last executing test programs: 2m58.382147594s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m57.879362244s ago: executing program 4 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "138c62345923fecf", "fb8c120266a9cecdc3b7e4c96505ce79", "10001000", "8b07d135f977d25f"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62e", 0x2, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x3fef) 2m57.330905093s ago: executing program 4 (id=19): mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m56.726181341s ago: executing program 4 (id=20): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 2m55.875251864s ago: executing program 4 (id=26): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000731000/0x2000)=nil, 0x2000000, 0x0, 0x0, 0x37, 0x60, 0x2, 0x2, 0x58}) 2m55.198530008s ago: executing program 32 (id=26): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000731000/0x2000)=nil, 0x2000000, 0x0, 0x0, 0x37, 0x60, 0x2, 0x2, 0x58}) 7.205131439s ago: executing program 2 (id=1007): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x101400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x7, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x80, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x551, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x100000, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x4, 0x9, 0x200, 0x3e, 0x88, 0x6, 0xca9, 0xfffffffd, 0x8, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x8000040], [0x8001, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0x0, 0x80000001, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x20401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0x8001, 0x40000101, 0x1, 0x2, 0xffff80f0, 0x7, 0x9, 0x8, 0x9, 0x6, 0x47, 0x18020, 0x0, 0xfe000004, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0xffff, 0x1, 0x3, 0x3, 0xbc41, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffc, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x400005, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d01, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x400007, 0xa9, 0x5, 0x6, 0x1, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x20006, 0x0, 0x2, 0x400021c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x26], [0xa, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x100093a, 0x9, 0x1000006, 0x100, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x3, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0x8, 0x4010083, 0x3, 0x7e, 0x81, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x1, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0x4000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 6.948439955s ago: executing program 2 (id=997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) 6.444871436s ago: executing program 2 (id=1001): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 5.503054329s ago: executing program 0 (id=1016): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 5.099864249s ago: executing program 2 (id=1005): socket$netlink(0x10, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x7}}, 0x24, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4.848557011s ago: executing program 0 (id=1008): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0xff40) pread64(r1, 0x0, 0x0, 0x8) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=@migrate={0xac, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e22, 0x8001, 0x8, 0x0, 0xa, 0x80, 0x80, 0x3b}, 0x6e6bb3, 0x1}, [@migrate={0x50, 0x11, [{@in6=@empty, @in=@remote, @in=@multicast1, @in6=@private0, 0x2b, 0x3, 0x0, 0x34fd, 0x2, 0xa}]}, @offload={0xc}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) 4.818382559s ago: executing program 3 (id=1009): open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4.1887091s ago: executing program 0 (id=1011): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000240)='batadv_sl\x02ve_1\x00', 0x8c2, 0x30, &(0x7f00000002c0)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x4, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r0, 0x0}]) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 4.163204424s ago: executing program 5 (id=1012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) sendto$inet(r1, 0x0, 0x0, 0x85, 0x0, 0x0) 4.006704554s ago: executing program 1 (id=1014): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000ac0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1, 0x4) 3.845729659s ago: executing program 2 (id=1015): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) 3.701683722s ago: executing program 5 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x4, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 3.223409623s ago: executing program 0 (id=1018): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.198952423s ago: executing program 5 (id=1019): syz_read_part_table(0x5b2, &(0x7f0000000000)="$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") r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2.856056845s ago: executing program 3 (id=1021): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.845792443s ago: executing program 0 (id=1022): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.368633581s ago: executing program 5 (id=1023): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r2, &(0x7f0000003100)={0x2020}, 0x2020) 2.365848384s ago: executing program 3 (id=1035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x401, @empty, 0x4}, 0x1c) listen(r0, 0x4) accept(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2.224705942s ago: executing program 1 (id=1025): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000b40)='./file0\x00', 0x204800, &(0x7f0000000b80)=ANY=[@ANYRES64=0x0], 0x81, 0x150b, &(0x7f0000002180)="$eJzs3AuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZsidJQnIK67u0+z57/9uH73/t/p/v2nP/rmtd77rnee/13uu9Z+Z9nue6Zr7vOapei/q1mxGR+LfAXx5ShBAxQohhQohCQohACFE5vnL8leMFFKT8ey/C/liPpl/rCti1xP3P27j/eRv3P2/j/udt3P+8jfuft3H/8zbuP2N52fY5xW/gkXcH3//Py/jz/z9IboXJ32yscFOv/0YK9z9v4/7nbdz/vI37n7dx//M27v9/vF37/8lB7n/exv1nLC+71vefeVzbca2//xhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Q3n/FVaCHHl8az3/lrXxRhjjDHGGGOMsT+Oz3+tK2CMMcYYY4wxxtj/PBBSKKFFIPKJ/CJGFBCx4joRJ64XBUUhERE3iHhxoygsbhJFRFFRTBQXCaKEKCmMQGEFiVCUEqVFVNwsyohbRKIoK8qJ8sKJCiJJ3CoqittEJXG7qCzuEFXEnaKqqCaqixriLlFT3C1qiXtEbXGvqCPqinqivrhPNBD3i4biAV9ICNFYPCSaiIdFU/GIaCYeFc3FY6KFeFy0FE+IVqK1aCPainZ/P180Eg/+k/xXRF/xqugn+osUMUAMFK+JQWKwGCKGimHidTFcvCFGiDdFqhgpRom3xGjxthgj3hFjxTgxXrwrJoiJYpKYLKaIqSJNvCemiffFdPGBmCFmillitkgXc8Rc8aGYJ+aLBeIjsVB8LBaJxWKJWCoyxCciUywTWeJTsVx8JrLFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVbBPbxedih9gpdondYo/YK/aJL8R+8aU4IL4SOeLr/2b+2f+S3wsECJAgQYOGfJAPYiAGYiEW4iAOCkJBiEAE4iEeCkNhKAJFoBgUgwRIgJJQEhAQCAhKQSmIQhTKQBlIhEQoB+XAgYMkSIKKcBtUgkpQGSpDFagCVaEaVIMaUANqQk2oBbWgNtSGOlAH6kE9uA/ug/uhITSERtAIGkNjaAJNoCk0hWbQDJpDc2gBLaAltIRW0AraQBtoB+2gPbSHDtABOkEn6AydoQt0gWRIhq7QFbpBN+gO3aEH9ICe0BN6QW/oDa/AK/AqvAr9oY4cAANhIAyCQTAEhsJQeB2GwxvwBrwJqTASRsFb8Ba8DWPgDIyFcTAexkNNOREmwWQgORXSIA2mwTSYDtNhBsyEmTAb0mEOzIW5MA/mw3z4CBbCx/AxLIbFsBQyIAMyYRlkQRYsh7OQDStgJayC1bAGVsM6WA/rYCNsgo2wBbbANtgGn8PnsBN2wm7YDXthL3wBX8CX8CWkQg7kwEE4CIfgEByGw5ALuXAEjsBROArH4Bgch+NwAk7CKTgJp+E0nIGzcA7OwQW4ABfhpYRvm+8tuyFVyCu01DKfzCdjZIyMlbEyTsbJgrKgjMiIjJfxsrAsLIvIIrKYLCYTZIIsKUtKlChJhrKULCWjMirLyDIyUSbKcrKcdNLJJJkkK8qKspKsJCvLO2QVeaesKqvJjq6GrCFryk6ulrxH1pa1ZR1ZV9aT9WV92UA2kA1lQ9lINpKNZWPZRD4sm8oBMAQelVc600KOhJZyFLSSrWUb2Va+DU/K9nIMdJAdZSf5tBwHY6GLbO+S5XOyq5wE3eQLcjK8KHvIqdBTvix7yd6yj3xF9pUdXD/ZX86AAXKgnA2D5GA5RA6V86CuvNKxevJNmSpHylHyLbkU3pZj5DtyrBwnx8t35QQ5UU6Sk+UUOVWmyffkNPm+nC4/kDPkTDlLzpbpco6cKz+U8+R8uUB+JBfKj+UiuVgukUtlhvxEZsplMkt+KpfLz2S2XCFXylVytVwj18p1cr3cIDfKTXKz3CK3ym1yu/xc7pA75S65W+6Re+U++YXcL7+UB+RXMkd+LQ/KP8lD8ht5WP5Z5spv5RH5nTwqv5fH5A/yuPxRnpAn5Sn5kzwtf5Zn5Fl5Tp6XF+Qv8qK8JC9LL4UCJZVSWgUqn8qvYlQBFauuU3HqelVQFVIRdYOKVzeqwuomVUQVVcVUcZWgSqiSyihUVpEKVSlVWkXVzaqMukUlqrKqnCqvnKqgktStqqK6TVVSt6vK6g5VRd2pqqpqqrqqoe5SNdXdqpa6R9VW96o6qq6qp+qr+1QDdb9qqB5QjdSDqrF6SDVRD6um6hHVTD2qmqvHVAv1uGqpnlCtVGvVRrVV7dSTqr16SnVQHVUn9bTqrJ5RXdSzKlk9p7qq51U39YLqrl5UPdRLqqd6WfVSvVUfdUldVl71U/1VihqgBqrX1CA1WA1RQ9Uw9boart5QI9SbKlWNVKPUW2q0eluNUe+osWqcGq/eVRPURDVJTVZT1FSVpt5T09T7arr6QM1QM9UsNVulqzlqyG8rLfi/yH//7+SP+PXVt6nt6nO1Q+1Uu9RutUftVfvUPrVf7VcH1AGVo3LUQXVQHVKH1GF1WOWqXHVEHVFH1VF1TB1Tx9VxdUKdVOfVT+q0+lmdUWfVWXVeXVAX1MXf3gOhQUuttNaBzqfz6xhdQMfq63Scvl4X1IV0RN+g4/WNurC+SRfRRXUxXVwn6BK6pDYatdWkQ11Kl9ZRfbMuo2/RibqsLqfLa6cr6CR967+d/6/qa6fb6fa6ve6gO+hOupPurDvrLrqLTtbJuqvuqrvpbrq77q576B66p+6pe+leuo/uo/vqvrqf7qdTdIoeqF/Tg/RgPUQP1cP063q4Hq5H6BE6VafqUXqUHq1H6zF6jB6rx+rxeryeoCfoSXqSnqKn6DSdpqfpaXq6nq5n6Bl6lp6l03W6nqvn6nl6nl6gF+iFeqFepBfpJXqJztAZOlNn6iydpZfr5Tpbr9Ar9Cq9Sq/Ra/Q6vU5v0Bv0Jr1Jb9FbdLberrfrHXqH3qV36T16j96n9+n9er8+oA/oHJ2jD+qD+pA+pA/rwzpX5+oj+og+qo/qY/qYPq6P6xP6hD6lT+nT+rQ+o8/oc/qcvqAv6Iv6or6sL1857QtkIAMd6CBfkC+ICWKC2CA2iAvigoJBwSASRIL4ID4oHNwUFAmKBsWC4kFCUCIoGZgAAxtQEAalgtJBNLg5KBPcEiQGZYNyQfnABRWCpODWoGJwW1ApuD2oHNwRVAnuDKoG1YLqQY3grqBmcHdQK7gnqB3cG9QJ6gb1gvrBfUGD4P6gYfBA0Ch4MGgcPBQ0CR4OmgaPBM2CR4PmwWNBi+DxoGXwRNAqaB20CdoG7f7Q9b0/U/Qp18/0NylmgBloXjODzGAzxAw1w8zrZrh5w4wwb5pUM9KMMm+Z0eZtM8a8Y8aacWa8eddMMBPNJDPZTDFTTZp5z0wz75vp5gMzw8w0s8xsk27mmLnmQzPPzDcLzEdmofnYLDKLzRKz1GSYT0ymWWayzKdmufnMZJsVZqVZZVabNWatWWfWmw1mo9lkNpstZqvZZrabz80Os9PsMrvNHrPX7DNfmP3mS3PAfGVyzNfmoPmTOWS+MYfNn02u+dYcMd+Zo+Z7c8z8YI6bH80Jc9KcMj+Z0+Znc8acNefMeXPB/GIumkvmsvFXTu6vfLyjRo35MB/GYAzGYizGYRwWxIIYwQjGYzwWxsJYBItgMSyGCZiAJbEkXkFIWApLYRSjWAbLYCImYjkshw4dJmESVsSKWAkrYWWsjFWwClbFqlgdq+NdeBfejXfjPXgP3ov3Yl2si/WxPjbABtgQG2IjbISNsTE2wSbYFJtiM2yGzbE5tsAW2BJbYitshW2wDbbDdtge22MH7ICdsBN2xs7YBbtgMiZjV+yK3bAbdsfu2AN7YE/sib2wF/bBPtgX+2I/7IcpmIIDcSAOwkE4BIfgMByGw3E4jsARmIqpOApH4WgcjWNwDI7FcTge38UJOBEn4WScglMxDdNwGk7D6TgdZ+AMnIWzMB3TcS7OxXk4DxfgAlyIC3ERLsIluAQzMAMzMROzMAuX43LMxmxciStxNa7GtbgW1+N63IgbcTPOxq24FbfjdtyBO3AX7sI9uAf34T7cj/vxAB7AHMzBg3gQD+EhPIyHMRdz8QgewaN4FI/hMTyOx/EEnsBTeApP42k8g2fwHJ7DC/gLXsRLeBk9xlgpYu11Ns5ebwvaQjbGFrB/HRezxW2CLWFLWmOL2KJ/E6O1NtGWteVseetsBZtkb/1dXNVWs9VtDXuXrWnvtrV+Fzew99uG9gHbyD5o69v7/iZubB+yTezjtql9wjazrW1z29a2sI/blvYJ28q2tm1sW9vZPmO72Gdtsn3OdrXP/y7OtMvservBbrSb7H77pT1nz9uj9nt7wf5i+9n+dph93Q63b9gR9k2bakf+Lh5v37UT7EQ7yU62U+zU38Wz7GybbufYufZDO8/O/12cYT+xC22WXWQX2yV26a/xlZqy7Kd2uf3MZtsVdqVdZVfbNXatXfd/al1lt9itdpvdZ7+wO+xOu8vutnvs3l/jK/s4YL+yOfZre8R+Zw/Zb+xhe8zm2m9/ja/s75j9wR63P9oT9qQ9ZX+yp+3P9ow9++v+r+z9J3vJXrbeCgKSpEhTQPkoP8VQAYql6yiOrqeCVIgidAPF041UmG6iIlSUilFxSqASVJIMIVkiCqkUlaYo3Uxl6BZKpLJUjsqTowqURLdSRbqNKtHtVJnuoCp0J1WlalSdatBdVJPuplp0D9Wme6kO1aV6VJ/uowZ0PzWkB6gRPUiN6SFqQg9TU3qEmtGj1Jweoxb0OLWkJ6gVtaY21Jba0ZPUnp6iDtSROtHT1JmeoS70LCXTc9SVnqdu9AJ1pxepB71EPell6kW9qQ+9Qn3pVepH/SmFBtBAeo0G0WAaQkNpGL1Ow+kNGkFvUiqNpFH0Fo2mt2kMvUNjaRyNp3dpAk2kSTSZptBUSqP3aBq9T9PpA5pBM2kWzaZ0mkNz6UOaR/NpAX1EC+ljWkSLaQktpQz6hDJpGWXRp7ScPqNsWkEraRWtpjW0ltbRetpAG2kTbaYttJW20Xb6nHbQTtpFu2kP7aV99AXtpy/pAH1FOfQ1HaQ/0SH6hg5TQLn0LR2h7+gofU/H6Ac6Tj/SCTpJp+gnOk0/0xk6S+foPF2gX+giXaLL5EmEEMpQhToMwnxh/jAmLBDGhteFceH1YcGwUBgJbwjjwxvDwuFNYZGwaFgsLB4mhCXCkqEJMbQhhWFYKiwdRsObwzLhLWFiWDYsF5YPXVghTApvDSuGt4WVwtvDyuEdYZXwzrBqWC18/MEa4V1hzfDusFZ4T1g7vDesE9YN64X1w/vCBuH9YcPwgbBR+GBYKXwobBI+HDYNHwmbhY+GzcPHwhbh42HL8ImwVdg6bBO2DduFT4btw6fCDmHHsFP4dNg5fCbsEj4bJofPhV3D5//l8ZRwQDgwfC18LfT+AbUkujSaEf0kmhldFs2KfhpdHv0smh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuutcnLveFXSFXMTd4OLdja6wu8kVcUVdMVfcJbgSrqQzDp115EJXypV2UXezK+NucYmurCvnyjvnKrgk19a1c+1ce/eU6+A6uk7uafe0e8Y94551z7rnXFf3vOvmXnDd3Yuuh3vJveRedr1cb9fHveL6ulddP9ffpbgUN9ANdIPcIDfEDXHD3DA33A13I9wIl+pS3Sg3yo12o90YN8aNdWPdeDfeTXAT3CQ3yU1xU1yaS3PT3DQ33U13M9wMN8vNcuku3c11c908N88tcAvcwsSFbpFb5Ja4JS7DZbhMl+myXJZb7pa7bJftVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na4HW6X2+X2uD1un9vn9rv97oA74HJcjjvoDrpD7pA77P7sct237oj7zh1137tj7gd33P3oTriT7pT7yZ12P7sz7qw75867C+4Xd9Fdcpedd2mR9yLTIu9Hpkc+iMyIzIzMisyOpEfmROZGPozMi8yPLIh8FFkY+TiyKLI4siSyNJIR+SSSGVkWyYp8Glke+SySHVkRWRlZFVkdWRPxvsSO0JfypX3U3+zL+Ft8oi/ry/ny3vkKPsnf6iv623wlf7uv7O/wVfydvqqv5qv7J3wr39q38W19O/+kb++f8h18R9/JP+07+2d8F/+sT/bP+a7+ed/Nv+C7+xd9D/+S7+lf9r18b9/Hv+L7+ld9P9/fp/gBfqB/zQ/yg/0QP9QP86/74f4NP8K/6VP9SD/Kv+VH+7f9GP+OH+vH+fH+XT/BT/ST/GQ/xU/1af49P82/76f7D/wMP9PP8rN9up/j5/oP/Tw/3y/wH/mF/mO/yC/2S/xSn+E/8Zl+mc/yn/rl/jOf7Vf4lX6VX+3X+LV+nV/vN/iNfpPf7Lf4rX6b3+4/9zv8Tr/L7/Z7/F6/z3/h9/sv/QH/lc/xX/uD/k/+kP/GH/Z/9rn+W3/Ef+eP+u/9Mf+DP+5/9Cf8SX/K/+RP+5/9GX/Wn/Pn/QX/i7/oL/nL/DdrjDHGGGN/iAF/52vyt3HFQCHE9TuL5/71cSWE2FzkL/PBMqFzRAjxXP+ej/7vUadOSkrKb8/NViIovVgIEbman09cjVeITuIZkSw6iop/t77BsvcF+pv1z/n/un70DiFi/yonRlyNr65/2z9Y/8mnx2dWCc/F/+P6o4uFSCx9NaeAuBpfXb/SP1i/aHv65+9PgW/ShOjwVzlx4mp8df0k8ZR4XiT/zTMZY4wxxhhjjLG/GCyrd/8X15+/Xp8n6Ks5+cXV+F9dnzPGGGOMMcYYY+zae7F3n2efTE7u2J0nPOHJP5mo335i/n+p5396co1/MTHGGGOMMcb+cFdP+q91JYwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWN71/+LfiV3rPTLGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPX2v8KAAD//31gOsg=") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040), 0x1, 0x269, &(0x7f00000027c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x8, 0x0, 0x5, 0x80006, 0xfffffffe, 0xfffa}) 1.93238557s ago: executing program 6 (id=1026): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0xffffffff, 0x0, 0x3}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.544428396s ago: executing program 6 (id=1027): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 1.355949929s ago: executing program 1 (id=1028): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r0, 0x402, 0x8000002d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r2, r3, 0x1, 0x0) 1.261177126s ago: executing program 3 (id=1029): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x42, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r3, 0x24, 0x0, 0xfffffffd, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.244052036s ago: executing program 5 (id=1030): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x2900, 0x88c, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) lsetxattr$security_ima(&(0x7f0000002240)='./file0/file0\x00', &(0x7f00000022c0), 0x0, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x7fff, 0x1, 0x201, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r2, 0x5, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 997.201169ms ago: executing program 6 (id=1031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='EmWo'], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x24004000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "ec104bcd6488d2f6", "8f8c2a478c4e48f9575d967978dd13c9", "980900", "c69df17e8d1b3a58"}, 0x28) 914.550563ms ago: executing program 1 (id=1032): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 834.159845ms ago: executing program 3 (id=1033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x100000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 773.091368ms ago: executing program 6 (id=1034): openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x713, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x33}, @in6=@rand_addr=' \x01\x00', {0x800, 0x192, 0x6, 0xffff, 0x75e8, 0x2, 0xfffffffffffffff8}, {0x3, 0x20000000000, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x203504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 471.381409ms ago: executing program 2 (id=1036): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 447.244902ms ago: executing program 1 (id=1037): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 429.270354ms ago: executing program 6 (id=1038): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x400006, @loopback, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={r2, r0}) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000009c0)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040810) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x22008095}, 0x0) 393.127793ms ago: executing program 3 (id=1039): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioperm(0x0, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/203, 0xcb}], 0x1, 0x0, 0xfffffffffffffeac}, 0x121) 84.83907ms ago: executing program 6 (id=1040): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 53.547168ms ago: executing program 0 (id=1041): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 52.518021ms ago: executing program 5 (id=1042): timer_create(0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0xffffffffffff7fff, 0xcd6}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 1 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000b00), 0x100) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 84.709042][ T5609] cgroup: Unknown subsys name 'net' [ 84.857739][ T5609] cgroup: Unknown subsys name 'cpuset' [ 84.867307][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.608971][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.274400][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.284859][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.293914][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.302364][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.311602][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.331269][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.333762][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.339676][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.348168][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.356094][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.367613][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.371745][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.375313][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.384085][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.389559][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.402853][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.406357][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.412638][ T5648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.423584][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.425944][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.432602][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.440480][ T5648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.455028][ T5647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.455891][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.464343][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.470479][ T5649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.476938][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.491999][ T5643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.499367][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.524654][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.178942][ T10] cfg80211: failed to load regulatory.db [ 91.499629][ T5642] Bluetooth: hci0: command tx timeout [ 91.573593][ T5642] Bluetooth: hci1: command tx timeout [ 91.573648][ T5643] Bluetooth: hci4: command tx timeout [ 91.581926][ T5642] Bluetooth: hci3: command tx timeout [ 91.584948][ T5634] Bluetooth: hci2: command tx timeout [ 91.585068][ T5634] Bluetooth: hci5: command tx timeout [ 92.246477][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.253762][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.260906][ T5624] bridge_slave_0: entered allmulticast mode [ 92.268939][ T5624] bridge_slave_0: entered promiscuous mode [ 92.299183][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.306397][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.313609][ T5626] bridge_slave_0: entered allmulticast mode [ 92.321209][ T5626] bridge_slave_0: entered promiscuous mode [ 92.351627][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.359163][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.366427][ T5624] bridge_slave_1: entered allmulticast mode [ 92.374630][ T5624] bridge_slave_1: entered promiscuous mode [ 92.406216][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.413811][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.420946][ T5626] bridge_slave_1: entered allmulticast mode [ 92.428714][ T5626] bridge_slave_1: entered promiscuous mode [ 92.490717][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.497961][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.505284][ T5622] bridge_slave_0: entered allmulticast mode [ 92.512813][ T5622] bridge_slave_0: entered promiscuous mode [ 92.571803][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.579034][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.587112][ T5623] bridge_slave_0: entered allmulticast mode [ 92.595616][ T5623] bridge_slave_0: entered promiscuous mode [ 92.604847][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.613961][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.621191][ T5622] bridge_slave_1: entered allmulticast mode [ 92.630943][ T5622] bridge_slave_1: entered promiscuous mode [ 92.651393][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.658681][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.668497][ T5627] bridge_slave_0: entered allmulticast mode [ 92.676083][ T5627] bridge_slave_0: entered promiscuous mode [ 92.700404][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.709708][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.717357][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.724816][ T5623] bridge_slave_1: entered allmulticast mode [ 92.732331][ T5623] bridge_slave_1: entered promiscuous mode [ 92.756052][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.765643][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.772870][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.780777][ T5627] bridge_slave_1: entered allmulticast mode [ 92.788515][ T5627] bridge_slave_1: entered promiscuous mode [ 92.795664][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.802791][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.810225][ T5625] bridge_slave_0: entered allmulticast mode [ 92.817900][ T5625] bridge_slave_0: entered promiscuous mode [ 92.828432][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.866722][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.888711][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.896065][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.903493][ T5625] bridge_slave_1: entered allmulticast mode [ 92.911156][ T5625] bridge_slave_1: entered promiscuous mode [ 92.946500][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.010687][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.023650][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.049694][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.074307][ T5624] team0: Port device team_slave_0 added [ 93.082574][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.106962][ T5626] team0: Port device team_slave_0 added [ 93.116470][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.129418][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.141010][ T5624] team0: Port device team_slave_1 added [ 93.174820][ T5626] team0: Port device team_slave_1 added [ 93.195991][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.232825][ T5622] team0: Port device team_slave_0 added [ 93.292929][ T5623] team0: Port device team_slave_0 added [ 93.300778][ T5622] team0: Port device team_slave_1 added [ 93.321046][ T5627] team0: Port device team_slave_0 added [ 93.341218][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.348366][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.374408][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.388621][ T5623] team0: Port device team_slave_1 added [ 93.420623][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.427761][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.453722][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.467187][ T5627] team0: Port device team_slave_1 added [ 93.475166][ T5625] team0: Port device team_slave_0 added [ 93.481501][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.488618][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.514727][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.555522][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.562566][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.588971][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.589013][ T5642] Bluetooth: hci0: command tx timeout [ 93.617344][ T5625] team0: Port device team_slave_1 added [ 93.633478][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.640457][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.666550][ T5642] Bluetooth: hci3: command tx timeout [ 93.666615][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.672427][ T5642] Bluetooth: hci4: command tx timeout [ 93.683776][ T5643] Bluetooth: hci5: command tx timeout [ 93.687910][ T5642] Bluetooth: hci2: command tx timeout [ 93.687943][ T5642] Bluetooth: hci1: command tx timeout [ 93.690682][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.712006][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.738319][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.750137][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.757308][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.783262][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.860970][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.868000][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.894388][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.907708][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.914857][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.941059][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.954270][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.961230][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.987978][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.000382][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.007646][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.033605][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.046379][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.053558][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.080063][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.179401][ T5624] hsr_slave_0: entered promiscuous mode [ 94.185969][ T5624] hsr_slave_1: entered promiscuous mode [ 94.240750][ T5626] hsr_slave_0: entered promiscuous mode [ 94.247743][ T5626] hsr_slave_1: entered promiscuous mode [ 94.254248][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 94.260020][ T5626] Cannot create hsr debugfs directory [ 94.351326][ T5623] hsr_slave_0: entered promiscuous mode [ 94.358410][ T5623] hsr_slave_1: entered promiscuous mode [ 94.364726][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 94.370445][ T5623] Cannot create hsr debugfs directory [ 94.464730][ T5622] hsr_slave_0: entered promiscuous mode [ 94.471177][ T5622] hsr_slave_1: entered promiscuous mode [ 94.477798][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 94.483631][ T5622] Cannot create hsr debugfs directory [ 94.516310][ T5625] hsr_slave_0: entered promiscuous mode [ 94.522730][ T5625] hsr_slave_1: entered promiscuous mode [ 94.529060][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 94.534959][ T5625] Cannot create hsr debugfs directory [ 94.577324][ T5627] hsr_slave_0: entered promiscuous mode [ 94.583978][ T5627] hsr_slave_1: entered promiscuous mode [ 94.590131][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 94.596088][ T5627] Cannot create hsr debugfs directory [ 95.299965][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.315939][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.324523][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.335414][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.344475][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.355941][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.364067][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.374504][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.455812][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.468710][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.479228][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.489598][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.501851][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.512539][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.522554][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.535067][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.646433][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.654266][ T5628] Bluetooth: hci0: command tx timeout [ 95.664362][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.672826][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.685194][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.697876][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.708373][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.732302][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.733907][ T5628] Bluetooth: hci5: command tx timeout [ 95.740804][ T5642] Bluetooth: hci2: command tx timeout [ 95.746168][ T5628] Bluetooth: hci4: command tx timeout [ 95.750459][ T5634] Bluetooth: hci3: command tx timeout [ 95.762921][ T5643] Bluetooth: hci1: command tx timeout [ 95.769098][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.875731][ T5623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.889635][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.898595][ T5623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.909774][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.925630][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.933762][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.944370][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.961081][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.971106][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.040734][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.099054][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.106485][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.118093][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.125252][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.182140][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.198165][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.218332][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.229804][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.259542][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.270308][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.278843][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.289779][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.341544][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.445593][ T5625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.456651][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.466332][ T5625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.476232][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.484172][ T5625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.494875][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.515330][ T5625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.526456][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.536635][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.579230][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.616987][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.624170][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.678523][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.685722][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.730311][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.802632][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.809789][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.836783][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.851109][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.858278][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.946831][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.999977][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.069853][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.077138][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.131956][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.148886][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.156084][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.250586][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.257793][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.337461][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.344661][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.434312][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.487470][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.597417][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.670467][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.677656][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.709373][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.716549][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.734207][ T5643] Bluetooth: hci0: command tx timeout [ 97.816938][ T5643] Bluetooth: hci2: command tx timeout [ 97.816961][ T5642] Bluetooth: hci4: command tx timeout [ 97.822374][ T5643] Bluetooth: hci5: command tx timeout [ 97.828970][ T5642] Bluetooth: hci1: command tx timeout [ 97.834509][ T5634] Bluetooth: hci3: command tx timeout [ 98.007691][ T5624] veth0_vlan: entered promiscuous mode [ 98.089768][ T5624] veth1_vlan: entered promiscuous mode [ 98.301303][ T5624] veth0_macvtap: entered promiscuous mode [ 98.361141][ T5624] veth1_macvtap: entered promiscuous mode [ 98.402180][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.477311][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.557891][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.735893][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.858566][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.874751][ T1030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.917059][ T5626] veth0_vlan: entered promiscuous mode [ 98.934503][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.996071][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.067455][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.114162][ T5626] veth1_vlan: entered promiscuous mode [ 99.151756][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.182967][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.345089][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.417990][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.445431][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.467223][ T5626] veth0_macvtap: entered promiscuous mode [ 99.505968][ T5627] veth0_vlan: entered promiscuous mode [ 99.537027][ T5626] veth1_macvtap: entered promiscuous mode [ 99.589040][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.612085][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.659082][ T5627] veth1_vlan: entered promiscuous mode [ 99.751988][ T5622] veth0_vlan: entered promiscuous mode [ 99.780519][ T5622] veth1_vlan: entered promiscuous mode [ 99.808078][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.884088][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.933267][ T134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.999031][ T5627] veth0_macvtap: entered promiscuous mode [ 100.079363][ T5627] veth1_macvtap: entered promiscuous mode [ 100.103495][ T1030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.135911][ T5865] trusted_key: syz.0.7 sent an empty control message without MSG_MORE. [ 100.216435][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.266209][ T5623] veth0_vlan: entered promiscuous mode [ 100.292771][ T5622] veth0_macvtap: entered promiscuous mode [ 100.319850][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.363873][ T5622] veth1_macvtap: entered promiscuous mode [ 100.381994][ T5623] veth1_vlan: entered promiscuous mode [ 100.391486][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.402893][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.414877][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.509007][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.517954][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.520488][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.563422][ T2197] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.589829][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.603482][ T134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.644480][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.655043][ T5625] veth0_vlan: entered promiscuous mode [ 100.696103][ T134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.730642][ T5623] veth0_macvtap: entered promiscuous mode [ 100.748414][ T2197] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 100.777495][ T2197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.814163][ T5623] veth1_macvtap: entered promiscuous mode [ 100.822532][ T2197] usb 1-1: config 0 descriptor?? [ 100.836678][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.847766][ T2197] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 100.860629][ T5625] veth1_vlan: entered promiscuous mode [ 100.942845][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.959481][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.960340][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.020533][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.073111][ T1030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.143408][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.152590][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.164311][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.197991][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.209356][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.270668][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.298615][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.378231][ T5625] veth0_macvtap: entered promiscuous mode [ 101.424127][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.475211][ T1030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.489945][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.507272][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.549873][ T5625] veth1_macvtap: entered promiscuous mode [ 101.615173][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.674819][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.705323][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.847914][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.874220][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.883304][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.908111][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.925158][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.996564][ T1030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.028615][ T1030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.102676][ T2197] usb 1-1: USB disconnect, device number 2 [ 102.168135][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.444900][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.513877][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.523452][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.553402][ T5887] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 102.561197][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.931822][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.020301][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.255719][ T5895] loop3: detected capacity change from 0 to 32768 [ 103.302094][ T5895] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 103.311404][ T5895] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 103.430274][ T5895] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 103.446241][ T5632] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 103.464249][ T5632] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 103.552678][ T5908] ======================================================= [ 103.552678][ T5908] WARNING: The mand mount option has been deprecated and [ 103.552678][ T5908] and is ignored by this kernel. Remove the mand [ 103.552678][ T5908] option from the mount to silence this warning. [ 103.552678][ T5908] ======================================================= [ 103.762771][ T5632] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 298ms [ 103.805416][ T5632] gfs2: fsid=syz:syz.0: jid=0: Done [ 103.827336][ T5895] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 104.108089][ T5901] uprobe: syz.0.16:5901 failed to unregister, leaking uprobe [ 104.189482][ T5901] uprobe: syz.0.16:5901 failed to unregister, leaking uprobe [ 104.597582][ T5923] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 104.597666][ T5922] netlink: 'syz.1.21': attribute type 1 has an invalid length. [ 104.607984][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 104.662547][ T5923] netlink: 'syz.2.23': attribute type 4 has an invalid length. [ 104.667145][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 104.680092][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 104.722121][ T5926] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 104.739735][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 104.761566][ T5919] Zero length message leads to an empty skb [ 104.783117][ T5923] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.23'. [ 104.792449][ T5926] netlink: 'syz.2.23': attribute type 4 has an invalid length. [ 104.800398][ T5926] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.23'. [ 104.925884][ T5922] team0: Device gre0 is of different type [ 105.159253][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 105.360007][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.654706][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.682648][ T5938] netlink: 68 bytes leftover after parsing attributes in process `syz.5.31'. [ 105.916907][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 105.996186][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.011948][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.022003][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.035079][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.037130][ T5945] loop3: detected capacity change from 0 to 1024 [ 106.054430][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.066787][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.214298][ T2197] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 106.220928][ T5945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.290219][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.424386][ T2197] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.464352][ T2197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.487700][ T5962] loop5: detected capacity change from 0 to 512 [ 106.494682][ T2197] usb 1-1: Product: syz [ 106.502920][ T2197] usb 1-1: Manufacturer: syz [ 106.522064][ T2197] usb 1-1: SerialNumber: syz [ 106.531383][ T5962] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.579631][ T2197] usb 1-1: config 0 descriptor?? [ 106.596830][ T5962] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.37: bg 0: block 4: invalid block bitmap [ 106.624796][ T5962] loop5: lost filesystem error report for type 5 error -117 [ 106.633337][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 106.647712][ C0] EXT4-fs (loop5): initial error at time 1785903602: ext4_validate_block_bitmap:431 [ 106.657166][ C0] EXT4-fs (loop5): last error at time 1785903602: ext4_validate_block_bitmap:431 [ 106.690013][ T5962] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 106.752877][ T5962] loop5: lost filesystem error report for type 5 error -117 [ 106.770567][ T5962] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.37: invalid indirect mapped block 1 (level 1) [ 106.845541][ T2197] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 106.853986][ T5962] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.858520][ T5962] EXT4-fs (loop5): 1 truncate cleaned up [ 106.961222][ T5962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.979477][ T49] bridge_slave_1: left allmulticast mode [ 107.009438][ T49] bridge_slave_1: left promiscuous mode [ 107.041898][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.092310][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.114896][ T49] bridge_slave_0: left allmulticast mode [ 107.150644][ T49] bridge_slave_0: left promiscuous mode [ 107.182811][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.627239][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.897716][ T2197] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 107.980672][ T2197] usb 1-1: USB disconnect, device number 3 [ 108.086273][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 108.133598][ T5643] Bluetooth: hci1: command tx timeout [ 108.251375][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.303966][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.328338][ T49] bond0 (unregistering): Released all slaves [ 108.859629][ T6013] netlink: 'syz.3.52': attribute type 21 has an invalid length. [ 108.902301][ T6013] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.203654][ T31] audit: type=1326 audit(1785903605.042:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.2.50" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceef19e019 code=0x7fc00000 [ 109.604400][ T49] hsr_slave_0: left promiscuous mode [ 109.641428][ T49] hsr_slave_1: left promiscuous mode [ 109.652705][ T6032] __nla_validate_parse: 1 callbacks suppressed [ 109.652729][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.55'. [ 109.682961][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.707568][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.747603][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.758304][ T6035] loop0: detected capacity change from 0 to 512 [ 109.779814][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.792805][ T5634] block nbd0: Receive control failed (result -107) [ 109.838697][ T6035] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.875388][ T49] veth1_macvtap: left promiscuous mode [ 109.917172][ T49] veth0_macvtap: left promiscuous mode [ 109.926726][ T6035] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.56: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 109.966637][ T49] veth1_vlan: left promiscuous mode [ 110.014559][ T49] veth0_vlan: left promiscuous mode [ 110.047452][ T6035] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 110.048401][ T6035] EXT4-fs (loop0): get root inode failed [ 110.057662][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 110.057702][ C1] EXT4-fs (loop0): initial error at time 1785903605: ext4_ext_check_inode:521: inode 2 [ 110.057755][ C1] EXT4-fs (loop0): last error at time 1785903605: ext4_ext_check_inode:521: inode 2 [ 110.135311][ T6035] EXT4-fs (loop0): mount failed [ 110.214458][ T5634] Bluetooth: hci1: command tx timeout [ 111.117656][ T6063] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 111.117656][ T6063] The task syz.2.61 (6063) triggered the difference, watch for misbehavior. [ 111.594886][ T49] team0 (unregistering): Port device team_slave_1 removed [ 111.723410][ T49] team0 (unregistering): Port device team_slave_0 removed [ 111.798081][ T6077] loop3: detected capacity change from 0 to 128 [ 111.877336][ T6077] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 112.294945][ T5634] Bluetooth: hci1: command tx timeout [ 112.520771][ T31] audit: type=1804 audit(1785903608.352:3): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.67" name="/newroot/11/file1/file1" dev="loop3" ino=94 res=1 errno=0 [ 112.618913][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 112.678170][ T6072] loop0: detected capacity change from 0 to 32768 [ 112.735389][ T6090] loop5: detected capacity change from 0 to 2048 [ 112.747714][ T6072] ocfs2: Bad value for 'localalloc' [ 112.776345][ T6090] ext4: Unknown parameter 'smackfsfloor' [ 112.984650][ T31] audit: type=1800 audit(1785903608.822:4): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.67" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 113.040408][ T31] audit: type=1800 audit(1785903608.872:5): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.67" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 113.745045][ T6107] warning: `syz.3.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.373543][ T5643] Bluetooth: hci1: command tx timeout [ 115.013065][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 115.285259][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.309906][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.327620][ T5949] bridge_slave_0: entered allmulticast mode [ 115.347932][ T5949] bridge_slave_0: entered promiscuous mode [ 115.372624][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 115.398858][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.421994][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.440159][ T5949] bridge_slave_1: entered allmulticast mode [ 115.461254][ T5949] bridge_slave_1: entered promiscuous mode [ 115.619822][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.710763][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.854788][ T5949] team0: Port device team_slave_0 added [ 115.889123][ T5949] team0: Port device team_slave_1 added [ 116.096850][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.132613][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.207979][ T6160] loop5: detected capacity change from 0 to 16 [ 116.255319][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.302515][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.328807][ T6160] erofs (device loop5): mounted with root inode @ nid 36. [ 116.344815][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.430103][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.621575][ T5634] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 116.659977][ T6160] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 116.757224][ T6160] erofs (device loop5): read error -117 @ 0 of nid 89 [ 116.799847][ T5949] hsr_slave_0: entered promiscuous mode [ 116.822217][ T5949] hsr_slave_1: entered promiscuous mode [ 116.850578][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 116.873073][ T5949] Cannot create hsr debugfs directory [ 117.183321][ T5793] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.353057][ T5793] usb 3-1: Using ep0 maxpacket: 32 [ 117.537126][ T5793] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.560111][ T5793] usb 3-1: no configurations [ 117.584721][ T5793] usb 3-1: can't read configurations, error -22 [ 118.061071][ T6181] uprobe: syz.1.93:6181 failed to unregister, leaking uprobe [ 118.079801][ T5949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 118.126041][ T6196] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.147073][ T5949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.173890][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 118.189634][ T5949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 118.223641][ T6181] uprobe: syz.1.93:6181 failed to unregister, leaking uprobe [ 118.248060][ T5949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.275353][ T5949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 118.318362][ T5949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.346891][ T5949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 118.394756][ T5949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.816615][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.930602][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.002181][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.009451][ T5974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.102365][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.109603][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.334936][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 119.649215][ T6236] loop0: detected capacity change from 0 to 512 [ 119.689895][ T6236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.762288][ T6236] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.107: iget: bad i_size value: 38620345925642 [ 119.791023][ T6236] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.793036][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 119.808699][ C0] EXT4-fs (loop0): initial error at time 1785903615: ext4_orphan_get:1399: inode 15 [ 119.818176][ C0] EXT4-fs (loop0): last error at time 1785903615: ext4_orphan_get:1399: inode 15 [ 119.841894][ T6236] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.107: couldn't read orphan inode 15 (err -117) [ 119.931806][ T6236] loop0: lost filesystem error report for type 5 error -117 [ 120.013554][ T6236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. getty: ttyS0: read error: Resource temporarily u[ 120.070957][ T6247] Illegal XDP return value 646069760 on prog (id 25) dev syz_tun, expect packet loss! [ 120.157828][ T5634] Bluetooth: hci6: setting up ROME/QCA6390 Hüü[ 120.952756][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 121.019986][ T49] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 121.046398][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 36 with max blocks 944 with error 28 [ 121.069437][ T49] EXT4-fs (loop0): This should not happen!! Data will be lost [ 121.069437][ T49] [ 121.114773][ T49] EXT4-fs (loop0): Total free blocks count 0 [ 121.131394][ T49] EXT4-fs (loop0): Free/Dirty block details [ 121.148371][ T49] EXT4-fs (loop0): free_blocks=0 [ 121.156846][ T49] EXT4-fs (loop0): dirty_blocks=944 [ 121.172290][ T49] EXT4-fs (loop0): Block reservation details [ 121.212470][ T49] EXT4-fs (loop0): i_reserved_data_blocks=944 [ 121.362127][ T5624] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 121.487435][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.649775][ T6286] loop3: detected capacity change from 0 to 512 [ 121.701617][ T6286] EXT4-fs: Ignoring removed oldalloc option [ 121.848367][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.891533][ T6286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.534172][ T6286] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 122.535515][ T5643] Bluetooth: hci6: command 0xfc00 tx timeout [ 122.553644][ T5634] Bluetooth: hci6: Reading QCA version information failed (-110) [ 122.561620][ T5634] Bluetooth: hci6: Retry BT power ON:0 Hü[ 122.589020][ T6286] EXT4-fs: Cannot change journaled quota options when quota turned on [ 122.847006][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. ü[ 123.168700][ T5949] veth0_vlan: entered promiscuous mode [ 123.216716][ T5949] veth1_vlan: entered promiscuous mode [ 123.376156][ T5949] veth0_macvtap: entered promiscuous mode [ 123.429156][ T5949] veth1_macvtap: entered promiscuous mode [ 123.542942][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.589389][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.628124][ T2197] libceph: connect (1)[c::]:6789 error -101 [ 123.662776][ T2197] libceph: mon0 (1)[c::]:6789 connect error [ 123.717527][ T2197] libceph: connect (1)[c::]:6789 error -101 [ 123.757675][ T2197] libceph: mon0 (1)[c::]:6789 connect error [ 123.772803][ T6314] loop2: detected capacity change from 0 to 32768 [ 123.781042][ T1030] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.842836][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.871442][ T6314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.123 (6314) [ 123.904011][ T1030] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.926366][ T1030] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.034894][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 124.068826][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 124.102185][ T6314] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.154607][ T6314] BTRFS info (device loop2): using crc32c checksum algorithm [ 124.251149][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.265406][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.308672][ T6329] ceph: No mds server is up or the cluster is laggy [ 124.359851][ T6314] BTRFS info (device loop2): enabling ssd optimizations [ 124.368234][ T6314] BTRFS info (device loop2): turning on flush-on-commit [ 124.377711][ T6314] BTRFS info (device loop2): enabling free space tree [ 124.395102][ T6314] BTRFS info (device loop2): enabling auto defrag [ 124.411841][ T6314] BTRFS info (device loop2): use lzo compression, level 1 [ 124.427531][ T6314] BTRFS info (device loop2): max_inline set to 0 [ 124.497509][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.529004][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.787659][ T6360] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 124.933558][ T5643] Bluetooth: hci6: command 0xfc00 tx timeout [ 124.941002][ T5634] Bluetooth: hci6: Reading QCA version information failed (-110) [ 124.948893][ T5634] Bluetooth: hci6: Retry BT power ON:1 Hü[ 125.137809][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1 ü[ 125.354753][ T6363] bond1: (slave gretap1): making interface the new active one [ 125.408123][ T6363] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 125.596437][ T5626] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.929945][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 126.833440][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.912777][ T6392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.932159][ T6399] loop5: detected capacity change from 0 to 512 [ 126.977467][ T6392] bridge0: port 3(bond1) entered blocking state [ 127.029181][ T6392] bridge0: port 3(bond1) entered disabled state [ 127.030464][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 127.068337][ T6392] bond1: entered allmulticast mode [ 127.086051][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.098875][ T6392] bond1: entered promiscuous mode [ 127.131954][ T6392] bridge0: port 3(bond1) entered blocking state [ 127.138944][ T6392] bridge0: port 3(bond1) entered forwarding state [ 127.263705][ T1030] bridge0: port 3(bond1) entered disabled state [ 127.302422][ T6399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.333892][ T5643] Bluetooth: hci6: command 0xfc00 tx timeout [ 127.340081][ T5634] Bluetooth: hci6: Reading QCA version information failed (-110) [ 127.348597][ T5634] Bluetooth: hci6: Retry BT power ON:2 Hü[ 127.402486][ T6399] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) ü[ 127.695545][ T9] wacom 0003:056A:00B1.0001: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 127.799915][ T9] wacom 0003:056A:00B1.0001: hidraw0: USB HID v1.11 Device [HID 056a:00b1] on usb-dummy_hcd.2-1/input0 [ 127.883300][ T9] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:00B1.0001/input/input5 [ 128.448710][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.588156][ T6423] all: renamed from bridge_slave_1 (while UP) [ 128.828589][ T9] usb 3-1: USB disconnect, device number 4 [ 129.734096][ T5643] Bluetooth: hci6: command 0xfc00 tx timeout [ 129.742607][ T5634] Bluetooth: hci6: Reading QCA version information failed (-110) [ 130.877264][ T6463] loop2: detected capacity change from 0 to 1024 [ 130.916753][ T10] IPVS: starting estimator thread 0... [ 130.945587][ T6463] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 131.012478][ T6463] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 131.035238][ T6468] IPVS: using max 23 ests per chain, 55200 per kthread [ 131.062111][ T6463] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 131.120620][ T6463] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.162: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 131.205624][ T6463] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 131.206015][ T6463] EXT4-fs (loop2): no journal found [ 131.215166][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 131.215200][ C1] EXT4-fs (loop2): initial error at time 1785903627: ext4_ext_check_inode:521: inode 3 [ 131.215264][ C1] EXT4-fs (loop2): last error at time 1785903627: ext4_ext_check_inode:521: inode 3 [ 131.327676][ T6463] EXT4-fs (loop2): can't get journal size [ 131.358875][ T6463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.646421][ T5626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.726295][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 131.901557][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 131.941993][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.079829][ T5632] IPVS: starting estimator thread 0... [ 132.137972][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.148212][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.204335][ T6495] IPVS: using max 23 ests per chain, 55200 per kthread [ 132.222141][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.425972][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.473142][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.519636][ T9] usb 3-1: config 1 has no interface number 0 [ 132.527564][ T10] wacom 0003:056A:00B1.0002: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 132.567421][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 132.606875][ T10] wacom 0003:056A:00B1.0002: hidraw0: USB HID v1.11 Device [HID 056a:00b1] on usb-dummy_hcd.6-1/input0 [ 132.623327][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.658037][ T9] usb 3-1: Product: syz [ 132.684664][ T9] usb 3-1: Manufacturer: syz [ 132.709856][ T9] usb 3-1: SerialNumber: syz [ 132.755131][ T10] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:056A:00B1.0002/input/input8 [ 133.208340][ T9] usb 3-1: 1:0 : does not exist [ 133.245097][ T9] usb 3-1: 1:2 : does not exist [ 133.291205][ T9] usb 3-1: 1:3 : does not exist [ 133.322568][ T9] usb 3-1: BAAD HEADPHONE p_chmask mismatch [ 133.712715][ T10] usb 7-1: USB disconnect, device number 2 [ 133.775117][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 134.106128][ T9] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 134.196023][ T9] usb 3-1: USB disconnect, device number 5 [ 134.331817][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.366323][ T6528] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 134.488034][ T6530] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 134.599904][ T6530] bond1 (unregistering): Released all slaves [ 134.914757][ T6517] loop1: detected capacity change from 0 to 32768 [ 134.996547][ T6517] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.178 (6517) [ 135.207566][ T6517] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.260367][ T6517] BTRFS info (device loop1): using crc32c checksum algorithm [ 135.536538][ T6517] BTRFS info (device loop1): enabling ssd optimizations [ 135.563191][ T6517] BTRFS info (device loop1): turning on flush-on-commit [ 135.596277][ T6517] BTRFS info (device loop1): enabling free space tree [ 135.644327][ T6517] BTRFS info (device loop1): enabling auto defrag [ 135.682257][ T6517] BTRFS info (device loop1): use lzo compression, level 1 [ 135.726199][ T6517] BTRFS info (device loop1): max_inline set to 0 [ 136.601016][ T6581] bridge0: port 3(syz_tun) entered blocking state [ 136.706813][ T6581] bridge0: port 3(syz_tun) entered disabled state [ 136.907848][ T6581] syz_tun: entered allmulticast mode [ 137.048189][ T6581] syz_tun: entered promiscuous mode [ 137.156913][ T6581] bridge0: port 3(syz_tun) entered blocking state [ 137.164374][ T6581] bridge0: port 3(syz_tun) entered forwarding state [ 137.820986][ T5622] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.866490][ T6604] jffs2: notice: (6604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.090167][ T5793] IPVS: starting estimator thread 0... [ 140.160088][ T6651] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 140.214722][ T6647] IPVS: rr: UDP 172.20.20.1:80 - no destination available [ 140.254443][ T6650] IPVS: using max 22 ests per chain, 52800 per kthread [ 140.491820][ T6639] uprobe: syz.2.204:6639 failed to unregister, leaking uprobe [ 140.656162][ T6639] uprobe: syz.2.204:6639 failed to unregister, leaking uprobe [ 141.256047][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.320061][ T6668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.610710][ T6672] erspan0: entered promiscuous mode [ 141.654308][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.213'. [ 141.893684][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.091635][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 142.137434][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.201189][ T9] usb 3-1: config 0 descriptor?? [ 142.711464][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.750843][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.008685][ T6702] loop1: detected capacity change from 0 to 2048 [ 143.099829][ T6702] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 143.202868][ T6710] loop6: detected capacity change from 0 to 128 [ 143.305678][ T6710] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.426976][ T6710] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.659848][ T9] usb 3-1: Cannot set autoneg [ 143.691372][ T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 143.786100][ T9] usb 3-1: USB disconnect, device number 6 [ 144.015764][ T6710] fscrypt (loop6, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 144.098066][ T6710] fscrypt (loop6, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 144.224459][ T6726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.228'. [ 144.342628][ T5949] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.588321][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.231'. [ 144.676483][ T6737] netlink: 256 bytes leftover after parsing attributes in process `syz.2.233'. [ 144.726590][ T6737] unsupported nlmsg_type 40 [ 145.123088][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1031 jiffies old. [ 146.473150][ T6756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.779573][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.241'. [ 148.461703][ T6790] loop5: detected capacity change from 0 to 128 [ 148.565234][ T6790] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.657561][ T6790] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.088231][ T5625] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.442788][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.258'. [ 150.871389][ T31] audit: type=1326 audit(1785903646.712:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.5.259" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e319e019 code=0x7ffc0000 [ 150.994062][ T31] audit: type=1326 audit(1785903646.712:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.5.259" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e319e019 code=0x7ffc0000 [ 151.086763][ T31] audit: type=1326 audit(1785903646.742:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.5.259" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e319e019 code=0x7ffc0000 [ 151.183559][ T5793] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.196429][ T31] audit: type=1326 audit(1785903646.752:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.5.259" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e319e019 code=0x7ffc0000 [ 151.281810][ T31] audit: type=1326 audit(1785903646.762:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.5.259" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e319e019 code=0x7ffc0000 [ 151.342338][ T6828] veth1_vlan: left promiscuous mode [ 151.362718][ T31] audit: type=1326 audit(1785903646.762:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.5.259" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e319e019 code=0x7ffc0000 [ 151.383663][ T5793] usb 2-1: Using ep0 maxpacket: 8 [ 151.443253][ T31] audit: type=1326 audit(1785903646.762:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.5.259" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e319e019 code=0x7ffc0000 [ 151.479647][ T6817] loop5: detected capacity change from 0 to 8192 [ 151.482503][ T5793] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 151.549162][ T5793] usb 2-1: config 0 has no interface number 0 [ 151.599896][ T6828] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 151.619219][ T5793] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 151.628121][ T31] audit: type=1326 audit(1785903646.762:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.5.259" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e319e019 code=0x7ffc0000 [ 151.656496][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.751289][ T5793] usb 2-1: config 0 descriptor?? [ 151.802149][ T31] audit: type=1326 audit(1785903646.772:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.5.259" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f27e319e019 code=0x7ffc0000 [ 151.941089][ T5793] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 152.024951][ T31] audit: type=1326 audit(1785903646.772:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.5.259" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e319e019 code=0x7ffc0000 [ 152.052864][ T6820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.139147][ T6820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.246452][ T5793] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 152.304449][ T5793] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 152.720177][ T10] usb 2-1: USB disconnect, device number 2 [ 154.967448][ T5283] veth1_vlan: entered promiscuous mode [ 156.050665][ T6881] loop1: detected capacity change from 0 to 32768 [ 156.240252][ T6881] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.461254][ T6881] XFS (loop1): Ending clean mount [ 156.606250][ T6881] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.938213][ T6919] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop1": -EINTR [ 157.772362][ T6933] loop2: detected capacity change from 0 to 512 [ 157.877901][ T6933] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.290: iget: bad i_size value: 38620345925642 [ 158.034321][ T6933] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.043033][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 158.043229][ T6933] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.290: couldn't read orphan inode 15 (err -117) [ 158.052791][ C1] EXT4-fs (loop2): initial error at time 1785903653: ext4_orphan_get:1399: inode 15 [ 158.079886][ C1] EXT4-fs (loop2): last error at time 1785903653: ext4_orphan_get:1399: inode 15 [ 158.102875][ T6933] loop2: lost filesystem error report for type 5 error -117 [ 158.130022][ T6933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.196423][ T6943] overlay: filesystem on ./file0 not supported as upperdir [ 158.470637][ T6933] EXT4-fs (loop2): shut down requested (0) [ 158.534057][ T13] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 158.610017][ T13] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 48 with error 28 [ 158.678088][ T13] EXT4-fs (loop2): This should not happen!! Data will be lost [ 158.678088][ T13] [ 158.717217][ T13] EXT4-fs (loop2): Total free blocks count 0 [ 158.746643][ T13] EXT4-fs (loop2): Free/Dirty block details [ 158.760536][ T13] EXT4-fs (loop2): free_blocks=0 [ 158.779949][ T13] EXT4-fs (loop2): dirty_blocks=52 [ 158.799423][ T13] EXT4-fs (loop2): Block reservation details [ 158.819062][ T13] EXT4-fs (loop2): i_reserved_data_blocks=52 [ 159.928774][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.302'. [ 160.224208][ T6972] netlink: 36 bytes leftover after parsing attributes in process `syz.5.301'. [ 161.344259][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.306'. [ 161.496432][ T6991] device-mapper: ioctl: name not supplied when creating device [ 162.246001][ T7002] svc: failed to register nfsdv3 RPC service (errno 111). [ 162.256610][ T7002] svc: failed to register nfsaclv3 RPC service (errno 111). [ 162.305190][ T186] Process accounting resumed [ 162.321071][ T7011] loop0: detected capacity change from 0 to 8 [ 162.414354][ T7011] SQUASHFS error: zlib decompression failed, data probably corrupt [ 162.458206][ T7011] SQUASHFS error: Failed to read block 0x9b: -5 [ 162.484821][ T7011] SQUASHFS error: Unable to read metadata cache entry [99] [ 162.502019][ T7011] SQUASHFS error: Unable to read inode 0x127 [ 163.102096][ T7022] loop6: detected capacity change from 0 to 2048 [ 163.105165][ T7024] loop3: detected capacity change from 0 to 512 [ 163.210478][ T7022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.222819][ T7024] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.321: iget: bad i_size value: 38620345925642 [ 163.345469][ T7024] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.350766][ T7024] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.321: couldn't read orphan inode 15 (err -117) [ 163.360009][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 163.360040][ C1] EXT4-fs (loop3): initial error at time 1785903659: ext4_orphan_get:1399: inode 15 [ 163.360093][ C1] EXT4-fs (loop3): last error at time 1785903659: ext4_orphan_get:1399: inode 15 [ 163.486554][ T7022] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 163.544901][ T7024] loop3: lost filesystem error report for type 5 error -117 [ 163.620165][ T7024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.686883][ T5949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.818846][ T7030] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm syz.3.321: bg 0: block 5: invalid block bitmap [ 163.909012][ T7030] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 20 with error 28 [ 164.017581][ T7030] EXT4-fs (loop3): This should not happen!! Data will be lost [ 164.017581][ T7030] [ 164.080487][ T7030] EXT4-fs (loop3): Total free blocks count 0 [ 164.124955][ T7030] EXT4-fs (loop3): Free/Dirty block details [ 164.159340][ T7030] EXT4-fs (loop3): free_blocks=0 [ 164.177051][ T7030] EXT4-fs (loop3): dirty_blocks=24 [ 164.191827][ T7030] EXT4-fs (loop3): Block reservation details [ 164.201999][ T7030] EXT4-fs (loop3): i_reserved_data_blocks=24 [ 164.248703][ T7024] EXT4-fs (loop3): shut down requested (0) [ 167.067383][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 167.273232][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 167.305174][ T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 167.344497][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.381538][ T29] usb 6-1: Product: syz [ 167.397747][ T29] usb 6-1: Manufacturer: syz [ 167.414292][ T29] usb 6-1: SerialNumber: syz [ 167.474039][ T29] usb 6-1: config 0 descriptor?? [ 167.515932][ T29] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 167.742789][ T7097] Bluetooth: MGMT ver 1.23 [ 168.247690][ T7107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.265749][ T7109] loop2: detected capacity change from 0 to 16 [ 168.325703][ T7109] erofs (device loop2): mounted with root inode @ nid 36. [ 169.153142][ T29] gspca_sonixj: i2c_w8 err -71 [ 169.234873][ T29] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 169.278376][ T29] usb 6-1: USB disconnect, device number 2 [ 169.576176][ T7130] loop1: detected capacity change from 0 to 4096 [ 170.585149][ T7155] netlink: 'syz.5.365': attribute type 1 has an invalid length. [ 170.864522][ T7155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.129059][ T7167] (NULL device *): [drm] The number of connectors must be between 1 and 31 [ 171.243446][ T7157] bond1: (slave veth3): Enslaving as an active interface with a down link [ 171.760426][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 171.841549][ T7190] loop1: detected capacity change from 0 to 262144 [ 173.683674][ T7204] loop3: detected capacity change from 0 to 32768 [ 173.709647][ T7204] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 173.717903][ T7204] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 173.780979][ T7204] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 173.792132][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 173.857794][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 174.011159][ T7191] loop5: detected capacity change from 0 to 32768 [ 174.065811][ T7191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.377 (7191) [ 174.217308][ T7191] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.267977][ T7191] BTRFS info (device loop5): using crc32c checksum algorithm [ 174.460740][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 602ms [ 174.491066][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 174.503982][ T7204] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 174.504410][ T7227] process 'syz.6.382' launched './file0' with NULL argv: empty string added [ 174.650005][ T7191] BTRFS info (device loop5): enabling ssd optimizations [ 174.703153][ T7191] BTRFS info (device loop5): turning on async discard [ 174.727749][ T7191] BTRFS info (device loop5): enabling free space tree [ 175.062256][ T5625] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.126306][ T7244] loop5: detected capacity change from 0 to 512 [ 176.201664][ T7244] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.387: iget: bad i_size value: 38620345925642 [ 176.343152][ T7244] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.346629][ T7244] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.387: couldn't read orphan inode 15 (err -117) [ 176.355887][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 176.355917][ C0] EXT4-fs (loop5): initial error at time 1785903672: ext4_orphan_get:1399: inode 15 [ 176.355969][ C0] EXT4-fs (loop5): last error at time 1785903672: ext4_orphan_get:1399: inode 15 [ 176.444182][ T7244] loop5: lost filesystem error report for type 5 error -117 [ 176.451188][ T7244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.780028][ T7244] EXT4-fs (loop5): shut down requested (0) [ 176.811211][ T58] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 176.892471][ T58] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 104 with error 28 [ 176.952565][ T58] EXT4-fs (loop5): This should not happen!! Data will be lost [ 176.952565][ T58] [ 176.998045][ T58] EXT4-fs (loop5): Total free blocks count 0 [ 177.036455][ T58] EXT4-fs (loop5): Free/Dirty block details [ 177.075976][ T58] EXT4-fs (loop5): free_blocks=0 [ 177.113038][ T58] EXT4-fs (loop5): dirty_blocks=108 [ 177.129427][ T58] EXT4-fs (loop5): Block reservation details [ 177.157020][ T58] EXT4-fs (loop5): i_reserved_data_blocks=108 [ 178.012275][ T7272] fuse: Bad value for 'fd' [ 180.429303][ T7290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.450436][ T7290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.817112][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.418'. [ 182.854782][ T7319] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 184.162334][ T7344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.423158][ T2197] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.575469][ T2197] usb 6-1: Using ep0 maxpacket: 32 [ 184.582968][ T2197] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.594998][ T2197] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.626457][ T2197] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 184.669851][ T2197] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 184.705068][ T2197] usb 6-1: config 1 interface 1 has no altsetting 0 [ 184.722406][ T2197] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 184.736360][ T2197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.755307][ T2197] usb 6-1: Product: syz [ 184.765227][ T2197] usb 6-1: Manufacturer: syz [ 184.776695][ T2197] usb 6-1: SerialNumber: syz [ 185.156169][ T2197] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 185.226449][ T7370] loop1: detected capacity change from 0 to 32768 [ 185.399722][ T186] libceph: connect (1)[c::]:6789 error -101 [ 185.416191][ T186] libceph: mon0 (1)[c::]:6789 connect error [ 185.440045][ T7373] ceph: No mds server is up or the cluster is laggy [ 185.700190][ T2197] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 185.762061][ T2197] usb 6-1: USB disconnect, device number 3 [ 185.895757][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.090979][ T7382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.438'. [ 186.850889][ T7399] netlink: 'syz.5.446': attribute type 12 has an invalid length. [ 186.896219][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 187.059327][ T7399] netlink: 'syz.5.446': attribute type 12 has an invalid length. [ 187.066472][ T7404] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.071945][ T193] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.104556][ T10] IPVS: starting estimator thread 0... [ 187.116102][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 187.137319][ T193] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.190791][ T193] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.215187][ T7408] IPVS: using max 22 ests per chain, 52800 per kthread [ 187.245799][ T193] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.301367][ T7425] loop5: detected capacity change from 0 to 512 [ 188.350792][ T7425] ext4: Unknown parameter 'fowner<00000000000000000000' [ 188.438428][ T7428] netlink: 'syz.1.455': attribute type 10 has an invalid length. [ 188.514091][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.558594][ T7428] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 188.793958][ T7429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.905694][ T7429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.959034][ T7429] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 189.000105][ T7438] loop0: detected capacity change from 0 to 16 [ 189.013990][ T7429] bond0 (unregistering): Released all slaves [ 189.044501][ T7438] erofs (device loop0): mounted with root inode @ nid 36. [ 189.741490][ T7453] loop6: detected capacity change from 0 to 512 [ 189.820727][ T7453] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.463: inode has both inline data and extents flags [ 189.851127][ T7453] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.852022][ T7453] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.463: couldn't read orphan inode 15 (err -117) [ 189.861292][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 189.861322][ C0] EXT4-fs (loop6): initial error at time 1785903685: ext4_orphan_get:1399: inode 15 [ 189.861373][ C0] EXT4-fs (loop6): last error at time 1785903685: ext4_orphan_get:1399: inode 15 [ 189.899788][ T7453] loop6: lost filesystem error report for type 5 error -117 [ 189.906927][ T7453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.151149][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 190.151175][ T31] audit: type=1326 audit(1785903685.992:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.6.463" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bf6f9e019 code=0x0 [ 190.419320][ T7465] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 190.613541][ T5949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.687003][ T7465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.830500][ T7468] bond0: (slave erspan0): making interface the new active one [ 190.916600][ T7468] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 190.983862][ T7470] bond0: entered promiscuous mode [ 191.033298][ T7470] erspan0: entered promiscuous mode [ 191.055443][ T7470] bond0: entered allmulticast mode [ 191.084438][ T7470] erspan0: entered allmulticast mode [ 191.159588][ T7485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.331407][ T7485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.607940][ T7489] xt_hashlimit: size too large, truncated to 1048576 [ 192.261629][ T2197] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 192.465694][ T2197] usb 2-1: Using ep0 maxpacket: 8 [ 192.510083][ T2197] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.556754][ T2197] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.584475][ T7501] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 192.604047][ T2197] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 192.667415][ T2197] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 192.759467][ T2197] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 192.853229][ T2197] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.858535][ T7501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.934113][ T2197] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.982723][ T2197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.292109][ T7503] bond2: (slave veth3): Enslaving as an active interface with a down link [ 193.372137][ T7510] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 193.375028][ T2197] usb 2-1: GET_CAPABILITIES returned 0 [ 193.417170][ T2197] usbtmc 2-1:16.0: can't read capabilities [ 193.576555][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.586968][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.662744][ T7514] gadgetfs: bound to dummy_udc driver [ 193.737917][ T5790] usb 2-1: USB disconnect, device number 3 [ 193.790090][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.804574][ T7520] overlayfs: failed to clone upperpath [ 193.900142][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.943410][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 193.976288][ T7514] gadgetfs: suspended from state 2 [ 194.328580][ T7532] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 194.353286][ T7532] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 194.418442][ T7535] loop5: detected capacity change from 0 to 256 [ 194.437779][ T7533] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 194.586806][ T31] audit: type=1800 audit(1785903690.422:64): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.488" name="file1" dev="loop5" ino=1048618 res=0 errno=0 [ 194.682833][ T31] audit: type=1326 audit(1785903690.522:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.3.489" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd7719e019 code=0x0 [ 195.810818][ T7562] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 197.287518][ T31] audit: type=1800 audit(1785903693.132:66): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.504" name="file1" dev="ramfs" ino=15829 res=0 errno=0 [ 197.316254][ T7598] batman_adv: batadv0: Adding interface: macvtap1 [ 197.360520][ T7598] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.496587][ T7598] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 197.652290][ T31] audit: type=1326 audit(1785903693.492:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.0.518" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4cb99e019 code=0x0 [ 197.777112][ T7603] batman_adv: batadv0: Removing interface: macvtap1 [ 198.428934][ T7627] netlink: 'syz.6.524': attribute type 1 has an invalid length. [ 198.645179][ T7627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.738650][ T7630] bond1: (slave veth3): Enslaving as an active interface with a down link [ 198.747878][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 198.831979][ T7633] gretap0: entered promiscuous mode [ 198.880161][ T7633] macvtap1: entered promiscuous mode [ 198.916405][ T7633] macvtap1: entered allmulticast mode [ 198.935620][ T7633] gretap0: entered allmulticast mode [ 199.113580][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 199.123229][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 199.153887][ T7642] ceph: No mds server is up or the cluster is laggy [ 200.267947][ T7666] smpboot: CPU 1 is now offline [ 200.307036][ T7666] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 200.688784][ T7673] overlay: filesystem on ./file0/file1 not supported as upperdir [ 200.797399][ T7677] loop2: detected capacity change from 0 to 128 [ 200.900981][ T7677] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.064863][ T7677] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 280.876345][ T9341] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 280.888462][ T9341] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 280.896895][ T9341] CPU: 0 UID: 0 PID: 9341 Comm: syz.1.1043 Tainted: G S L syzkaller #0 PREEMPT(full) [ 280.907786][ T9341] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 280.913943][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 280.924013][ T9341] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 280.929527][ T9341] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 280.949171][ T9341] RSP: 0018:ffffc900033ef9b0 EFLAGS: 00010256 [ 280.955264][ T9341] RAX: dffffc0000000000 RBX: ffff888026f1cc00 RCX: ffffc900064fa000 [ 280.963253][ T9341] RDX: 0000000000000000 RSI: ffffffff87cf0ca7 RDI: ffff888026f1d290 [ 280.971240][ T9341] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 280.979224][ T9341] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff90259380 [ 280.987210][ T9341] R13: 0000000000000000 R14: ffff88802b1724f1 R15: ffff88802b172008 [ 280.995210][ T9341] FS: 00007fdc5f9cb6c0(0000) GS:ffff888123dd9000(0000) knlGS:0000000000000000 [ 281.004166][ T9341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.010767][ T9341] CR2: 00007fdc5f9a9ff8 CR3: 000000007ebea000 CR4: 0000000000350ef0 [ 281.018762][ T9341] Call Trace: [ 281.022046][ T9341] [ 281.024983][ T9341] gadget_bind_driver+0x4ac/0xbf0 [ 281.030044][ T9341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.035714][ T9341] ? __pfx_gadget_bind_driver+0x10/0x10 [ 281.041295][ T9341] really_probe+0x241/0xa60 [ 281.045848][ T9341] __driver_probe_device+0x20e/0x450 [ 281.051177][ T9341] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.057101][ T9341] driver_probe_device+0x4a/0x140 [ 281.062167][ T9341] __driver_attach+0x21f/0x5b0 [ 281.066969][ T9341] ? __pfx___driver_attach+0x10/0x10 [ 281.072291][ T9341] bus_for_each_dev+0x13e/0x1d0 [ 281.077176][ T9341] ? __pfx_bus_for_each_dev+0x10/0x10 [ 281.082584][ T9341] ? bus_add_driver+0x2b5/0x5b0 [ 281.087470][ T9341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.093145][ T9341] bus_add_driver+0x305/0x5b0 [ 281.097905][ T9341] driver_register+0x1e2/0x360 [ 281.102715][ T9341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.108384][ T9341] usb_gadget_register_driver_owner+0x132/0x210 [ 281.114658][ T9341] dev_config+0xdce/0x1610 [ 281.119122][ T9341] ? __pfx_dev_config+0x10/0x10 [ 281.124021][ T9341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.129689][ T9341] vfs_write+0x2aa/0x1050 [ 281.134051][ T9341] ? __pfx_dev_config+0x10/0x10 [ 281.138950][ T9341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.144624][ T9341] ? __pfx_vfs_write+0x10/0x10 [ 281.149430][ T9341] ? __fget_files+0x215/0x3d0 [ 281.154156][ T9341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.159822][ T9341] ? __fget_files+0x21f/0x3d0 [ 281.164551][ T9341] ksys_write+0x12a/0x250 [ 281.168924][ T9341] ? __pfx_ksys_write+0x10/0x10 [ 281.173813][ T9341] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.179486][ T9341] do_syscall_64+0x115/0x870 [ 281.184127][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.190040][ T9341] RIP: 0033:0x7fdc5eb9e019 [ 281.194471][ T9341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.214110][ T9341] RSP: 002b:00007fdc5f9cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.222556][ T9341] RAX: ffffffffffffffda RBX: 00007fdc5ee25fa0 RCX: 00007fdc5eb9e019 [ 281.230550][ T9341] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 281.238542][ T9341] RBP: 00007fdc5ec3500c R08: 0000000000000000 R09: 0000000000000000 [ 281.246535][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.254527][ T9341] R13: 00007fdc5ee26038 R14: 00007fdc5ee25fa0 R15: 00007ffc6b21cd78 [ 281.262537][ T9341] [ 281.265575][ T9341] Modules linked in: [ 281.270723][ T9341] ---[ end trace 0000000000000000 ]--- [ 281.304417][ T9341] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 281.311815][ T9341] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 281.332359][ T9341] RSP: 0018:ffffc900033ef9b0 EFLAGS: 00010256 [ 281.338808][ T9341] RAX: dffffc0000000000 RBX: ffff888026f1cc00 RCX: ffffc900064fa000 [ 281.347292][ T9341] RDX: 0000000000000000 RSI: ffffffff87cf0ca7 RDI: ffff888026f1d290 [ 281.356099][ T9341] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 281.365731][ T9341] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff90259380 [ 281.377330][ T9341] R13: 0000000000000000 R14: ffff88802b1724f1 R15: ffff88802b172008 [ 281.386273][ T9341] FS: 00007fdc5f9cb6c0(0000) GS:ffff888123ed9000(0000) knlGS:0000000000000000 [ 281.396520][ T9341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.403512][ T9341] CR2: 0000001b34722ff8 CR3: 000000007ebea000 CR4: 0000000000350ef0 [ 281.411752][ T9341] Kernel panic - not syncing: Fatal exception [ 281.418057][ T9341] Kernel Offset: disabled [ 281.422379][ T9341] Rebooting in 86400 seconds..