last executing test programs: 10.478233655s ago: executing program 2: sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa00"], 0x0) 10.477428335s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000140)=ANY=[], 0x0}, 0x90) syz_open_dev$dri(0x0, 0x0, 0x80000) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x80000) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d7b67f57ec82a421772b8d53ceea667238bdee3f4ce", 0x35, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 10.32215234s ago: executing program 2: syz_emit_ethernet(0x254, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x21e, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) 10.266313568s ago: executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x4, 0x0, 0x0, 0x0, 0x0) 10.185753231s ago: executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x51) recvmmsg(r1, &(0x7f00000037c0), 0x0, 0x0, 0x0) 9.375128707s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 9.364870748s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private1}, 0x55) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 9.176613848s ago: executing program 0: set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xd) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff00000000, 0x5, 0xfffffff8, {0x2, 0x3, 0x5, 0xd5c, 0x3ff, 0x0, 0x5, 0x20, 0x4, 0x6000, 0x400, 0xffffffffffffffff, 0x0, 0x6, 0x1}}}, 0x90) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900)="fc", 0x1}], 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001040)='./bus\x00', &(0x7f0000001080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='context']) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000400)={[], [{@flag='lazytime'}, {@obj_user={'obj_user', 0x3d, '('}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vcsa#\x00'}}]}, 0xfe, 0x51d, &(0x7f00000010c0)="$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") r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x35}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f00000002c0)=[{0x5, 0xff, 0x0, 0x800000}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x3d, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={r4}) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r5, 0x3, 0xffffffffffffffff, 0x5}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) socket$netlink(0x10, 0x3, 0x1d) read(r3, &(0x7f0000000000)=""/239, 0xef) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) 8.588575059s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private1}, 0x55) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 8.370064902s ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0xf3a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 8.357273894s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000001640)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f1b4fc851faf8228c2eb860e73d800000000fc8f28daf7b92d399638f3725b771bae16409426ba68f49ea9bc3f00000009000000af03f86e3850000000000000000000006fb7eb6e741aefc8dcea14cf372aa94362bb72d286ef49ca7100a2ab5ee798265a3fdbfc1304f534906c81748f507aee574b8a29d8c6d2ee"], 0x1, 0xa12, &(0x7f00000020c0)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000300)={0xf}, 0xf) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800000000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x2, 0x4}) 8.088160826s ago: executing program 0: sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa00"], 0x0) 6.211036217s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$binfmt_script(r5, 0x0, 0x0) 5.979677213s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000140)=ANY=[], 0x0}, 0x90) syz_open_dev$dri(0x0, 0x0, 0x80000) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x80000) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d7b67f57ec82a421772b8d53ceea667238bdee3f4ce", 0x35, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5.952203677s ago: executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x4, 0x0, 0x0, 0x0, 0x0) 5.771960475s ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x428, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x394, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x378, 0x6, [@m_tunnel_key={0x140, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xf1, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795ec248a49"}, {0xc}, {0xc}}}, @m_ife={0x94, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x39, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0c"}, {0xc}, {0xc}}}, @m_connmark={0xec, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x65, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e"}, {0xc}, {0xc}}}, @m_bpf={0x70, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x3d, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b2cee0c35637b64dc5c63c60e180d0c44ef1e097dda82cf07"}, {0xc}, {0xc}}}, @m_ctinfo={0x44, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "41be356e964e7745f9a57571dce1c50c2b"}, {0xc}, {0xc}}}]}]}}]}, 0x428}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.712693404s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r5, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x0, 0x4}, {0xab, 0x2}, {0xff, 0x2}, {0x8, 0x4}, {0x0, 0x7}, {}, {0x8, 0x1}, {0x8}, {0x8, 0x2}, {0xff, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x1}, {0x5, 0x4}]}}]}, 0x3c}}, 0x4040005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000014000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.662862572s ago: executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f000000c1c0)={0x2020}, 0x2020) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001", @ANYRES32=0xee01, @ANYBLOB="0200c2f2a7d6c296506c5ca22b34fd4bfc8f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="100000000000000020"], 0x5c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0) pwrite64(r4, &(0x7f0000000000)='+', 0xc0204, 0x7000002) 4.76938778s ago: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}}}, 0xe8) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000005c0)={0x6, 'bond_slave_0\x00', {0x9}, 0x1f}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200000c4, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x20000080) 4.45030366s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfed7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimes(&(0x7f0000000200)='./file0\x00', 0x0) 4.397015528s ago: executing program 3: syz_emit_ethernet(0x7e, &(0x7f000000a100)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12000c", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "f40040", 0x0, 0x11, 0x0, @private0, @empty, [@dstopts={0x88}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r0 = memfd_create(0x0, 0x8) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9c) fchmod(r0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) dup(0xffffffffffffffff) 3.410466341s ago: executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x8a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) 3.271462262s ago: executing program 3: sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa00"], 0x0) 3.229911509s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000001640)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f1b4fc851faf8228c2eb860e73d800000000fc8f28daf7b92d399638f3725b771bae16409426ba68f49ea9bc3f00000009000000af03f86e3850000000000000000000006fb7eb6e741aefc8dcea14cf372aa94362bb72d286ef49ca7100a2ab5ee798265a3fdbfc1304f534906c81748f507aee574b8a29d8c6d2ee"], 0x1, 0xa12, &(0x7f00000020c0)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000300)={0xf}, 0xf) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800000000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x2, 0x4}) 3.140209043s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0x76a0, 0x7fe2, 0x1, 0x40, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x10, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0xe0, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0xa4, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x4}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1c9bec56, 0x2294085, 0x3, 0xff, 0x5, 0x8}}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1.212170582s ago: executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x428, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x394, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x378, 0x6, [@m_tunnel_key={0x140, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xf1, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795ec248a49"}, {0xc}, {0xc}}}, @m_ife={0x94, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x39, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0c"}, {0xc}, {0xc}}}, @m_connmark={0xec, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x65, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e"}, {0xc}, {0xc}}}, @m_bpf={0x70, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x3d, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b2cee0c35637b64dc5c63c60e180d0c44ef1e097dda82cf07"}, {0xc}, {0xc}}}, @m_ctinfo={0x44, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "41be356e964e7745f9a57571dce1c50c2b"}, {0xc}, {0xc}}}]}]}}]}, 0x428}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.211751592s ago: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0xf3a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 1.047683447s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000140)=ANY=[], 0x0}, 0x90) syz_open_dev$dri(0x0, 0x0, 0x80000) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x80000) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d7b67f57ec82a421772b8d53ceea667238bdee3f4ce", 0x35, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.047275418s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r2 = memfd_secret(0x0) ftruncate(r2, 0x5) 0s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x63f8, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x8, 0x7fe2, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. 2024/06/08 08:45:49 fuzzer started 2024/06/08 08:45:49 dialing manager at 10.128.0.163:30022 [ 52.211695][ T3546] cgroup: Unknown subsys name 'net' [ 52.382007][ T3546] cgroup: Unknown subsys name 'rlimit' 2024/06/08 08:45:50 starting 5 executor processes [ 53.440017][ T3552] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.452146][ T3552] syz-executor (3552) used greatest stack depth: 20016 bytes left [ 54.803544][ T3571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.815015][ T3578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.823570][ T3578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.831575][ T3578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.837317][ T3579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.847416][ T3578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.849202][ T3580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.854972][ T3578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.862217][ T3580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.869838][ T3578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.877550][ T3580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.883172][ T3578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.890016][ T3580] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.897069][ T3578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.905533][ T3580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.912274][ T3578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.917885][ T3580] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.925156][ T3578] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.932515][ T3580] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.939158][ T3578] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.946074][ T3580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.953223][ T3578] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.959802][ T3580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.966691][ T3578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.981314][ T3580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.982038][ T3578] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.997986][ T3578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.999974][ T3569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.017836][ T3584] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.051824][ T3584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.405377][ T3581] chnl_net:caif_netlink_parms(): no params data found [ 55.406130][ T3590] modprobe (3590) used greatest stack depth: 19248 bytes left [ 55.418498][ T3567] chnl_net:caif_netlink_parms(): no params data found [ 55.541217][ T3568] chnl_net:caif_netlink_parms(): no params data found [ 55.606149][ T3574] chnl_net:caif_netlink_parms(): no params data found [ 55.647051][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.654119][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.662821][ T3581] device bridge_slave_0 entered promiscuous mode [ 55.679567][ T3566] chnl_net:caif_netlink_parms(): no params data found [ 55.701488][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.708791][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.717401][ T3581] device bridge_slave_1 entered promiscuous mode [ 55.724699][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.731954][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.740134][ T3567] device bridge_slave_0 entered promiscuous mode [ 55.751812][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.758978][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.767264][ T3567] device bridge_slave_1 entered promiscuous mode [ 55.845501][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.852783][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.861105][ T3568] device bridge_slave_0 entered promiscuous mode [ 55.870486][ T3581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.881443][ T3567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.903697][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.911015][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.919158][ T3568] device bridge_slave_1 entered promiscuous mode [ 55.928036][ T3581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.939364][ T3567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.997928][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.005053][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.012957][ T3574] device bridge_slave_0 entered promiscuous mode [ 56.043386][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.050597][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.058701][ T3566] device bridge_slave_0 entered promiscuous mode [ 56.066775][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.073887][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.082253][ T3574] device bridge_slave_1 entered promiscuous mode [ 56.091242][ T3568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.103302][ T3581] team0: Port device team_slave_0 added [ 56.111987][ T3567] team0: Port device team_slave_0 added [ 56.118090][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.125191][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.132916][ T3566] device bridge_slave_1 entered promiscuous mode [ 56.155533][ T3568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.176086][ T3581] team0: Port device team_slave_1 added [ 56.182835][ T3567] team0: Port device team_slave_1 added [ 56.226412][ T3566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.237390][ T3574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.249227][ T3568] team0: Port device team_slave_0 added [ 56.257892][ T3574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.281230][ T3566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.292418][ T3568] team0: Port device team_slave_1 added [ 56.314322][ T3581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.321481][ T3581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.347917][ T3581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.360121][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.367318][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.393264][ T3567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.431634][ T3581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.438799][ T3581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.464739][ T3581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.482256][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.489471][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.516724][ T3567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.534220][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.541450][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.567770][ T3568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.580834][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.588064][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.614372][ T3568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.628472][ T3574] team0: Port device team_slave_0 added [ 56.645861][ T3566] team0: Port device team_slave_0 added [ 56.655122][ T3574] team0: Port device team_slave_1 added [ 56.680567][ T3581] device hsr_slave_0 entered promiscuous mode [ 56.687538][ T3581] device hsr_slave_1 entered promiscuous mode [ 56.694828][ T3566] team0: Port device team_slave_1 added [ 56.763748][ T3568] device hsr_slave_0 entered promiscuous mode [ 56.770499][ T3568] device hsr_slave_1 entered promiscuous mode [ 56.779933][ T3568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.787737][ T3568] Cannot create hsr debugfs directory [ 56.804380][ T3567] device hsr_slave_0 entered promiscuous mode [ 56.811058][ T3567] device hsr_slave_1 entered promiscuous mode [ 56.818013][ T3567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.825575][ T3567] Cannot create hsr debugfs directory [ 56.831687][ T3574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.838744][ T3574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.865037][ T3574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.887859][ T3566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.894824][ T3566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.920961][ T3566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.932954][ T3574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.940549][ T3574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.966519][ T3574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.990382][ T3566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.997481][ T3566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.023635][ T3566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.056827][ T48] Bluetooth: hci4: command tx timeout [ 57.056836][ T3584] Bluetooth: hci2: command tx timeout [ 57.057012][ T3584] Bluetooth: hci3: command tx timeout [ 57.062425][ T48] Bluetooth: hci1: command tx timeout [ 57.136083][ T48] Bluetooth: hci0: command tx timeout [ 57.173836][ T3566] device hsr_slave_0 entered promiscuous mode [ 57.180734][ T3566] device hsr_slave_1 entered promiscuous mode [ 57.187323][ T3566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.194867][ T3566] Cannot create hsr debugfs directory [ 57.221924][ T3574] device hsr_slave_0 entered promiscuous mode [ 57.228713][ T3574] device hsr_slave_1 entered promiscuous mode [ 57.235137][ T3574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.245508][ T3574] Cannot create hsr debugfs directory [ 57.472672][ T3581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.483254][ T3581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.493210][ T3581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.502497][ T3581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.575601][ T3568] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.594926][ T3568] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.628466][ T3568] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.639475][ T3568] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.673786][ T3567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.709392][ T3581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.718744][ T3567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.729290][ T3567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.753536][ T3567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.772818][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.782644][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.797462][ T3581] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.807125][ T3566] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.832553][ T3566] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.855028][ T3566] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.868322][ T3566] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.895480][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.906439][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.914935][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.922188][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.931589][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.941548][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.950034][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.957146][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.998245][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.007248][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.016229][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.024813][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.034471][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.043104][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.052486][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.060883][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.069385][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.078293][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.114806][ T3574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.127147][ T3574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.139645][ T3574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.149272][ T3574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.160485][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.169384][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.180970][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.194639][ T3581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.239255][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.257034][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.285304][ T3567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.302113][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.342041][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.351817][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.366486][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.374090][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.382137][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.390690][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.400233][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.410861][ T3567] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.436911][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.446497][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.455558][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.462712][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.490520][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.499651][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.508919][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.517862][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.524914][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.532907][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.541661][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.550056][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.557270][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.565414][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.574126][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.582791][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.607060][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.615023][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.625305][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.634056][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.643998][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.653390][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.707019][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.721882][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.734597][ T3566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.750704][ T3574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.759310][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.767742][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.775201][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.783163][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.791849][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.800764][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.810018][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.829924][ T3568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.842626][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.857492][ T3581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.872343][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.881926][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.897256][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.905205][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.918570][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.930718][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.939385][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.947996][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.963019][ T3566] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.973106][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.994465][ T3574] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.012656][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.025267][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.036000][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.044859][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.059777][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.066942][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.113974][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.129033][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.136331][ T48] Bluetooth: hci1: command tx timeout [ 59.141173][ T3579] Bluetooth: hci3: command tx timeout [ 59.142497][ T48] Bluetooth: hci4: command tx timeout [ 59.148587][ T3584] Bluetooth: hci2: command tx timeout [ 59.166759][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.175542][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.182681][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.190518][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.199393][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.208537][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.216145][ T3584] Bluetooth: hci0: command tx timeout [ 59.218049][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.230827][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.239668][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.248360][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.258502][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.267297][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.274363][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.282010][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.291181][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.301104][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.309359][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.330274][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.344718][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.354250][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.361429][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.381929][ T3566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.400883][ T3566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.441846][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.450470][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.460499][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.470365][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.478756][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.486545][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.493943][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.502784][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.510344][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.520411][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.544643][ T3567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.552568][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.560583][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.570079][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.579218][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.588782][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.597024][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.607328][ T3581] device veth0_vlan entered promiscuous mode [ 59.636645][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.651781][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.660650][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.675614][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.694288][ T3568] device veth0_vlan entered promiscuous mode [ 59.730379][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.740506][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.749638][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.759486][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.768440][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.777428][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.785900][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.794109][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.802781][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.811937][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.820618][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.832423][ T3568] device veth1_vlan entered promiscuous mode [ 59.843357][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.862706][ T3567] device veth0_vlan entered promiscuous mode [ 59.870820][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.886638][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.894441][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.903529][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.912830][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.924222][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.932728][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.943364][ T3581] device veth1_vlan entered promiscuous mode [ 59.959183][ T3567] device veth1_vlan entered promiscuous mode [ 59.996690][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.004814][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.019869][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.032085][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.072453][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.086173][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.094823][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.114844][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.123610][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.131815][ T3581] device veth0_macvtap entered promiscuous mode [ 60.142517][ T3568] device veth0_macvtap entered promiscuous mode [ 60.153182][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.161943][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.170901][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.179674][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.193011][ T3566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.207409][ T3567] device veth0_macvtap entered promiscuous mode [ 60.216539][ T3568] device veth1_macvtap entered promiscuous mode [ 60.225155][ T3581] device veth1_macvtap entered promiscuous mode [ 60.249997][ T3567] device veth1_macvtap entered promiscuous mode [ 60.278099][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.293036][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.314471][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.338729][ T3581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.352744][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.361793][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.371042][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.379558][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.387604][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.396753][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.405326][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.414014][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.428480][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.447055][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.460846][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.475422][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.488062][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.499780][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.510421][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.521898][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.533895][ T3581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.552121][ T3581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.565200][ T3581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.586203][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.594820][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.604100][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.612905][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.621838][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.629461][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.638479][ T3568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.648661][ T3568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.662537][ T3568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.671404][ T3568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.684561][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.695672][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.705927][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.716989][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.728883][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.745544][ T3581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.754596][ T3581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.763532][ T3581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.772384][ T3581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.788329][ T3574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.795687][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.804422][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.820625][ T3567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.830493][ T3567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.840168][ T3567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.849848][ T3567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.969994][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.979320][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.046786][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.055140][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.064799][ T3574] device veth0_vlan entered promiscuous mode [ 61.091003][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.101286][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.114237][ T3574] device veth1_vlan entered promiscuous mode [ 61.133284][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.163067][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.173678][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.183081][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.191270][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.200380][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.209385][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.218387][ T3579] Bluetooth: hci4: command tx timeout [ 61.223841][ T3579] Bluetooth: hci1: command tx timeout [ 61.230042][ T3584] Bluetooth: hci2: command tx timeout [ 61.230059][ T3578] Bluetooth: hci3: command tx timeout [ 61.252737][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.288142][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.293094][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.300263][ T3566] device veth0_vlan entered promiscuous mode [ 61.311025][ T3578] Bluetooth: hci0: command tx timeout [ 61.321448][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.329185][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.337891][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.338409][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.346694][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.361588][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.362466][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.377092][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.392015][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.392609][ T3566] device veth1_vlan entered promiscuous mode [ 61.410075][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.418699][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.427052][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.434737][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.443456][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.451839][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.459978][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.508081][ T3574] device veth0_macvtap entered promiscuous mode [ 61.562853][ T3574] device veth1_macvtap entered promiscuous mode [ 61.569325][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.579477][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.598423][ T3566] device veth0_macvtap entered promiscuous mode [ 61.612113][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.629269][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.652945][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.680797][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.694087][ T3652] loop2: detected capacity change from 0 to 4096 [ 61.694743][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.708770][ T3652] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 61.728165][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.737811][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.762942][ T3566] device veth1_macvtap entered promiscuous mode [ 61.798567][ T3574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.810369][ T3574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.820637][ T3574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.832175][ T3574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.842372][ T3574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.853684][ T3574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.875743][ T3574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.887658][ T3581] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 61.898118][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.899023][ T3581] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 61.918232][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.939981][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.958667][ T3581] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 61.962778][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.975035][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 61.977294][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.999820][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.011279][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.023512][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.026083][ T3614] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.034283][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.065964][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.081815][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.094331][ T3574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.108166][ T3574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.118282][ T3574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.129476][ T3574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.139437][ T3574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.150399][ T3574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.161509][ T3574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.172180][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.182735][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.192034][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.201226][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.284952][ T3574] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.295897][ T3614] usb 4-1: Using ep0 maxpacket: 8 [ 62.300998][ T3574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.321242][ T3574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.340982][ T3574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.359635][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.374243][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.386988][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.397853][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.407962][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.419681][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.429986][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.440845][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.452448][ T3614] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.453408][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.475864][ T3614] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.477312][ T3659] device syzkaller1 entered promiscuous mode [ 62.485612][ T3614] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.485657][ T3614] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.518177][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.519333][ T3614] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.534961][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.536215][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.565355][ T3566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.574564][ T3566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.592673][ T3566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.601718][ T3566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.791756][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.808329][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.826053][ T3614] usb 4-1: GET_CAPABILITIES returned 0 [ 62.832526][ T3614] usbtmc 4-1:16.0: can't read capabilities [ 62.850080][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.853890][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.883522][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.938982][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.960521][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.985214][ T3664] loop1: detected capacity change from 0 to 32768 [ 62.991994][ T3629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.003826][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.011377][ T3629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.042974][ T3664] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (3664) [ 63.045261][ T3614] usb 4-1: USB disconnect, device number 2 [ 63.063313][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.086869][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.150873][ T3664] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 63.211320][ T3664] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 63.244962][ T3664] BTRFS info (device loop1): force zlib compression, level 3 [ 63.262386][ T3664] BTRFS info (device loop1): force clearing of disk cache [ 63.283350][ T3664] BTRFS info (device loop1): setting nodatasum [ 63.295874][ T3578] Bluetooth: hci1: command tx timeout [ 63.297246][ T3579] Bluetooth: hci2: command tx timeout [ 63.301321][ T3578] Bluetooth: hci4: command tx timeout [ 63.308629][ T48] Bluetooth: hci3: command tx timeout [ 63.337952][ T3664] BTRFS info (device loop1): allowing degraded mounts [ 63.370504][ T3678] loop0: detected capacity change from 0 to 256 [ 63.376968][ T3579] Bluetooth: hci0: command tx timeout [ 63.377946][ T3664] BTRFS info (device loop1): enabling disk space caching [ 63.390551][ T3664] BTRFS info (device loop1): disk space caching is enabled [ 63.452373][ T3678] FAT-fs (loop0): Directory bread(block 64) failed [ 63.459978][ T3679] loop4: detected capacity change from 0 to 4096 [ 63.498879][ T3678] FAT-fs (loop0): Directory bread(block 65) failed [ 63.525884][ T3678] FAT-fs (loop0): Directory bread(block 66) failed [ 63.532892][ T3678] FAT-fs (loop0): Directory bread(block 67) failed [ 63.547926][ T3678] FAT-fs (loop0): Directory bread(block 68) failed [ 63.579463][ T3678] FAT-fs (loop0): Directory bread(block 69) failed [ 63.625890][ T3678] FAT-fs (loop0): Directory bread(block 70) failed [ 63.651044][ T3678] FAT-fs (loop0): Directory bread(block 71) failed [ 63.704073][ T3678] FAT-fs (loop0): Directory bread(block 72) failed [ 63.714975][ T3678] FAT-fs (loop0): Directory bread(block 73) failed [ 63.863940][ T3664] BTRFS info (device loop1): rebuilding free space tree [ 64.089720][ T3664] BTRFS info (device loop1): disabling free space tree [ 64.116062][ T3664] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.127248][ T3664] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.910773][ T3567] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 66.205290][ T3715] loop4: detected capacity change from 0 to 128 [ 66.271797][ T3715] ufs: You didn't specify the type of your ufs filesystem [ 66.271797][ T3715] [ 66.271797][ T3715] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 66.271797][ T3715] [ 66.271797][ T3715] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 66.302733][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.357165][ T3715] ufs: ufs_fill_super(): bad magic number [ 66.404190][ T3692] loop3: detected capacity change from 0 to 32768 [ 66.471839][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 66.530719][ T3692] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 66.560044][ T3724] loop1: detected capacity change from 0 to 64 [ 66.574363][ T3692] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 66.738773][ T3692] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 3ms [ 66.750818][ T3728] loop4: detected capacity change from 0 to 512 [ 66.791760][ T3728] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.807298][ T3624] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 66.828843][ T3624] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 66.869113][ T3728] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 66.926112][ T3624] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 97ms [ 66.943032][ T3624] gfs2: fsid=syz:syz.0: jid=0: Done [ 66.952460][ T3692] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 66.959951][ T3728] EXT4-fs (loop4): group descriptors corrupted! [ 66.995999][ T3692] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 67.921685][ T3741] loop4: detected capacity change from 0 to 2048 [ 68.005002][ T3741] loop4: p1 < > p4 [ 68.028027][ T3741] loop4: p4 size 8388608 extends beyond EOD, truncated [ 68.071385][ T3003] loop4: p1 < > p4 [ 68.081621][ T3003] loop4: p4 size 8388608 extends beyond EOD, truncated [ 68.220656][ T3649] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.277404][ T3668] udevd[3668]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 68.294988][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 68.337625][ T3757] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.469639][ T3761] loop2: detected capacity change from 0 to 256 [ 68.544632][ T3761] FAT-fs (loop2): Directory bread(block 64) failed [ 68.569532][ T3761] FAT-fs (loop2): Directory bread(block 65) failed [ 68.589922][ T3761] FAT-fs (loop2): Directory bread(block 66) failed [ 68.610646][ T3761] FAT-fs (loop2): Directory bread(block 67) failed [ 68.625487][ T3761] FAT-fs (loop2): Directory bread(block 68) failed [ 68.625677][ T3731] loop0: detected capacity change from 0 to 32768 [ 68.625919][ T3761] FAT-fs (loop2): Directory bread(block 69) failed [ 68.626013][ T3761] FAT-fs (loop2): Directory bread(block 70) failed [ 68.779597][ T3731] XFS (loop0): Mounting V5 Filesystem [ 68.805305][ T3761] FAT-fs (loop2): Directory bread(block 71) failed [ 68.873985][ T3761] FAT-fs (loop2): Directory bread(block 72) failed [ 68.893161][ T3746] loop1: detected capacity change from 0 to 40427 [ 68.911691][ T3761] FAT-fs (loop2): Directory bread(block 73) failed [ 68.963062][ T3746] F2FS-fs (loop1): invalid crc value [ 68.974630][ T3731] XFS (loop0): Ending clean mount [ 69.000233][ T3731] XFS (loop0): Quotacheck needed: Please wait. [ 69.183896][ T3731] XFS (loop0): Quotacheck: Done. [ 69.229793][ T3746] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.726636][ T26] audit: type=1804 audit(1717836366.789:2): pid=3731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2344741787/syzkaller.R3S3H8/1/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 69.752100][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.874803][ T3574] XFS (loop0): Unmounting Filesystem [ 69.953606][ T3746] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 70.074447][ T3794] loop3: detected capacity change from 0 to 512 [ 70.119354][ T3794] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.145866][ T3794] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 70.184392][ T3794] EXT4-fs (loop3): group descriptors corrupted! [ 70.820009][ T3813] loop2: detected capacity change from 0 to 16 [ 70.841545][ T3813] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 70.887365][ T3814] loop3: detected capacity change from 0 to 2048 [ 70.947051][ T3814] loop3: p1 < > p4 [ 70.955019][ T3814] loop3: p4 size 8388608 extends beyond EOD, truncated [ 71.379365][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.385989][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.154336][ T3840] loop0: detected capacity change from 0 to 256 [ 72.231476][ T3840] FAT-fs (loop0): Directory bread(block 64) failed [ 72.247987][ T3840] FAT-fs (loop0): Directory bread(block 65) failed [ 72.272783][ T3840] FAT-fs (loop0): Directory bread(block 66) failed [ 72.295072][ T3840] FAT-fs (loop0): Directory bread(block 67) failed [ 72.312323][ T3840] FAT-fs (loop0): Directory bread(block 68) failed [ 72.354548][ T3840] FAT-fs (loop0): Directory bread(block 69) failed [ 72.387268][ T3840] FAT-fs (loop0): Directory bread(block 70) failed [ 72.429671][ T3840] FAT-fs (loop0): Directory bread(block 71) failed [ 72.469721][ T3840] FAT-fs (loop0): Directory bread(block 72) failed [ 72.507131][ T3840] FAT-fs (loop0): Directory bread(block 73) failed [ 72.743524][ T3826] loop2: detected capacity change from 0 to 32768 [ 72.860676][ T26] audit: type=1800 audit(1717836370.349:3): pid=3866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1967 res=0 errno=0 [ 72.929029][ T3826] XFS (loop2): Mounting V5 Filesystem [ 73.161694][ T3826] XFS (loop2): Ending clean mount [ 73.174355][ T3826] XFS (loop2): Quotacheck needed: Please wait. [ 73.339461][ T3877] loop1: detected capacity change from 0 to 2048 [ 73.515990][ T3826] XFS (loop2): Quotacheck: Done. [ 73.598903][ T26] audit: type=1804 audit(1717836371.089:4): pid=3826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir794349362/syzkaller.uosddt/12/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 73.672557][ T3877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 73.673760][ T3850] loop4: detected capacity change from 0 to 40427 [ 73.690960][ T3850] F2FS-fs (loop4): invalid crc value [ 73.726403][ T3850] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.865324][ T3581] XFS (loop2): Unmounting Filesystem [ 73.953046][ T3850] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 74.496025][ T3632] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.834208][ T3903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.862082][ T3903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.906813][ T3632] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 75.000915][ T3903] team0: Port device team_slave_1 removed [ 75.111423][ T3632] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 75.129332][ T3632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.131709][ T3908] loop2: detected capacity change from 0 to 1024 [ 75.158708][ T3632] usb 2-1: Product: syz [ 75.172265][ T3632] usb 2-1: Manufacturer: syz [ 75.183959][ T3632] usb 2-1: SerialNumber: syz [ 75.203724][ T3908] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.243162][ T3632] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 75.255138][ T26] audit: type=1800 audit(1717836372.739:5): pid=3909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="loop4" ino=10 res=0 errno=0 [ 75.420008][ T3581] EXT4-fs (loop2): unmounting filesystem. [ 76.480598][ T3614] usb 2-1: USB disconnect, device number 2 [ 76.498965][ T152] cfg80211: failed to load regulatory.db [ 76.578469][ T3567] EXT4-fs (loop1): unmounting filesystem. [ 76.603619][ T3937] loop0: detected capacity change from 0 to 128 [ 76.608225][ T3926] loop3: detected capacity change from 0 to 32768 [ 76.694041][ T3926] XFS (loop3): Mounting V5 Filesystem [ 76.884605][ T3926] XFS (loop3): Ending clean mount [ 76.914960][ T3926] XFS (loop3): Quotacheck needed: Please wait. [ 76.989556][ T3926] XFS (loop3): Quotacheck: Done. [ 76.997666][ T3566] syz-executor.4: attempt to access beyond end of device [ 76.997666][ T3566] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.036127][ T26] audit: type=1804 audit(1717836374.529:6): pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2629472328/syzkaller.HAANzv/18/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 77.173749][ T3568] XFS (loop3): Unmounting Filesystem [ 77.656949][ T3632] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.890202][ T3973] loop4: detected capacity change from 0 to 2048 [ 78.014975][ T3973] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.055787][ T3632] usb 3-1: Using ep0 maxpacket: 8 [ 78.162818][ T3977] input: syz1 as /devices/virtual/input/input5 [ 78.436702][ T3632] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.663374][ T3632] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.890820][ T3632] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.144977][ T3632] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.193620][ T3986] ptrace attach of "/root/syz-executor.1 exec"[3567] was attempted by "/root/syz-executor.1 exec"[3986] [ 79.228536][ T3632] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.253519][ T3632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.428572][ T3995] fuse: Bad value for 'group_id' [ 79.545812][ T41] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.566082][ T3632] usb 3-1: GET_CAPABILITIES returned 0 [ 79.572342][ T3632] usbtmc 3-1:16.0: can't read capabilities [ 79.781055][ T3614] usb 3-1: USB disconnect, device number 2 [ 79.845846][ T3632] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.979737][ T3994] loop1: detected capacity change from 0 to 40427 [ 80.031299][ T3994] F2FS-fs (loop1): invalid crc value [ 80.065951][ T41] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 80.118709][ T3994] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.215889][ T3994] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 80.266297][ T41] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 80.276464][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.284932][ T41] usb 5-1: Product: syz [ 80.289786][ T3632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 80.301702][ T41] usb 5-1: Manufacturer: syz [ 80.307772][ T3632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 80.319430][ T41] usb 5-1: SerialNumber: syz [ 80.342275][ T3632] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.377842][ T41] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 80.408673][ T3632] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.419356][ T3632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.437429][ T3632] usb 1-1: config 0 descriptor?? [ 80.476136][ T3995] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 80.879908][ T26] audit: type=1800 audit(1717836378.369:7): pid=4007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 80.964698][ T3632] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 80.986683][ T3632] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 81.030305][ T3632] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 81.087852][ T4005] loop2: detected capacity change from 0 to 32768 [ 81.148629][ T4005] XFS (loop2): Mounting V5 Filesystem [ 81.244341][ T3632] usb 1-1: USB disconnect, device number 2 [ 81.300431][ T4005] XFS (loop2): Ending clean mount [ 81.338077][ T4005] XFS (loop2): Quotacheck needed: Please wait. [ 81.384465][ T4005] XFS (loop2): Quotacheck: Done. [ 81.422352][ T26] audit: type=1804 audit(1717836378.909:8): pid=4005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir794349362/syzkaller.uosddt/22/file0/bus" dev="loop2" ino=9291 res=1 errno=0 [ 81.473251][ T3581] XFS (loop2): Unmounting Filesystem [ 81.660819][ T3613] usb 5-1: USB disconnect, device number 2 [ 81.662469][ T3566] EXT4-fs (loop4): unmounting filesystem. [ 81.886045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.895792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.905749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.915745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.915759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.925743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.925757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.935744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.935758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.943030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 82.611074][ T3567] syz-executor.1: attempt to access beyond end of device [ 82.611074][ T3567] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.884498][ T4040] loop2: detected capacity change from 0 to 1024 [ 82.902470][ T4040] EXT4-fs: Ignoring removed nobh option [ 82.994409][ T4040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.097116][ T3581] EXT4-fs (loop2): unmounting filesystem. [ 83.456450][ T4050] loop3: detected capacity change from 0 to 2048 [ 83.465934][ T3613] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.538428][ T4050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.728349][ T4056] loop1: detected capacity change from 0 to 512 [ 83.885532][ T4056] ext2: Unknown parameter 'obj_user' [ 84.006250][ T3613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.151470][ T3613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.162033][ T41] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.381544][ T3613] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.433141][ T26] audit: type=1326 audit(1717836381.919:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4055 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae3847cf69 code=0x0 [ 84.453229][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.467325][ T3613] usb 3-1: config 0 descriptor?? [ 84.586078][ T41] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.718885][ T3613] hid (null): bogus close delimiter [ 85.833193][ T41] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 85.843336][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.851504][ T41] usb 4-1: Product: syz [ 85.855938][ T3613] usb 3-1: language id specifier not provided by device, defaulting to English [ 85.865296][ T41] usb 4-1: Manufacturer: syz [ 85.870108][ T41] usb 4-1: SerialNumber: syz [ 86.434525][ T41] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 86.643718][ T4081] loop4: detected capacity change from 0 to 2048 [ 86.748514][ T4081] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 86.908394][ T3613] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input7 [ 86.956313][ T4081] fuse: Bad value for 'fd' [ 87.017832][ T3613] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input8 [ 87.070644][ T3613] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input9 [ 87.211878][ T3632] usb 4-1: USB disconnect, device number 3 [ 87.345250][ T3568] EXT4-fs (loop3): unmounting filesystem. [ 87.354173][ T3613] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input10 [ 87.455436][ T3613] uclogic 0003:256C:006D.0002: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 87.696992][ T3613] usb 3-1: USB disconnect, device number 3 [ 88.047212][ T4098] input: syz1 as /devices/virtual/input/input11 [ 89.443254][ T4079] loop0: detected capacity change from 0 to 40427 [ 89.539907][ T4079] F2FS-fs (loop0): invalid crc value [ 89.567059][ T4079] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 89.652062][ T4109] loop2: detected capacity change from 0 to 512 [ 89.668877][ T4109] ext2: Unknown parameter 'obj_user' [ 89.695383][ T26] audit: type=1326 audit(1717836387.179:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aec27cf69 code=0x0 [ 91.199410][ T4133] loop4: detected capacity change from 0 to 2048 [ 91.327730][ T4136] loop0: detected capacity change from 0 to 16 [ 91.394058][ T4136] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 91.412572][ T4133] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 91.445842][ T4133] fuse: Bad value for 'fd' [ 92.146743][ T4156] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.157180][ T4156] unsupported nlmsg_type 40 [ 93.158898][ T4173] loop2: detected capacity change from 0 to 512 [ 93.286761][ T4173] ext2: Unknown parameter 'obj_user' [ 94.213782][ T4114] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.237713][ T26] audit: type=1326 audit(1717836391.729:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aec27cf69 code=0x0 [ 94.314976][ T4180] loop1: detected capacity change from 0 to 16 [ 94.439216][ T4180] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 96.458759][ T4208] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.537022][ T4213] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.347949][ T4215] loop2: detected capacity change from 0 to 2048 [ 98.397589][ T4215] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 98.464228][ T4215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.539436][ T4218] loop4: detected capacity change from 0 to 2048 [ 98.563277][ T4218] NILFS (loop4): invalid segment: Sequence number mismatch [ 98.570852][ T4218] NILFS (loop4): trying rollback from an earlier position [ 98.594976][ T4218] NILFS (loop4): recovery complete [ 98.693862][ T4219] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.809202][ T4218] sched: RT throttling activated [ 101.077959][ T4237] loop0: detected capacity change from 0 to 128 [ 101.581129][ T26] audit: type=1800 audit(1717836399.069:12): pid=4237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048596 res=0 errno=0 [ 101.773959][ T26] audit: type=1804 audit(1717836399.239:13): pid=4237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2344741787/syzkaller.R3S3H8/30/file0/bus" dev="loop0" ino=1048596 res=1 errno=0 [ 102.159055][ T4251] loop0: detected capacity change from 0 to 512 [ 102.167002][ T4251] ext2: Unknown parameter 'obj_user' [ 102.229917][ T4253] tipc: Started in network mode [ 102.235066][ T4253] tipc: Node identity ac1414aa, cluster identity 4711 [ 102.242647][ T4253] tipc: New replicast peer: 100.1.1.1 [ 102.248335][ T4253] tipc: Enabled bearer , priority 10 [ 102.500646][ T4114] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.527163][ T26] audit: type=1326 audit(1717836400.019:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4250 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd362a7cf69 code=0x0 [ 103.084206][ T4264] loop4: detected capacity change from 0 to 2048 [ 103.095393][ T4264] NILFS (loop4): invalid segment: Sequence number mismatch [ 103.102831][ T4264] NILFS (loop4): trying rollback from an earlier position [ 103.119538][ T4264] NILFS (loop4): recovery complete [ 103.329023][ T4265] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.363684][ T3632] tipc: Node number set to 2886997162 [ 108.041622][ T4286] loop2: detected capacity change from 0 to 40427 [ 108.094468][ T4286] F2FS-fs (loop2): invalid crc value [ 108.122447][ T4311] loop4: detected capacity change from 0 to 2048 [ 108.132456][ T4311] NILFS (loop4): invalid segment: Sequence number mismatch [ 108.139759][ T4311] NILFS (loop4): trying rollback from an earlier position [ 108.159365][ T4311] NILFS (loop4): recovery complete [ 108.183881][ T4314] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.228103][ T4286] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.685132][ T4321] tipc: Enabling of bearer rejected, already enabled [ 132.886169][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.892513][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.285666][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 216.292647][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3581/1:b..l [ 216.300945][ C0] (detected by 0, t=10502 jiffies, g=10797, q=397 ncpus=2) [ 216.308235][ C0] task:syz-executor.2 state:R running task stack:20312 pid:3581 ppid:1 flags:0x00004006 [ 216.319744][ C0] Call Trace: [ 216.323025][ C0] [ 216.325958][ C0] __schedule+0x142d/0x4550 [ 216.330500][ C0] ? unwind_next_frame+0x1a3f/0x2220 [ 216.335799][ C0] ? __sched_text_start+0x8/0x8 [ 216.340653][ C0] ? print_irqtrace_events+0x210/0x210 [ 216.346124][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 216.351418][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 216.356532][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 216.362270][ C0] irqentry_exit+0x53/0x80 [ 216.366684][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 216.372668][ C0] RIP: 0010:arch_stack_walk+0x114/0x140 [ 216.378214][ C0] Code: ff 48 89 df e8 dd f9 08 00 48 85 c0 74 1e 4c 89 f7 48 89 c6 41 ff d5 84 c0 74 11 48 89 df e8 e3 fa 08 00 83 bd 70 ff ff ff 00 <75> d5 65 48 8b 04 25 28 00 00 00 48 3b 45 d0 75 0f 48 83 c4 68 5b [ 216.397828][ C0] RSP: 0018:ffffc9000409f260 EFLAGS: 00000202 [ 216.403896][ C0] RAX: 0000000080000001 RBX: ffffc9000409f260 RCX: 0000000080000000 [ 216.411866][ C0] RDX: dffffc0000000000 RSI: ffffc90004098000 RDI: 0000000000000001 [ 216.419833][ C0] RBP: ffffc9000409f2f0 R08: ffffc9000409fc90 R09: ffffc9000409f2b0 [ 216.427801][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880291d5940 [ 216.435769][ C0] R13: ffffffff81784820 R14: ffffc9000409f340 R15: 0000000000000000 [ 216.443738][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 216.448787][ C0] ? __dentry_kill+0x436/0x650 [ 216.453558][ C0] stack_trace_save+0x113/0x1c0 [ 216.458412][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 216.463537][ C0] save_stack+0xf6/0x1e0 [ 216.467784][ C0] ? __reset_page_owner+0x1a0/0x1a0 [ 216.472980][ C0] ? free_unref_page_prepare+0xf63/0x1120 [ 216.478697][ C0] ? free_unref_page_list+0x663/0x900 [ 216.484067][ C0] ? release_pages+0x2836/0x2b40 [ 216.489005][ C0] ? __pagevec_release+0x80/0xf0 [ 216.493944][ C0] ? shmem_undo_range+0x865/0x2390 [ 216.499056][ C0] ? shmem_evict_inode+0x265/0xa60 [ 216.504170][ C0] ? evict+0x2a4/0x620 [ 216.508252][ C0] ? page_ext_get+0x1c/0x2a0 [ 216.512850][ C0] __reset_page_owner+0x52/0x1a0 [ 216.517795][ C0] free_unref_page_prepare+0xf63/0x1120 [ 216.523342][ C0] ? uncharge_batch+0x4e0/0x4e0 [ 216.528201][ C0] free_unref_page_list+0x663/0x900 [ 216.533402][ C0] ? __mod_zone_page_state+0xd6/0x140 [ 216.538778][ C0] release_pages+0x2836/0x2b40 [ 216.543554][ C0] ? lru_cache_disable+0x30/0x30 [ 216.548491][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 216.553689][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 216.558895][ C0] __pagevec_release+0x80/0xf0 [ 216.563661][ C0] shmem_undo_range+0x865/0x2390 [ 216.568613][ C0] ? shmem_truncate_range+0xb0/0xb0 [ 216.573854][ C0] shmem_evict_inode+0x265/0xa60 [ 216.578794][ C0] ? inode_wait_for_writeback+0x21f/0x280 [ 216.584519][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 216.590067][ C0] ? bit_waitqueue+0x30/0x30 [ 216.594667][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 216.599867][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 216.605414][ C0] evict+0x2a4/0x620 [ 216.609321][ C0] __dentry_kill+0x436/0x650 [ 216.613916][ C0] dentry_kill+0xbb/0x290 [ 216.618244][ C0] ? dput+0x37/0x1d0 [ 216.622136][ C0] dput+0xfb/0x1d0 [ 216.625855][ C0] __fput+0x5e4/0x890 [ 216.629846][ C0] task_work_run+0x246/0x300 [ 216.634441][ C0] ? task_work_cancel+0x2b0/0x2b0 [ 216.639464][ C0] ? blkdev_ioctl+0x3a9/0x760 [ 216.644145][ C0] ? exit_to_user_mode_loop+0x39/0x100 [ 216.649606][ C0] exit_to_user_mode_loop+0xde/0x100 [ 216.654889][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 216.660433][ C0] syscall_exit_to_user_mode+0x60/0x270 [ 216.665982][ C0] do_syscall_64+0x47/0xb0 [ 216.670401][ C0] ? clear_bhb_loop+0x45/0xa0 [ 216.675085][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.680979][ C0] RIP: 0033:0x7f7aec27cccb [ 216.685401][ C0] RSP: 002b:00007fff4181d820 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.693812][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f7aec27cccb [ 216.701780][ C0] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 216.709748][ C0] RBP: 00007fff4181d8cc R08: 0000000000000000 R09: 00007fff4181d5c7 [ 216.717716][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000038 [ 216.725685][ C0] R13: 0000000000019f37 R14: 0000000000019ca6 R15: 0000000000000006 [ 216.733669][ C0] [ 216.736690][ C0] rcu: rcu_preempt kthread starved for 9695 jiffies! g10797 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 216.747793][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 216.757752][ C0] rcu: RCU grace-period kthread stack dump: [ 216.763631][ C0] task:rcu_preempt state:R running task stack:27032 pid:16 ppid:2 flags:0x00004000 [ 216.774409][ C0] Call Trace: [ 216.777683][ C0] [ 216.780614][ C0] __schedule+0x142d/0x4550 [ 216.785122][ C0] ? _raw_spin_unlock+0x40/0x40 [ 216.789993][ C0] ? __sched_text_start+0x8/0x8 [ 216.794848][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 216.800223][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 216.806124][ C0] ? _raw_spin_unlock+0x40/0x40 [ 216.810978][ C0] schedule+0xbf/0x180 [ 216.815057][ C0] schedule_timeout+0x1b9/0x300 [ 216.819907][ C0] ? console_conditional_schedule+0x40/0x40 [ 216.825798][ C0] ? update_process_times+0x1b0/0x1b0 [ 216.831174][ C0] ? prepare_to_swait_event+0x329/0x350 [ 216.836727][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 216.841586][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 216.847742][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 216.852940][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 216.857702][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 216.863602][ C0] ? finish_swait+0xcf/0x1e0 [ 216.868197][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 216.872792][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 216.877903][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 216.883802][ C0] ? __kthread_parkme+0x168/0x1c0 [ 216.888834][ C0] kthread+0x28d/0x320 [ 216.892900][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 216.898011][ C0] ? kthread_blkcg+0xd0/0xd0 [ 216.902604][ C0] ret_from_fork+0x1f/0x30 [ 216.907033][ C0] [ 216.910055][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 216.916384][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.92-syzkaller #0 [ 216.924010][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 216.934062][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 216.939870][ C0] Code: 4f f5 f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 d4 0d fc f6 0f 1f 44 00 00 e8 7a 4b f5 f6 0f 00 2d 03 1f b2 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 5b cb 4c f7 [ 216.959471][ C0] RSP: 0018:ffffffff8ce07b20 EFLAGS: 000002d3 [ 216.965540][ C0] RAX: ffffffff8a9541d6 RBX: 0000000000000000 RCX: ffffffff8cebd800 [ 216.973507][ C0] RDX: 0000000000000000 RSI: ffffffff8aec01c0 RDI: ffffffff8b3d45e0 [ 216.981472][ C0] RBP: ffffffff8ce07bb0 R08: ffffffff8a9541b8 R09: fffffbfff19d7b01 [ 216.989442][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff19c0f64 [ 216.997410][ C0] R13: ffff8880183e0804 R14: ffffffff8ce07b40 R15: dffffc0000000000 [ 217.005381][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 217.014307][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.020888][ C0] CR2: 00007ffe23a263d8 CR3: 0000000022171000 CR4: 00000000003506f0 [ 217.028859][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.036824][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.044790][ C0] Call Trace: [ 217.048066][ C0] [ 217.050907][ C0] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 217.057242][ C0] ? print_other_cpu_stall+0x150c/0x1640 [ 217.062889][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 217.067828][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 217.072860][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 217.078061][ C0] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 217.083435][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 217.088283][ C0] ? hrtimer_run_queues+0x163/0x450 [ 217.093488][ C0] ? update_process_times+0x147/0x1b0 [ 217.098859][ C0] ? tick_sched_timer+0x386/0x550 [ 217.103882][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 217.109511][ C0] ? __hrtimer_run_queues+0x5a7/0xe50 [ 217.114896][ C0] ? hrtimer_interrupt+0x980/0x980 [ 217.120006][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 217.126087][ C0] ? hrtimer_interrupt+0x392/0x980 [ 217.131217][ C0] ? __sysvec_apic_timer_interrupt+0x156/0x580 [ 217.137372][ C0] ? sysvec_apic_timer_interrupt+0x8c/0xb0 [ 217.143178][ C0] [ 217.146106][ C0] [ 217.149041][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 217.155200][ C0] ? acpi_idle_do_entry+0xe8/0x340 [ 217.160307][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 217.165507][ C0] ? acpi_idle_do_entry+0x10f/0x340 [ 217.170704][ C0] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 217.175899][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 217.181883][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 217.187518][ C0] acpi_idle_enter+0x352/0x4f0 [ 217.192285][ C0] cpuidle_enter_state+0x516/0xf80 [ 217.197410][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 217.202786][ C0] ? tick_nohz_idle_stop_tick+0x238/0xad0 [ 217.208513][ C0] cpuidle_enter+0x59/0x90 [ 217.212932][ C0] do_idle+0x3ce/0x680 [ 217.217013][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 217.222221][ C0] ? schedule_idle+0x57/0x90 [ 217.226817][ C0] ? do_idle+0x663/0x680 [ 217.231064][ C0] ? rest_init+0x31/0x300 [ 217.235391][ C0] ? rest_init+0x31/0x300 [ 217.239718][ C0] cpu_startup_entry+0x3d/0x60 [ 217.244483][ C0] rest_init+0x2da/0x300 [ 217.248723][ C0] ? time_init+0x33/0x33 [ 217.252969][ C0] arch_call_rest_init+0xa/0xa [ 217.257741][ C0] start_kernel+0x496/0x53f [ 217.262248][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 217.268158][ C0]