56.169698][ T5107] bridge_slave_0: entered promiscuous mode [ 56.190818][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.198118][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.224672][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.236424][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.243602][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.250932][ T5118] bridge_slave_1: entered allmulticast mode [ 56.257870][ T5118] bridge_slave_1: entered promiscuous mode [ 56.269894][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.277242][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.284402][ T5108] bridge_slave_1: entered allmulticast mode [ 56.291527][ T5108] bridge_slave_1: entered promiscuous mode [ 56.314119][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.325288][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.332436][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.340205][ T5107] bridge_slave_1: entered allmulticast mode [ 56.347397][ T5107] bridge_slave_1: entered promiscuous mode [ 56.354743][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.361711][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.387664][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.442048][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.453554][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.498334][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.516795][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.528783][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.573156][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.613596][ T5122] team0: Port device team_slave_0 added [ 56.633775][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.657552][ T5108] team0: Port device team_slave_0 added [ 56.665666][ T5122] team0: Port device team_slave_1 added [ 56.676043][ T5108] team0: Port device team_slave_1 added [ 56.685822][ T5109] hsr_slave_0: entered promiscuous mode [ 56.692266][ T5109] hsr_slave_1: entered promiscuous mode [ 56.714795][ T5118] team0: Port device team_slave_0 added [ 56.768084][ T5118] team0: Port device team_slave_1 added [ 56.793563][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.801023][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.828220][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.828853][ T5123] Bluetooth: hci2: command tx timeout [ 56.839566][ T5116] Bluetooth: hci0: command tx timeout [ 56.847354][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.850565][ T5119] Bluetooth: hci1: command tx timeout [ 56.862872][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.888843][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.903131][ T5107] team0: Port device team_slave_0 added [ 56.909035][ T5119] Bluetooth: hci4: command tx timeout [ 56.919347][ T5119] Bluetooth: hci3: command tx timeout [ 56.928362][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.935552][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.962234][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.989690][ T5107] team0: Port device team_slave_1 added [ 57.020937][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.028542][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.055027][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.093588][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.102265][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.128703][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.142134][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.149164][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.175297][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.201418][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.208555][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.235133][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.294209][ T5108] hsr_slave_0: entered promiscuous mode [ 57.301590][ T5108] hsr_slave_1: entered promiscuous mode [ 57.308275][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.317276][ T5108] Cannot create hsr debugfs directory [ 57.323430][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.330991][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.357225][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.377906][ T5122] hsr_slave_0: entered promiscuous mode [ 57.385182][ T5122] hsr_slave_1: entered promiscuous mode [ 57.391287][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.398962][ T5122] Cannot create hsr debugfs directory [ 57.531894][ T5118] hsr_slave_0: entered promiscuous mode [ 57.539860][ T5118] hsr_slave_1: entered promiscuous mode [ 57.550544][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.558604][ T5118] Cannot create hsr debugfs directory [ 57.609176][ T5107] hsr_slave_0: entered promiscuous mode [ 57.616084][ T5107] hsr_slave_1: entered promiscuous mode [ 57.622203][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.630474][ T5107] Cannot create hsr debugfs directory [ 57.976688][ T5109] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.988487][ T5109] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.005083][ T5109] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.016179][ T5109] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.087595][ T5122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.100203][ T5122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.110756][ T5122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.122480][ T5122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.213035][ T5108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.234160][ T5108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.256614][ T5108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.287364][ T5108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.388121][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.404379][ T5107] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.437321][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.444232][ T5107] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.453761][ T5107] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.468727][ T5107] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.512042][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.519761][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.565694][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.572838][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.636452][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.643450][ T5118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.659196][ T5118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.669984][ T5118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.682777][ T5118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.743704][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.796242][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.803398][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.844311][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.861382][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.868708][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.904902][ T5119] Bluetooth: hci2: command tx timeout [ 58.905075][ T5116] Bluetooth: hci1: command tx timeout [ 58.910335][ T5119] Bluetooth: hci0: command tx timeout [ 58.951087][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.984870][ T5119] Bluetooth: hci3: command tx timeout [ 58.990322][ T5119] Bluetooth: hci4: command tx timeout [ 59.033412][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.040767][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.084592][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.091821][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.109002][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.179575][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.245871][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.258413][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.265670][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.342457][ T5108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.356623][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.372571][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.379916][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.401143][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.489954][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.525492][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.551080][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.558318][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.591872][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.599182][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.691869][ T5109] veth0_vlan: entered promiscuous mode [ 59.761609][ T5109] veth1_vlan: entered promiscuous mode [ 59.803736][ T5122] veth0_vlan: entered promiscuous mode [ 59.844029][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.884238][ T5122] veth1_vlan: entered promiscuous mode [ 59.991758][ T5109] veth0_macvtap: entered promiscuous mode [ 60.034114][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.054434][ T5109] veth1_macvtap: entered promiscuous mode [ 60.124015][ T5122] veth0_macvtap: entered promiscuous mode [ 60.164111][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.216884][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.227356][ T5122] veth1_macvtap: entered promiscuous mode [ 60.239229][ T5109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.253286][ T5109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.262526][ T5109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.272008][ T5109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.324501][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.336635][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.352383][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.380848][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.392839][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.405620][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.436332][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.450855][ T5122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.460783][ T5122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.472268][ T5122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.481573][ T5122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.499979][ T5107] veth0_vlan: entered promiscuous mode [ 60.581584][ T5107] veth1_vlan: entered promiscuous mode [ 60.597285][ T5108] veth0_vlan: entered promiscuous mode [ 60.662643][ T5108] veth1_vlan: entered promiscuous mode [ 60.729234][ T2814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.743095][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.748875][ T2814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.769271][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.785669][ T5118] veth0_vlan: entered promiscuous mode [ 60.813750][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.822554][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.837894][ T5118] veth1_vlan: entered promiscuous mode [ 60.887949][ T5108] veth0_macvtap: entered promiscuous mode [ 60.912581][ T5108] veth1_macvtap: entered promiscuous mode [ 60.933689][ T5107] veth0_macvtap: entered promiscuous mode [ 60.945558][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.953598][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.978779][ T5107] veth1_macvtap: entered promiscuous mode [ 60.992655][ T5119] Bluetooth: hci0: command tx timeout [ 60.992807][ T5123] Bluetooth: hci1: command tx timeout [ 60.998490][ T5119] Bluetooth: hci2: command tx timeout [ 61.063449][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.074187][ T5119] Bluetooth: hci3: command tx timeout [ 61.075236][ T5119] Bluetooth: hci4: command tx timeout [ 61.091709][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.104515][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.117105][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.132713][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.180493][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.193479][ T5195] loop1: detected capacity change from 0 to 2048 [ 61.225814][ T5195] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.227795][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.270111][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.281989][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.298212][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.311870][ T5197] loop3: detected capacity change from 0 to 256 [ 61.324179][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.351067][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.361645][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.376406][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.387905][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.399803][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.435854][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.457028][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.473047][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.493886][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.512569][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.539824][ T5200] net_ratelimit: 2 callbacks suppressed [ 61.539842][ T5200] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 61.544286][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.571000][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.587522][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.628873][ T5107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.659630][ T5205] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.660050][ T5107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.682561][ T5204] loop3: detected capacity change from 0 to 256 [ 61.701076][ T5107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.715238][ T5204] ======================================================= [ 61.715238][ T5204] WARNING: The mand mount option has been deprecated and [ 61.715238][ T5204] and is ignored by this kernel. Remove the mand [ 61.715238][ T5204] option from the mount to silence this warning. [ 61.715238][ T5204] ======================================================= [ 61.715528][ T5107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.787368][ T5118] veth0_macvtap: entered promiscuous mode [ 61.806999][ T5108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.818763][ T5108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.828686][ T5108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.842297][ T5108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.886025][ T5118] veth1_macvtap: entered promiscuous mode [ 61.892109][ T5204] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 62.024509][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.045139][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.056013][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.067985][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.078663][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.089236][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.099593][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.120300][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.132174][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.244321][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.255090][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.268935][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.280104][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.290713][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.302589][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.316120][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.327563][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.340026][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.370377][ T5118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.382545][ T5118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.392365][ T5118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.401591][ T5118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.423183][ T2814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.443432][ T2814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.555144][ T5161] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.588780][ T5163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.612142][ T5163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.770361][ T5161] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 62.783131][ T5161] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 62.807091][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.809716][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.846284][ T5161] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 62.849703][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.895099][ T5115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.902958][ T5115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.026283][ T5202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.050816][ T5202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.060052][ T5161] usb 4-1: USB disconnect, device number 2 [ 63.066244][ T5119] Bluetooth: hci1: command tx timeout [ 63.066294][ T5119] Bluetooth: hci0: command tx timeout [ 63.078099][ T5123] Bluetooth: hci2: command tx timeout [ 63.148023][ T5123] Bluetooth: hci4: command tx timeout [ 63.148032][ T5119] Bluetooth: hci3: command tx timeout [ 63.204994][ T5202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.261103][ T5202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.359671][ T5223] loop4: detected capacity change from 0 to 256 [ 63.430657][ T5126] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 63.604504][ T5223] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.626444][ T5228] trusted_key: encrypted_key: keylen parameter is missing [ 63.914169][ T5234] loop3: detected capacity change from 0 to 2048 [ 63.970201][ T5234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.007072][ T5232] loop2: detected capacity change from 0 to 4096 [ 64.046820][ T5232] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 64.119259][ T5232] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 64.519719][ T1057] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 64.544970][ T5249] loop4: detected capacity change from 0 to 64 [ 64.578431][ T5220] loop0: detected capacity change from 0 to 32768 [ 64.609489][ T5220] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5220) [ 64.763742][ T5220] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 64.833181][ T5220] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 64.898055][ T5220] BTRFS info (device loop0): disk space caching is enabled [ 65.102608][ T5220] BTRFS info (device loop0): rebuilding free space tree [ 65.178153][ T5220] BTRFS info (device loop0): disabling free space tree [ 65.187638][ T5115] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.208707][ T5220] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 65.226894][ T5220] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 65.251856][ T5281] loop4: detected capacity change from 0 to 64 [ 65.419246][ T5115] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 65.437925][ T5115] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 65.456195][ T5115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.467537][ T5281] block nbd4: not configured, cannot reconfigure [ 65.494156][ T5115] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 65.634338][ T5220] syz-executor.0 (5220) used greatest stack depth: 18448 bytes left [ 65.674399][ T5107] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 65.750694][ T5290] loop2: detected capacity change from 0 to 4096 [ 65.761721][ T5115] usb 4-1: USB disconnect, device number 3 [ 65.771331][ T5290] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 65.915514][ T5290] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 66.142358][ T5302] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.151979][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.162642][ T5302] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.172342][ T5302] tipc: Invalid UDP bearer configuration [ 66.172399][ T5302] tipc: Enabling of bearer rejected, failed to enable media [ 66.261188][ T1098] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 66.318568][ T5308] binder: 5307:5308 ioctl c0306201 0 returned -14 [ 66.396446][ T5310] binder: 5307:5310 ioctl c0306201 0 returned -14 [ 66.510809][ T5316] loop3: detected capacity change from 0 to 256 [ 66.607661][ T29] audit: type=1800 audit(1716880278.608:2): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048610 res=0 errno=0 [ 66.876615][ T5325] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.221712][ T5334] loop2: detected capacity change from 0 to 4096 [ 67.254219][ T5334] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 67.263442][ T5339] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.294992][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.320733][ T5339] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.332525][ T5339] tipc: Invalid UDP bearer configuration [ 67.332584][ T5339] tipc: Enabling of bearer rejected, failed to enable media [ 67.370625][ T5342] loop4: detected capacity change from 0 to 512 [ 67.396252][ T5334] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 67.441215][ T5342] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 67.712040][ T1098] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 67.719807][ T5350] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 68.507995][ T5123] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 68.517766][ T5123] Bluetooth: hci4: Injecting HCI hardware error event [ 68.526597][ T5123] Bluetooth: hci4: hardware error 0x00 [ 69.954834][ T5119] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 69.963444][ T5119] Bluetooth: hci1: Injecting HCI hardware error event [ 69.974022][ T5119] Bluetooth: hci1: hardware error 0x00 [ 70.047602][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.234044][ T5429] hsr_slave_1 (unregistering): left promiscuous mode [ 70.586160][ T5123] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 70.898032][ T5446] fuse: Bad value for 'fd' [ 71.348502][ T5435] loop0: detected capacity change from 0 to 32768 [ 71.373815][ T5455] loop4: detected capacity change from 0 to 1024 [ 71.383091][ T5455] EXT4-fs: Ignoring removed i_version option [ 71.394312][ T5455] EXT4-fs: Mount option(s) incompatible with ext3 [ 71.415754][ T5435] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 71.644181][ T5435] XFS (loop0): Ending clean mount [ 71.670246][ T5435] XFS (loop0): Quotacheck needed: Please wait. [ 71.789529][ T5435] XFS (loop0): Quotacheck: Done. [ 71.870403][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.882402][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.951999][ T5435] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 72.025323][ T5119] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 73.909581][ T5523] Process accounting resumed [ 74.287236][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 74.327903][ T5541] loop4: detected capacity change from 0 to 256 [ 74.387672][ T5541] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x21ebf3fa, utbl_chksum : 0xe619d30d) [ 74.436371][ T5545] loop0: detected capacity change from 0 to 256 [ 74.502147][ T5545] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 74.849312][ T5553] Process accounting resumed [ 79.275211][ T5591] bad cache= option: nonw [ 79.275211][ T5591] [ 79.685790][ T5591] CIFS: VFS: bad cache= option: nonw [ 83.244589][ T5630] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 83.393843][ T785] cfg80211: failed to load regulatory.db [ 84.804506][ T5654] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 84.872931][ T5657] Bluetooth: MGMT ver 1.23 [ 86.839049][ T5711] kvm: emulating exchange as write [ 87.042951][ T5716] loop4: detected capacity change from 0 to 2048 [ 87.102722][ T5716] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 87.176939][ T5719] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.183174][ T5716] syz-executor.4: attempt to access beyond end of device [ 87.183174][ T5716] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 88.875479][ T5732] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 89.056161][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.124031][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.820355][ T5760] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 89.844901][ T5760] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.972984][ T5765] 9pnet_fd: Insufficient options for proto=fd [ 90.299641][ T5746] loop0: detected capacity change from 0 to 32768 [ 90.328165][ T5746] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5746) [ 90.448071][ T5746] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.468890][ T5746] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 90.480181][ T5746] BTRFS info (device loop0): using free-space-tree [ 90.752696][ T29] audit: type=1800 audit(1716880302.758:3): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 90.776585][ T5805] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 90.824735][ T5805] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.824842][ T29] audit: type=1800 audit(1716880302.808:4): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 90.934573][ T29] audit: type=1800 audit(1716880302.938:5): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 91.028781][ T29] audit: type=1800 audit(1716880303.028:6): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 91.148475][ T5816] input: syz1 as /devices/virtual/input/input7 [ 91.291861][ T5819] Illegal XDP return value 4294967274 on prog (id 35) dev syz_tun, expect packet loss! [ 91.581743][ T29] audit: type=1800 audit(1716880303.588:7): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 91.671586][ T5827] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 91.715074][ T5827] overlayfs: failed to set xattr on upper [ 91.748462][ T5827] overlayfs: ...falling back to redirect_dir=nofollow. [ 91.782486][ T5827] overlayfs: ...falling back to index=off. [ 91.804089][ T29] audit: type=1804 audit(1716880303.808:8): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir456522544/syzkaller.eHJAim/51/file0" dev="sda1" ino=1953 res=1 errno=0 [ 91.835114][ T5827] overlayfs: ...falling back to uuid=null. [ 91.851338][ T5107] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.584268][ T5824] loop4: detected capacity change from 0 to 32768 [ 92.618162][ T5824] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5824) [ 92.716488][ T5824] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.768693][ T5824] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 92.782163][ T5824] BTRFS info (device loop4): using free-space-tree [ 93.021060][ T5108] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.534032][ T5879] loop4: detected capacity change from 0 to 64 [ 93.665865][ T5881] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 93.690833][ T5885] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 93.731223][ T5885] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 93.765090][ T5881] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 94.237878][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.262287][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.294130][ T5163] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.391330][ T5912] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 94.402445][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.442659][ T5912] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 94.484733][ T5163] usb 5-1: Using ep0 maxpacket: 16 [ 94.499167][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 94.533079][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 94.548999][ T5163] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 94.584383][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.615722][ T5163] usb 5-1: config 0 descriptor?? [ 94.849084][ T5925] process 'syz-executor.2' launched '/dev/fd/3' with NULL argv: empty string added [ 95.060464][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.271895][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.701826][ T5163] hid (null): bogus close delimiter [ 95.708514][ T5163] hid (null): report_id 632863821 is invalid [ 95.738712][ T5163] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 95.755023][ T5163] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 95.762474][ T5163] hid-generic 0003:0158:0100.0001: bogus close delimiter [ 95.789546][ T5163] hid-generic 0003:0158:0100.0001: item 0 0 2 10 parsing failed [ 95.815337][ T5163] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 95.865776][ T5163] usb 5-1: USB disconnect, device number 2 [ 95.965270][ T5940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.977169][ T29] audit: type=1800 audit(1716880307.968:9): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 96.029543][ T5940] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.096183][ T5947] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 96.143066][ T5947] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 96.673670][ T29] audit: type=1800 audit(1716880308.678:10): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 96.715024][ T5971] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.765784][ T5964] loop0: detected capacity change from 0 to 4096 [ 96.981631][ T5981] loop4: detected capacity change from 0 to 1024 [ 96.994371][ T5981] EXT4-fs: Ignoring removed nobh option [ 97.018563][ T5981] EXT4-fs: Ignoring removed oldalloc option [ 97.112333][ T5981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.160220][ T5964] overlayfs: upper fs does not support tmpfile. [ 97.256198][ T5964] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 97.285224][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.290454][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.438947][ T6035] tipc: Started in network mode [ 98.447529][ T6035] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 98.466088][ T6035] tipc: Enabled bearer , priority 10 [ 98.507647][ T6035] tipc: Resetting bearer [ 98.707225][ T6035] tipc: Disabling bearer [ 98.813189][ T5107] ntfs3: loop0: failed to convert "0000" to iso8859-7 [ 98.827686][ T5107] ntfs3: loop0: failed to convert name for inode 1e. [ 99.547200][ T2814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.716958][ T2814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.877571][ T2814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.011064][ T2814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.286066][ T2814] bridge_slave_1: left allmulticast mode [ 100.292074][ T2814] bridge_slave_1: left promiscuous mode [ 100.332481][ T2814] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.369741][ T2814] bridge_slave_0: left allmulticast mode [ 100.379341][ T2814] bridge_slave_0: left promiscuous mode [ 100.390576][ T2814] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.459149][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.471581][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.484586][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.488828][ T6111] loop4: detected capacity change from 0 to 1024 [ 100.514880][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.533915][ T5123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.535157][ T6111] EXT4-fs: Ignoring removed nobh option [ 100.547016][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.602131][ T6111] EXT4-fs: Ignoring removed oldalloc option [ 100.670343][ T6111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.906756][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.090460][ T6129] loop4: detected capacity change from 0 to 128 [ 101.172339][ T6129] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 101.297095][ T6129] syz-executor.4: attempt to access beyond end of device [ 101.297095][ T6129] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 101.319993][ T6129] syz-executor.4: attempt to access beyond end of device [ 101.319993][ T6129] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 101.347192][ T2814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.368734][ T6136] FAT-fs (loop4): FAT read failed (blocknr 128) [ 101.375860][ T2814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.388435][ T2814] bond0 (unregistering): Released all slaves [ 101.499985][ T6124] tipc: Enabling of bearer rejected, failed to enable media [ 102.064929][ T6160] loop4: detected capacity change from 0 to 512 [ 102.083190][ T6160] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.125124][ T6160] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 102.210013][ T6160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 102.251703][ T6160] System zones: 1-12 [ 102.299094][ T6160] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 102.347032][ T2814] hsr_slave_0: left promiscuous mode [ 102.385035][ T6160] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 102.403933][ T2814] hsr_slave_1: left promiscuous mode [ 102.429923][ T2814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.442693][ T6160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.468986][ T2814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.498080][ T2814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.519270][ T2814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.587659][ T2814] veth1_macvtap: left promiscuous mode [ 102.608875][ T2814] veth0_macvtap: left promiscuous mode [ 102.623726][ T2814] veth1_vlan: left promiscuous mode [ 102.634429][ T2814] veth0_vlan: left promiscuous mode [ 102.662180][ T5108] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor.4: path /root/syzkaller-testdir3559354030/syzkaller.FazpeV/81/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 102.705043][ T5123] Bluetooth: hci0: command tx timeout [ 102.710218][ T5108] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 102.796706][ T5108] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor.4: path /root/syzkaller-testdir3559354030/syzkaller.FazpeV/81/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 102.829214][ T5108] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 102.880744][ T5108] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor.4: path /root/syzkaller-testdir3559354030/syzkaller.FazpeV/81/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 102.907983][ T5108] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 102.931965][ T5108] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor.4: path /root/syzkaller-testdir3559354030/syzkaller.FazpeV/81/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 102.970469][ T5108] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 103.017553][ T5108] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor.4: path /root/syzkaller-testdir3559354030/syzkaller.FazpeV/81/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 103.075531][ T5108] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 103.723624][ T2814] team0 (unregistering): Port device team_slave_1 removed [ 103.806728][ T2814] team0 (unregistering): Port device team_slave_0 removed [ 104.282035][ T6183] tipc: Started in network mode [ 104.288545][ T6183] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 104.297233][ T6183] tipc: Enabled bearer , priority 10 [ 104.323593][ T6190] tipc: Resetting bearer [ 104.354610][ T6190] tipc: Disabling bearer [ 104.505755][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.630684][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 104.693348][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.744806][ T5119] Bluetooth: hci0: command tx timeout [ 104.995532][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.028574][ T6236] af_packet: tpacket_rcv: packet too big, clamped from 5836 to 3952. macoff=96 [ 105.055868][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.095434][ T6112] bridge_slave_0: entered allmulticast mode [ 105.111115][ T6112] bridge_slave_0: entered promiscuous mode [ 105.138069][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.154777][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.162135][ T6112] bridge_slave_1: entered allmulticast mode [ 105.221518][ T6112] bridge_slave_1: entered promiscuous mode [ 105.447723][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.481037][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.562203][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.686870][ T6112] team0: Port device team_slave_0 added [ 105.728203][ T6112] team0: Port device team_slave_1 added [ 105.973261][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.995691][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.035394][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.055123][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.076447][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.090825][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.115889][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.125946][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.133769][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.190317][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.204836][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.269388][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.580508][ T2814] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.669186][ T6112] hsr_slave_0: entered promiscuous mode [ 106.687582][ T6112] hsr_slave_1: entered promiscuous mode [ 106.706412][ T6112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.714303][ T6112] Cannot create hsr debugfs directory [ 106.781258][ T2814] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.824757][ T5123] Bluetooth: hci0: command tx timeout [ 106.948724][ T29] audit: type=1804 audit(1716880318.958:11): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir456522544/syzkaller.eHJAim/105/bus" dev="sda1" ino=1954 res=1 errno=0 [ 107.038743][ T2814] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.235700][ T2814] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.064112][ T2814] bridge_slave_1: left allmulticast mode [ 108.082479][ T2814] bridge_slave_1: left promiscuous mode [ 108.107293][ T2814] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.145284][ T2814] bridge_slave_0: left allmulticast mode [ 108.150999][ T2814] bridge_slave_0: left promiscuous mode [ 108.171596][ T2814] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.194904][ T5123] Bluetooth: hci1: command tx timeout [ 108.861490][ T2814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.875540][ T2814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.894065][ T2814] bond0 (unregistering): Released all slaves [ 108.904840][ T5123] Bluetooth: hci0: command tx timeout [ 109.092541][ T6270] chnl_net:caif_netlink_parms(): no params data found [ 109.115740][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.149571][ T2814] tipc: Left network mode [ 109.279413][ T29] audit: type=1800 audit(1716880321.288:12): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1941 res=0 errno=0 [ 109.771087][ T2814] hsr_slave_0: left promiscuous mode [ 109.785163][ T2814] hsr_slave_1: left promiscuous mode [ 109.793248][ T2814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.801294][ T2814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.811650][ T2814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.822228][ T2814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.928120][ T2814] veth1_macvtap: left promiscuous mode [ 109.934612][ T2814] veth0_macvtap: left promiscuous mode [ 109.940579][ T2814] veth1_vlan: left promiscuous mode [ 109.953538][ T2814] veth0_vlan: left promiscuous mode [ 110.267531][ T5123] Bluetooth: hci1: command tx timeout [ 110.354804][ T29] audit: type=1326 audit(1716880322.358:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 110.436657][ T29] audit: type=1326 audit(1716880322.358:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 110.461656][ T29] audit: type=1326 audit(1716880322.358:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 110.506458][ T29] audit: type=1326 audit(1716880322.358:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 110.535289][ T29] audit: type=1326 audit(1716880322.358:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 110.577172][ T29] audit: type=1326 audit(1716880322.358:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 110.607833][ T29] audit: type=1326 audit(1716880322.358:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd2e7a667 code=0x7ffc0000 [ 110.637794][ T29] audit: type=1326 audit(1716880322.358:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fd2e40329 code=0x7ffc0000 [ 111.211180][ T2814] team0 (unregistering): Port device team_slave_1 removed [ 111.259522][ T2814] team0 (unregistering): Port device team_slave_0 removed [ 111.788744][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.796917][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.804236][ T6270] bridge_slave_0: entered allmulticast mode [ 111.812030][ T6270] bridge_slave_0: entered promiscuous mode [ 111.820859][ T6397] x_tables: duplicate entry at hook 3 [ 111.883916][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.912403][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.925097][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.939191][ T6270] bridge_slave_1: entered allmulticast mode [ 111.970249][ T6270] bridge_slave_1: entered promiscuous mode [ 111.994305][ T6397] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 112.218994][ T6270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.235974][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 112.235991][ T29] audit: type=1326 audit(1716880324.228:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 112.277153][ T6270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.300678][ T29] audit: type=1326 audit(1716880324.228:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 112.354789][ T5123] Bluetooth: hci1: command tx timeout [ 112.384720][ T29] audit: type=1326 audit(1716880324.228:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 112.437037][ T6112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.445509][ T29] audit: type=1326 audit(1716880324.228:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 112.469338][ T6112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.485728][ T29] audit: type=1326 audit(1716880324.228:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 112.501394][ T6270] team0: Port device team_slave_0 added [ 112.527011][ T6270] team0: Port device team_slave_1 added [ 112.533527][ T6112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.542309][ T29] audit: type=1326 audit(1716880324.238:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 112.573327][ T29] audit: type=1326 audit(1716880324.238:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 112.598523][ T29] audit: type=1326 audit(1716880324.238:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd2e7a667 code=0x7ffc0000 [ 112.608134][ T6112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.630369][ T29] audit: type=1326 audit(1716880324.238:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fd2e40329 code=0x7ffc0000 [ 112.653258][ T29] audit: type=1326 audit(1716880324.238:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd2e7a667 code=0x7ffc0000 [ 112.719403][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.726494][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.753477][ T6270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.772988][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.781738][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.834809][ T6270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.926943][ T6270] hsr_slave_0: entered promiscuous mode [ 112.945539][ T6270] hsr_slave_1: entered promiscuous mode [ 112.956372][ T6270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.963999][ T6270] Cannot create hsr debugfs directory [ 113.083668][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.479683][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.553928][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.608923][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.616126][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.639921][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.647168][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.879743][ T6270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.904316][ T6270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.924539][ T6270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.959057][ T6270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.201460][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.311048][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.351346][ T6112] veth0_vlan: entered promiscuous mode [ 114.425566][ T5123] Bluetooth: hci1: command tx timeout [ 114.431324][ T6270] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.487796][ T6112] veth1_vlan: entered promiscuous mode [ 114.499029][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.506234][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.544912][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.552043][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.669266][ T6112] veth0_macvtap: entered promiscuous mode [ 114.705863][ T6112] veth1_macvtap: entered promiscuous mode [ 114.758913][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.790303][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.814797][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.838243][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.850318][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.862041][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.876068][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.920934][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.950240][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.976358][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.004670][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.014533][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.039296][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.056202][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.087111][ T6112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.102729][ T6112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.120433][ T6112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.136625][ T6112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.228772][ T6270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.424483][ T5202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.444021][ T5202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.501337][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.523319][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.933834][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.977853][ T6270] veth0_vlan: entered promiscuous mode [ 116.000287][ T6270] veth1_vlan: entered promiscuous mode [ 116.076983][ T6270] veth0_macvtap: entered promiscuous mode [ 116.108533][ T6270] veth1_macvtap: entered promiscuous mode [ 116.159670][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.185470][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.199984][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.211922][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.228232][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.240869][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.256414][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.274171][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.314960][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.363698][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.423061][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.455287][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.469309][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.948426][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.104109][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.149116][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.223734][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.260642][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.299145][ T6270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.331455][ T6270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.354893][ T6270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.363644][ T6270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.548596][ T2436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.572611][ T2436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.579604][ T6549] loop0: detected capacity change from 0 to 1764 [ 117.679453][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.689432][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.844327][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 117.844345][ T29] audit: type=1326 audit(1716880329.848:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 117.987422][ T29] audit: type=1326 audit(1716880329.848:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 118.041728][ T29] audit: type=1326 audit(1716880329.888:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 118.093549][ T29] audit: type=1326 audit(1716880329.888:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 118.153481][ T29] audit: type=1326 audit(1716880329.898:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 118.251348][ T29] audit: type=1326 audit(1716880329.898:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 118.290396][ T29] audit: type=1326 audit(1716880329.898:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd2e7cee9 code=0x7ffc0000 [ 118.355632][ T29] audit: type=1326 audit(1716880329.898:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd2e7a667 code=0x7ffc0000 [ 118.402797][ T29] audit: type=1326 audit(1716880329.898:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fd2e40329 code=0x7ffc0000 [ 118.490054][ T29] audit: type=1326 audit(1716880329.898:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd2e7a667 code=0x7ffc0000 [ 118.743849][ T6579] loop0: detected capacity change from 0 to 4096 [ 118.766419][ T6579] ntfs3: Unknown parameter './file0' [ 119.119510][ T6594] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 119.356032][ T6610] pim6reg: entered allmulticast mode [ 119.689691][ T6617] loop0: detected capacity change from 0 to 8192 [ 120.028421][ T6634] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 120.040553][ T6634] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.122814][ T6636] pim6reg: entered allmulticast mode [ 120.330069][ T6648] 9pnet_fd: Insufficient options for proto=fd [ 120.486040][ T6656] macvlan1: entered allmulticast mode [ 120.529452][ T6656] veth1_vlan: entered allmulticast mode [ 121.612068][ T6671] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QhQI¸¥ [ 123.502007][ T6719] loop4: detected capacity change from 0 to 512 [ 125.169965][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 125.169984][ T29] audit: type=1326 audit(1716880337.178:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4a2e7cee9 code=0x0 [ 127.164594][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.305010][ T29] audit: type=1800 audit(1716880339.308:420): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1941 res=0 errno=0 [ 127.534019][ T6806] hsr_slave_0 (unregistering): left promiscuous mode [ 127.589003][ T6813] fuse: Bad value for 'fd' [ 127.605118][ C0] [ 127.607501][ C0] ============================================ [ 127.613674][ C0] WARNING: possible recursive locking detected [ 127.619822][ C0] 6.10.0-rc1-next-20240528-syzkaller #0 Not tainted [ 127.626391][ C0] -------------------------------------------- [ 127.632522][ C0] ksoftirqd/0/16 is trying to acquire lock: [ 127.638424][ C0] ffff88807e4991d8 (&qs->lock){-.-.}-{2:2}, at: __queue_map_get+0x14b/0x4d0 [ 127.647137][ C0] [ 127.647137][ C0] but task is already holding lock: [ 127.654571][ C0] ffff88807eb311d8 (&qs->lock){-.-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660 [ 127.664154][ C0] [ 127.664154][ C0] other info that might help us debug this: [ 127.672201][ C0] Possible unsafe locking scenario: [ 127.672201][ C0] [ 127.679637][ C0] CPU0 [ 127.682900][ C0] ---- [ 127.686168][ C0] lock(&qs->lock); [ 127.690053][ C0] lock(&qs->lock); [ 127.693939][ C0] [ 127.693939][ C0] *** DEADLOCK *** [ 127.693939][ C0] [ 127.702071][ C0] May be due to missing lock nesting notation [ 127.702071][ C0] [ 127.710398][ C0] 4 locks held by ksoftirqd/0/16: [ 127.715409][ C0] #0: ffffffff8e333fe0 (rcu_callback){....}-{0:0}, at: rcu_core+0xa86/0x1830 [ 127.724292][ C0] #1: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x24c/0x5a0 [ 127.733684][ C0] #2: ffff88807eb311d8 (&qs->lock){-.-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660 [ 127.743713][ C0] #3: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 127.753137][ C0] [ 127.753137][ C0] stack backtrace: [ 127.759030][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-rc1-next-20240528-syzkaller #0 [ 127.768479][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 127.778547][ C0] Call Trace: [ 127.781832][ C0] [ 127.784758][ C0] dump_stack_lvl+0x241/0x360 [ 127.789438][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.794634][ C0] ? print_deadlock_bug+0x479/0x620 [ 127.799844][ C0] validate_chain+0x15d3/0x5900 [ 127.804699][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 127.809724][ C0] ? __pfx_lock_release+0x10/0x10 [ 127.814769][ C0] ? __pfx_validate_chain+0x10/0x10 [ 127.819965][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 127.825204][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 127.831102][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 127.837457][ C0] ? mark_lock+0x9a/0x350 [ 127.841784][ C0] ? __pfx_validate_chain+0x10/0x10 [ 127.846977][ C0] __lock_acquire+0x1346/0x1fd0 [ 127.851833][ C0] lock_acquire+0x1ed/0x550 [ 127.856333][ C0] ? __queue_map_get+0x14b/0x4d0 [ 127.861276][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 127.866389][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 127.871413][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 127.876692][ C0] ? __queue_map_get+0x14b/0x4d0 [ 127.881804][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 127.887700][ C0] __queue_map_get+0x14b/0x4d0 [ 127.892467][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 127.897488][ C0] ? validate_chain+0x11e/0x5900 [ 127.902429][ C0] ? __pfx___queue_map_get+0x10/0x10 [ 127.907714][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 127.912995][ C0] ? validate_chain+0x11e/0x5900 [ 127.917940][ C0] ? bpf_trace_run2+0x1fc/0x540 [ 127.922791][ C0] bpf_prog_00798911c748094f+0x42/0x46 [ 127.928270][ C0] bpf_trace_run2+0x2ec/0x540 [ 127.932965][ C0] ? deref_stack_reg+0x1c7/0x260 [ 127.937930][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 127.943126][ C0] ? deref_stack_reg+0x1c7/0x260 [ 127.948068][ C0] ? mark_lock+0x9a/0x350 [ 127.952414][ C0] trace_contention_begin+0x117/0x140 [ 127.957788][ C0] __pv_queued_spin_lock_slowpath+0x114/0xdc0 [ 127.963881][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 127.970473][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 127.975426][ C0] queued_spin_lock_slowpath+0x42/0x50 [ 127.980889][ C0] do_raw_spin_lock+0x272/0x370 [ 127.985771][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 127.991145][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 127.996198][ C0] _raw_spin_lock_irqsave+0xe1/0x120 [ 128.001486][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 128.007392][ C0] queue_stack_map_push_elem+0x1b2/0x660 [ 128.013118][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 128.018146][ C0] ? __pfx_queue_stack_map_push_elem+0x10/0x10 [ 128.024298][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 128.029496][ C0] ? bpf_trace_run3+0x24c/0x5a0 [ 128.034344][ C0] bpf_prog_216c997a1f42e404+0x3f/0x43 [ 128.039794][ C0] bpf_trace_run3+0x33a/0x5a0 [ 128.044465][ C0] ? __pfx_bpf_trace_run3+0x10/0x10 [ 128.049654][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 128.055288][ C0] ? rcu_core+0xafd/0x1830 [ 128.059704][ C0] ? rcu_core+0xa86/0x1830 [ 128.064142][ C0] ? rcu_core+0xafd/0x1830 [ 128.068594][ C0] kmem_cache_free+0x2a9/0x350 [ 128.073362][ C0] ? kfree_const+0x2a/0x40 [ 128.077772][ C0] ? rcu_core+0xa86/0x1830 [ 128.082400][ C0] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 128.087696][ C0] rcu_core+0xafd/0x1830 [ 128.091951][ C0] ? __pfx_rcu_core+0x10/0x10 [ 128.096625][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 128.101828][ C0] ? sched_clock+0x4a/0x70 [ 128.106327][ C0] ? sched_clock_cpu+0x76/0x490 [ 128.111193][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 128.117172][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.123635][ C0] ? __schedule+0x17f0/0x4a20 [ 128.128316][ C0] handle_softirqs+0x2c4/0x970 [ 128.133082][ C0] ? run_ksoftirqd+0xca/0x130 [ 128.137756][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 128.143124][ C0] run_ksoftirqd+0xca/0x130 [ 128.147621][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 128.152724][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 128.157924][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 128.163031][ C0] smpboot_thread_fn+0x544/0xa30 [ 128.167970][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 128.172994][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 128.178448][ C0] kthread+0x2f0/0x390 [ 128.182515][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 128.187980][ C0] ? __pfx_kthread+0x10/0x10 [ 128.192586][ C0] ret_from_fork+0x4b/0x80 [ 128.197009][ C0] ? __pfx_kthread+0x10/0x10 [ 128.201600][ C0] ret_from_fork_asm+0x1a/0x30 [ 128.206374][ C0] 2024/05/28 07:12:20 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF