last executing test programs: 4m1.134410422s ago: executing program 32 (id=6843): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000300)=0xffffffff, 0x4) 3m36.021332943s ago: executing program 2 (id=7792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x2, 0xfe, 0x0, 0x1000}, [@RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000) 3m35.907351331s ago: executing program 2 (id=7797): r0 = syz_open_dev$loop(&(0x7f0000001ec0), 0x7, 0x0) fadvise64(r0, 0xe2d, 0x5, 0x1) 3m35.832227196s ago: executing program 2 (id=7802): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x4a07e, 0xc6) fallocate(r0, 0x44, 0x7fffffffffffffff, 0x8) 3m35.731303363s ago: executing program 2 (id=7804): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000000000)=0x100002, 0x3000006) 3m35.401893675s ago: executing program 3 (id=7818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6fe5, 0x4d}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0xe, [@mesh_id={0x72, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x240008d0) 3m35.254607455s ago: executing program 3 (id=7823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3ff", 0x3}, {&(0x7f0000000540)='G', 0x1}, {&(0x7f0000000240)="6200bd750a5c01000000", 0xa}], 0x3) 3m35.171804491s ago: executing program 1 (id=7827): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000008567080002000000", 0x24) 3m35.168481191s ago: executing program 0 (id=7829): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x25, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0xa, 0x4e23, 0x40005b0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, 0x1c) 3m35.118243625s ago: executing program 0 (id=7830): preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000280)=""/180, 0xb4}], 0x2, 0x7fff, 0x3c8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024000100000000000000000000000000060003"], 0x1c}}, 0x0) 3m35.115966035s ago: executing program 3 (id=7831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)={0x0, 0x9, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @broadcast, @broadcast, @random="c25e2ef31301", @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @random="675f3152d975", @broadcast]}) 3m35.113545115s ago: executing program 5 (id=7832): io_setup(0x82, &(0x7f0000000240)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000000680)='1,N-', 0x4, 0x1}]) 3m35.083366487s ago: executing program 0 (id=7833): r0 = memfd_create(&(0x7f00000008c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x8e\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfczb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\x1d\xb5\x81\xce\xb7\xc0t\x83\\\xf7J\x12\xab\x8d\xf2\bc2\xe9]\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xdcdP\xb1\xf2a\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5-\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\x9f\xdf!\x9bF\xad\fjD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xbe\x00\x00\x00\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d656d6f72793d6cd5772c6261636b67726f756e645f67633d6f662a78187b3ee4d5d3612c69ca00facd642453556e7472792c646174615f666c7573682c64697361626c655f726f6c6c5f666f72776172642c6e6f696e6c696e655f78617474722c646973636172642c636865636b706f696e743d64697361626c652c757365725f78617474722c7265736769643dd66276f83afd6cb8c650bce8e88be7ada50f372e7cb442c4384b4bf8dfe664e2c13ddf2a6432a5f3643089a5de3c53fd4b277e04182d03cd05d80a8f5e64c7", @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="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"], 0xff, 0x5532, &(0x7f0000000600)="$eJzs3E1vG1UXAOBjp27ffrwlQizYdaQKKZFqq04/BLsCrfgQraoCC1bg2K7l1vZEseuEbGDBErHgnyCQWLHkN7BgzQ6xALFDCvLMBBKgiBDHJs3zSOMzc3197rmjKNLJRA7g2FpMfv6xFOfjdEQsRMS5iOy8VByZG3l4NiIuRER511Eqxn8bOBkRZyLi/CR5nrNUvPXppfHFaz+8/tNX35w6cfazL7+d366BeXsuIvpr+flGP49pJ48PivHGuJvF/tVxEfM3+g+L6zSPG+3VLMNGY2deI4uVYq107dFwEu/3Gs1J7HTvZ+Nrg3zB4bizkydb4EFjPbtutVez2B2mWexs5fk2t/LfbVvDUZ6nVeR7P0sfo9FOzMfbm+18P2sPs9gcjIrxPG/aam9O4riIxXLRTHutrI7Vf3+f/+ve6A4ebSbj9vqwmw6Sa7X687X69Wp9PW21R+2r1Ua/df1qstTpTaZVR+1G/0YnTTu9dq2Z9peTpU6zWa3Xk6Wb7dVuY5DU67UrtcvVa8vF2aXklTtvJ71WsjSJL3UHj0bd3jC5n64n+SeWk5XalReWk4v15M3bd5O7927dun33rXdvvnPnxduvvVxM+lNZydLK5ZWVav1ydaW+fIz2/1FR9BT3DwdSmncBAEeP/h+YivL+ph9e/79+LyLv/6908vmH0f/HXPr/0/u7yUfAkep/j3v/fwj7hwPR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHFvfVT5/NTtZzK/PFuP/L4aeLq5LEVGOiO2/sBAn9+RcKPJUHjO/8ocavi5FlmGyxqniOBMRN4rjl6cO+y4AAADAk+uLDy98knfr+cvivAtilvI/2pTPvTelfKWIqCx+P6Vs5cnLM1NKlv18n4jNx084sZ9slX1/4u+cnWq2f2RhT/jfrlDKQ3mm5QAAADOxtxOYbRcCAADALH087wKYj1LsPMrceRac/ef97w8ET++52m17e/uDWZQIAAAAHFBp3gUAAAAAhy7r/33/HwAAADzZ8u//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JWdu8lNG4jjAPq3wQX6oaKq+16lOzhGj9BllxUH6CU4QBf0Cr0AZyC7HCGCCHtCIEJRJI9NiN6TzDDG/JixYDEzaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSTbWa//v97U/bnO2unTy9AQAAAM7ZVKt5/WTa1D+k85/SqS+pXkREGRHnxu6DeHeSOUg51eP1f4+vr5604X9EnbD/jFE63kfE93Tcfe76LgAAAMAVGz3/8nqxnDWj9eZh2k+reB2aSZvy449MeUVEVNPbTGnlPu9rprD6+z2MX5nS6gmscaawZsptmCvtReqf+2HWbnxUFE1Rnn3boZHZ+g4AAPRocFL0OwoBAACgTz8v3QAuo4iHpczDUmD6w0Ba3puc1AAAAIArVFy6AQAAAEDn6vF/T/v/7XLv/zfJfTcAAADgjWr2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Xy+Ws7Y52107eXoDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA9+/OOAiEQBmGwd31nMvc/rDRoampSBcLH3xgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OZ3f/k/MTXOJHOvjaXnkWTt1Ng6NfbOjaM/jK9fAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzsz0sKhEAQRMGc6fnoTvr+h5UE3bkWhAgQHlUU0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/0Or68zxiNLcmn08a345nk11Xj31Vj6UFj7cG8+MG4+0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzv38xpHFQcA/M3MzvaHimuUPUREwYNe7HZbW3sTD0rw4J8ghHRbY7f+aHOwpYi5eJOcexE9ighKvPV/6LmFXuqthz1U8Ky82ZnsJA24Ks5sks8H3rzvPoZ53zcLId95kwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARJN3ZnEWD71pnJZj9x7fWov9/T19dGfrwXJsMU6aTPpgeKn+Iem3lwgAAABHR1bV9yGEh/n2SuzTXlH/59U5seb/7plpXNXze+v+qq9q/9h+/eXRCzsT9abzxIteWh+PTj+ZSuf/W+Vie/Zvz+gUd7549pIVX0j6/ubzk/x4vJ/JN3fvvtstbu2xJrIFAP6NU1VfBtXvQ7EftpkYAEdGp1Z4V/V/1ms3JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAmTDbDU1WchBCWO7M4uv/41tp+/Z2tB8tVO3/79lb4anbNeIk8hHBpfTw63ehqFtv1GzevrI7Ho2vNBy+HENqa/e1y+Vc+nOPkEHaPZGHviGCRg7T8shcln4MRtPhDCQCAQykvW6zrH+bbK3EsWQrhz+931/+v1eIwZ/3/6KPz9+pz1ev/YWMrXHyDjaufDa7fuPnG+tXVy6PLo0/ePDN8a3j2wrlzFwbFs5KBJyYAAAD8N92y1ev/dOnJ/f+TtTjMWf9//u3wy/pcmfp/X7NNv7YzAQAAONqee+WP35N9xpNuN3yxurFxbTg97nw+Mz22kOo/dqxs9fo/W2o7KwAAAKAJk81k1/7/xVoc5tz/f/qHF3+qXzMLIZwo9/9PrX06vtjcchZaE39O3PYaAQAAaNeJstX3//Pi/f9055WHNITw+qvTuPw3gHPV/9l7X/9Yn6v+/v/Z5pa4kNL+9H4UfT+ETr/tjAAAADjMjpctFvu/5dsrH/988oOu9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmvZXAAAA//+DJz+A") process_madvise(r0, 0x0, 0x0, 0x14, 0x0) 1m34.879392146s ago: executing program 9 (id=8324): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1m34.784646023s ago: executing program 9 (id=8326): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1m34.67673492s ago: executing program 9 (id=8327): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) 1m34.629423374s ago: executing program 9 (id=8329): unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', 0x0, 0xb) 1m34.618304034s ago: executing program 4 (id=8330): r0 = socket$can_raw(0x1d, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$can_raw(r0, &(0x7f0000000200), 0x10) 1m34.511807872s ago: executing program 4 (id=8332): syz_mount_image$erofs(&(0x7f00000004c0), &(0x7f0000000200)='./file2\x00', 0x300800c, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYBLOB="1345b98d490eff8fe38a0af8e378a595dc1e0ffb3342e4677a80292603f7862c87258ae1950b3e426b68b48411a89f869e8e002f7ea1fc19f1c084fdb81fad5b6ea312aa96f501847063e2acfb394d17b880cbd561c2137c39d1630e2771a2ec0f3518b168556615dca77ed028f410c2386e1e013783dc378717b97910a18d7171e4f5c353bf80ec41a76c4f0d39912c26a3d86d2f1ab20b251c8b1a681f8a4a62c9056dfc5e4271dfc4c3b116eafcff16a7312f364b8f2020936c41ea1920f20bcd759783219d99d76ae7bd6b68aa7251"], 0x1, 0x252, &(0x7f0000000500)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb) 1m34.490366024s ago: executing program 8 (id=8333): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0xc0011023) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1m34.460989175s ago: executing program 9 (id=8334): unshare(0x400) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000006c0)=0x2, 0x4) 1m34.38660373s ago: executing program 7 (id=8336): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100), 0x8) listen(r0, 0x9) 1m34.341130064s ago: executing program 8 (id=8337): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000040)=':@)@{:.[!\x00', 0x101c03, 0x0, 0x1, 0x0, 0x0}, {[0x7, 0x3, 0x7f, 0x10001]}, 0x4, 0x0, 0x0}) ioctl$sock_netdev_private(r0, 0x8990, &(0x7f0000000040)) 1m34.340935644s ago: executing program 4 (id=8338): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 1m34.330654084s ago: executing program 9 (id=8339): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="8e00000006"], 0x8e) 1m34.315913015s ago: executing program 6 (id=8340): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}, 0x1c) 1m34.291137247s ago: executing program 7 (id=8341): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) 1m34.260573299s ago: executing program 6 (id=8342): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 1m34.2454054s ago: executing program 8 (id=8343): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)={0x20, 0x1c, 0x723, 0x0, 0x0, "", [@nested={0x10, 0xa9, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x4, 0xe}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x20040010) 1m34.214659502s ago: executing program 7 (id=8344): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 1m34.162167205s ago: executing program 8 (id=8345): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e002f8100", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m34.09203168s ago: executing program 4 (id=8346): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='io\x00') read$FUSE(r0, &(0x7f0000002dc0)={0x2020}, 0x2020) 1m34.048148354s ago: executing program 6 (id=8347): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_gettime(r0, &(0x7f0000000000)) 1m34.002767587s ago: executing program 7 (id=8348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) 1m33.9630085s ago: executing program 6 (id=8349): capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x800}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x560c, 0x0) 1m33.917778542s ago: executing program 7 (id=8350): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000)=0xfffffffc, 0x0) 1m33.851327507s ago: executing program 6 (id=8351): timerfd_create(0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) 1m33.829192728s ago: executing program 7 (id=8352): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_SRC={0x8, 0x2, @private=0xa010102}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x34}}, 0x4000) 0s ago: executing program 6 (id=8353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001ec0)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) kernel console output (not intermixed with test programs): F(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.408718][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 247.435936][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.463046][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.484555][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.492900][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.503760][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.512026][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.521225][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.530244][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.539154][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.548184][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.556960][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.565548][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.574352][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.583036][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.592123][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.601926][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.605818][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 247.613042][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.625216][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.632803][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.641083][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.649957][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.658993][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.667450][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0.2: link becomes ready [ 247.676071][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 247.684149][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 247.692382][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.727093][T14062] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 247.763659][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6598'. [ 247.783841][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6598'. [ 247.813027][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6598'. [ 247.844746][T14064] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 247.918006][T14078] xt_TCPMSS: Only works on TCP SYN packets [ 247.999488][T14081] loop2: detected capacity change from 0 to 2048 [ 248.032490][T14087] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.039771][T14087] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.060196][T14081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.085965][T14081] incfs: Can't find or create .index dir in ./file0 [ 248.103327][T14081] incfs: mount failed -28 [ 248.117827][T14092] loop4: detected capacity change from 0 to 256 [ 248.168936][ T286] EXT4-fs (loop2): unmounting filesystem. [ 248.196409][ T306] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 248.219479][T14092] FAT-fs (loop4): Directory bread(block 64) failed [ 248.268454][T14092] FAT-fs (loop4): Directory bread(block 65) failed [ 248.295913][ T848] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 248.315256][T14092] FAT-fs (loop4): Directory bread(block 66) failed [ 248.341981][T14092] FAT-fs (loop4): Directory bread(block 67) failed [ 248.369153][T14092] FAT-fs (loop4): Directory bread(block 68) failed [ 248.400137][T14092] FAT-fs (loop4): Directory bread(block 69) failed [ 248.415909][T14092] FAT-fs (loop4): Directory bread(block 70) failed [ 248.426045][T14092] FAT-fs (loop4): Directory bread(block 71) failed [ 248.456181][T14092] FAT-fs (loop4): Directory bread(block 72) failed [ 248.487172][T14092] FAT-fs (loop4): Directory bread(block 73) failed [ 248.631360][T14128] netlink: 'syz.1.6628': attribute type 32 has an invalid length. [ 248.776778][ T28] kauditd_printk_skb: 531 callbacks suppressed [ 248.776794][ T28] audit: type=1400 audit(2000000050.533:5321): avc: denied { setcheckreqprot } for pid=14130 comm="syz.4.6629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 248.846107][ T28] audit: type=1400 audit(2000000050.587:5322): avc: denied { read write } for pid=284 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.955527][ T28] audit: type=1400 audit(2000000050.587:5323): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.013046][ T848] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 249.041257][ T28] audit: type=1400 audit(2000000050.587:5325): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.132154][ T28] audit: type=1400 audit(2000000050.587:5326): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.216303][ T28] audit: type=1400 audit(2000000050.587:5327): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.237127][ T848] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 249.255220][ T28] audit: type=1400 audit(2000000050.587:5324): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.271290][ T848] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 249.332859][T14160] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 249.376619][ T28] audit: type=1400 audit(2000000050.608:5328): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.471321][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.477908][ T287] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 249.690091][T14190] loop2: detected capacity change from 0 to 16 [ 249.707933][T14190] erofs: (device loop2): mounted with root inode @ nid 36. [ 249.715981][ T848] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 249.991904][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 250.079002][T14224] loop3: detected capacity change from 0 to 512 [ 250.130174][T14224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 250.155821][T14231] netlink: 'syz.2.6678': attribute type 1 has an invalid length. [ 250.164785][T14224] ext4 filesystem being mounted at /1463/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.200313][T14231] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6678'. [ 250.239448][T14224] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.6676: Failed to acquire dquot type 0 [ 250.346848][ T285] EXT4-fs (loop3): unmounting filesystem. [ 250.618888][T14251] netlink: 'syz.4.6685': attribute type 46 has an invalid length. [ 250.652854][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6685'. [ 250.678165][T14255] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 250.841715][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6695'. [ 251.201114][T14309] loop1: detected capacity change from 0 to 256 [ 251.214261][T14309] exfat: Deprecated parameter 'namecase' [ 251.254529][T14309] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 251.338917][T14327] device bridge_slave_1 left promiscuous mode [ 251.345583][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.381037][ T606] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 251.586023][ T39] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 251.771562][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.779587][ C1] ip6_tunnel: ; xmit: Local address not yet configured! [ 251.839484][ T606] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 251.849980][ T39] usb 2-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 251.886337][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.928036][ T39] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 251.958084][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.008133][ T39] usb 2-1: Product: syz [ 252.012373][ T39] usb 2-1: Manufacturer: syz [ 252.036828][ T39] usb 2-1: SerialNumber: syz [ 252.066659][ T39] usb 2-1: selecting invalid altsetting 1 [ 252.088745][ T39] usb 2-1: unit 6 not found! [ 252.112203][ T39] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 252.184303][T14376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6746'. [ 252.237895][T12141] udevd[12141]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 252.256982][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6746'. [ 252.302264][ T305] usb 2-1: USB disconnect, device number 86 [ 252.414424][T14395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6752'. [ 252.431594][T14396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.606164][T14417] netlink: 'syz.2.6763': attribute type 11 has an invalid length. [ 252.633857][T14414] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6762'. [ 252.741802][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 252.956048][ T848] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 253.120790][T14449] overlayfs: missing 'workdir' [ 253.153298][ T848] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 253.171114][ T848] usb 5-1: config 0 has no interface number 0 [ 253.206921][ T848] usb 5-1: config 0 interface 188 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 253.247165][ T848] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 253.256852][ T848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.265575][ T848] usb 5-1: Product: syz [ 253.269820][ T848] usb 5-1: Manufacturer: syz [ 253.278196][ T848] usb 5-1: SerialNumber: syz [ 253.291758][ T848] usb 5-1: config 0 descriptor?? [ 253.322167][T14423] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.441092][ T28] kauditd_printk_skb: 702 callbacks suppressed [ 253.441109][ T28] audit: type=1400 audit(2000000055.544:6028): avc: denied { read write open } for pid=287 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.523127][T14423] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.551424][ T28] audit: type=1400 audit(2000000055.576:6029): avc: denied { ioctl } for pid=287 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.628570][ T28] audit: type=1400 audit(2000000055.597:6030): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.653785][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6799'. [ 253.677885][T14491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6799'. [ 253.687889][ T28] audit: type=1400 audit(2000000055.597:6031): avc: denied { read write open } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.714284][ T28] audit: type=1400 audit(2000000055.597:6032): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.777514][ T848] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 253.797668][ T848] asix: probe of 5-1:0.188 failed with error -71 [ 253.814300][ T28] audit: type=1400 audit(2000000055.608:6033): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.846313][ T848] usb 5-1: USB disconnect, device number 80 [ 253.925163][ T28] audit: type=1400 audit(2000000055.608:6034): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.983222][T14516] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.997784][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.006204][T14516] audit: audit_lost=60 audit_rate_limit=0 audit_backlog_limit=64 [ 254.056915][T14523] device vti0 entered promiscuous mode [ 254.106213][T14527] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.171535][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 254.196187][ T606] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 254.219031][ T39] ip6_tunnel: - xmit: Local address not yet configured! [ 254.342894][T14540] loop3: detected capacity change from 0 to 16 [ 254.372921][T14540] erofs: (device loop3): mounted with root inode @ nid 36. [ 254.454678][T14550] loop4: detected capacity change from 0 to 256 [ 254.579808][T14564] loop0: detected capacity change from 0 to 256 [ 254.751871][T14577] loop0: detected capacity change from 0 to 256 [ 254.758476][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6848'. [ 254.775045][T14577] exfat: Deprecated parameter 'namecase' [ 254.789055][T14579] tc_dump_action: action bad kind [ 254.814027][T14577] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 254.829201][ T39] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 254.923570][T14586] loop1: detected capacity change from 0 to 256 [ 255.109245][ T39] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 255.178751][T14601] netlink: 'syz.3.6858': attribute type 32 has an invalid length. [ 255.297507][ T39] usb 1-1: unable to get BOS descriptor or descriptor too short [ 255.324396][ T39] usb 1-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 255.352804][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.371269][ T43] device bridge_slave_1 left promiscuous mode [ 255.377471][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.391688][ T43] device bridge_slave_0 left promiscuous mode [ 255.398853][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.406497][ T39] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 255.416527][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.424889][ T39] usb 1-1: Product: syz [ 255.466692][ T39] usb 1-1: Manufacturer: syz [ 255.477933][ T39] usb 1-1: SerialNumber: syz [ 255.492226][ T43] device veth0_vlan left promiscuous mode [ 255.493547][ T39] usb 1-1: selecting invalid altsetting 1 [ 255.526048][ T39] usb 1-1: unit 6 not found! [ 255.552002][ T39] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 255.692283][ T306] usb 1-1: USB disconnect, device number 78 [ 255.911316][T12220] udevd[12220]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 256.065524][T14596] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.106803][T14596] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.114362][T14596] device bridge_slave_0 entered promiscuous mode [ 256.133977][T14596] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.171606][T14596] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.179314][T14596] device bridge_slave_1 entered promiscuous mode [ 256.575863][T14596] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.583027][T14596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.590331][T14596] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.597432][T14596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.656924][T14682] netlink: 'syz.0.6897': attribute type 3 has an invalid length. [ 256.761135][T14690] netlink: 'syz.1.6900': attribute type 3 has an invalid length. [ 256.788433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.806849][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.840776][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.889803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.926701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.940179][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.947277][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.964039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.005992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.017216][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.024334][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.098515][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.128189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.146155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.167575][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.326679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.343399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.386791][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.407952][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.466133][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.475978][T14698] loop2: detected capacity change from 0 to 40427 [ 257.495212][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.514827][T14698] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 257.528479][T14596] device veth0_vlan entered promiscuous mode [ 257.558314][T14698] F2FS-fs (loop2): invalid crc value [ 257.600677][T14698] F2FS-fs (loop2): Found nat_bits in checkpoint [ 257.656410][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.691594][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.734861][T14596] device veth1_macvtap entered promiscuous mode [ 257.795472][T14698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 257.802210][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.829304][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.850793][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.886814][T14756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6931'. [ 257.897344][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.906824][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.961277][ C1] ip6_tunnel: - xmit: Local address not yet configured! [ 258.112862][T14774] IPv6: Can't replace route, no match found [ 258.122256][ T28] kauditd_printk_skb: 674 callbacks suppressed [ 258.122272][ T28] audit: type=1400 audit(2000000060.565:6706): avc: denied { read write open } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.201315][ T28] audit: type=1400 audit(2000000060.565:6707): avc: denied { read write } for pid=14596 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.295152][ T28] audit: type=1400 audit(2000000060.565:6708): avc: denied { open } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.398866][ T28] audit: type=1400 audit(2000000060.565:6709): avc: denied { ioctl } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.483790][ T28] audit: type=1400 audit(2000000060.597:6710): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.544132][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.556805][ T28] audit: type=1400 audit(2000000060.629:6711): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.582905][ T283] audit: audit_lost=62 audit_rate_limit=0 audit_backlog_limit=64 [ 258.600262][ T283] audit: backlog limit exceeded [ 258.618448][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.734537][ T306] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 258.925950][ T306] usb 2-1: Using ep0 maxpacket: 32 [ 258.942456][ T306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.964817][ T306] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 258.983525][ T306] usb 2-1: config 0 has no interface number 0 [ 259.018342][ T306] usb 2-1: config 0 interface 251 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.061250][ T306] usb 2-1: config 0 interface 251 has no altsetting 0 [ 259.084177][ T306] usb 2-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 259.123199][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.143367][ T306] usb 2-1: Product: syz [ 259.148205][ T306] usb 2-1: Manufacturer: syz [ 259.152839][ T306] usb 2-1: SerialNumber: syz [ 259.198660][ T306] usb 2-1: config 0 descriptor?? [ 259.391671][T14889] netlink: 'syz.0.6995': attribute type 12 has an invalid length. [ 259.418740][ T306] usb 2-1: USB disconnect, device number 87 [ 259.941919][T14921] loop2: detected capacity change from 0 to 512 [ 259.970469][T14921] EXT4-fs: Ignoring removed nobh option [ 259.991294][T14928] usb usb9: usbfs: process 14928 (syz.5.7015) did not claim interface 0 before use [ 260.051955][T14921] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #3: comm syz.2.7011: corrupted inode contents [ 260.088438][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.095006][T14921] EXT4-fs error (device loop2): ext4_dirty_inode:6139: inode #3: comm syz.2.7011: mark_inode_dirty error [ 260.123616][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 260.148687][T14937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7021'. [ 260.160979][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.176302][T14921] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #3: comm syz.2.7011: corrupted inode contents [ 260.218199][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.226557][T14921] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.7011: mark_inode_dirty error [ 260.271630][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.303655][T14921] EXT4-fs error (device loop2): ext4_acquire_dquot:6822: comm syz.2.7011: Failed to acquire dquot type 0 [ 260.355400][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.377869][T14921] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #16: comm syz.2.7011: corrupted inode contents [ 260.420912][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.456435][T14921] EXT4-fs error (device loop2): ext4_dirty_inode:6139: inode #16: comm syz.2.7011: mark_inode_dirty error [ 260.487815][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.494398][T14921] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #16: comm syz.2.7011: corrupted inode contents [ 260.554556][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.581579][T14921] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.7011: mark_inode_dirty error [ 260.640604][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.673640][T14971] loop5: detected capacity change from 0 to 1024 [ 260.683229][T14921] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #16: comm syz.2.7011: corrupted inode contents [ 260.722887][T14971] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.7035: lblock 2 mapped to illegal pblock 2 (length 1) [ 260.750465][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.757029][T14921] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 260.766625][T14971] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.7035: lblock 0 mapped to illegal pblock 48 (length 1) [ 260.780866][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.794367][T14921] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #16: comm syz.2.7011: corrupted inode contents [ 260.814147][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.820718][T14921] EXT4-fs error (device loop2): ext4_truncate:4320: inode #16: comm syz.2.7011: mark_inode_dirty error [ 260.832233][T14971] EXT4-fs error (device loop5): ext4_acquire_dquot:6822: comm syz.5.7035: Failed to acquire dquot type 0 [ 260.886358][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.888907][T14982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7040'. [ 260.904822][T14971] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5935: Corrupt filesystem [ 260.927810][T14921] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 260.953668][T14921] EXT4-fs (loop2): Remounting filesystem read-only [ 260.969068][T14971] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.7035: mark_inode_dirty error [ 260.987476][T14921] EXT4-fs (loop2): 1 truncate cleaned up [ 261.014007][T14921] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.029831][T14971] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 261.048204][T14986] loop3: detected capacity change from 0 to 256 [ 261.056180][T14921] ext4 filesystem being mounted at /1531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.077426][T14971] EXT4-fs (loop5): 1 orphan inode deleted [ 261.083214][T14971] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 261.092459][ T10] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 261.135670][ T10] EXT4-fs error (device loop5): ext4_release_dquot:6858: comm kworker/u4:1: Failed to release dquot type 0 [ 261.142018][T14986] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 261.201819][T14971] EXT4-fs error (device loop5): __ext4_get_inode_loc:4515: comm syz.5.7035: Invalid inode table block 1 in block_group 0 [ 261.266094][T14971] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5935: Corrupt filesystem [ 261.298638][ T286] EXT4-fs (loop2): unmounting filesystem. [ 261.373400][T14596] EXT4-fs (loop5): unmounting filesystem. [ 261.379267][ T10] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 261.411075][T14986] incfs: Can't find or create .index dir in ./file0 [ 261.417778][T14986] incfs: mount failed -5 [ 261.441628][ T10] EXT4-fs error (device loop5): ext4_release_dquot:6858: comm kworker/u4:1: Failed to release dquot type 0 [ 261.475619][T14596] EXT4-fs error (device loop5): __ext4_get_inode_loc:4515: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 261.506137][T14596] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5935: Corrupt filesystem [ 261.551300][T14596] EXT4-fs error (device loop5): ext4_quota_off:7128: inode #3: comm syz-executor: mark_inode_dirty error [ 261.734593][T15019] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7058'. [ 261.786893][T15025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.145382][T15069] xt_TCPMSS: Only works on TCP SYN packets [ 262.235675][T15078] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7089'. [ 262.269065][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7089'. [ 262.295387][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7089'. [ 262.314582][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7089'. [ 262.329769][T15078] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7089'. [ 262.358061][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7089'. [ 262.471115][T15094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.553171][T15102] device bridge_slave_0 left promiscuous mode [ 262.569375][T15102] device vlan0 left promiscuous mode [ 262.600695][T15102] device bridge2 left promiscuous mode [ 262.631589][T15102] device vti0 left promiscuous mode [ 262.641471][T15104] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 262.802823][ T28] kauditd_printk_skb: 647 callbacks suppressed [ 262.802839][ T28] audit: type=1400 audit(2000000065.586:7342): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.906154][ T28] audit: type=1400 audit(2000000065.629:7343): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.990424][ T28] audit: type=1400 audit(2000000065.629:7344): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.106942][ T28] audit: type=1400 audit(2000000065.629:7345): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.177992][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.184670][ T28] audit: type=1400 audit(2000000065.629:7346): avc: denied { read write } for pid=14596 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.184705][ T28] audit: type=1400 audit(2000000065.640:7347): avc: denied { open } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.184732][ T28] audit: type=1400 audit(2000000065.640:7348): avc: denied { read write open } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.184761][ T28] audit: type=1400 audit(2000000065.640:7349): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.184791][ T28] audit: type=1400 audit(2000000065.640:7350): avc: denied { ioctl } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.358191][T15175] __nla_validate_parse: 1 callbacks suppressed [ 263.358214][T15175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7133'. [ 263.401967][T15175] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7133'. [ 263.411501][T15183] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7140'. [ 263.424670][T15181] xt_TCPMSS: Only works on TCP SYN packets [ 263.512300][T15194] loop3: detected capacity change from 0 to 512 [ 263.549476][T15199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7148'. [ 263.581325][T15199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7148'. [ 263.592223][T15194] EXT4-fs (loop3): orphan cleanup on readonly fs [ 263.600856][T15199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.623140][T15194] EXT4-fs warning (device loop3): ext4_enable_quotas:7074: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 263.674703][T15194] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 263.691611][T15194] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.7146: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 263.716364][T15210] Zero length message leads to an empty skb [ 263.723048][T15194] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.7146: couldn't read orphan inode 13 (err -117) [ 263.739959][T15194] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 263.770193][T15194] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.7146: inode #15: comm syz.3.7146: iget: illegal inode # [ 263.840009][ T285] EXT4-fs (loop3): unmounting filesystem. [ 263.855193][T15218] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7157'. [ 264.868143][T15273] device bridge_slave_0 entered promiscuous mode [ 264.888381][T15273] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 264.958477][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7188'. [ 264.969675][T15283] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7188'. [ 264.989722][T15285] bridge0: port 3(dummy0) entered blocking state [ 265.005756][T15285] bridge0: port 3(dummy0) entered disabled state [ 265.044795][T15285] device dummy0 entered promiscuous mode [ 265.073855][T15285] bridge0: port 3(dummy0) entered blocking state [ 265.080255][T15285] bridge0: port 3(dummy0) entered forwarding state [ 265.336183][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7201'. [ 265.475177][T15326] netlink: 'syz.5.7210': attribute type 12 has an invalid length. [ 265.613901][T15341] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7216'. [ 265.711613][T15353] IPv6: Can't replace route, no match found [ 265.764130][T15359] xt_TCPMSS: Only works on TCP SYN packets [ 266.097451][ C1] ip6_tunnel: - xmit: Local address not yet configured! [ 266.685111][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 266.823221][T15450] xt_l2tp: v2 tid > 0xffff: 134217728 [ 267.015096][T15467] IPv6: NLM_F_REPLACE set, but no existing node found! [ 267.149526][T15477] xt_limit: Overflow, try lower: 65536/2147483648 [ 267.458574][T15509] netlink: 'syz.3.7299': attribute type 1 has an invalid length. [ 267.470252][ T28] kauditd_printk_skb: 697 callbacks suppressed [ 267.470267][ T28] audit: type=1400 audit(2000000070.597:7965): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.551772][ T28] audit: type=1400 audit(2000000070.597:7966): avc: denied { open } for pid=287 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.633990][T15522] xt_hashlimit: invalid interval [ 267.648619][ T28] audit: type=1400 audit(2000000070.597:7967): avc: denied { ioctl } for pid=287 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.687333][ T28] audit: type=1400 audit(2000000070.639:7968): avc: denied { read write } for pid=14596 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.723705][ T28] audit: type=1400 audit(2000000070.639:7969): avc: denied { open } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.731072][T15531] bridge0: port 3(gretap0) entered disabled state [ 267.759365][ T28] audit: type=1400 audit(2000000070.639:7970): avc: denied { ioctl } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.830615][ T28] audit: type=1400 audit(2000000070.650:7971): avc: denied { read write } for pid=283 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.856180][ T28] audit: type=1400 audit(2000000070.650:7972): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.881857][ T28] audit: type=1400 audit(2000000070.650:7973): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.909481][T15531] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.916721][T15531] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.942356][ T28] audit: type=1400 audit(2000000070.672:7974): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.372932][T15570] __nla_validate_parse: 1 callbacks suppressed [ 268.372954][T15570] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.7324'. [ 268.418815][T15570] 0ªX¹¦Dö»: renamed from gretap0 [ 268.454476][T15576] netlink: 'syz.5.7327': attribute type 49 has an invalid length. [ 268.508072][T15576] netlink: 'syz.5.7327': attribute type 49 has an invalid length. [ 268.668611][T15602] xt_connbytes: Forcing CT accounting to be enabled [ 268.823577][T15621] netlink: 'syz.0.7349': attribute type 1 has an invalid length. [ 268.838675][T15616] xt_CT: No such helper "syz0" [ 269.082535][T15634] netlink: 'syz.0.7356': attribute type 19 has an invalid length. [ 269.122763][T15634] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7356'. [ 269.769137][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7383'. [ 269.778876][T15650] loop3: detected capacity change from 0 to 40427 [ 269.804207][T15650] F2FS-fs (loop3): invalid crc value [ 269.839368][T15650] F2FS-fs (loop3): Found nat_bits in checkpoint [ 270.022840][T15650] F2FS-fs (loop3): Start checkpoint disabled! [ 270.047669][T15650] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 270.068274][T15650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 270.078984][T15708] xt_bpf: check failed: parse error [ 270.206471][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7397'. [ 270.245288][ T43] kworker/u4:2: attempt to access beyond end of device [ 270.245288][ T43] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 270.630741][T15755] loop1: detected capacity change from 0 to 256 [ 270.690591][T15755] FAT-fs (loop1): Directory bread(block 64) failed [ 270.705632][T15755] FAT-fs (loop1): Directory bread(block 65) failed [ 270.727298][T15755] FAT-fs (loop1): Directory bread(block 66) failed [ 270.738869][T15755] FAT-fs (loop1): Directory bread(block 67) failed [ 270.738923][T15755] FAT-fs (loop1): Directory bread(block 68) failed [ 270.738946][T15755] FAT-fs (loop1): Directory bread(block 69) failed [ 270.739003][T15755] FAT-fs (loop1): Directory bread(block 70) failed [ 270.739024][T15755] FAT-fs (loop1): Directory bread(block 71) failed [ 270.739060][T15755] FAT-fs (loop1): Directory bread(block 72) failed [ 270.739080][T15755] FAT-fs (loop1): Directory bread(block 73) failed [ 270.889409][T15779] netlink: 'syz.0.7425': attribute type 9 has an invalid length. [ 270.897501][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7425'. [ 271.094045][T15800] netlink: 'syz.5.7435': attribute type 12 has an invalid length. [ 271.175007][T15804] device ip6gretap4 entered promiscuous mode [ 271.308105][T15816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7446'. [ 271.605647][T15848] netlink: 'syz.1.7461': attribute type 1 has an invalid length. [ 271.620409][T15849] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7460'. [ 271.679750][T15849] device gretap0 entered promiscuous mode [ 271.702210][T15852] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 271.837160][T15855] loop1: detected capacity change from 0 to 4096 [ 271.887013][T15855] EXT4-fs: Ignoring removed orlov option [ 271.914496][T15855] EXT4-fs (loop1): Test dummy encryption mode enabled [ 271.923636][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7470'. [ 271.955001][T15855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.063744][ T287] EXT4-fs (loop1): unmounting filesystem. [ 272.137055][ T28] kauditd_printk_skb: 579 callbacks suppressed [ 272.137071][ T28] audit: type=1400 audit(2000000075.607:8554): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.240965][T12141] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.268251][ T28] audit: type=1400 audit(2000000075.639:8555): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.370994][T15888] netlink: 'syz.0.7480': attribute type 13 has an invalid length. [ 272.393586][ T28] audit: type=1400 audit(2000000075.639:8556): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.424928][ T28] audit: type=1400 audit(2000000075.639:8557): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.433600][T15888] 0ªX¹¦Dö»: refused to change device tx_queue_len [ 272.473017][ T28] audit: type=1400 audit(2000000075.682:8558): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.549896][T15888] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 272.594060][ T28] audit: type=1400 audit(2000000075.682:8559): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.705869][ T28] audit: type=1400 audit(2000000075.682:8560): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.849880][ T28] audit: type=1400 audit(2000000075.725:8561): avc: denied { read write } for pid=14596 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.903850][ T28] audit: type=1400 audit(2000000075.725:8562): avc: denied { open } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.954657][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.167040][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7501'. [ 273.271702][T15947] IPv6: NLM_F_REPLACE set, but no existing node found! [ 273.597099][T15978] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.7522'. [ 273.675209][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7526'. [ 273.780367][T15996] xt_CT: No such helper "netbios-ns" [ 273.842437][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 273.891289][T16009] xt_socket: unknown flags 0x58 [ 273.974363][T16018] xt_TCPMSS: Only works on TCP SYN packets [ 274.246612][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7555'. [ 274.302649][T16001] loop1: detected capacity change from 0 to 40427 [ 274.331308][T16001] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3584) blocks(512) [ 274.364851][T16001] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 274.375853][T16001] F2FS-fs (loop1): invalid crc value [ 274.412620][T16001] F2FS-fs (loop1): Found nat_bits in checkpoint [ 274.606229][T16001] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 274.623550][T16001] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 275.093687][T16105] xt_hashlimit: max too large, truncated to 1048576 [ 275.106108][T16104] loop5: detected capacity change from 0 to 512 [ 275.131730][T16105] xt_hashlimit: overflow, rate too high: 0 [ 275.157918][T16104] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 275.186293][T16104] EXT4-fs (loop5): 1 truncate cleaned up [ 275.192213][T16104] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 275.238429][T16104] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 4: comm syz.5.7583: lblock 0 mapped to illegal pblock 4 (length 1) [ 275.263851][T16061] loop0: detected capacity change from 0 to 40427 [ 275.304102][T16061] F2FS-fs (loop0): invalid crc value [ 275.348079][T14596] EXT4-fs (loop5): unmounting filesystem. [ 275.422216][T16061] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 275.596907][T16061] F2FS-fs (loop0): Start checkpoint disabled! [ 275.621528][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7595'. [ 275.625654][T16061] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 275.700726][T16061] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 276.462631][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7624'. [ 276.483259][T16198] xt_TPROXY: Can be used only with -p tcp or -p udp [ 276.498361][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7624'. [ 276.516385][T16194] netlink: 'syz.0.7623': attribute type 12 has an invalid length. [ 276.575866][T16207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7629'. [ 276.664857][T16214] device ip6gretap1 entered promiscuous mode [ 276.799535][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7636'. [ 276.824706][ T28] kauditd_printk_skb: 822 callbacks suppressed [ 276.824724][ T28] audit: type=1400 audit(2000000002.972:9383): avc: denied { read write } for pid=14596 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 276.942726][T16236] netlink: 'syz.1.7644': attribute type 15 has an invalid length. [ 276.963670][ T28] audit: type=1400 audit(2000000002.993:9384): avc: denied { read write open } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.058489][ T28] audit: type=1400 audit(2000000002.993:9385): avc: denied { ioctl } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.114181][ T28] audit: type=1400 audit(2000000002.993:9386): avc: denied { read write } for pid=283 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.184763][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 277.191907][T16256] audit: audit_backlog=65 > audit_backlog_limit=64 [ 277.198638][ T28] audit: type=1400 audit(2000000002.993:9387): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.205054][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 277.236348][T16256] audit: audit_lost=96 audit_rate_limit=0 audit_backlog_limit=64 [ 277.253470][T16256] audit: backlog limit exceeded [ 277.272395][T16256] loop1: detected capacity change from 0 to 2048 [ 277.435311][T16256] loop1: unable to read partition table [ 277.458907][T16256] loop1: partition table beyond EOD, truncated [ 277.490911][T16256] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 277.596736][ T103] loop1: unable to read partition table [ 277.610799][ T103] loop1: partition table beyond EOD, truncated [ 277.648536][T16287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7668'. [ 277.690595][T12141] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.728043][T16295] xt_SECMARK: invalid security context 'unconfined' [ 277.816437][T16302] loop3: detected capacity change from 0 to 512 [ 277.880675][T16302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.7676: bg 0: block 393: padding at end of block bitmap is not set [ 277.928893][T16302] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 277.948786][T16302] EXT4-fs (loop3): 2 truncates cleaned up [ 278.003338][T16302] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 278.039865][ T285] EXT4-fs (loop3): unmounting filesystem. [ 278.565158][T16396] x_tables: duplicate entry at hook 3 [ 278.619039][T16400] can0: slcan on ptm0. [ 278.646741][T16404] x_tables: duplicate entry at hook 1 [ 278.689798][T16399] can0 (unregistered): slcan off ptm0. [ 278.710432][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7729'. [ 279.093586][T16458] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7752'. [ 279.118608][T16460] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 279.287314][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7758'. [ 279.287346][T16476] netlink: 'syz.1.7759': attribute type 7 has an invalid length. [ 279.340857][T16476] netlink: 'syz.1.7759': attribute type 8 has an invalid length. [ 279.831227][T16533] netlink: 'syz.5.7790': attribute type 46 has an invalid length. [ 280.076434][T16558] SELinux: Context : is not valid (left unmapped). [ 280.710108][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7827'. [ 280.998051][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7841'. [ 301.877743][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 359.140056][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 374.489992][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 374.497071][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16655 [ 374.504488][ C0] (detected by 0, t=10002 jiffies, g=59957, q=1117 ncpus=2) [ 374.511891][ C0] task:syz.3.7849 state:R running task stack:25584 pid:16655 ppid:285 flags:0x00004000 [ 374.522685][ C0] Call Trace: [ 374.526064][ C0] [ 374.528934][ C0] sched_show_task+0x391/0x550 [ 374.533727][ C0] ? __kasan_check_write+0x14/0x20 [ 374.538855][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 374.544772][ C0] ? __cfi_sched_show_task+0x10/0x10 [ 374.550068][ C0] ? wq_watchdog_touch+0x100/0x190 [ 374.555195][ C0] print_other_cpu_stall+0xdbf/0x10f0 [ 374.560680][ C0] ? print_cpu_stall+0x590/0x590 [ 374.565643][ C0] ? acct_account_cputime+0xe4/0x290 [ 374.570960][ C0] rcu_sched_clock_irq+0x7ba/0x1310 [ 374.576202][ C0] ? __cfi_rcu_sched_clock_irq+0x10/0x10 [ 374.581857][ C0] ? hrtimer_run_queues+0x166/0x430 [ 374.587089][ C0] ? update_wall_time+0x25/0x30 [ 374.591954][ C0] update_process_times+0x148/0x1b0 [ 374.597188][ C0] tick_sched_timer+0x17c/0x240 [ 374.602073][ C0] ? __cfi_tick_sched_timer+0x10/0x10 [ 374.607461][ C0] __hrtimer_run_queues+0x3bb/0x8e0 [ 374.612689][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 374.617836][ C0] ? ktime_get_update_offsets_now+0x30c/0x320 [ 374.623923][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 374.628888][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 374.629779][ C1] sched: RT throttling activated [ 374.639838][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 374.645503][ C0] [ 374.648466][ C0] [ 374.651417][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 374.655546][ T28] kauditd_printk_skb: 782 callbacks suppressed [ 374.655583][ T28] audit: type=1400 audit(2000000007.832:10163): avc: denied { read write } for pid=14596 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.657427][ C0] RIP: 0010:page_pool_refill_alloc_cache+0x162/0x610 [ 374.657476][ C0] Code: 00 31 ff 44 89 ee e8 fd 08 6f fd 45 85 ed 0f 84 1d 04 00 00 48 8b 85 70 ff ff ff 42 80 3c 38 00 74 08 4c 89 e7 e8 2e 61 b4 fd <49> 8b 1c 24 48 8b 45 88 42 0f b6 04 38 84 c0 0f 85 67 02 00 00 48 [ 374.657493][ C0] RSP: 0018:ffffc900102af6d0 EFLAGS: 00000246 [ 374.657511][ C0] RAX: 1ffff11022e392b9 RBX: ffff88811411dbc0 RCX: 0000000000000002 [ 374.657527][ C0] RDX: ffff888136e6e540 RSI: 000000000000000b RDI: 0000000000000000 [ 374.736195][ C0] RBP: ffffc900102af770 R08: 0000000000000003 R09: 0000000000000004 [ 374.744163][ C0] R10: dffffc0000000000 R11: fffff52002055ec4 R12: ffff8881171c95c8 [ 374.752145][ C0] R13: 000000000000000b R14: ffff8881171c9108 R15: dffffc0000000000 [ 374.760120][ C0] page_pool_alloc_pages+0xb2/0x130 [ 374.765323][ C0] bpf_test_run_xdp_live+0x650/0x1b00 [ 374.770777][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 374.775799][ C0] ? 0xffffffffa0004440 [ 374.779960][ C0] ? bpf_test_run_xdp_live+0x54c/0x1b00 [ 374.785511][ C0] ? xdp_convert_md_to_buff+0x370/0x370 [ 374.791099][ C0] ? __cfi_xdp_test_run_init_page+0x10/0x10 [ 374.797014][ C0] ? __kasan_check_write+0x14/0x20 [ 374.802133][ C0] ? _copy_from_user+0x8f/0xc0 [ 374.806909][ C0] bpf_prog_test_run_xdp+0x736/0xf10 [ 374.812202][ C0] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 374.818009][ C0] ? __kasan_check_write+0x14/0x20 [ 374.823120][ C0] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 374.828930][ C0] bpf_prog_test_run+0x3e3/0x640 [ 374.833871][ C0] ? bpf_prog_query+0x270/0x270 [ 374.838735][ C0] ? selinux_bpf+0xce/0xf0 [ 374.843158][ C0] ? security_bpf+0x93/0xb0 [ 374.847663][ C0] __sys_bpf+0x5ee/0x850 [ 374.851906][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 374.857293][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 374.862933][ C0] __x64_sys_bpf+0x7c/0x90 [ 374.867364][ C0] x64_sys_call+0x488/0x9a0 [ 374.871867][ C0] do_syscall_64+0x4c/0xa0 [ 374.876304][ C0] ? clear_bhb_loop+0x30/0x80 [ 374.881067][ C0] ? clear_bhb_loop+0x30/0x80 [ 374.885751][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.891642][ C0] RIP: 0033:0x7f82ca59c819 [ 374.896053][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.915661][ C0] RSP: 002b:00007f82c8ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.924080][ C0] RAX: ffffffffffffffda RBX: 00007f82ca815fa0 RCX: 00007f82ca59c819 [ 374.932069][ C0] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 374.940047][ C0] RBP: 00007f82ca632c91 R08: 0000000000000000 R09: 0000000000000000 [ 374.948031][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.956009][ C0] R13: 00007f82ca816038 R14: 00007f82ca815fa0 R15: 00007ffd9cd40278 [ 374.963987][ C0] [ 374.967127][ C0] rcu: rcu_preempt kthread starved for 5797 jiffies! g59957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 374.978249][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 374.988241][ C0] rcu: RCU grace-period kthread stack dump: [ 374.994143][ C0] task:rcu_preempt state:R running task stack:28496 pid:14 ppid:2 flags:0x00004000 [ 375.004936][ C0] Call Trace: [ 375.008235][ C0] [ 375.011190][ C0] __schedule+0xba6/0x1500 [ 375.015637][ C0] ? release_firmware_map_entry+0x190/0x190 [ 375.021545][ C0] schedule+0xbd/0x170 [ 375.025620][ C0] schedule_timeout+0x159/0x340 [ 375.030516][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 375.035922][ C0] ? __cfi_process_timeout+0x10/0x10 [ 375.041222][ C0] ? prepare_to_swait_event+0x308/0x320 [ 375.046803][ C0] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 375.051667][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 375.056887][ C0] ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10 [ 375.062960][ C0] ? rcu_gp_init+0xf30/0xf30 [ 375.067597][ C0] rcu_gp_kthread+0x99/0x390 [ 375.072197][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 375.077405][ C0] ? set_cpus_allowed_ptr+0x88/0xd0 [ 375.082664][ C0] ? __kasan_check_read+0x11/0x20 [ 375.087692][ C0] ? __kthread_parkme+0x142/0x180 [ 375.092738][ C0] kthread+0x281/0x320 [ 375.096816][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 375.102022][ C0] ? __cfi_kthread+0x10/0x10 [ 375.106624][ C0] ret_from_fork+0x1f/0x30 [ 375.111233][ C0] [ 375.114262][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 375.120595][ C0] Sending NMI from CPU 0 to CPUs 1: [ 375.125829][ C1] NMI backtrace for cpu 1 [ 375.125840][ C1] CPU: 1 PID: 10 Comm: kworker/u4:1 Tainted: G W syzkaller #0 [ 375.125859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 375.125870][ C1] Workqueue: events_unbound toggle_allocation_gate [ 375.125893][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 [ 375.125921][ C1] Code: 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 48 8b 45 08 65 48 8b 0d b0 fe 90 7e 65 8b 15 b1 fe 90 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 [ 375.125936][ C1] RSP: 0018:ffffc900000a7830 EFLAGS: 00000202 [ 375.125950][ C1] RAX: ffffffff8167ff39 RBX: dffffc0000000000 RCX: ffff888100298000 [ 375.125963][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 375.125974][ C1] RBP: ffffc900000a7830 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 375.125988][ C1] R10: 0000000000000000 R11: ffffffff8134c6c0 R12: 1ffff1103ede7218 [ 375.126000][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 375.126013][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 375.126028][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.126040][ C1] CR2: 0000555561e98908 CR3: 000000000700f000 CR4: 00000000003506a0 [ 375.126056][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.126066][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.126078][ C1] Call Trace: [ 375.126083][ C1] [ 375.126090][ C1] smp_call_function_many_cond+0x8a9/0x980 [ 375.126113][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 375.126135][ C1] ? smp_call_function_many+0x40/0x40 [ 375.126154][ C1] ? kmem_cache_alloc_bulk+0xfd/0x3c0 [ 375.126176][ C1] ? text_poke+0x30/0x30 [ 375.126195][ C1] ? text_poke_loc_init+0x10f/0x5b0 [ 375.126215][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 375.126235][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 375.126255][ C1] text_poke_bp_batch+0x1cf/0x600 [ 375.126277][ C1] ? text_poke_loc_init+0x5b0/0x5b0 [ 375.126297][ C1] ? __kasan_check_write+0x14/0x20 [ 375.126314][ C1] ? mutex_lock+0x93/0x1b0 [ 375.126331][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 375.126349][ C1] ? text_poke_queue+0xdf/0x180 [ 375.126372][ C1] text_poke_finish+0x1a/0x30 [ 375.126392][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 375.126417][ C1] __jump_label_update+0x37c/0x3a0 [ 375.126441][ C1] jump_label_update+0x39b/0x450 [ 375.126462][ C1] static_key_enable_cpuslocked+0x126/0x240 [ 375.126484][ C1] static_key_enable+0x1a/0x30 [ 375.126503][ C1] toggle_allocation_gate+0xba/0x440 [ 375.126523][ C1] ? __cfi_toggle_allocation_gate+0x10/0x10 [ 375.126542][ C1] ? __linkwatch_run_queue+0x612/0x660 [ 375.126564][ C1] ? __kasan_check_write+0x14/0x20 [ 375.126581][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 375.126607][ C1] ? try_to_wake_up+0x613/0x1220 [ 375.126642][ C1] process_one_work+0x71f/0xc40 [ 375.126661][ C1] worker_thread+0xa29/0x11e0 [ 375.126682][ C1] kthread+0x281/0x320 [ 375.126698][ C1] ? __cfi_worker_thread+0x10/0x10 [ 375.126737][ C1] ? __cfi_kthread+0x10/0x10 [ 375.126755][ C1] ret_from_fork+0x1f/0x30 [ 375.126778][ C1] [ 375.477733][ T28] audit: type=1400 audit(2000000007.832:10164): avc: denied { read write open } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.537788][ T28] audit: type=1400 audit(2000000007.832:10165): avc: denied { ioctl } for pid=14596 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.692874][ T28] audit: type=1400 audit(2000000108.819:10166): avc: denied { read write } for pid=287 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.855818][ T28] audit: type=1400 audit(2000000108.819:10167): avc: denied { read write open } for pid=287 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.088158][ T28] audit: type=1400 audit(2000000108.819:10168): avc: denied { ioctl } for pid=287 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.113834][ T28] audit: type=1400 audit(2000000108.872:10169): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.257816][ T28] audit: type=1400 audit(2000000108.872:10170): avc: denied { read write open } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.283067][ T28] audit: type=1400 audit(2000000108.872:10171): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.309090][ T28] audit: type=1400 audit(2000000108.872:10172): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.765423][T16669] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.772515][T16669] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.780437][T16669] device bridge_slave_0 entered promiscuous mode [ 376.791992][T16669] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.799068][T16669] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.806614][T16669] device bridge_slave_1 entered promiscuous mode [ 376.819164][T16672] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.826399][T16672] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.833874][T16672] device bridge_slave_0 entered promiscuous mode [ 376.851451][T16670] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.858589][T16670] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.866164][T16670] device bridge_slave_0 entered promiscuous mode [ 376.874699][T16670] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.881903][T16670] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.889601][T16670] device bridge_slave_1 entered promiscuous mode [ 376.896220][T16672] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.903275][T16672] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.910962][T16672] device bridge_slave_1 entered promiscuous mode [ 376.944226][T16671] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.951497][T16671] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.959001][T16671] device bridge_slave_0 entered promiscuous mode [ 376.980620][T16671] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.987703][T16671] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.995711][T16671] device bridge_slave_1 entered promiscuous mode [ 377.072866][T16673] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.079934][T16673] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.087669][T16673] device bridge_slave_0 entered promiscuous mode [ 377.118718][T16673] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.125798][T16673] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.133347][T16673] device bridge_slave_1 entered promiscuous mode [ 377.300465][T16669] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.307560][T16669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.314959][T16669] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.322093][T16669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.345716][T16670] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.352810][T16670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.360116][T16670] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.367189][T16670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.392335][T16672] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.399432][T16672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.406766][T16672] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.413841][T16672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.460683][T16671] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.467753][T16671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.475077][T16671] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.482147][T16671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.493765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.501479][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.508747][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.517120][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.524630][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.532097][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.539559][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.546767][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.554248][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.585829][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.594384][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.601480][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.618743][ T307] device gretap0 left promiscuous mode [ 377.624297][ T307] bridge0: port 3(gretap0) entered disabled state [ 377.646395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.654890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.664267][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.671339][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.706025][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.713563][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.721382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.730463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.738536][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.747009][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.755332][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.763766][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.778935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.787539][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.795987][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.803057][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.810815][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.819394][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.827751][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.834811][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.873596][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.881091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.888679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.897763][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.906794][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.913876][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.921597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.959036][ T307] device bridge_slave_1 left promiscuous mode [ 377.965195][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.973335][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.981233][ T307] device dummy0 left promiscuous mode [ 377.987159][ T307] bridge0: port 3(dummy0) entered disabled state [ 377.993919][ T307] device bridge_slave_1 left promiscuous mode [ 378.000472][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.007970][ T307] device bridge_slave_0 left promiscuous mode [ 378.014208][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.023103][ T307] device bridge_slave_1 left promiscuous mode [ 378.029226][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.036838][ T307] device bridge_slave_0 left promiscuous mode [ 378.043186][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.052349][ T307] device bridge_slave_1 left promiscuous mode [ 378.058506][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.066063][ T307] device bridge_slave_0 left promiscuous mode [ 378.072360][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.080922][ T307] device veth1_macvtap left promiscuous mode [ 378.086937][ T307] device veth0_vlan left promiscuous mode [ 378.092975][ T307] device veth1_macvtap left promiscuous mode [ 378.099045][ T307] device veth0_vlan left promiscuous mode [ 378.827289][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.835734][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.843983][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.851065][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.859263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.868006][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.876247][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.883329][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.890745][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.899097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.907219][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.914274][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.921784][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.929846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.937835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 378.945322][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.952762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.961141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.969317][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.976383][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.983786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.992200][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.000468][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.007542][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.029663][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.037775][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.045929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.054125][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.063036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.071430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.097408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.105610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.114268][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.122867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.130935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.140284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.148609][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.156745][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.164833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.173242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.184575][T16673] device veth0_vlan entered promiscuous mode [ 379.207027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.214920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.223208][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.232068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.240622][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.248712][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.257322][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.264915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.272567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.280002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.292525][T16672] device veth0_vlan entered promiscuous mode [ 379.304865][T16669] device veth0_vlan entered promiscuous mode [ 379.312093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.319877][ T28] kauditd_printk_skb: 206 callbacks suppressed [ 379.319891][ T28] audit: type=1400 audit(2000000112.950:10379): avc: denied { module_request } for pid=16673 comm="syz-executor" kmod="netdev-macvlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.322611][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.357495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.365182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.375966][ T28] audit: type=1400 audit(2000000113.014:10380): avc: denied { module_request } for pid=16670 comm="syz-executor" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.398560][ T28] audit: type=1400 audit(2000000113.014:10381): avc: denied { module_request } for pid=16670 comm="syz-executor" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.423539][ T28] audit: type=1400 audit(2000000113.068:10382): avc: denied { module_request } for pid=16669 comm="syz-executor" kmod="netdev-macvlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.446249][ T28] audit: type=1400 audit(2000000113.068:10383): avc: denied { module_request } for pid=16669 comm="syz-executor" kmod="netdev-macvlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.457526][T16673] device veth1_macvtap entered promiscuous mode [ 379.477925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.486241][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.494483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.502929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.511344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.519593][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.527674][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.536182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.544365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.577677][ T28] audit: type=1400 audit(2000000113.218:10384): avc: denied { module_request } for pid=16669 comm="syz-executor" kmod="netdev-ipvlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.601423][ T28] audit: type=1400 audit(2000000113.218:10385): avc: denied { module_request } for pid=16669 comm="syz-executor" kmod="netdev-ipvlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.614991][T16672] device veth1_macvtap entered promiscuous mode [ 379.624477][ T28] audit: type=1400 audit(2000000113.218:10386): avc: denied { module_request } for pid=16669 comm="syz-executor" kmod="netdev-ipvlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.643302][T16670] device veth0_vlan entered promiscuous mode [ 379.655678][ T28] audit: type=1400 audit(2000000113.229:10387): avc: denied { module_request } for pid=16671 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.683091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.691138][ T28] audit: type=1400 audit(2000000113.229:10388): avc: denied { module_request } for pid=16671 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.691845][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.721591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.729282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.737725][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.746118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.754488][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.762708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.772912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.781592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.790105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.803453][T16669] device veth1_macvtap entered promiscuous mode [ 379.820038][T16671] device veth0_vlan entered promiscuous mode [ 379.832913][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.841551][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.867166][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.875081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.883259][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.892682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.902283][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.911387][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.920788][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.929778][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.938770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.947759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.010843][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.022924][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.049374][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.074274][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.098357][T16670] device veth1_macvtap entered promiscuous mode [ 380.134854][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.142691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.160170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.183503][T16698] loop6: detected capacity change from 0 to 512 [ 380.202224][T16671] device veth1_macvtap entered promiscuous mode [ 380.233524][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.259926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.279764][T16698] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 380.291607][T16704] loop4: detected capacity change from 0 to 256 [ 380.299646][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.307775][T16698] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 380.327921][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.357735][T16707] loop9: detected capacity change from 0 to 1024 [ 380.365730][T16707] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 380.371919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.377931][T16698] EXT4-fs (loop6): 1 truncate cleaned up [ 380.391830][T16698] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 380.426343][T16672] EXT4-fs (loop6): unmounting filesystem. [ 380.436822][T16707] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 380.470081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.497292][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.579665][T16673] EXT4-fs (loop9): unmounting filesystem. [ 380.998458][T16745] loop4: detected capacity change from 0 to 512 [ 381.043359][T16745] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.7876: bg 0: block 4: invalid block bitmap [ 381.070603][T16745] EXT4-fs (loop4): Remounting filesystem read-only [ 381.077258][T16745] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 381.110305][T16745] EXT4-fs (loop4): Remounting filesystem read-only [ 381.117321][T16745] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.7876: invalid indirect mapped block 1 (level 1) [ 381.131794][T16745] EXT4-fs (loop4): Remounting filesystem read-only [ 381.140619][T16745] EXT4-fs (loop4): 1 truncate cleaned up [ 381.146559][T16745] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 381.188527][T16669] EXT4-fs (loop4): unmounting filesystem. [ 381.684530][T16805] loop8: detected capacity change from 0 to 256 [ 382.300347][T16829] loop9: detected capacity change from 0 to 40427 [ 382.322276][T16829] F2FS-fs (loop9): invalid crc value [ 382.339515][T16829] F2FS-fs (loop9): Found nat_bits in checkpoint [ 382.425898][T16829] F2FS-fs (loop9): Start checkpoint disabled! [ 382.440686][T16829] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 382.470293][T16829] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 382.477970][ T306] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 382.655904][ T306] usb 8-1: unable to get BOS descriptor or descriptor too short [ 382.695800][ T306] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.745742][ T307] kworker/u4:4: attempt to access beyond end of device [ 382.745742][ T307] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 382.771355][ T306] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.813549][ T306] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 382.872214][ T306] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.915093][ T306] usb 8-1: Product: syz [ 382.940800][ T306] usb 8-1: Manufacturer: syz [ 382.961522][ T306] usb 8-1: SerialNumber: syz [ 382.980503][T16864] loop4: detected capacity change from 0 to 40427 [ 383.022391][T16864] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 383.053928][T16864] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 383.118859][T16864] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 383.166282][T16864] F2FS-fs (loop4): Found nat_bits in checkpoint [ 383.178350][T16885] loop6: detected capacity change from 0 to 512 [ 383.220114][ T306] usb 8-1: 0:1 : does not exist [ 383.225287][ T306] usb 8-1: unit 1 not found! [ 383.247592][T16885] EXT4-fs: Ignoring removed nobh option [ 383.272186][ T306] usb 8-1: USB disconnect, device number 2 [ 383.316473][T16885] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 383.359945][T16885] EXT4-fs (loop6): 1 truncate cleaned up [ 383.366436][T16885] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 383.448366][T16672] EXT4-fs (loop6): unmounting filesystem. [ 383.493460][T16864] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 383.520621][T16864] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 383.531386][T16689] udevd[16689]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 384.014576][ T28] kauditd_printk_skb: 625 callbacks suppressed [ 384.014594][ T28] audit: type=1400 audit(2000000117.982:11014): avc: denied { create } for pid=16919 comm="syz.7.7954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 384.099079][ T28] audit: type=1400 audit(2000000118.003:11015): avc: denied { write } for pid=16919 comm="syz.7.7954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 384.164802][ T28] audit: type=1400 audit(2000000118.003:11016): avc: denied { read } for pid=16919 comm="syz.7.7954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 384.251642][ T28] audit: type=1400 audit(2000000118.025:11017): avc: denied { create } for pid=16915 comm="syz.9.7951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.311648][T16939] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.322232][T16671] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.331391][T16670] audit: audit_backlog=65 > audit_backlog_limit=64 [ 384.337988][ T28] audit: type=1400 audit(2000000118.025:11018): avc: denied { getopt } for pid=16915 comm="syz.9.7951" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.360873][T16671] audit: audit_lost=100 audit_rate_limit=0 audit_backlog_limit=64 [ 384.369281][T16670] audit: audit_lost=101 audit_rate_limit=0 audit_backlog_limit=64 [ 384.500781][T16948] loop6: detected capacity change from 0 to 16 [ 384.528350][T16948] erofs: (device loop6): mounted with root inode @ nid 36. [ 384.653142][T16961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7970'. [ 384.664682][T16962] loop7: detected capacity change from 0 to 16 [ 384.690330][T16962] erofs: (device loop7): mounted with root inode @ nid 36. [ 384.737062][T16966] erofs: (device loop8): mounted with root inode @ nid 36. [ 385.145647][T16986] netlink: 612 bytes leftover after parsing attributes in process `syz.8.7983'. [ 385.197906][T16986] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 385.375749][T17008] set_capacity_and_notify: 1 callbacks suppressed [ 385.375767][T17008] loop7: detected capacity change from 0 to 1024 [ 385.481636][T17008] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 385.565026][T17008] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 385.605746][T17026] loop9: detected capacity change from 0 to 256 [ 385.628488][T17026] exfat: Deprecated parameter 'namecase' [ 385.634192][T17026] exfat: Deprecated parameter 'namecase' [ 385.649929][T17026] exfat: Deprecated parameter 'utf8' [ 385.671628][T17026] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 385.693203][T16671] EXT4-fs (loop7): unmounting filesystem. [ 385.873902][T17048] loop7: detected capacity change from 0 to 2048 [ 385.929380][T17048] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 386.019871][T16671] EXT4-fs (loop7): unmounting filesystem. [ 386.035790][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8022'. [ 386.380275][T17117] netlink: 'syz.9.8046': attribute type 1 has an invalid length. [ 386.399480][T17117] netlink: 'syz.9.8046': attribute type 2 has an invalid length. [ 387.135576][T17162] loop9: detected capacity change from 0 to 1024 [ 387.147638][T17162] EXT4-fs: Ignoring removed bh option [ 387.222197][T17162] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 387.312620][T16673] EXT4-fs (loop9): unmounting filesystem. [ 387.404999][T17179] SELinux: Context system_u:object_r:cgroup_t:s0 is not valid (left unmapped). [ 387.657855][T17196] loop7: detected capacity change from 0 to 128 [ 387.731754][T17196] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 387.761355][T17196] FAT-fs (loop7): Filesystem has been set read-only [ 387.796309][T17206] loop8: detected capacity change from 0 to 512 [ 387.843308][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8089'. [ 387.874457][T17206] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 387.902810][T17206] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 387.923350][T17206] EXT4-fs (loop8): orphan cleanup on readonly fs [ 387.946711][T17206] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #13: comm syz.8.8087: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 387.985615][T17206] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.8087: couldn't read orphan inode 13 (err -117) [ 388.007881][T17206] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 388.027969][T17229] loop9: detected capacity change from 0 to 512 [ 388.048103][T17206] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (24564!=0) [ 388.078721][T17229] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 388.125380][T16670] EXT4-fs (loop8): unmounting filesystem. [ 388.135418][T17229] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #2: comm syz.9.8097: missing EA_INODE flag [ 388.200271][T17229] EXT4-fs (loop9): Remounting filesystem read-only [ 388.206847][T17229] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.8097: error while reading EA inode 2 err=-117 [ 388.274571][T17248] loop6: detected capacity change from 0 to 256 [ 388.284002][T17229] EXT4-fs (loop9): Remounting filesystem read-only [ 388.291624][T17229] EXT4-fs (loop9): 1 truncate cleaned up [ 388.302113][T17248] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 388.321282][T17229] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 388.384528][T16673] EXT4-fs (loop9): unmounting filesystem. [ 388.623150][T17280] loop6: detected capacity change from 0 to 1024 [ 388.683405][T17280] EXT4-fs: Ignoring removed oldalloc option [ 388.686132][ T28] kauditd_printk_skb: 814 callbacks suppressed [ 388.686171][ T28] audit: type=1400 audit(2000000122.989:11814): avc: denied { mounton } for pid=17278 comm="syz.6.8121" path="/72/file1" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 388.728385][T17280] EXT4-fs: Ignoring removed bh option [ 388.744957][T17280] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 388.806533][ T28] audit: type=1400 audit(2000000123.053:11815): avc: denied { read write } for pid=16669 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.847327][T17280] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 388.905015][ T28] audit: type=1400 audit(2000000123.053:11816): avc: denied { open } for pid=16669 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.929565][ T28] audit: type=1400 audit(2000000123.053:11817): avc: denied { ioctl } for pid=16669 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.996615][T17300] loop7: detected capacity change from 0 to 512 [ 389.025308][T17300] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 389.045540][T16672] EXT4-fs (loop6): unmounting filesystem. [ 389.059649][ T28] audit: type=1400 audit(2000000123.085:11818): avc: denied { read write } for pid=16670 comm="syz-executor" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.098932][T17300] EXT4-fs (loop7): 1 truncate cleaned up [ 389.107713][T17300] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 389.219690][ T28] audit: type=1400 audit(2000000123.085:11819): avc: denied { open } for pid=16670 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.245281][T16671] EXT4-fs (loop7): unmounting filesystem. [ 389.379078][ T28] audit: type=1400 audit(2000000123.085:11820): avc: denied { ioctl } for pid=16670 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=126 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.487512][T16670] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.499982][T16671] audit: audit_backlog=65 > audit_backlog_limit=64 [ 389.507190][T16670] audit: audit_lost=108 audit_rate_limit=0 audit_backlog_limit=64 [ 389.696115][T17326] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.703520][T17326] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.785470][T17290] F2FS-fs (loop9): invalid crc value [ 389.812654][T17326] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 389.841443][T17290] F2FS-fs (loop9): Found nat_bits in checkpoint [ 390.018643][T17290] F2FS-fs (loop9): Start checkpoint disabled! [ 390.045302][T17290] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 390.074473][T17290] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 390.320745][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8160'. [ 390.926677][T17406] set_capacity_and_notify: 1 callbacks suppressed [ 390.926695][T17406] loop7: detected capacity change from 0 to 512 [ 390.959517][T17410] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8180'. [ 390.978766][T17406] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.8181: missing EA_INODE flag [ 390.999453][T17406] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.8181: error while reading EA inode 12 err=-117 [ 391.015684][T17406] EXT4-fs (loop7): 1 orphan inode deleted [ 391.021453][T17406] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 391.071805][T16671] EXT4-fs (loop7): unmounting filesystem. [ 391.081053][T17415] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8184'. [ 391.159045][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8189'. [ 391.519938][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8203'. [ 391.686099][T17466] loop6: detected capacity change from 0 to 512 [ 391.694764][T17463] loop8: detected capacity change from 0 to 4096 [ 391.733121][T17463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.791630][T17474] usb usb8: usbfs: process 17474 (syz.7.8211) did not claim interface 0 before use [ 391.817444][T17463] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 391.832120][T17466] EXT4-fs error (device loop6): ext4_acquire_dquot:6822: comm syz.6.8209: Failed to acquire dquot type 1 [ 391.897763][T17466] EXT4-fs error (device loop6): ext4_do_update_inode:5274: inode #16: comm syz.6.8209: corrupted inode contents [ 391.918756][T16670] EXT4-fs (loop8): unmounting filesystem. [ 391.919940][T17466] EXT4-fs error (device loop6): ext4_dirty_inode:6139: inode #16: comm syz.6.8209: mark_inode_dirty error [ 391.961190][T17444] loop9: detected capacity change from 0 to 40427 [ 391.968258][T17466] EXT4-fs error (device loop6): ext4_do_update_inode:5274: inode #16: comm syz.6.8209: corrupted inode contents [ 391.988104][T17444] F2FS-fs (loop9): invalid crc value [ 392.003147][T17466] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.8209: mark_inode_dirty error [ 392.016354][T17444] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 392.036193][T17466] EXT4-fs error (device loop6): ext4_do_update_inode:5274: inode #16: comm syz.6.8209: corrupted inode contents [ 392.075001][T17466] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 392.109084][T17444] F2FS-fs (loop9): Start checkpoint disabled! [ 392.115845][T17466] EXT4-fs error (device loop6): ext4_do_update_inode:5274: inode #16: comm syz.6.8209: corrupted inode contents [ 392.131084][T17444] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 392.149239][T17466] EXT4-fs error (device loop6): ext4_truncate:4320: inode #16: comm syz.6.8209: mark_inode_dirty error [ 392.160894][T17444] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 392.195462][T17466] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 392.224899][T17466] EXT4-fs (loop6): 1 truncate cleaned up [ 392.235552][T17466] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 392.279802][T17466] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.393973][T16672] EXT4-fs (loop6): unmounting filesystem. [ 392.435227][T17504] loop7: detected capacity change from 0 to 512 [ 392.470165][T17504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 392.533197][T17504] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.8227: invalid indirect mapped block 4294967295 (level 1) [ 392.664159][T17504] EXT4-fs (loop7): Remounting filesystem read-only [ 392.701376][T17504] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.8227: invalid indirect mapped block 4294967295 (level 1) [ 392.805066][T17504] EXT4-fs (loop7): Remounting filesystem read-only [ 397.457472][T17504] EXT4-fs (loop7): 2 truncates cleaned up [ 397.463792][T17504] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 397.476978][ T28] kauditd_printk_skb: 586 callbacks suppressed [ 397.476993][ T28] audit: type=1400 audit(2000000132.431:12393): avc: denied { mount } for pid=17503 comm="syz.7.8227" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 397.552859][T16671] EXT4-fs (loop7): unmounting filesystem. [ 397.592844][ T28] audit: type=1400 audit(2000000132.474:12394): avc: denied { read write } for pid=16670 comm="syz-executor" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.702027][ T28] audit: type=1400 audit(2000000132.474:12395): avc: denied { open } for pid=16670 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.777328][ T28] audit: type=1400 audit(2000000132.474:12396): avc: denied { ioctl } for pid=16670 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=126 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.839655][ T28] audit: type=1400 audit(2000000132.474:12397): avc: denied { read write } for pid=16672 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.905258][ T28] audit: type=1400 audit(2000000132.484:12398): avc: denied { read write } for pid=16673 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.936289][T17559] loop8: detected capacity change from 0 to 1024 [ 397.953631][T16672] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.957022][T17559] audit: audit_backlog=65 > audit_backlog_limit=64 [ 397.968170][T16672] audit: audit_lost=113 audit_rate_limit=0 audit_backlog_limit=64 [ 397.976579][T15557] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 397.985327][T17559] audit: audit_lost=114 audit_rate_limit=0 audit_backlog_limit=64 [ 398.032280][T17559] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 398.126616][T16670] EXT4-fs (loop8): unmounting filesystem. [ 398.144271][T15557] usb 10-1: Using ep0 maxpacket: 8 [ 398.151451][T15557] usb 10-1: unable to get BOS descriptor or descriptor too short [ 398.183936][T15557] usb 10-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 398.209807][T15557] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.232396][T15557] usb 10-1: Product: syz [ 398.236698][T15557] usb 10-1: Manufacturer: syz [ 398.264341][T15557] usb 10-1: SerialNumber: syz [ 398.456300][T17592] tipc: Enabling of bearer rejected, failed to enable media [ 398.611893][T17604] loop6: detected capacity change from 0 to 128 [ 398.629809][T17604] EXT4-fs (loop6): Test dummy encryption mode enabled [ 398.638076][T17606] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 398.662406][T17604] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 398.675213][T17604] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 398.746777][T16672] EXT4-fs (loop6): unmounting filesystem. [ 398.852080][ T39] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 398.884068][T17617] loop7: detected capacity change from 0 to 1024 [ 398.900350][ T291] usb 10-1: USB disconnect, device number 2 [ 398.979014][T17620] loop6: detected capacity change from 0 to 4096 [ 399.002702][T17617] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #11: comm syz.7.8276: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 399.025924][T17620] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 399.039934][T17617] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.8276: couldn't read orphan inode 11 (err -117) [ 399.052473][T17617] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 399.077277][ T39] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.095403][ T39] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 399.107199][T17620] System zones: 0-5 [ 399.136303][T17620] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 399.158082][T16671] EXT4-fs (loop7): unmounting filesystem. [ 399.164755][ T39] usb 5-1: config 0 has no interface number 0 [ 399.179400][ T39] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 399.201579][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.212507][T16672] EXT4-fs (loop6): unmounting filesystem. [ 399.219882][ T39] usb 5-1: config 0 descriptor?? [ 399.227870][ T39] usb 5-1: bad CDC descriptors [ 399.424916][T15557] usb 5-1: USB disconnect, device number 81 [ 399.506507][T17645] loop9: detected capacity change from 0 to 4096 [ 399.525657][T17645] EXT4-fs (loop9): Test dummy encryption mode enabled [ 399.545015][T17645] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 399.555089][T17645] System zones: 0-5 [ 399.560161][T17645] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 399.650554][T16673] EXT4-fs (loop9): unmounting filesystem. [ 399.740384][T17662] loop8: detected capacity change from 0 to 256 [ 399.778369][T17662] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 399.886019][T17668] loop8: detected capacity change from 0 to 256 [ 399.898972][T17668] exfat: Deprecated parameter 'utf8' [ 399.909923][T17668] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 400.086634][T17680] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 400.270895][T17696] loop8: detected capacity change from 0 to 512 [ 400.349183][T17696] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 400.367207][T17696] ext4 filesystem being mounted at /103/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.493196][T16670] EXT4-fs (loop8): unmounting filesystem. [ 400.797672][T17720] loop6: detected capacity change from 0 to 512 [ 400.820505][T17722] device veth1_macvtap left promiscuous mode [ 400.840197][T17720] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 400.856551][T17703] loop7: detected capacity change from 0 to 40427 [ 400.864604][T17720] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 400.885031][T17703] F2FS-fs (loop7): invalid crc value [ 400.901156][T17703] F2FS-fs (loop7): Found nat_bits in checkpoint [ 401.039419][T17703] F2FS-fs (loop7): Start checkpoint disabled! [ 401.061124][T17703] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 401.081510][T17703] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 401.388235][T17744] erofs: (device loop4): mounted with root inode @ nid 36. [ 401.613135][T17760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 401.640440][T17760] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 401.756764][T16669] EXT4-fs (loop4): unmounting filesystem. [ 423.136770][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P17776 } 2260 jiffies s: 10685 root: 0x0/T [ 423.148601][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 484.649062][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P17776 } 8860 jiffies s: 10685 root: 0x0/T [ 484.660997][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 495.277707][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 495.284781][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17776 [ 495.292177][ C1] (detected by 1, t=10003 jiffies, g=64853, q=1874 ncpus=2) [ 495.299563][ C1] task:syz.8.8345 state:R running task stack:25376 pid:17776 ppid:16670 flags:0x00004000 [ 495.310348][ C1] Call Trace: [ 495.313652][ C1] [ 495.316515][ C1] sched_show_task+0x391/0x550 [ 495.321303][ C1] ? __kasan_check_write+0x14/0x20 [ 495.326449][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 495.332366][ C1] ? __cfi_sched_show_task+0x10/0x10 [ 495.337666][ C1] ? wq_watchdog_touch+0x100/0x190 [ 495.342799][ C1] print_other_cpu_stall+0xdbf/0x10f0 [ 495.348368][ C1] ? update_blocked_averages+0x1060/0x1060 [ 495.354203][ C1] ? print_cpu_stall+0x590/0x590 [ 495.359165][ C1] ? acct_account_cputime+0x1b6/0x290 [ 495.364563][ C1] rcu_sched_clock_irq+0x7ba/0x1310 [ 495.369782][ C1] ? __cfi_rcu_sched_clock_irq+0x10/0x10 [ 495.375442][ C1] ? raise_softirq+0x7d/0xf0 [ 495.380085][ C1] ? __cfi_raise_softirq+0x10/0x10 [ 495.385218][ C1] ? hrtimer_run_queues+0x166/0x430 [ 495.390444][ C1] update_process_times+0x148/0x1b0 [ 495.395666][ C1] tick_sched_timer+0x17c/0x240 [ 495.400538][ C1] ? __cfi_tick_sched_timer+0x10/0x10 [ 495.405938][ C1] __hrtimer_run_queues+0x3bb/0x8e0 [ 495.411158][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 495.416308][ C1] ? ktime_get_update_offsets_now+0x30c/0x320 [ 495.422399][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 495.427367][ C1] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 495.433369][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 495.439024][ C1] [ 495.441974][ C1] [ 495.444918][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 495.450918][ C1] RIP: 0010:bpf_skb_ecn_set_ce+0x1d5/0x1120 [ 495.456834][ C1] Code: c4 fc 48 ba 00 00 00 00 00 fc ff df 48 8b 44 24 20 c6 44 10 06 04 c7 84 24 b0 00 00 00 00 00 00 00 48 8b 44 24 48 0f b6 04 10 <84> c0 0f 85 3a 01 00 00 48 8b 44 24 40 44 8b 28 48 8b 44 24 38 0f [ 495.476461][ C1] RSP: 0018:ffffc9000c0478c0 EFLAGS: 00000a02 [ 495.482737][ C1] RAX: 0000000000000000 RBX: 0000000000000007 RCX: ffff88810eb9d100 [ 495.490913][ C1] RDX: dffffc0000000000 RSI: ffff888110092b40 RDI: 0000000000000000 [ 495.498918][ C1] RBP: ffffc9000c0479e0 R08: ffff88810eb9d100 R09: 0000000000000002 [ 495.506914][ C1] R10: 000000000000a888 R11: 0000000000000002 R12: 00000000fffffff2 [ 495.514936][ C1] R13: 1ffff11022012576 R14: 000000000000000e R15: ffff888110092c28 [ 495.522965][ C1] ? __cfi_bpf_skb_ecn_set_ce+0x10/0x10 [ 495.528551][ C1] ? __kasan_check_read+0x11/0x20 [ 495.533616][ C1] bpf_prog_c554332b8f5ae3d6+0x1a/0x1c [ 495.539108][ C1] bpf_test_run+0x55e/0x940 [ 495.543764][ C1] ? convert___skb_to_skb+0x5b0/0x5b0 [ 495.549175][ C1] ? __cfi_eth_type_trans+0x10/0x10 [ 495.554400][ C1] ? convert___skb_to_skb+0x40/0x5b0 [ 495.559740][ C1] bpf_prog_test_run_skb+0xafb/0x12c0 [ 495.565149][ C1] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 495.570990][ C1] bpf_prog_test_run+0x3e3/0x640 [ 495.575956][ C1] ? bpf_prog_query+0x270/0x270 [ 495.580826][ C1] ? selinux_bpf+0xce/0xf0 [ 495.585358][ C1] ? security_bpf+0x93/0xb0 [ 495.589920][ C1] __sys_bpf+0x5ee/0x850 [ 495.594197][ C1] ? bpf_link_show_fdinfo+0x330/0x330 [ 495.599591][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 495.605257][ C1] __x64_sys_bpf+0x7c/0x90 [ 495.609745][ C1] x64_sys_call+0x488/0x9a0 [ 495.614285][ C1] do_syscall_64+0x4c/0xa0 [ 495.618748][ C1] ? clear_bhb_loop+0x30/0x80 [ 495.623453][ C1] ? clear_bhb_loop+0x30/0x80 [ 495.628154][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.634082][ C1] RIP: 0033:0x7f64bd99c819 [ 495.638524][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.658151][ C1] RSP: 002b:00007f64bc3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.666583][ C1] RAX: ffffffffffffffda RBX: 00007f64bdc15fa0 RCX: 00007f64bd99c819 [ 495.674575][ C1] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 495.682648][ C1] RBP: 00007f64bda32c91 R08: 0000000000000000 R09: 0000000000000000 [ 495.690628][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.698623][ C1] R13: 00007f64bdc16038 R14: 00007f64bdc15fa0 R15: 00007ffdd897fee8 [ 495.706613][ C1] [ 495.709646][ C1] rcu: rcu_preempt kthread starved for 1187 jiffies! g64853 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 495.720757][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 495.730729][ C1] rcu: RCU grace-period kthread stack dump: [ 495.736628][ C1] task:rcu_preempt state:R running task stack:28496 pid:14 ppid:2 flags:0x00004000 [ 495.747443][ C1] Call Trace: [ 495.750742][ C1] [ 495.753691][ C1] __schedule+0xba6/0x1500 [ 495.758131][ C1] ? release_firmware_map_entry+0x190/0x190 [ 495.764054][ C1] schedule+0xbd/0x170 [ 495.768154][ C1] schedule_timeout+0x159/0x340 [ 495.773030][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 495.778460][ C1] ? __cfi_process_timeout+0x10/0x10 [ 495.783779][ C1] ? prepare_to_swait_event+0x308/0x320 [ 495.789366][ C1] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 495.794245][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 495.799508][ C1] ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10 [ 495.805603][ C1] ? rcu_gp_init+0xf30/0xf30 [ 495.810226][ C1] rcu_gp_kthread+0x99/0x390 [ 495.814850][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 495.820080][ C1] ? set_cpus_allowed_ptr+0x88/0xd0 [ 495.825320][ C1] ? __kasan_check_read+0x11/0x20 [ 495.830383][ C1] ? __kthread_parkme+0x142/0x180 [ 495.835441][ C1] kthread+0x281/0x320 [ 495.839549][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 495.840823][ T103] udevd[103]: worker [16694] /devices/virtual/block/loop4 is taking a long time [ 495.844779][ C1] ? __cfi_kthread+0x10/0x10 [ 495.858396][ C1] ret_from_fork+0x1f/0x30 [ 495.862832][ C1] [ 495.865863][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 495.872185][ C1] Sending NMI from CPU 1 to CPUs 0: [ 495.877407][ C0] NMI backtrace for cpu 0 [ 495.877419][ C0] CPU: 0 PID: 10 Comm: kworker/u4:1 Tainted: G W syzkaller #0 [ 495.877438][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 495.877449][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 495.877475][ C0] RIP: 0010:smp_call_function_many_cond+0x88d/0x980 [ 495.877499][ C0] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 1e 74 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 ea 6f 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 495.877515][ C0] RSP: 0018:ffffc900000a65c0 EFLAGS: 00000293 [ 495.877529][ C0] RAX: ffffffff8167ff39 RBX: dffffc0000000000 RCX: ffff888100298000 [ 495.877543][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 495.877554][ C0] RBP: ffffc900000a6700 R08: ffff8881f6e390d7 R09: 1ffff1103edc721a [ 495.877567][ C0] R10: 0000000000000000 R11: ffffffff8134c6c0 R12: 1ffff1103edc7218 [ 495.877580][ C0] R13: 1ffff1103ede78a5 R14: 0000000000000001 R15: ffff8881f6f3c528 [ 495.877592][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 495.877608][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.877619][ C0] CR2: 00007fd430cf827f CR3: 0000000110062000 CR4: 00000000003506b0 [ 495.877635][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 495.877645][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 495.877657][ C0] Call Trace: [ 495.877662][ C0] [ 495.877670][ C0] ? __cfi_flush_tlb_func+0x10/0x10 [ 495.877688][ C0] ? __cfi_should_flush_tlb+0x10/0x10 [ 495.877706][ C0] ? smp_call_function_many+0x40/0x40 [ 495.877725][ C0] ? _raw_spin_lock+0x94/0xf0 [ 495.877749][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 495.877773][ C0] ? ret_from_fork+0x1f/0x30 [ 495.877794][ C0] ? __cfi_flush_tlb_func+0x10/0x10 [ 495.877810][ C0] ? __cfi_should_flush_tlb+0x10/0x10 [ 495.877827][ C0] on_each_cpu_cond_mask+0x43/0x80 [ 495.877847][ C0] native_flush_tlb_multi+0x144/0x210 [ 495.877865][ C0] flush_tlb_mm_range+0x36a/0x470 [ 495.877884][ C0] ptep_clear_flush+0x111/0x150 [ 495.877905][ C0] page_vma_mkclean_one+0x3bb/0x580 [ 495.877930][ C0] ? pfn_mkclean_range+0x2b0/0x2b0 [ 495.877955][ C0] ? blk_mq_get_tag+0x99f/0xb50 [ 495.877978][ C0] ? elv_rb_find+0xcf/0xf0 [ 495.878000][ C0] page_mkclean_one+0x18d/0x240 [ 495.878022][ C0] ? __cfi_page_mkclean_one+0x10/0x10 [ 495.878044][ C0] ? down_read_trylock+0x27f/0x660 [ 495.878072][ C0] ? vma_interval_tree_iter_next+0x32c/0x350 [ 495.878099][ C0] ? __cfi_page_mkclean_one+0x10/0x10 [ 495.878122][ C0] rmap_walk_file+0x5bf/0x8b0 [ 495.878175][ C0] ? rmap_walk_anon+0x780/0x780 [ 495.878200][ C0] ? __kasan_check_read+0x11/0x20 [ 495.878218][ C0] folio_mkclean+0x182/0x210 [ 495.878241][ C0] ? __cfi_folio_mkclean+0x10/0x10 [ 495.878278][ C0] ? __cfi_page_mkclean_one+0x10/0x10 [ 495.878301][ C0] ? __cfi_invalid_mkclean_vma+0x10/0x10 [ 495.878325][ C0] ? __kasan_check_read+0x11/0x20 [ 495.878341][ C0] folio_clear_dirty_for_io+0x130/0x5b0 [ 495.878361][ C0] ? find_get_entry+0x3a5/0x3d0 [ 495.878379][ C0] ? __cfi_folio_clear_dirty_for_io+0x10/0x10 [ 495.878422][ C0] ? find_get_pages_range_tag+0x1ea/0x330 [ 495.878441][ C0] ? __writeback_inodes_wb+0x12f/0x400 [ 495.878465][ C0] clear_page_dirty_for_io+0x55/0x70 [ 495.878487][ C0] mpage_submit_page+0x8e/0x230 [ 495.878514][ C0] mpage_process_page_bufs+0x6fa/0x8f0 [ 495.878542][ C0] mpage_prepare_extent_to_map+0x9b1/0xcc0 [ 495.878572][ C0] ? folio_size+0xd0/0xd0 [ 495.878595][ C0] ? __kasan_slab_alloc+0x72/0x80 [ 495.878619][ C0] ? kmem_cache_alloc+0x16e/0x330 [ 495.878644][ C0] ? __kasan_check_write+0x14/0x20 [ 495.878661][ C0] ext4_writepages+0xc22/0x30e0 [ 495.878688][ C0] ? pagevec_lookup_range_tag+0x3c/0x80 [ 495.878706][ C0] ? write_cache_pages+0xa35/0xb80 [ 495.878728][ C0] ? __cfi_write_cache_pages+0x10/0x10 [ 495.878747][ C0] ? __cfi_ext4_writepages+0x10/0x10 [ 495.878774][ C0] ? kasan_save_alloc_info+0x25/0x30 [ 495.878799][ C0] ? __kasan_slab_alloc+0x72/0x80 [ 495.878824][ C0] ? __kasan_check_write+0x14/0x20 [ 495.878842][ C0] ? avc_alloc_node+0x444/0x4d0 [ 495.878869][ C0] ? __cfi_ext4_writepages+0x10/0x10 [ 495.878893][ C0] do_writepages+0x3a4/0x5f0 [ 495.878914][ C0] ? __cfi____update_load_sum+0x10/0x10 [ 495.878938][ C0] ? __cfi_do_writepages+0x10/0x10 [ 495.878957][ C0] ? __cfi_wake_up_bit+0x10/0x10 [ 495.878981][ C0] ? __inode_add_lru+0xff/0x340 [ 495.878999][ C0] ? __kasan_check_write+0x14/0x20 [ 495.879017][ C0] ? __kasan_check_write+0x14/0x20 [ 495.879033][ C0] ? _raw_spin_lock+0x94/0xf0 [ 495.879059][ C0] __writeback_single_inode+0xc6/0xad0 [ 495.879083][ C0] writeback_sb_inodes+0xa10/0x15d0 [ 495.879111][ C0] ? queue_io+0x4c0/0x4c0 [ 495.879132][ C0] ? down_read_trylock+0x27f/0x660 [ 495.879164][ C0] __writeback_inodes_wb+0x12f/0x400 [ 495.879189][ C0] wb_writeback+0x41f/0x9d0 [ 495.879215][ C0] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 495.879238][ C0] ? set_worker_desc+0x1ba/0x1f0 [ 495.879263][ C0] ? __kasan_check_write+0x14/0x20 [ 495.879283][ C0] wb_workfn+0xa32/0xeb0 [ 495.879305][ C0] ? __cfi_wb_workfn+0x10/0x10 [ 495.879323][ C0] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 495.879347][ C0] ? probe_sched_wakeup+0x5e/0x90 [ 495.879364][ C0] ? probe_sched_wakeup+0x71/0x90 [ 495.879383][ C0] ? ttwu_do_activate+0x174/0x280 [ 495.879410][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 495.879437][ C0] ? try_to_wake_up+0x613/0x1220 [ 495.879461][ C0] process_one_work+0x71f/0xc40 [ 495.879481][ C0] worker_thread+0xa29/0x11e0 [ 495.879504][ C0] kthread+0x281/0x320 [ 495.879522][ C0] ? __cfi_worker_thread+0x10/0x10 [ 495.879538][ C0] ? __cfi_kthread+0x10/0x10 [ 495.879557][ C0] ret_from_fork+0x1f/0x30 [ 495.879580][ C0] [ 546.161337][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P17776 } 15460 jiffies s: 10685 root: 0x0/T [ 546.173234][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 607.673634][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P17776 } 22060 jiffies s: 10685 root: 0x0/T [ 607.685556][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 678.854609][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 296s! [ 678.863556][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 295s! [ 678.872675][ C0] Showing busy workqueues and worker pools: [ 678.878576][ C0] workqueue events: flags=0x0 [ 678.883273][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 678.883312][ C0] pending: kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 678.883373][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 678.883410][ C0] pending: psi_avgs_work, vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 678.883492][ C0] workqueue events_long: flags=0x0 [ 678.923877][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 678.923925][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup [ 678.923999][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 678.924039][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 678.924133][ C0] workqueue events_unbound: flags=0x2 [ 678.964621][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=6 [ 678.964659][ C0] in-flight: 43:fsnotify_mark_destroy_workfn, 304:bpf_map_free_deferred [ 678.964709][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 678.964758][ C0] workqueue events_power_efficient: flags=0x80 [ 678.994397][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 678.994440][ C0] pending: neigh_managed_work, wg_ratelimiter_gc_entries, neigh_periodic_work, gc_worker [ 678.994520][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 678.994557][ C0] in-flight: 291:neigh_periodic_work [ 678.994586][ C0] pending: neigh_managed_work, check_lifetime [ 678.994641][ C0] workqueue rcu_gp: flags=0x8 [ 679.036780][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.036819][ C0] pending: process_srcu [ 679.036842][ C0] workqueue mm_percpu_wq: flags=0x8 [ 679.054197][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 679.054237][ C0] pending: vmstat_update, lru_add_drain_per_cpu [ 679.054280][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=4 [ 679.054317][ C0] pending: lru_add_drain_per_cpu BAR(33), vmstat_update [ 679.054367][ C0] workqueue writeback: flags=0x4a [ 679.088704][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 679.088740][ C0] in-flight: 10:wb_workfn [ 679.088769][ C0] pending: wb_workfn [ 679.088793][ C0] workqueue kblockd: flags=0x18 [ 679.109777][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=3/256 refcnt=4 [ 679.109817][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 679.109876][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 679.109911][ C0] pending: blk_mq_timeout_work [ 679.109958][ C0] workqueue dm_bufio_cache: flags=0x8 [ 679.144866][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.144905][ C0] pending: work_fn [ 679.144929][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 679.162287][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 679.162326][ C0] pending: addrconf_verify_work [ 679.162356][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=6 [ 679.162389][ C0] pending: addrconf_verify_work [ 679.162416][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 679.162503][ C0] workqueue wg-kex-wg0: flags=0x6 [ 679.203872][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.203912][ C0] pending: wg_packet_handshake_send_worker [ 679.203944][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 679.222594][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.222631][ C0] pending: wg_packet_encrypt_worker [ 679.222661][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.222693][ C0] pending: wg_packet_encrypt_worker [ 679.222740][ C0] workqueue wg-kex-wg1: flags=0x6 [ 679.254174][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.254212][ C0] pending: wg_packet_handshake_send_worker [ 679.254242][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 679.272905][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.272959][ C0] pending: wg_packet_encrypt_worker [ 679.272994][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.273031][ C0] pending: wg_packet_encrypt_worker [ 679.273063][ C0] workqueue wg-kex-wg2: flags=0x6 [ 679.304646][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.304692][ C0] pending: wg_packet_handshake_send_worker [ 679.304738][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 679.323498][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 679.323545][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 679.323618][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.323656][ C0] pending: wg_packet_tx_worker [ 679.323687][ C0] workqueue wg-kex-wg0: flags=0x6 [ 679.356527][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.356564][ C0] pending: wg_packet_handshake_send_worker [ 679.356600][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 679.375276][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 679.375313][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 679.375358][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.375392][ C0] pending: wg_packet_tx_worker [ 679.375419][ C0] workqueue wg-kex-wg1: flags=0x6 [ 679.408307][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.408347][ C0] pending: wg_packet_handshake_send_worker [ 679.408379][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 679.427089][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.427130][ C0] pending: wg_packet_encrypt_worker [ 679.427161][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.427196][ C0] pending: wg_packet_encrypt_worker [ 679.427226][ C0] workqueue wg-kex-wg2: flags=0x6 [ 679.458732][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.458770][ C0] pending: wg_packet_handshake_send_worker [ 679.458802][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 679.477491][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 679.477535][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 679.477589][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 679.477626][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 679.477675][ C0] workqueue wg-kex-wg0: flags=0x6 [ 679.512867][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.512905][ C0] pending: wg_packet_handshake_send_worker [ 679.512936][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 679.531691][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 679.531733][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 679.531781][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.531818][ C0] pending: wg_packet_tx_worker [ 679.531846][ C0] workqueue wg-kex-wg1: flags=0x6 [ 679.564714][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.564766][ C0] pending: wg_packet_handshake_send_worker [ 679.564807][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 679.583476][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.583516][ C0] pending: wg_packet_encrypt_worker [ 679.583555][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.583610][ C0] pending: wg_packet_encrypt_worker [ 679.583641][ C0] workqueue wg-kex-wg2: flags=0x6 [ 679.615066][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.615104][ C0] pending: wg_packet_handshake_send_worker [ 679.615134][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 679.633831][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.633872][ C0] pending: wg_packet_encrypt_worker [ 679.633902][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.633939][ C0] pending: wg_packet_encrypt_worker [ 679.633969][ C0] workqueue wg-kex-wg0: flags=0x6 [ 679.665422][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.665457][ C0] pending: wg_packet_handshake_send_worker [ 679.665485][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 679.684156][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 679.684199][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 679.684248][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 679.684285][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 679.684333][ C0] workqueue wg-kex-wg1: flags=0x6 [ 679.719420][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.719458][ C0] pending: wg_packet_handshake_send_worker [ 679.719487][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 679.738227][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.738290][ C0] pending: wg_packet_encrypt_worker [ 679.738325][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.738359][ C0] pending: wg_packet_encrypt_worker [ 679.738390][ C0] workqueue wg-kex-wg2: flags=0x6 [ 679.769960][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 679.770001][ C0] pending: wg_packet_handshake_send_worker [ 679.770032][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 679.788712][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.788762][ C0] pending: wg_packet_encrypt_worker [ 679.788794][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 679.788830][ C0] pending: wg_packet_encrypt_worker [ 679.788863][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=197s workers=3 idle: 306 848 [ 679.788912][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=197s workers=5 idle: 307 8 [ 681.665561][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P17776 } 29999 jiffies s: 10685 root: 0x0/T [ 681.677480][ T16] rcu: blocking rcu_node structures (internal RCU debug):