last executing test programs: 9.75852776s ago: executing program 3 (id=364): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$netlink(0x10, 0x3, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000b05000/0x1000)=nil, 0x0) 6.056164594s ago: executing program 3 (id=370): fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountstats\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) setreuid(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getrlimit(0x1, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='auxv\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xd2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.346202085s ago: executing program 4 (id=377): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') 4.155462204s ago: executing program 0 (id=378): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 4.102719517s ago: executing program 4 (id=380): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x8, 0x2a}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000001, 0x0, 0x2, 0x8}}, 0x20) 4.015065411s ago: executing program 0 (id=381): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) 3.962349313s ago: executing program 3 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d00058009000100", @ANYRESHEX], 0xbc}}, 0x0) 3.896204866s ago: executing program 4 (id=383): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r1, &(0x7f0000000000)='\"', 0xfdef) 3.194325779s ago: executing program 1 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="740100001000130700000000fbdbdf25ff01000000000000000000000000000100000000000000000000000000000001000900000002ffff0000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d432000000ac1e0001000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002000400000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a"], 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x40082) 3.054213936s ago: executing program 0 (id=387): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@nomblk_io_submit}, {@abort}, {@usrjquota}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x6, 0x7, 0x801, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x2}, [@nested={0xa6, 0x55, 0x0, 0x1, [@generic="3c20c109b80910ee7f484df3ba2f0d49aea173b61824c416f55b3e3f32fa847b2ea787d3771434b9c6bb19e9cc4955bb6baeee3030bc4321029b93664ee047716d9a8e1de6f64e35c2094a962837e345b1dfcaad735d36d2d5b1cd9e528e89e1fcf063a7def1e026f1e52699f7db19d9e43f96bf61f027d8b1d58977c840f27a1dca7057600c5c6b06bbc5bb82ef965b284c3a1746e83590f0b463df2fdb", @nested={0x4, 0x1b}]}]}, 0xbc}}, 0x4800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x1018807, &(0x7f0000000200)=ANY=[], 0x41, 0x24e, &(0x7f0000000480)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@filename='./file0\x00', 0x0, &(0x7f0000000140)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xa, &(0x7f0000000400)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x4}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce030000000a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 2.830893397s ago: executing program 1 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000180)}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x40}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x4000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="05", 0x1}], 0x1}}], 0x1, 0x4000080) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) lseek(0xffffffffffffffff, 0xb5, 0x1) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='md0', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r6, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a0000000004000002000000020000000000") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket(0x15, 0x5, 0x0) 2.287636572s ago: executing program 4 (id=390): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x470c, &(0x7f00000047c0)="$eJzs21uIXGcBB/DvTFazmybbvaRN0vQySQQXLcumT9X6ENeqjabNRdtqqqyzm+1mdXZn3Z3RgkFqEERBUIKg4oWqUPpSC2KgL7UIBS9Iq1AqitYXkUIVfDBoA12ZmXOyc87M5kx2kpamvx+0s+fyXWb/e74z3/kmhVj15PxKcX6lWFosVmYeXLmt+LlKubYwGwqvkde7fbpzJXKS/evn8Ps+8JH7bgvhD0e/9qHV1dXVUDcUOtrf8vO5f5+aaX1NFDJl6vV2rq3pj7XHXvn5Wy52Rp7jIYTtbf2q2xRC+NgvQtgcQhiO943ErwMhhK0hhCiE8Phv/vXj/l660OLM/S+9cPT0ob2nJ5984rnzc0fWPTEK4bvlXbfOLby8b9MdL77jMjUPAAAX9cFjh+89MrE/PB2FwbN97Z/Xd8Svyefju9/2qXse7Vs7vkp3Nr2GoQIAAEDG2vx/KHq1w3pdsrKWLAk+9dDxe5+J1o6b2L6xHbzn8J3vn9gfr/9Gbcdvj3f9872bGmuo2XXf7PrvcKZ85/XftXYe/erzv1x868b7n/QvaXcoRIXx1HahMD4ewtHJ5vbOaEuhXFmpvvPBSm3xxMbbvVqk88+u3q8t6Heb/0imeN76/65PfP5nA329vIPRkP2rrW8X2/+U6SCd//pj+U++FHWV/2imXF7+dz277dyvNvfyDrItcinS+TcvxL2tJxSbA0A9/2/25ee/PVN/Xv7fnzz7+PENfP+nPs4MRfW+9qdGgFfj/et8hYmMdP7NIFJDZ/yLXO/6/18m/+sy9eflf3flH7/7Ww/3//XG/7HJXup880jn3wyimDpj7fofLuRf/9dn6s/L/7cn//z8J3u6V7fnX+//mPt/V9L5xzfi9ODZ+E12O/7vyNSfl//O0Qcemd9Avz88EPdzMAqjLd86PVu/hQ2urVc3pjT1w0sbaORNIJ1/87eWunQGmy+N638of/zfmak/L/9Hdn/9Pad6+v5v5/F/wvjflXT+A419l5L/K5n8d2Xqz8v/h6f+/pcHLvP4X98+IP+upPPf0nZ87flPoav53w2Z8nnPf/aOPPPYX3uY/yf9S9pNnv8kzyHGoubzHzpL53/Nuud1e//fnSmXd/1/6z8vPruvl/E/6r+UJwADPbR0VUrnv7W5s8MEsNv8b8zUn5f/F+778sf/tIH5X+MTX3+Sf8v8f3Nz/xHjf1fS+W9r7kz9Y6iHG/9v3P+j9tz/m8n/pkz9efmfPzje95XLfP+v93+sw6Ns2qXzH1z3vHr+v+/i/n9zplxe/l/c89OXb+3p838IE+b6G5bO/9p1z2tc//35+d+SKZeX/3e+8eunHu6h/2/voSzZ/Jv3+tTlFH82v8j8PzXSFjP15+X/o7FzZ/Zdgfnf7e7/XUnn31w1v5T8s/P/PZn68/L/3uEfLPddgec/d8kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgQ0bi16EQFcZT24XC+HgIo/H2zrAlmi6dmJouV2Y+sxLC9nh/MYxEc+XKdKk8Nb9YOTE7VSqXKzMhXBcf3x76o5VypTq1UFq6/kJdA9HJ2dJydXq2VA0h7Ij33xi2JXVNz1cXSkuNc5My10Slz9Yq1dJ4bWV2Oey6sH9rsn9uuVJbuuFCXdcWKstLJ0uLUyfml989MTExEXZf6PNwNPtQdXax2uxt82i9TFJ2KGp5M43DN7W09+lKbXmxVG7sv7mlTLkyUyq3lLmlpb3qcm1xplSdnSpX5pL2ii1lW95b4/Ce+NhYGE69v6Rs1oH49c6Dxz567ND+tuPFKJ33Ym1hdmJb578JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK5eT9/xrm+HEDY1twohhAPJD1H8X8qZ+1964ejpQ3tPTz75xHPn5450OgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV27ueliiiOA+idsZcGUkobIZeBISK6k7CgX0RS+Yxs2aZ1UKuEDIoCw4iWBUEQ1C4qCFoFlX9B1MJlq2pTixYGEVSMzqS8MQwfeM05B4Y7w7x35wsD783cz+UCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA68e5nXPtWXt595b5raMnhNb83OYQwlCysP9lX0voDCF8+zp5JizTFjob+n87Nj1SvmryZ+/AyKMbQ8nq6y++W1y3IyRp/5LjXUma9vevvv+N6m7f84m+JIQ0diFEMTv89GwthNASuxCi+PVp5lL2+74pdiFE0fPxXnt2/2uxCyGKbXs+d9fyZzyq50L9Yt/S//6VHsGbeERnHXp36ur71E2tvFf5+3+Sb94Hq2Hq5NEPL2IXQTRT0+PHYtcAAACsrfMr5P9h68L+gytJ6Owo5/7fG/L/rob+l8//F93fcXN4sqkQYntpbDI7HtjfTJ8b3+nea3fe1Iz3VJX8v9rk/9Um/6+2v+b/bXHqYW3J/6tN/k/mtfy/kp7c2jv3MnYRRCP/BwCA6jl8YnS8PjCYvfy3/Wwt5/XdeVvP8/SHtyd6Hy8ZN5If/t+OHB89eGhgML/v5QHBxfUf0vmzP/L5Ho1tYaxh3sVK6z90PZudud5a/kT9H+dvFPUV17X+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL/ZnXsaBsEoDKPfbUXURquiCQs/CT7QwIgApDCjAR1MGICBEFDAQM5Z7k2e5QUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pn+VV4X318aI73WiDSVXXbtn+Np9jP37bC8zx43bgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2NiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgqAAD//zJDyuo=") 2.13500931s ago: executing program 3 (id=391): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, &(0x7f0000001080)=""/250, 0xfa) 2.054223403s ago: executing program 3 (id=393): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0x10f252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0xa, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x3, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x7, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x3ff, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x101, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 2.027413264s ago: executing program 2 (id=394): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x80, 0xb, 0xc10c, 0x2}}], 0x20, 0x4014}, 0x2c0408d0) 1.946754818s ago: executing program 0 (id=395): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000700)={0x40, 0x9, 0x2, "bdb0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x80, 0x0, 0x100, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x82}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 1.946643908s ago: executing program 2 (id=396): syz_open_dev$radio(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 1.932089599s ago: executing program 3 (id=397): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x554, &(0x7f0000001240)="$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") getpid() socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000001900)={0x11, {{0x29, 0x4e24, 0x37000000, @local}}}, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10, 0x0}}], 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x8000007, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x4, 0x9, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10800, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0xfffff41c, 0xfffffffe, 0x8, 0x9, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x104008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x800010, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x80001000, 0x3, 0x7fffffff, 0x3, 0x80, 0x4, 0x7d, 0x401, 0x3], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x7ffffffe, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2852, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x80, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) fstatfs(r3, &(0x7f0000000380)=""/245) 1.9042891s ago: executing program 1 (id=398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0', 0x1) write(r1, &(0x7f0000000800)='1\n', 0x2) 1.842946773s ago: executing program 2 (id=399): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) 1.422561943s ago: executing program 1 (id=400): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000000)={0xb, 0x8, 0x2d6e, 0x0, 0x4, 0x5, 0x2000000000e, 0x320, 0xfffeffff}) syz_emit_ethernet(0x4a, &(0x7f00000012c0)=ANY=[], 0x0) 1.387544264s ago: executing program 4 (id=401): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.342970887s ago: executing program 1 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000402, 0x0, &(0x7f0000000700)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r2, &(0x7f00000004c0)='\n', 0x1) 932.552646ms ago: executing program 2 (id=403): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000440)}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x5b) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {0x0}, {&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4}, 0x100) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) setns(0xc9, 0x0) 875.962779ms ago: executing program 0 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x2, 0x1000, 0xc, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 590.967932ms ago: executing program 2 (id=405): bpf$PROG_LOAD(0x5, 0x0, 0x0) 406.068721ms ago: executing program 4 (id=406): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r3, 0x1, 0x70bd27, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x2000000, &(0x7f0000000440)={[{@umask={'umask', 0x3d, 0x4}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@umask={'umask', 0x3d, 0x2f}}, {@umask={'umask', 0x3d, 0x35}}]}, 0xfe, 0x5e5, &(0x7f0000002340)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4") syz_open_dev$video4linux(&(0x7f0000000000), 0x10000000000001, 0x0) 370.765313ms ago: executing program 2 (id=407): bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x8, &(0x7f00000004c0)={0x77359400}) 122.863114ms ago: executing program 0 (id=408): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 0s ago: executing program 1 (id=409): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x7fffdf003000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x34) ptrace(0x10, r3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x5) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000100"/18, @ANYRES32=0x0, @ANYBLOB], 0x2c, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 61.099477][ T4175] cgroup: Unknown subsys name 'net' [ 61.228485][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.767615][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.256486][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 64.287740][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.325574][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 64.340086][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 64.429165][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 64.478071][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.485486][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.494253][ T4190] device bridge_slave_0 entered promiscuous mode [ 64.508710][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.516030][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.524517][ T4190] device bridge_slave_1 entered promiscuous mode [ 64.563407][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.570681][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.579404][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.593200][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.600293][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.608607][ T4196] device bridge_slave_0 entered promiscuous mode [ 64.625899][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.633365][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.641577][ T4187] device bridge_slave_1 entered promiscuous mode [ 64.650608][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.658530][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.666557][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.674607][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.682565][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.690386][ T4196] device bridge_slave_1 entered promiscuous mode [ 64.702137][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.719170][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.727151][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.735676][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.766797][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.798094][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.808208][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.816335][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.824485][ T4189] device bridge_slave_0 entered promiscuous mode [ 64.843046][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.855050][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.866084][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.876779][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.885319][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.894552][ T4189] device bridge_slave_1 entered promiscuous mode [ 64.908060][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.919664][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.949911][ T4190] team0: Port device team_slave_0 added [ 64.983398][ T4188] team0: Port device team_slave_0 added [ 64.996443][ T4190] team0: Port device team_slave_1 added [ 65.006145][ T4187] team0: Port device team_slave_0 added [ 65.014511][ T4196] team0: Port device team_slave_0 added [ 65.022889][ T4188] team0: Port device team_slave_1 added [ 65.030264][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.046731][ T4187] team0: Port device team_slave_1 added [ 65.055421][ T4196] team0: Port device team_slave_1 added [ 65.074552][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.120776][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.128162][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.154927][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.167405][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.174962][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.201478][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.213721][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.220721][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.247573][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.259382][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.266828][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.293361][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.313131][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.320125][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.351314][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.372736][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.379710][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.411511][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.423669][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.430645][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.458445][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.470285][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.478557][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.505749][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.519368][ T4189] team0: Port device team_slave_0 added [ 65.555030][ T4189] team0: Port device team_slave_1 added [ 65.604092][ T4188] device hsr_slave_0 entered promiscuous mode [ 65.610950][ T4188] device hsr_slave_1 entered promiscuous mode [ 65.637770][ T4190] device hsr_slave_0 entered promiscuous mode [ 65.644968][ T4190] device hsr_slave_1 entered promiscuous mode [ 65.652012][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.660749][ T4190] Cannot create hsr debugfs directory [ 65.670240][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.677551][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.684376][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.691952][ T4187] Cannot create hsr debugfs directory [ 65.714692][ T4196] device hsr_slave_0 entered promiscuous mode [ 65.722431][ T4196] device hsr_slave_1 entered promiscuous mode [ 65.729052][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.736688][ T4196] Cannot create hsr debugfs directory [ 65.762131][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.769289][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.795971][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.823152][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.830341][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.856858][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.963178][ T4193] Bluetooth: hci4: command 0x0409 tx timeout [ 65.963693][ T4201] Bluetooth: hci0: command 0x0409 tx timeout [ 65.969966][ T4193] Bluetooth: hci1: command 0x0409 tx timeout [ 65.975757][ T4201] Bluetooth: hci2: command 0x0409 tx timeout [ 65.988350][ T4201] Bluetooth: hci3: command 0x0409 tx timeout [ 66.056156][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.063603][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.070140][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.078368][ T4189] Cannot create hsr debugfs directory [ 66.238275][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.265663][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.280786][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.291816][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.333682][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.347052][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.359680][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.377775][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.425776][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.458450][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.486746][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.523675][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.534481][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.545359][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.577289][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.593830][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.613923][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.637010][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.646935][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.665449][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.685482][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.731895][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.743487][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.753905][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.765744][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.793121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.805045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.815165][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.822503][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.833750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.842031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.851351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.880457][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.890174][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.901454][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.909153][ T3085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.918327][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.932173][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.954313][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.966902][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.977876][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.994278][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.007663][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.020036][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.029374][ T672] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.036494][ T672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.057086][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.068106][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.077683][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.087710][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.099527][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.108656][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.127217][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.139010][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.158877][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.168495][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.177450][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.189005][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.197971][ T672] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.205363][ T672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.224425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.238876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.259253][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.287586][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.300408][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.309601][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.319165][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.328877][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.339038][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.353903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.365827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.375319][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.382541][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.390280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.399661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.410034][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.417745][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.426944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.450089][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.501490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.510303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.519078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.529710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.539528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.549378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.559008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.568441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.578333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.587672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.596446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.605602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.614285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.635244][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.648687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.659129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.682049][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.694056][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.716222][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.725143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.734024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.741705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.750452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.760174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.768979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.777394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.786448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.795507][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.803370][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.812890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.820793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.831086][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.866121][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.895422][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.920470][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.927917][ T3085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.939564][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.955098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.977994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.988695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.003141][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.012841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.029054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.054071][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 68.063948][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 68.070402][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 68.078295][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 68.099512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.111438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.112429][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 68.149424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.159096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.168447][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.176359][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.185456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.195594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.204838][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.212392][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.221383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.230889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.239647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.248404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.264045][ T4196] device veth0_vlan entered promiscuous mode [ 68.274773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.286358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.295967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.304664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.314499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.324891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.334264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.343064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.378135][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.391969][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.404502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.413623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.421890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.430857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.440233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.454031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.461623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.473908][ T4196] device veth1_vlan entered promiscuous mode [ 68.488027][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.518938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.530115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.549124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.557431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.565552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.575668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.593568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.603176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.611702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.624047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.639745][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.672695][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.680840][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.697451][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.726072][ T4190] device veth0_vlan entered promiscuous mode [ 68.757010][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.773268][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.783139][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.792128][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.801565][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.809972][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.851346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.868726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.887644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.899017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.915726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.924148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.934432][ T4196] device veth0_macvtap entered promiscuous mode [ 68.951596][ T4196] device veth1_macvtap entered promiscuous mode [ 68.961762][ T4188] device veth0_vlan entered promiscuous mode [ 68.980356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.991324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.000239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.008704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.028251][ T4190] device veth1_vlan entered promiscuous mode [ 69.036583][ T4188] device veth1_vlan entered promiscuous mode [ 69.048798][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.067885][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.088201][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.103898][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.118015][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.128564][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.145501][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.154652][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.162922][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.172747][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.209298][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.219973][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.229977][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.246886][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.261410][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.271119][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.288419][ T4188] device veth0_macvtap entered promiscuous mode [ 69.299214][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.308907][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.319510][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.329950][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.361545][ T4188] device veth1_macvtap entered promiscuous mode [ 69.378647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.387931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.400135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.411903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.428051][ T4190] device veth0_macvtap entered promiscuous mode [ 69.441041][ T4190] device veth1_macvtap entered promiscuous mode [ 69.459436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.468343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.477309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.487061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.500172][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.511136][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.523237][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.558685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.571613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.589413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.599606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.610180][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.621854][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.633694][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.645488][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.656226][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.665524][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.674715][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.691335][ T4187] device veth0_vlan entered promiscuous mode [ 69.710882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.722041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.732283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.740421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.757632][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.768892][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.783655][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.794452][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.806702][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.829197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.837395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.847085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.855987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.868229][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.878139][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.900112][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.920944][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.931560][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.943138][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.954708][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.966403][ T4187] device veth1_vlan entered promiscuous mode [ 69.974761][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.983625][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.991949][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.000204][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.009985][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.029452][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.040432][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.050709][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.059872][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.071828][ T4189] device veth0_vlan entered promiscuous mode [ 70.115778][ T672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.126486][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 70.133803][ T4189] device veth1_vlan entered promiscuous mode [ 70.138109][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 70.141545][ T672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.153399][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 70.160993][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 70.198038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.207616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.213010][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 70.217516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.229671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.237986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.247714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.261710][ T4187] device veth0_macvtap entered promiscuous mode [ 70.310890][ T4187] device veth1_macvtap entered promiscuous mode [ 70.339622][ T3085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.340364][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.352966][ T3085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.367823][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.391322][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.400065][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.413652][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.421483][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.431132][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.440283][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.452770][ T4189] device veth0_macvtap entered promiscuous mode [ 70.490998][ T4189] device veth1_macvtap entered promiscuous mode [ 70.496811][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.505650][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.520671][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.523985][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.541007][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.554237][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.570837][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.583772][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.594122][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.606653][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.620144][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.633196][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.641836][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.650742][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.659961][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.672183][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.682143][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.706393][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.727932][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.738663][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.758640][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.776691][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.787767][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.800461][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.810585][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.823171][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.833865][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.845644][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.855714][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.866786][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.878273][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.891248][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.909438][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.930625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.944929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.955556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.964946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.977987][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.990930][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.001126][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.010978][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.032820][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.040880][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.058945][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.067761][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.086307][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.098329][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.105554][ T4262] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.110228][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.129337][ T4269] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.129763][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.158709][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.173955][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.198512][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.213099][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.239644][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.249261][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 71.259818][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.269964][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.309849][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.318375][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.338519][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.513812][ T4262] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 71.532348][ T4262] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 71.566182][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.574757][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.582098][ T4262] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 71.587860][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.600896][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.612276][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.621508][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.638257][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.646097][ T4283] loop2: detected capacity change from 0 to 2048 [ 71.681553][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.693788][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.745484][ T4283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.820009][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.842418][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.916892][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.958073][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.972495][ T1331] usb 4-1: USB disconnect, device number 2 [ 72.007874][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.017698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.769516][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 72.775917][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 72.782038][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 72.788510][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 72.797247][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 72.932929][ T4303] tipc: Started in network mode [ 72.938586][ T4303] tipc: Node identity 1000001, cluster identity 4369 [ 72.996169][ T4303] tipc: Node number set to 16777217 [ 73.023027][ T4303] tipc: Cannot configure node identity twice [ 73.852932][ T4205] Bluetooth: Frame is too long (len 10, expected len 4) [ 73.952708][ T4303] tipc: New replicast peer: 127.0.0.1 [ 73.973366][ T4303] tipc: Enabled bearer , priority 10 [ 74.060736][ T4292] loop1: detected capacity change from 0 to 32768 [ 74.061019][ T4325] loop2: detected capacity change from 0 to 512 [ 74.194902][ T4292] XFS (loop1): Mounting V5 Filesystem [ 74.210617][ T4301] loop0: detected capacity change from 0 to 32768 [ 74.287008][ T4292] XFS (loop1): Ending clean mount [ 74.319293][ T4301] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 74.362929][ T4301] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 74.371144][ T4325] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.421130][ T4325] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #11: comm syz.2.15: casefold flag without casefold feature [ 74.453384][ T4325] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.15: couldn't read orphan inode 11 (err -117) [ 74.478945][ T4325] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 74.534083][ T4301] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 74.557821][ T4201] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 74.572315][ T4201] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 74.814701][ T4188] XFS (loop1): Unmounting Filesystem [ 74.854979][ T4201] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 282ms [ 74.874337][ T4201] gfs2: fsid=syz:syz.0: jid=0: Done [ 74.881061][ T4301] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 77.426530][ T4372] tipc: Started in network mode [ 77.431570][ T4372] tipc: Node identity 1000001, cluster identity 4711 [ 77.489677][ T4372] tipc: Node number set to 16777217 [ 77.515952][ T2287] Bluetooth: hci4: command 0x0405 tx timeout [ 77.772410][ T4378] loop1: detected capacity change from 0 to 512 [ 77.865344][ T4378] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 77.945200][ T4378] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 78.083866][ T4378] EXT4-fs (loop1): 1 truncate cleaned up [ 78.090170][ T4378] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 78.149449][ T4387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 79.184405][ T4188] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 79.232499][ T4188] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 79.288751][ T4188] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 79.602480][ T4262] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.652992][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.714421][ T4414] loop3: detected capacity change from 0 to 256 [ 80.736706][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.800840][ T4262] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 80.918284][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.052299][ T4262] usb 1-1: config 0 descriptor?? [ 81.222096][ T4414] FAT-fs (loop3): IO charset ooi8-r not found [ 81.491882][ T4427] loop3: detected capacity change from 0 to 1024 [ 81.551370][ T4423] device bond1 entered promiscuous mode [ 81.605987][ T4427] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.783152][ T4427] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 82.312795][ T4262] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 82.458296][ T4262] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 83.040632][ T4262] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 83.051686][ T4262] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 83.072912][ T4262] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 83.103480][ T4262] usb 1-1: USB disconnect, device number 2 [ 83.298114][ T4442] loop0: detected capacity change from 0 to 1024 [ 83.298313][ T4416] loop1: detected capacity change from 0 to 40427 [ 83.336439][ T4416] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 83.343465][ T4416] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 83.358897][ T4416] F2FS-fs (loop1): invalid crc value [ 83.398708][ T4416] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 84.373366][ C1] tipc: RX(1000001): key[1] is activated [ 84.771773][ T4458] netlink: 88 bytes leftover after parsing attributes in process `syz.2.48'. [ 87.341684][ T1108] cfg80211: failed to load regulatory.db [ 89.686981][ T4509] loop0: detected capacity change from 0 to 512 [ 89.701086][ T4512] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.730135][ T4512] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.502530][ T4524] loop3: detected capacity change from 0 to 512 [ 91.262232][ C0] sched: RT throttling activated [ 92.304808][ T4527] netlink: 96 bytes leftover after parsing attributes in process `syz.2.79'. [ 93.268789][ T4509] EXT4-fs (loop0): Test dummy encryption mode enabled [ 93.278144][ T4524] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 93.299651][ T4509] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.620397][ T4509] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.651677][ T4524] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 94.663245][ T4509] EXT4-fs: failed to create workqueue [ 94.674233][ T4524] EXT4-fs: failed to create workqueue [ 94.674490][ T4509] EXT4-fs (loop0): mount failed [ 94.689604][ T4524] EXT4-fs (loop3): mount failed [ 95.512488][ T26] audit: type=1326 audit(1789888513.546:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f5948159 code=0x7ffc0000 [ 95.958428][ T26] audit: type=1326 audit(1789888513.546:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f5948159 code=0x7ffc0000 [ 96.284293][ T26] audit: type=1326 audit(1789888513.556:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f5948159 code=0x7ffc0000 [ 97.275628][ T26] audit: type=1326 audit(1789888513.556:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f5948159 code=0x7ffc0000 [ 97.389295][ T26] audit: type=1326 audit(1789888513.556:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd7f5948159 code=0x7ffc0000 [ 97.959854][ T26] audit: type=1326 audit(1789888513.566:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f5948159 code=0x7ffc0000 [ 98.171498][ T26] audit: type=1326 audit(1789888513.566:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f5948159 code=0x7ffc0000 [ 98.279922][ T26] audit: type=1326 audit(1789888513.566:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7f590898e code=0x7ffc0000 [ 98.304012][ T26] audit: type=1326 audit(1789888513.566:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7f590898e code=0x7ffc0000 [ 98.384704][ T26] audit: type=1326 audit(1789888513.576:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7f590898e code=0x7ffc0000 [ 98.480346][ T4569] loop1: detected capacity change from 0 to 128 [ 99.004408][ T4569] attempt to access beyond end of device [ 99.004408][ T4569] loop1: rw=2049, want=250, limit=128 [ 99.495975][ T4581] attempt to access beyond end of device [ 99.495975][ T4581] loop1: rw=2049, want=144, limit=128 [ 99.558165][ T4581] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 102.266767][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 102.282252][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 102.286945][ T26] audit: type=1326 audit(1789888518.616:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 102.302275][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 102.472235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 102.562236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 102.832227][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 102.872221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 103.062223][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 103.301445][ T26] audit: type=1326 audit(1789888518.616:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 103.352260][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 103.372239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 103.392242][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.477051][ T26] audit: type=1326 audit(1789888518.616:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 103.514713][ T4647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.100'. [ 103.879146][ T26] audit: type=1326 audit(1789888518.616:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 104.026867][ T26] audit: type=1326 audit(1789888518.626:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 104.092423][ T26] audit: type=1326 audit(1789888518.626:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 104.178550][ T26] audit: type=1326 audit(1789888518.626:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 104.206448][ T26] audit: type=1326 audit(1789888518.626:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 104.256996][ T26] audit: type=1326 audit(1789888518.626:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 104.284157][ T26] audit: type=1326 audit(1789888518.626:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 106.461468][ T4682] overlayfs: failed to clone upperpath [ 107.264940][ T4725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.120'. [ 107.382677][ T4725] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 107.600317][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 107.600333][ T26] audit: type=1326 audit(1789888525.726:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.3.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c397159 code=0x7ffc0000 [ 107.852520][ T26] audit: type=1326 audit(1789888525.726:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.3.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c397159 code=0x7ffc0000 [ 108.032497][ T26] audit: type=1326 audit(1789888525.726:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.3.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c397159 code=0x7ffc0000 [ 108.195573][ T26] audit: type=1326 audit(1789888525.726:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.3.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c397159 code=0x7ffc0000 [ 108.362516][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.769655][ T26] audit: type=1326 audit(1789888525.726:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.3.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f101c397159 code=0x7ffc0000 [ 108.795053][ T26] audit: type=1326 audit(1789888525.726:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.3.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c397159 code=0x7ffc0000 [ 108.821926][ T26] audit: type=1326 audit(1789888525.726:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.3.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c397159 code=0x7ffc0000 [ 108.868252][ T26] audit: type=1326 audit(1789888525.726:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.3.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c35798e code=0x7ffc0000 [ 108.929682][ T26] audit: type=1326 audit(1789888525.766:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.3.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c35798e code=0x7ffc0000 [ 108.959141][ T4741] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 108.998670][ T4741] netlink: 76 bytes leftover after parsing attributes in process `syz.4.126'. [ 109.073939][ T4743] overlayfs: missing 'lowerdir' [ 109.082580][ T26] audit: type=1326 audit(1789888525.766:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.3.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c35798e code=0x7ffc0000 [ 109.203719][ T4747] autofs4:pid:4747:autofs_fill_super: called with bogus options [ 109.222492][ T4234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 109.252391][ T4234] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 109.281193][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.582620][ T4234] usb 2-1: USB disconnect, device number 2 [ 109.949167][ T4756] syz.2.131 uses obsolete (PF_INET,SOCK_PACKET) [ 110.317239][ T4764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.135'. [ 110.430709][ T4768] netlink: 3 bytes leftover after parsing attributes in process `syz.1.137'. [ 110.439665][ T4764] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 112.708321][ T26] kauditd_printk_skb: 143 callbacks suppressed [ 112.708337][ T26] audit: type=1326 audit(1789888530.836:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.1.139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faee1b9c159 code=0x7ffc0000 [ 114.558644][ T4810] Zero length message leads to an empty skb [ 114.759512][ T4234] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.213092][ T4234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.306604][ T4234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.669961][ T4234] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 115.720179][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 115.772015][ T4234] usb 2-1: Product: syz [ 115.798814][ T4234] usb 2-1: Manufacturer: syz [ 115.897759][ T4234] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 117.449926][ T4847] overlayfs: failed to clone upperpath [ 118.388745][ T4859] ODEBUG: Out of memory. ODEBUG disabled [ 119.312099][ T4880] team0: Port device vlan2 added [ 119.522388][ T4234] mos7840: probe of ttyUSB0 failed with error -71 [ 120.117161][ T4888] loop1: detected capacity change from 0 to 512 [ 120.177373][ T4888] ======================================================= [ 120.177373][ T4888] WARNING: The mand mount option has been deprecated and [ 120.177373][ T4888] and is ignored by this kernel. Remove the mand [ 120.177373][ T4888] option from the mount to silence this warning. [ 120.177373][ T4888] ======================================================= [ 120.280915][ T4234] usb 2-1: USB disconnect, device number 3 [ 120.303808][ T4234] mos7840 2-1:1.0: device disconnected [ 120.387643][ T4888] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.181: bad orphan inode 15 [ 120.428385][ T4888] ext4_test_bit(bit=14, block=5) = 0 [ 120.435390][ T4888] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 120.886548][ T4903] netlink: 'syz.1.181': attribute type 4 has an invalid length. [ 122.409032][ T4899] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 122.961656][ T4914] FAULT_INJECTION: forcing a failure. [ 122.961656][ T4914] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 122.976781][ T4914] CPU: 0 PID: 4914 Comm: syz.1.189 Not tainted syzkaller #0 [ 122.984106][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.994449][ T4914] Call Trace: [ 122.997823][ T4914] [ 123.000875][ T4914] dump_stack_lvl+0x188/0x250 [ 123.005592][ T4914] ? show_regs_print_info+0x20/0x20 [ 123.010922][ T4914] ? load_image+0x410/0x410 [ 123.015543][ T4914] ? uncharge_page+0x490/0x490 [ 123.020516][ T4914] should_fail+0x383/0x4b0 [ 123.025028][ T4914] prepare_alloc_pages+0x1e3/0x5b0 [ 123.030174][ T4914] __alloc_pages+0x11b/0x480 [ 123.034796][ T4914] ? zone_statistics+0x170/0x170 [ 123.040308][ T4914] ? rcu_lock_acquire+0x30/0x30 [ 123.045205][ T4914] ? alloc_pages+0x452/0x560 [ 123.049849][ T4914] __get_free_pages+0x8/0x30 [ 123.054485][ T4914] __tlb_remove_page_size+0x1f2/0x3f0 [ 123.059928][ T4914] unmap_page_range+0xfcf/0x2410 [ 123.065128][ T4914] unmap_vmas+0x131/0x250 [ 123.069597][ T4914] ? unmap_page_range+0x2410/0x2410 [ 123.075175][ T4914] ? __mutex_lock_common+0x435/0x2400 [ 123.080771][ T4914] ? exit_mm_release+0x16/0x30 [ 123.085589][ T4914] exit_mmap+0x3b9/0x640 [ 123.090497][ T4914] ? vm_brk+0x20/0x20 [ 123.094624][ T4914] ? uprobe_clear_state+0x2f6/0x460 [ 123.099870][ T4914] __mmput+0x115/0x390 [ 123.104254][ T4914] exit_mm+0x632/0x7b0 [ 123.108361][ T4914] ? perf_pmu_migrate_context+0xb70/0xb70 [ 123.114131][ T4914] ? do_exit+0x2110/0x2110 [ 123.118585][ T4914] ? __ia32_sys_timer_delete+0x40/0x40 [ 123.124253][ T4914] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 123.129838][ T4914] ? tty_audit_exit+0x149/0x1f0 [ 123.134815][ T4914] do_exit+0x5b8/0x2110 [ 123.139174][ T4914] ? put_task_struct+0x80/0x80 [ 123.143979][ T4914] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.150467][ T4914] ? _raw_spin_lock_irq+0xb7/0xf0 [ 123.155544][ T4914] do_group_exit+0x12c/0x2f0 [ 123.160264][ T4914] ? lockdep_hardirqs_on+0x94/0x140 [ 123.165513][ T4914] get_signal+0x7eb/0x12e0 [ 123.170079][ T4914] arch_do_signal_or_restart+0xe6/0x12a0 [ 123.175761][ T4914] ? futex_exit_release+0x1c0/0x1c0 [ 123.181264][ T4914] ? get_sigframe_size+0x10/0x10 [ 123.186449][ T4914] ? __context_tracking_exit+0x4c/0x80 [ 123.191947][ T4914] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.197968][ T4914] ? exit_to_user_mode_loop+0x3b/0x130 [ 123.203465][ T4914] exit_to_user_mode_loop+0x9e/0x130 [ 123.208781][ T4914] exit_to_user_mode_prepare+0xee/0x180 [ 123.214357][ T4914] syscall_exit_to_user_mode+0x16/0x40 [ 123.219847][ T4914] do_syscall_64+0x58/0xa0 [ 123.224287][ T4914] ? clear_bhb_loop+0x30/0x80 [ 123.228990][ T4914] ? clear_bhb_loop+0x30/0x80 [ 123.233692][ T4914] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.239615][ T4914] RIP: 0033:0x7faee1b9c159 [ 123.244061][ T4914] Code: Unable to access opcode bytes at RIP 0x7faee1b9c12f. [ 123.251442][ T4914] RSP: 002b:00007faedfdf40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.259886][ T4914] RAX: fffffffffffffe00 RBX: 00007faee1e23fa8 RCX: 00007faee1b9c159 [ 123.266595][ T4916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.191'. [ 123.267888][ T4914] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faee1e23fa8 [ 123.284765][ T4914] RBP: 00007faee1e23fa0 R08: 0000000000000000 R09: 0000000000000000 [ 123.292856][ T4914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.300480][ T4916] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 123.300883][ T4914] R13: 00007faee1e24038 R14: 00007ffed3c33dc0 R15: 00007ffed3c33ea8 [ 123.300917][ T4914] [ 124.134104][ T4928] loop1: detected capacity change from 0 to 256 [ 124.141020][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 124.198556][ T4928] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 124.295637][ T26] audit: type=1800 audit(1789888542.426:315): pid=4928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.192" name="file1" dev="loop1" ino=1048591 res=0 errno=0 [ 124.489959][ T26] audit: type=1800 audit(1789888542.616:316): pid=4933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.192" name="file1" dev="loop1" ino=1048591 res=0 errno=0 [ 124.654902][ T4940] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4941] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4940] [ 127.736840][ T4953] netlink: 'syz.2.200': attribute type 4 has an invalid length. [ 129.019301][ T4967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.207'. [ 129.045356][ T4967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.207'. [ 129.056010][ T26] audit: type=1326 audit(1789888547.186:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz.2.208" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03f4ff9159 code=0x0 [ 129.838971][ T4980] overlayfs: failed to clone upperpath [ 130.061929][ T4988] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.701845][ T5010] netlink: 'syz.0.220': attribute type 4 has an invalid length. [ 132.685247][ T5017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.223'. [ 132.746076][ T5017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.223'. [ 132.810851][ T5021] overlayfs: failed to clone upperpath [ 133.083054][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.838001][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.059117][ T26] audit: type=1326 audit(1789888552.186:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5031 comm="syz.0.229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7f5948159 code=0x0 [ 134.111704][ T5033] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.564772][ T5051] jffs2: notice: (5051) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.681297][ T5057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.235'. [ 135.697642][ T5058] process 'syz.2.237' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 135.796813][ T5061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.238'. [ 135.873523][ T5061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.238'. [ 136.608163][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 136.688995][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 138.285186][ T5082] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 139.744798][ T5088] fuse: Bad value for 'rootmode' [ 140.368014][ T5101] loop1: detected capacity change from 0 to 1024 [ 140.473793][ T5101] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 140.523980][ T5101] EXT4-fs (loop1): barriers disabled [ 140.539738][ T5101] JBD2: no valid journal superblock found [ 140.816111][ T5101] EXT4-fs (loop1): error loading journal [ 142.492600][ T5122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.258'. [ 142.522309][ T5122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.258'. [ 142.940710][ T5120] loop1: detected capacity change from 0 to 32768 [ 143.197206][ T5120] non-latin1 character 0x200 found in JFS file name [ 143.208466][ T5120] mount with iocharset=utf8 to access [ 143.230666][ T5120] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 143.230666][ T5120] [ 143.260180][ T5120] ERROR: (device loop1): remounting filesystem as read-only [ 143.581059][ T5129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 143.581370][ T5135] device syzkaller0 entered promiscuous mode [ 143.602303][ T5129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 144.771939][ T5153] loop1: detected capacity change from 0 to 512 [ 144.935174][ T5153] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.967715][ T5153] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.412245][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.519274][ T5206] overlayfs: failed to clone upperpath [ 151.602332][ T1108] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 151.609970][ T1108] usb 2-1: can't read configurations, error -71 [ 152.514132][ T5226] overlayfs: failed to clone upperpath [ 152.809054][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.102055][ T1108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.132278][ T1108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.692771][ T5248] team0 (unregistering): Port device team_slave_0 removed [ 155.802475][ T1108] usb 2-1: string descriptor 0 read error: -71 [ 155.808843][ T1108] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 155.821377][ T5248] team0 (unregistering): Port device team_slave_1 removed [ 155.848970][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 156.072416][ T1108] usb 2-1: can't set config #1, error -71 [ 156.107245][ T1108] usb 2-1: USB disconnect, device number 5 [ 156.222993][ T5248] syz.4.294 (5248) used greatest stack depth: 20784 bytes left [ 157.184010][ T5274] overlayfs: failed to clone upperpath [ 159.060395][ T5300] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 159.664174][ T5305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.775835][ T5305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.929425][ T5310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 160.237605][ T5321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.321'. [ 160.247307][ T5321] netlink: 'syz.4.321': attribute type 1 has an invalid length. [ 160.559213][ T5325] netlink: 96 bytes leftover after parsing attributes in process `syz.1.322'. [ 163.361862][ T5353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.336'. [ 163.379857][ T5353] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 164.823305][ T5366] infiniband syz2: set down [ 164.828291][ T5366] infiniband syz2: added ipvlan0 [ 164.840770][ T5366] infiniband syz2: Couldn't open port 1 [ 164.894142][ T5366] RDS/IB: syz2: added [ 164.898953][ T5366] smc: adding ib device syz2 with port count 1 [ 164.905546][ T5366] smc: ib device syz2 port 1 has pnetid [ 166.882282][ T5386] loop1: detected capacity change from 0 to 512 [ 166.939916][ T5386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 166.952530][ T5386] System zones: 1-12 [ 166.965632][ T5386] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.346: missing EA_INODE flag [ 167.025218][ T5386] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.346: error while reading EA inode 12 err=-117 [ 167.082483][ T5386] EXT4-fs (loop1): 1 orphan inode deleted [ 167.088591][ T5386] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 167.351970][ T5395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.349'. [ 167.393198][ T5395] netlink: 'syz.4.349': attribute type 1 has an invalid length. [ 170.431619][ T5421] loop1: detected capacity change from 0 to 1024 [ 172.562265][ T5433] capability: warning: `syz.0.360' uses 32-bit capabilities (legacy support in use) [ 172.673808][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 173.453560][ T5448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 173.482385][ T5448] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 173.808639][ T26] audit: type=1326 audit(1789888591.926:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83bf27159 code=0x7ffc0000 [ 176.675513][ T26] audit: type=1326 audit(1789888591.926:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83bf27159 code=0x7ffc0000 [ 176.801097][ T26] audit: type=1326 audit(1789888591.936:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83bf27159 code=0x7ffc0000 [ 176.852404][ T26] audit: type=1326 audit(1789888591.936:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83bf27159 code=0x7ffc0000 [ 176.910210][ T26] audit: type=1326 audit(1789888591.936:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc83bf27159 code=0x7ffc0000 [ 177.023226][ T26] audit: type=1326 audit(1789888591.936:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83bf27159 code=0x7ffc0000 [ 177.054607][ T26] audit: type=1326 audit(1789888591.936:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83bf27159 code=0x7ffc0000 [ 177.084817][ T26] audit: type=1326 audit(1789888591.936:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 177.339334][ T26] audit: type=1326 audit(1789888591.936:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 177.365429][ T5469] tipc: Enabling of bearer rejected, failed to enable media [ 177.367077][ T26] audit: type=1326 audit(1789888591.966:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc83bee798e code=0x7ffc0000 [ 177.401305][ T5469] xt_connbytes: Forcing CT accounting to be enabled [ 177.591776][ T5478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 177.599860][ T5469] xt_CT: No such helper "snmp" [ 178.814112][ T5487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.379'. [ 178.862327][ T5487] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 179.316444][ T5499] netlink: 32 bytes leftover after parsing attributes in process `syz.3.382'. [ 179.728496][ T5503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.385'. [ 180.401794][ T5518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.387'. [ 180.930679][ T5532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.395'. [ 180.970095][ T5532] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 180.993444][ T4205] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 181.004657][ T4205] CPU: 0 PID: 4205 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 181.012246][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.022336][ T4205] Workqueue: hci3 hci_rx_work [ 181.027234][ T4205] Call Trace: [ 181.030627][ T4205] [ 181.033583][ T4205] dump_stack_lvl+0x188/0x250 [ 181.038334][ T4205] ? show_regs_print_info+0x20/0x20 [ 181.043570][ T4205] ? load_image+0x410/0x410 [ 181.048129][ T4205] sysfs_create_dir_ns+0x26a/0x290 [ 181.053276][ T4205] ? sysfs_warn_dup+0xa0/0xa0 [ 181.058072][ T4205] ? kthread+0x42e/0x520 [ 181.062358][ T4205] ? do_raw_spin_unlock+0x11d/0x230 [ 181.067596][ T4205] kobject_add_internal+0x5ba/0xcd0 [ 181.072840][ T4205] kobject_add+0x160/0x230 [ 181.077299][ T4205] ? kobject_init+0x1c0/0x1c0 [ 181.082021][ T4205] ? __raw_spin_lock_init+0x41/0x100 [ 181.087486][ T4205] ? klist_children_get+0x50/0x50 [ 181.092606][ T4205] ? get_device_parent+0x121/0x3e0 [ 181.097751][ T4205] device_add+0x470/0x1050 [ 181.102199][ T4205] ? device_initialize+0x2a5/0x4d0 [ 181.107347][ T4205] hci_conn_add_sysfs+0xd1/0x1e0 [ 181.112321][ T4205] le_conn_complete_evt+0xc55/0x14d0 [ 181.117648][ T4205] ? cs_le_create_conn+0x5e0/0x5e0 [ 181.122807][ T4205] ? __mutex_trylock_common+0x15c/0x260 [ 181.128392][ T4205] hci_le_meta_evt+0xd36/0x3ca0 [ 181.133281][ T4205] ? hci_event_packet+0x363/0x1310 [ 181.138526][ T4205] ? __lock_acquire+0x7b50/0x7b50 [ 181.143593][ T4205] ? hci_remote_host_features_evt+0x240/0x240 [ 181.149788][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 181.155457][ T4205] ? mark_lock+0x94/0x320 [ 181.159914][ T4205] ? mutex_unlock+0x10/0x10 [ 181.164455][ T4205] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 181.170482][ T4205] ? lock_chain_count+0x20/0x20 [ 181.175462][ T4205] ? __rwlock_init+0x140/0x140 [ 181.180271][ T4205] hci_event_packet+0xe0b/0x1310 [ 181.185243][ T4205] ? _raw_spin_unlock+0x40/0x40 [ 181.190155][ T4205] ? rcu_lock_release+0x20/0x20 [ 181.195126][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 181.200355][ T4205] hci_rx_work+0x255/0xa10 [ 181.204825][ T4205] process_one_work+0x867/0xff0 [ 181.209721][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 181.215381][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 181.220698][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 181.225774][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 181.231357][ T4205] ? wq_worker_running+0x97/0x170 [ 181.236419][ T4205] worker_thread+0xad7/0x12a0 [ 181.241143][ T4205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 181.247173][ T4205] kthread+0x42e/0x520 [ 181.251278][ T4205] ? rcu_lock_release+0x20/0x20 [ 181.256153][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 181.260772][ T4205] ret_from_fork+0x1f/0x30 [ 181.265320][ T4205] [ 181.384274][ T4205] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 181.397851][ T4205] Bluetooth: hci3: failed to register connection device [ 182.068450][ T5547] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 182.106848][ T5555] tipc: Enabling of bearer rejected, failed to enable media [ 182.835881][ T5568] [ 182.858680][ T5568] ============================= [ 182.905127][ T5568] WARNING: suspicious RCU usage [ 182.940628][ T5568] syzkaller #0 Not tainted [ 182.960422][ T5568] ----------------------------- [ 182.989259][ T5568] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 183.029523][ T5568] [ 183.029523][ T5568] other info that might help us debug this: [ 183.029523][ T5568] [ 183.421199][ T5568] [ 183.421199][ T5568] rcu_scheduler_active = 2, debug_locks = 1 [ 183.437241][ T5568] 1 lock held by syz.0.408/5568: [ 183.449292][ T5568] #0: ffffffff8d44d548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 183.695993][ T5568] [ 183.695993][ T5568] stack backtrace: [ 183.896131][ T5568] CPU: 1 PID: 5568 Comm: syz.0.408 Not tainted syzkaller #0 [ 183.903918][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.914081][ T5568] Call Trace: [ 183.917558][ T5568] [ 183.920509][ T5568] dump_stack_lvl+0x188/0x250 [ 183.925214][ T5568] ? load_image+0x410/0x410 [ 183.929823][ T5568] ? show_regs_print_info+0x20/0x20 [ 183.935061][ T5568] ? lockdep_rcu_suspicious+0x110/0x180 [ 183.940625][ T5568] ? local_bh_enable+0x20/0x20 [ 183.945504][ T5568] rhltable_lookup+0x787/0x7a0 [ 183.950300][ T5568] ? mark_lock+0x94/0x320 [ 183.954758][ T5568] ? mr_mfc_find_parent+0x190/0x190 [ 183.959985][ T5568] ? local_bh_enable+0x20/0x20 [ 183.964778][ T5568] ? lock_chain_count+0x20/0x20 [ 183.969700][ T5568] mr_mfc_find_any_parent+0xb7/0x1d0 [ 183.975014][ T5568] ? local_bh_enable+0x20/0x20 [ 183.980065][ T5568] ip_mr_forward+0x247/0xf60 [ 183.984798][ T5568] ipmr_mfc_add+0x2273/0x2bd0 [ 183.989517][ T5568] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 183.994478][ T5568] ? __lock_acquire+0x7b50/0x7b50 [ 183.999615][ T5568] ip_mroute_setsockopt+0xecd/0x1230 [ 184.005114][ T5568] ? ipmr_rule_default+0x70/0x70 [ 184.010356][ T5568] ? __might_sleep+0xf0/0xf0 [ 184.014969][ T5568] ip_setsockopt+0x568/0x31e0 [ 184.019677][ T5568] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 184.025253][ T5568] ? aa_sk_perm+0x7dc/0x910 [ 184.029791][ T5568] ? aa_af_perm+0x340/0x340 [ 184.034334][ T5568] ? __fget_files+0x402/0x470 [ 184.039280][ T5568] ? aa_sock_opt_perm+0x74/0x100 [ 184.044286][ T5568] ? sock_common_setsockopt+0x32/0xb0 [ 184.049697][ T5568] ? raw_setsockopt+0xc2/0x170 [ 184.054494][ T5568] ? sock_common_recvmsg+0x1c0/0x1c0 [ 184.059902][ T5568] __sys_setsockopt+0x2bf/0x3d0 [ 184.064901][ T5568] __x64_sys_setsockopt+0xb1/0xc0 [ 184.069967][ T5568] do_syscall_64+0x4c/0xa0 [ 184.074417][ T5568] ? clear_bhb_loop+0x30/0x80 [ 184.079125][ T5568] ? clear_bhb_loop+0x30/0x80 [ 184.083914][ T5568] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.089836][ T5568] RIP: 0033:0x7fd7f5948159 [ 184.094420][ T5568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.114228][ T5568] RSP: 002b:00007fd7f3ba0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.122854][ T5568] RAX: ffffffffffffffda RBX: 00007fd7f5bcffa0 RCX: 00007fd7f5948159 [ 184.130945][ T5568] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 184.139178][ T5568] RBP: 00007fd7f59df06b R08: 000000000000003c R09: 0000000000000000 [ 184.147269][ T5568] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 184.155281][ T5568] R13: 00007fd7f5bd0038 R14: 00007fd7f5bcffa0 R15: 00007ffd067f2058 [ 184.163389][ T5568] [ 184.180594][ T5568] [ 184.183123][ T5568] ============================= [ 184.188158][ T5568] WARNING: suspicious RCU usage [ 184.198719][ T5568] syzkaller #0 Not tainted [ 184.210199][ T5568] ----------------------------- [ 184.218638][ T5568] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 184.229148][ T5568] [ 184.229148][ T5568] other info that might help us debug this: [ 184.229148][ T5568] [ 184.240089][ T5568] [ 184.240089][ T5568] rcu_scheduler_active = 2, debug_locks = 1 [ 184.249272][ T5568] 1 lock held by syz.0.408/5568: [ 184.260251][ T5568] #0: ffffffff8d44d548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 184.270898][ T5568] [ 184.270898][ T5568] stack backtrace: [ 184.283583][ T5568] CPU: 0 PID: 5568 Comm: syz.0.408 Not tainted syzkaller #0 [ 184.290929][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.301440][ T5568] Call Trace: [ 184.304835][ T5568] [ 184.307789][ T5568] dump_stack_lvl+0x188/0x250 [ 184.312496][ T5568] ? load_image+0x410/0x410 [ 184.317026][ T5568] ? show_regs_print_info+0x20/0x20 [ 184.322427][ T5568] ? lockdep_rcu_suspicious+0x110/0x180 [ 184.328165][ T5568] ? local_bh_enable+0x20/0x20 [ 184.332947][ T5568] rhltable_lookup+0x512/0x7a0 [ 184.337754][ T5568] ? local_bh_enable+0x20/0x20 [ 184.342539][ T5568] ? mr_mfc_find_parent+0x190/0x190 [ 184.347842][ T5568] ? local_bh_enable+0x20/0x20 [ 184.352636][ T5568] ? lock_chain_count+0x20/0x20 [ 184.357511][ T5568] mr_mfc_find_any_parent+0xb7/0x1d0 [ 184.362817][ T5568] ? local_bh_enable+0x20/0x20 [ 184.367602][ T5568] ip_mr_forward+0x247/0xf60 [ 184.372224][ T5568] ipmr_mfc_add+0x2273/0x2bd0 [ 184.376940][ T5568] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 184.381949][ T5568] ? __lock_acquire+0x7b50/0x7b50 [ 184.387026][ T5568] ip_mroute_setsockopt+0xecd/0x1230 [ 184.392353][ T5568] ? ipmr_rule_default+0x70/0x70 [ 184.397514][ T5568] ? __might_sleep+0xf0/0xf0 [ 184.402249][ T5568] ip_setsockopt+0x568/0x31e0 [ 184.406958][ T5568] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 184.412795][ T5568] ? aa_sk_perm+0x7dc/0x910 [ 184.417324][ T5568] ? aa_af_perm+0x340/0x340 [ 184.422019][ T5568] ? __fget_files+0x402/0x470 [ 184.426806][ T5568] ? aa_sock_opt_perm+0x74/0x100 [ 184.431762][ T5568] ? sock_common_setsockopt+0x32/0xb0 [ 184.437237][ T5568] ? raw_setsockopt+0xc2/0x170 [ 184.442022][ T5568] ? sock_common_recvmsg+0x1c0/0x1c0 [ 184.447333][ T5568] __sys_setsockopt+0x2bf/0x3d0 [ 184.452212][ T5568] __x64_sys_setsockopt+0xb1/0xc0 [ 184.457259][ T5568] do_syscall_64+0x4c/0xa0 [ 184.461696][ T5568] ? clear_bhb_loop+0x30/0x80 [ 184.466393][ T5568] ? clear_bhb_loop+0x30/0x80 [ 184.471292][ T5568] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.477225][ T5568] RIP: 0033:0x7fd7f5948159 [ 184.481675][ T5568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.501305][ T5568] RSP: 002b:00007fd7f3ba0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.509760][ T5568] RAX: ffffffffffffffda RBX: 00007fd7f5bcffa0 RCX: 00007fd7f5948159 [ 184.517775][ T5568] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 184.525786][ T5568] RBP: 00007fd7f59df06b R08: 000000000000003c R09: 0000000000000000 [ 184.534013][ T5568] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 184.542027][ T5568] R13: 00007fd7f5bd0038 R14: 00007fd7f5bcffa0 R15: 00007ffd067f2058 [ 184.550056][ T5568] [ 184.569431][ T5568] [ 184.571815][ T5568] ============================= [ 184.583201][ T5568] WARNING: suspicious RCU usage [ 184.589471][ T5568] syzkaller #0 Not tainted [ 184.597824][ T5568] ----------------------------- [ 184.603796][ T5568] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 184.618467][ T5568] [ 184.618467][ T5568] other info that might help us debug this: [ 184.618467][ T5568] [ 184.629262][ T5568] [ 184.629262][ T5568] rcu_scheduler_active = 2, debug_locks = 1 [ 184.638128][ T5568] 1 lock held by syz.0.408/5568: [ 184.643758][ T5568] #0: ffffffff8d44d548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 184.657281][ T5568] [ 184.657281][ T5568] stack backtrace: [ 184.665616][ T5568] CPU: 0 PID: 5568 Comm: syz.0.408 Not tainted syzkaller #0 [ 184.673029][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.683279][ T5568] Call Trace: [ 184.686584][ T5568] [ 184.689533][ T5568] dump_stack_lvl+0x188/0x250 [ 184.694341][ T5568] ? load_image+0x410/0x410 [ 184.698965][ T5568] ? show_regs_print_info+0x20/0x20 [ 184.704203][ T5568] ? lockdep_rcu_suspicious+0x110/0x180 [ 184.709977][ T5568] ? local_bh_enable+0x20/0x20 [ 184.714957][ T5568] rhltable_lookup+0x5fc/0x7a0 [ 184.719767][ T5568] ? local_bh_enable+0x20/0x20 [ 184.724554][ T5568] ? mr_mfc_find_parent+0x190/0x190 [ 184.729784][ T5568] ? local_bh_enable+0x20/0x20 [ 184.734577][ T5568] ? lock_chain_count+0x20/0x20 [ 184.739680][ T5568] mr_mfc_find_any_parent+0xb7/0x1d0 [ 184.745006][ T5568] ? local_bh_enable+0x20/0x20 [ 184.749807][ T5568] ip_mr_forward+0x247/0xf60 [ 184.754441][ T5568] ipmr_mfc_add+0x2273/0x2bd0 [ 184.759164][ T5568] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 184.764131][ T5568] ? __lock_acquire+0x7b50/0x7b50 [ 184.769205][ T5568] ip_mroute_setsockopt+0xecd/0x1230 [ 184.774715][ T5568] ? ipmr_rule_default+0x70/0x70 [ 184.779786][ T5568] ? __might_sleep+0xf0/0xf0 [ 184.784402][ T5568] ip_setsockopt+0x568/0x31e0 [ 184.789122][ T5568] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 184.794534][ T5568] ? aa_sk_perm+0x7dc/0x910 [ 184.799263][ T5568] ? aa_af_perm+0x340/0x340 [ 184.803798][ T5568] ? __fget_files+0x402/0x470 [ 184.808501][ T5568] ? aa_sock_opt_perm+0x74/0x100 [ 184.813468][ T5568] ? sock_common_setsockopt+0x32/0xb0 [ 184.819073][ T5568] ? raw_setsockopt+0xc2/0x170 [ 184.823873][ T5568] ? sock_common_recvmsg+0x1c0/0x1c0 [ 184.829178][ T5568] __sys_setsockopt+0x2bf/0x3d0 [ 184.834143][ T5568] __x64_sys_setsockopt+0xb1/0xc0 [ 184.839293][ T5568] do_syscall_64+0x4c/0xa0 [ 184.843739][ T5568] ? clear_bhb_loop+0x30/0x80 [ 184.848543][ T5568] ? clear_bhb_loop+0x30/0x80 [ 184.853257][ T5568] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.859273][ T5568] RIP: 0033:0x7fd7f5948159 [ 184.864372][ T5568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.884016][ T5568] RSP: 002b:00007fd7f3ba0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.893090][ T5568] RAX: ffffffffffffffda RBX: 00007fd7f5bcffa0 RCX: 00007fd7f5948159 [ 184.901100][ T5568] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 184.909274][ T5568] RBP: 00007fd7f59df06b R08: 000000000000003c R09: 0000000000000000 [ 184.917389][ T5568] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 184.925401][ T5568] R13: 00007fd7f5bd0038 R14: 00007fd7f5bcffa0 R15: 00007ffd067f2058 [ 184.933430][ T5568] [ 186.282401][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 186.282928][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 186.288489][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 186.302384][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 186.308449][ T4273] Bluetooth: hci4: command 0x0406 tx timeout