last executing test programs: 8.291086105s ago: executing program 2 (id=435): fsopen(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, &(0x7f0000000240)=0x9700) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 7.526084132s ago: executing program 2 (id=437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005500)={0x2020}, 0x2020) 7.217405967s ago: executing program 1 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)="05", 0x1, 0x4040094, &(0x7f00000000c0)={0x11, 0x10, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.166714389s ago: executing program 2 (id=440): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000740)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658cfecb61406ae7298f", 0xc0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.71428396s ago: executing program 4 (id=443): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) 6.591962346s ago: executing program 3 (id=444): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000c53000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9, 0x0, 0x0, 0x1, 0x24, 0x10, 0x29, 0x6f}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) munlockall() add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb8458", 0xb0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={'sha512\x00'}}) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.256012192s ago: executing program 4 (id=445): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0x6, 0xffffffff, 0x5, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1389, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x3}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000140)=0x8) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000000)) 6.145465648s ago: executing program 4 (id=446): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) ioctl$int_in(r0, 0xf0e510bd15682dc0, &(0x7f0000000000)=0x5) 6.010201414s ago: executing program 4 (id=447): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c7573726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5eab7e9507cc6949f5ddd3e28e8b57ddee3b3e5d8d0f008c19753fb6357ce5402421cdf43ebd58fe035a2c7265737569643d", @ANYBLOB="3f5d2764c38bef6393fdea22d64ccc916861d6ca9f57fef099265d4fa0e1f3be88c7761afdb593752a3fa7d73bd1eaeafabb00434ccc4829120667c4205f6693cfe737d77bc3a0df58a2e6e27e1c8bf26c5b6d1b224a0c1d7e34fdaf1ff2cedcfed6930d9bab54c86475c09256563dd3a448d9b13e8889e241a272712c1df9a83875729c65df20795110830a8fbb7d36e200b4fd1f5100e516e0e8d2b809c7f3bb73cea0b470e2677a7ca57028fbe933ee91e7", @ANYRESDEC], 0xfd, 0x555e, &(0x7f0000006800)="$eJzs3M+LG+UbAPBndrvtftt+6yIevHWgCLvQhGb7A71VbfEHtpSqB0+aTdKQNsksmzRde+rBo3jwPxEFTx79Gzx49iYeKt6ESuadlFYrFDa7se3nA9Nn3nfePPO8oSw8M5AAXlhr+R/3szgR/4uI5Yg4HlGeZ9VRupjCqxFxMiKWHjmyav7hxOGIOBoRJ6bJU86suvT16cmp87+9//sPPx05dOyb739e3K6BRXstIgbb6fzOIMWim+LNar456ZVxcG5SxXShv5quD4o0f6ezVWa405yta5bxbDetL7Zvj6bxRr/ZmsZu70Y5vz1MNxxNurM85QduNnfKcbuzVcbeqChj92667+7d9Lft7mic8rSrfJ+X6WM8nsU039ntpP1s3ypjaziu5lPeot3ZncZJFavbRavot8s6tvbwRf/HfdAb3t7NJ52dUa8Y5ufrjdfrjQu1xk7R7ow752rNQfvCuXy9258uq407zcHFblF0+516qxhs5OvdVqvWaOTrlzpbveYwbzTqZ+tnauc3qrPT+TtXP8777Xx9Gt/qDW+Pe/1RfqPYydMnNvLN+tk3NvJTjfzDK9fya9cvX75y7aNPL31y9c0r771dLTpc1VprZPfKsvL1zTObm7XGmdpmY+P53//Dsr6oip7j/mFPskUXAPDs0f8Di/DP/n/1qfv/wa1q/MT+f+d6xP73/6H/n4tnqv+dlfWi9v/7sH/YE/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAL65eVb98tT9bS+Fg1//9q6uVqnEXEUkQ8eILlOPxYzuUqz8q/rF/5Ww0/ZlFmmN7jSHUcjYiL1fHnS/v9LQAAAMDz67t7J79K3Xr6Z23RBXGQ0kObpeOfzSnfakSsrP265zz3H0T1sClemUNZpen/70OxO6ds5QOs1TklS4/cDs0r21NZfiysPhKyFJYOtBwAAOBAPN4JPLELOXKQ9QAAALBfvlx0ASxGFrNXmbN3wbNWv3oh+CB7dAQAAAA8g7JFFwAAAADsu7L/9/t/AAAA8HxLv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bc7d3OzRBDGAfzZ5V3f169IjAdvtuINyrAEjx4NBdgEBXigBhugBrxZgmENOyNf4QBhdjea3y9Zhp3AnxkCh2cmGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+vSzWTXx9cO3e3O27X3KzAYAAAC4ZNOs5t2Tabp/mftf5663+b6KiDoi2ve546h2n8Szk8xJzmkOL/t+XOs3Z2P4EdEl7D7jMV8vIuJjvn6/6fMbAAAAgP/berGcpWo9PUzHHhBDSos29atPhfKqiGimvwql1bu8d4XCut/3Q3wplNYtYD0VCktLbg+l0q7S/d33q3ZPR02Vmvri2/aDLDZ3AABgQJOTZtgqBAAAgCF9HnsAjKOKv1uZ+63Ax9Tk7b3nJ3cAAADAP6gaewAAAABA77r6/+bz/y644vy/1vl/AAAAMJCzHf90/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB92jSr+XqxnN2bs20P6mhvVmY2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCH/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yWFYRiIAajqtvnsgu9/2CDwHULgPbCRLWYxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBt91sno9Uvy7c+1HqPh32om2Vo17K0ajg40nB2YT28DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANzv38xpHFQcA/LszO1vTKsYoOUREwYNebLqtrb2JByV48E8QQrqt0a0/2hxsKWIu3iTnXkSPIoISb/0fem6hl3rrIYcK4nFldmaSaZvSTUpnluTzgTfvO8vw3vfNQsh33+wCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBl64OdOM0Ps0U8Kt26f20lP7/9UJ+7sXFnIW953Gk68en3Wv2kM99eIgAAABweaVXfR8TdbHMp75PZcf2fVdckEfHzC0Vc1fMP1/1VX9X+efvrz3uvbE80W8yTD3p+dTg48Wgq3We3yun24hOv6I7vfP4+jG9iEsnH6y9vZeP72fnx5s0Pe+PwSBPZAgD7cbzqy6D6fyjv+20mBsCBM3pMkdmtFd5V/Z/ONpgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEu21uNYFXciYqG7E+du37+2slt/Y+POQtXOXL++Ed/vjJkPkUXE+dXh4ESjq5l6XywPh4NLl69cfdpgZm8Dvh4RTz/p/oL3q1Q/neDiiBYy3E/w3zOeotv2AvcXJOWbPS35tB6kMcHFLf01AgDgwMrKltf1d7PNpfy1zlzE6JcH6/+3anFMWP/f++zMrfpc9fq/39gKp9/i2sWvFy9fufrO6sXlC4MLgy/fPdl/r3/q7OnTZxfHn5Us+sQEAACAPRuNRqPtk17Z8ro+Lev/ZO7R/f+jtTgmrP+/+an/XX3iVP2/q51Nv7YzAQAAONxeeuPffzq7vN7p9eLb5bW1S/3iuH1+sji2kOqeHSlbff8/nWs7KwAAAKAJW+udB/b/z9XimHD///lfX/29PmYaETPl/v/xla+G55pbzlRr4ivHba8RAACAds2Urb7/n42f/0+2H3lIIuLtN4u4+BnAYxHx+Po/K+v/9KMffqvPVX/+/1STi5wm5Q/0JfPF/Rj38xHd+bYTAwAA4CB7rmx5sf93trn0+R9HP+l5/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgaf8HAAD//43tOCk=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r4, &(0x7f00000000c0), 0x0) write(r4, &(0x7f0000000700)='bind', 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x1, 0x6, 0x3, 0x5}, 0x5, 0x1ff, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x5, 0x4, 0x4}) 5.422111272s ago: executing program 3 (id=448): fsopen(&(0x7f00000014c0)='proc\x00', 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, &(0x7f0000000240)=0x9700) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 5.183113343s ago: executing program 3 (id=449): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000300)=@mmap={0x1, 0x2, 0x4, 0x100, 0x81, {}, {0x5, 0x8, 0x8, 0x5, 0x5, 0x8, "0adb3fb8"}, 0x2, 0x1, {}, 0x3ff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffffb}]}) sched_setattr(0x0, &(0x7f0000000280)={0x5c, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) unshare(0xde060b00) ptrace(0x10, 0x1) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2048}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {}], 0x4, 0x1) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r6, 0x20}, 0x38) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) 4.535693484s ago: executing program 4 (id=450): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1acf, &(0x7f0000002d00)={0x0, 0xfec0, 0x1000, 0x2, 0x234}, &(0x7f0000002d80), &(0x7f0000002dc0), &(0x7f0000002e00)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000003480)={0xffffffff, 0x0, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYRES32=0x41424344], 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r3, 0x0, 0x0) 3.562027121s ago: executing program 1 (id=451): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005500)={0x2020}, 0x2020) 3.457904465s ago: executing program 2 (id=452): pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 3.457640585s ago: executing program 0 (id=453): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) listen(r0, 0x1) 3.321874012s ago: executing program 2 (id=454): socket(0x1e, 0x4, 0xfffffffd) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xc000}], 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) listen(r4, 0x1) recvmmsg(r4, &(0x7f0000000100)=[{{&(0x7f0000000240)=@alg, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffd61}, 0x1000}], 0x1, 0x140, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00003ab000/0x4000)=nil, 0x4000, 0x6) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, 0x0, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x401, 0xe50, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x6}}}, 0x0) syz_io_uring_setup(0x34b9, &(0x7f00000001c0)={0x0, 0x8329, 0x10, 0xffffffff, 0x2c9, 0x0, r6}, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000180)) 3.321240322s ago: executing program 0 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x5}]}}]}, 0xac}}, 0x0) 3.291178034s ago: executing program 1 (id=456): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0x6, 0xffffffff, 0x5, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1389, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x3}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000140)=0x8) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000000)) 3.248604345s ago: executing program 3 (id=457): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) 3.14847619s ago: executing program 0 (id=458): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000c53000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9, &(0x7f0000000340), 0x0, 0x1, 0x24, 0x10, 0x29, 0x6f}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) munlockall() add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb8458", 0xb0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={'sha512\x00'}}) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.974405218s ago: executing program 3 (id=459): fsopen(&(0x7f00000014c0)='proc\x00', 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, &(0x7f0000000240)=0x9700) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 2.925983811s ago: executing program 1 (id=460): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c7573726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5eab7e9507cc6949f5ddd3e28e8b57ddee3b3e5d8d0f008c19753fb6357ce5402421cdf43ebd58fe035a2c7265737569643d", @ANYBLOB="3f5d2764c38bef6393fdea22d64ccc916861d6ca9f57fef099265d4fa0e1f3be88c7761afdb593752a3fa7d73bd1eaeafabb00434ccc4829120667c4205f6693cfe737d77bc3a0df58a2e6e27e1c8bf26c5b6d1b224a0c1d7e34fdaf1ff2cedcfed6930d9bab54c86475c09256563dd3a448d9b13e8889e241a272712c1df9a83875729c65df20795110830a8fbb7d36e200b4fd1f5100e516e0e8d2b809c7f3bb73cea0b470e2677a7ca57028fbe933ee91e7", @ANYRESDEC], 0xfd, 0x555e, &(0x7f0000006800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r4, &(0x7f00000000c0), 0x0) write(r4, &(0x7f0000000700)='bind', 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x1, 0x6, 0x3, 0x5}, 0x5, 0x1ff, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x5, 0x4, 0x4}) 2.588901716s ago: executing program 3 (id=461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="05", 0x1, 0x4040094, &(0x7f00000000c0)={0x11, 0x10, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.343553658s ago: executing program 4 (id=462): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000740)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658cfecb61406ae7298f", 0xc0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.481174569s ago: executing program 0 (id=463): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) ioctl$int_in(r0, 0xf0e510bd15682dc0, &(0x7f0000000000)=0x5) 1.131348446s ago: executing program 0 (id=464): pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 670.756608ms ago: executing program 1 (id=465): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) listen(r0, 0x1) 585.282682ms ago: executing program 0 (id=466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0xfffffffd, 0x0, 0x3, 0x5, 0xe, 0x8, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 258.003097ms ago: executing program 2 (id=467): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000300)=@mmap={0x1, 0x2, 0x4, 0x100, 0x81, {}, {0x5, 0x8, 0x8, 0x5, 0x5, 0x8, "0adb3fb8"}, 0x2, 0x1, {}, 0x3ff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffffb}]}) sched_setattr(0x0, &(0x7f0000000280)={0x5c, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) unshare(0xde060b00) ptrace(0x10, 0x1) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2048}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {}], 0x4, 0x1) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r6, 0x20}, 0x38) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) 0s ago: executing program 1 (id=468): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x5}]}}]}, 0xac}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. syzkaller login: [ 68.845561][ T4260] cgroup: Unknown subsys name 'net' [ 68.943437][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.294005][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.030825][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.037495][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.790944][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.814612][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.824315][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.825288][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.832693][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.841333][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.846522][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.855950][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.860756][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.873564][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.874229][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.883201][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.888474][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.895539][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.909700][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.911937][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.917459][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.924480][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.938353][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.938605][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.946830][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.958409][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.966387][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.973660][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.980744][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.987842][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.998053][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.009371][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.016568][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.045802][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.353011][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 72.423301][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 72.519146][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 72.532929][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 72.579338][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.586460][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.595013][ T4280] device bridge_slave_0 entered promiscuous mode [ 72.626945][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.634165][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.642320][ T4280] device bridge_slave_1 entered promiscuous mode [ 72.675828][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 72.694093][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.701932][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.710256][ T4274] device bridge_slave_0 entered promiscuous mode [ 72.723576][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.730821][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.741289][ T4274] device bridge_slave_1 entered promiscuous mode [ 72.760825][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.776961][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.844544][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.854666][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.862529][ T4273] device bridge_slave_0 entered promiscuous mode [ 72.872970][ T4280] team0: Port device team_slave_0 added [ 72.879127][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.886226][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.894608][ T4273] device bridge_slave_1 entered promiscuous mode [ 72.904573][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.911892][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.920308][ T4282] device bridge_slave_0 entered promiscuous mode [ 72.930904][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.941529][ T4280] team0: Port device team_slave_1 added [ 72.959451][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.966539][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.974981][ T4282] device bridge_slave_1 entered promiscuous mode [ 72.989896][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.035063][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.046832][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.062986][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.070795][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.097138][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.115308][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.127673][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.151354][ T4274] team0: Port device team_slave_0 added [ 73.157697][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.164663][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.190936][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.225165][ T4274] team0: Port device team_slave_1 added [ 73.235260][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.245571][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.253505][ T4281] device bridge_slave_0 entered promiscuous mode [ 73.264039][ T4282] team0: Port device team_slave_0 added [ 73.272122][ T4273] team0: Port device team_slave_0 added [ 73.280182][ T4273] team0: Port device team_slave_1 added [ 73.306199][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.313577][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.322067][ T4281] device bridge_slave_1 entered promiscuous mode [ 73.330594][ T4282] team0: Port device team_slave_1 added [ 73.362082][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.369122][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.395309][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.413447][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.423303][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.452380][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.472026][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.479024][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.505073][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.538862][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.548408][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.555375][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.581660][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.595907][ T4280] device hsr_slave_0 entered promiscuous mode [ 73.603141][ T4280] device hsr_slave_1 entered promiscuous mode [ 73.610678][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.617717][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.643731][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.656281][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.663379][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.692252][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.705407][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.772756][ T4281] team0: Port device team_slave_0 added [ 73.780454][ T4281] team0: Port device team_slave_1 added [ 73.790105][ T4274] device hsr_slave_0 entered promiscuous mode [ 73.796704][ T4274] device hsr_slave_1 entered promiscuous mode [ 73.803589][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.811595][ T4274] Cannot create hsr debugfs directory [ 73.850406][ T4282] device hsr_slave_0 entered promiscuous mode [ 73.857002][ T4282] device hsr_slave_1 entered promiscuous mode [ 73.863996][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.872438][ T4282] Cannot create hsr debugfs directory [ 73.895039][ T4273] device hsr_slave_0 entered promiscuous mode [ 73.901947][ T4273] device hsr_slave_1 entered promiscuous mode [ 73.909169][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.916722][ T4273] Cannot create hsr debugfs directory [ 73.968535][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.975496][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.001843][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.013752][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.020888][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.047112][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.067885][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 74.067900][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 74.074129][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 74.080165][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 74.086288][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 74.200689][ T4281] device hsr_slave_0 entered promiscuous mode [ 74.207576][ T4281] device hsr_slave_1 entered promiscuous mode [ 74.214094][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.222093][ T4281] Cannot create hsr debugfs directory [ 74.400340][ T4280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.412589][ T4280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.426090][ T4280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.435514][ T4280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.473997][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.499986][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.509160][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.521690][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.544017][ T4282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.578593][ T4282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.588134][ T4282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.605770][ T4282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.661002][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.670040][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.679588][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.690750][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.770922][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.783469][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.794701][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.804483][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.841385][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.865073][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.892986][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.903143][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.911759][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.920324][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.934256][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.943551][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.968535][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.977576][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.987081][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.994338][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.003605][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.014386][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.023492][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.032190][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.039320][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.050456][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.059293][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.068626][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.075736][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.085682][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.120456][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.131699][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.140536][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.150823][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.159501][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.168090][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.175176][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.182913][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.192256][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.203314][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.220941][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.230415][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.238439][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.246441][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.255830][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.293524][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.308105][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.315138][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.325105][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.334357][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.346160][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.354832][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.363563][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.372043][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.380177][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.388084][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.396372][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.404773][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.413599][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.422507][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.431258][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.439891][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.446968][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.454807][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.462826][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.475357][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.487234][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.496029][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.518334][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.526842][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.536512][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.545112][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.555111][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.564038][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.572952][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.580267][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.588497][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.597502][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.613197][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.625851][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.639993][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.651853][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.659043][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.695158][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.712191][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.738862][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.751003][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.768038][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.788128][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.802719][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.818021][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.837943][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.854867][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.864017][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.873686][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.880835][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.893026][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.909831][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.924229][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.932367][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.940918][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.988355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.011849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.027584][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.034706][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.057635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.077497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.092743][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.099967][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.128446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.147628][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 76.148309][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 76.153658][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 76.159962][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 76.172323][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 76.187841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.208135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.222928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.276678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.286374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.300683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.311480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.322976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.331401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.340179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.350952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.362698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.390633][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.406073][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.422235][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.441954][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.450689][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.459500][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.466952][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.475003][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.483577][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.492760][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.515627][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.524086][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.532944][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.546373][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.579002][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.606667][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.627312][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.677540][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.685942][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.706255][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.718669][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.732404][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.780419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.796081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.832890][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.867567][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.892070][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.908769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.916976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.941118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.972086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.992851][ T4280] device veth0_vlan entered promiscuous mode [ 77.014552][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.039073][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.086283][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.101919][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.130593][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.157906][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.166368][ T4280] device veth1_vlan entered promiscuous mode [ 77.176464][ T4273] device veth0_vlan entered promiscuous mode [ 77.212556][ T4273] device veth1_vlan entered promiscuous mode [ 77.244618][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.265683][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.302597][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.311605][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.336638][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.382677][ T4280] device veth0_macvtap entered promiscuous mode [ 77.410864][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.422667][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.442634][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.453217][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.465737][ T4280] device veth1_macvtap entered promiscuous mode [ 77.483571][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.504523][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.519538][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.535754][ T4273] device veth0_macvtap entered promiscuous mode [ 77.548673][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.569461][ T4273] device veth1_macvtap entered promiscuous mode [ 77.584020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.594058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.603231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.612597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.639125][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.648006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.661783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.678733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.687845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.697503][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.710112][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.721521][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.750494][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.764544][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.779930][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.789754][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.798958][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.811840][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.821457][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.846247][ T4282] device veth0_vlan entered promiscuous mode [ 77.856729][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.867207][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.874841][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.885963][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.896731][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.905747][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.916274][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.926445][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.935550][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.944458][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.956194][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.968323][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.980210][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.990379][ T4282] device veth1_vlan entered promiscuous mode [ 78.003719][ T4281] device veth0_vlan entered promiscuous mode [ 78.011088][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.020300][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.030357][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.038820][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.047560][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.073222][ T4280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.082760][ T4280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.091728][ T4280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.101020][ T4280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.122729][ T4281] device veth1_vlan entered promiscuous mode [ 78.162577][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.171034][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.184416][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.192949][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.201521][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.209826][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.221033][ T4274] device veth0_vlan entered promiscuous mode [ 78.227505][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 78.228118][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 78.233532][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 78.239566][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 78.239596][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 78.301721][ T4282] device veth0_macvtap entered promiscuous mode [ 78.310836][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.320752][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.329961][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.341144][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.350472][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.359183][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.370480][ T4274] device veth1_vlan entered promiscuous mode [ 78.394067][ T4281] device veth0_macvtap entered promiscuous mode [ 78.402284][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.411265][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.434098][ T4282] device veth1_macvtap entered promiscuous mode [ 78.456771][ T4281] device veth1_macvtap entered promiscuous mode [ 78.472692][ T4274] device veth0_macvtap entered promiscuous mode [ 78.495626][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.495710][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.504473][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.524640][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.534723][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.545925][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.557474][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.569133][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.579438][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.588803][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.596540][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.605956][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.615008][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.627808][ T4274] device veth1_macvtap entered promiscuous mode [ 78.639909][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.651225][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.661238][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.677026][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.689423][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.702857][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.715242][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.725137][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.735781][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.746669][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.757709][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.769214][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.788137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.796068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.812054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.821582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.830472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.843894][ T4282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.853810][ T4282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.862866][ T4282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.872619][ T4282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.899706][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.914319][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.924570][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.935139][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.945027][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.955981][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.968411][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.979956][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.988792][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.998030][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.006744][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.031926][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.042659][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.052764][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.065761][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.075772][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.086531][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.097927][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.109532][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.119587][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.130279][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.141978][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.156814][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.172677][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.191594][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.199540][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.208105][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.216332][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.222202][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.232462][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.245895][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.261042][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.271212][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.281733][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.291821][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.304071][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.315196][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.325778][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.337622][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.362360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.374564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.388837][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.403540][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.412784][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.424910][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.456587][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.495745][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.525316][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.629126][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.636988][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.689691][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.718523][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.730153][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.747766][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.762374][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.786150][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.796632][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.806063][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.823413][ T4365] input: syz1 as /devices/virtual/input/input5 [ 79.836993][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.870565][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.889100][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.897983][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.923111][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.941557][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.955288][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.995075][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.171365][ T4262] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.221113][ T4377] process 'syz.3.4' launched '/dev/fd/6' with NULL argv: empty string added [ 80.248119][ T4372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 80.307918][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 80.314020][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 80.321105][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 80.327473][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 80.333536][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 80.357218][ T4262] usb 2-1: Using ep0 maxpacket: 16 [ 80.377499][ T4262] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 80.432414][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.507199][ T4262] usb 2-1: Product: syz [ 80.538652][ T4262] usb 2-1: Manufacturer: syz [ 80.558384][ T4262] usb 2-1: SerialNumber: syz [ 80.605337][ T4262] usb 2-1: config 0 descriptor?? [ 81.046687][ T4262] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 81.121974][ T4262] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 81.134741][ T4262] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 81.155382][ T4262] usb 2-1: media controller created [ 81.214708][ T4262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.225569][ T4377] nvme nvme0: failed to connect socket: -111 [ 81.248615][ T4365] dtv5100: wlen = 0, aborting. [ 81.344992][ T4365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.457295][ T4262] zl10353_read_register: readreg error (reg=127, ret==0) [ 81.466807][ T4262] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 81.494589][ T4262] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 81.551920][ T4262] usb 2-1: USB disconnect, device number 2 [ 81.600587][ T4262] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 81.769710][ T4397] device syzkaller0 entered promiscuous mode [ 81.813170][ T4399] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.961408][ T4401] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4401] [ 82.289224][ T4404] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 82.377763][ T4406] Zero length message leads to an empty skb [ 82.921906][ T4414] netlink: 'syz.3.14': attribute type 32 has an invalid length. [ 84.138230][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.146190][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.278743][ T4438] binder: 4437:4438 ioctl c0306201 0 returned -14 [ 84.681874][ T4464] loop5: detected capacity change from 0 to 7 [ 84.706958][ T4367] Dev loop5: unable to read RDB block 7 [ 84.715636][ T4367] loop5: unable to read partition table [ 84.759113][ T4367] loop5: partition table beyond EOD, truncated [ 84.791347][ T4464] Dev loop5: unable to read RDB block 7 [ 84.812656][ T4464] loop5: unable to read partition table [ 84.827327][ T4464] loop5: partition table beyond EOD, truncated [ 84.863972][ T4464] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.167929][ T4473] device syzkaller0 entered promiscuous mode [ 85.704403][ T4479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.732196][ T4479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.397853][ T128] cfg80211: failed to load regulatory.db [ 86.570832][ T4501] device syzkaller0 entered promiscuous mode [ 86.650870][ T4507] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4507] [ 87.002534][ T4486] loop1: detected capacity change from 0 to 40427 [ 87.073220][ T4486] F2FS-fs (loop1): invalid crc value [ 87.136279][ T4486] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 87.282372][ T4516] loop5: detected capacity change from 0 to 7 [ 87.319143][ T4357] Dev loop5: unable to read RDB block 7 [ 87.345126][ T4357] loop5: unable to read partition table [ 87.396137][ T4486] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 87.403093][ T4357] loop5: partition table beyond EOD, truncated [ 87.443923][ T4486] F2FS-fs (loop1): Start checkpoint disabled! [ 87.473503][ T4516] Dev loop5: unable to read RDB block 7 [ 87.487412][ T4516] loop5: unable to read partition table [ 87.493959][ T4516] loop5: partition table beyond EOD, truncated [ 87.537221][ T4516] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 87.585851][ T4486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 87.851210][ T4518] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 87.858662][ T4518] CacheFiles: File cache on CacheFiles registered [ 87.968744][ T4484] CacheFiles: File cache on CacheFiles unregistering [ 87.975557][ T4484] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 87.986813][ T47] kworker/u4:3: attempt to access beyond end of device [ 87.986813][ T47] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 90.970514][ T4554] input: syz1 as /devices/virtual/input/input6 [ 91.197100][ T4558] loop5: detected capacity change from 0 to 7 [ 91.230090][ T4367] Dev loop5: unable to read RDB block 7 [ 91.235770][ T4367] loop5: unable to read partition table [ 91.247315][ T4367] loop5: partition table beyond EOD, truncated [ 91.281321][ T4558] Dev loop5: unable to read RDB block 7 [ 91.287202][ T4317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.301230][ T4558] loop5: unable to read partition table [ 91.328604][ T4558] loop5: partition table beyond EOD, truncated [ 91.371653][ T4558] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.477223][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 91.496082][ T4317] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 91.517361][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.533241][ T4317] usb 1-1: Product: syz [ 91.543452][ T4317] usb 1-1: Manufacturer: syz [ 91.560481][ T4317] usb 1-1: SerialNumber: syz [ 91.687063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.707062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.717064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.727060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.737063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 91.747058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 91.758267][ T4317] usb 1-1: config 0 descriptor?? [ 91.777084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 91.787057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 91.797062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 91.807058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 92.105388][ T4560] loop3: detected capacity change from 0 to 40427 [ 92.168684][ T4560] F2FS-fs (loop3): invalid crc value [ 92.173177][ T4317] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 92.203482][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.236349][ T4317] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 92.254860][ T4567] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4567] [ 92.276121][ T4560] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 92.332194][ T4317] usb 1-1: media controller created [ 92.377772][ T4560] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 92.384712][ T4554] dtv5100: wlen = 0, aborting. [ 92.447792][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.452799][ T4560] F2FS-fs (loop3): Start checkpoint disabled! [ 92.519649][ T4317] zl10353_read_register: readreg error (reg=127, ret==0) [ 92.589100][ T4560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 92.599006][ T4317] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 92.770285][ T4317] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 92.791511][ T4574] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 92.798433][ T4574] CacheFiles: File cache on CacheFiles registered [ 92.841702][ T4317] usb 1-1: USB disconnect, device number 2 [ 92.890601][ T4317] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 92.906597][ T4559] CacheFiles: File cache on CacheFiles unregistering [ 92.913411][ T4559] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 92.920534][ T4342] kworker/u4:8: attempt to access beyond end of device [ 92.920534][ T4342] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 93.795355][ T4590] device syzkaller0 entered promiscuous mode [ 94.247444][ T4603] loop5: detected capacity change from 0 to 7 [ 94.264740][ T4367] Dev loop5: unable to read RDB block 7 [ 94.270869][ T4367] loop5: unable to read partition table [ 94.281493][ T4367] loop5: partition table beyond EOD, truncated [ 94.505706][ T4603] Dev loop5: unable to read RDB block 7 [ 94.537940][ T4603] loop5: unable to read partition table [ 94.571757][ T4603] loop5: partition table beyond EOD, truncated [ 94.599887][ T4603] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.473879][ T4607] loop0: detected capacity change from 0 to 40427 [ 95.544629][ T4607] F2FS-fs (loop0): invalid crc value [ 95.633772][ T4607] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 95.924701][ T4607] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 95.943228][ T4607] F2FS-fs (loop0): Start checkpoint disabled! [ 95.996412][ T4607] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 96.235851][ T4639] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 96.242935][ T4639] CacheFiles: File cache on CacheFiles registered [ 96.351499][ T4606] CacheFiles: File cache on CacheFiles unregistering [ 96.358767][ T4606] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 96.365923][ T47] kworker/u4:3: attempt to access beyond end of device [ 96.365923][ T47] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 97.029435][ T4651] loop5: detected capacity change from 0 to 7 [ 97.041913][ T4651] Dev loop5: unable to read RDB block 7 [ 97.064209][ T4651] loop5: unable to read partition table [ 97.077283][ T4651] loop5: partition table beyond EOD, truncated [ 97.114171][ T4651] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 97.184781][ T4652] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4652] [ 98.244414][ T4671] device syzkaller0 entered promiscuous mode [ 98.646793][ T4674] device syzkaller0 entered promiscuous mode [ 99.537841][ T4684] loop5: detected capacity change from 0 to 7 [ 99.578337][ T4684] Dev loop5: unable to read RDB block 7 [ 99.604503][ T4684] loop5: unable to read partition table [ 99.627242][ T4684] loop5: partition table beyond EOD, truncated [ 99.653128][ T4684] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.993494][ T4697] device syzkaller0 entered promiscuous mode [ 100.112798][ T4703] device syzkaller0 entered promiscuous mode [ 100.262941][ T4677] loop0: detected capacity change from 0 to 40427 [ 100.319802][ T4677] F2FS-fs (loop0): invalid crc value [ 100.570104][ T4677] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 100.676330][ T4677] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 100.694315][ T4677] F2FS-fs (loop0): Start checkpoint disabled! [ 100.710396][ T4677] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 100.999022][ T4721] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 101.005987][ T4721] CacheFiles: File cache on CacheFiles registered [ 101.115146][ T4676] CacheFiles: File cache on CacheFiles unregistering [ 101.121947][ T4676] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 101.129213][ T9] kworker/u4:0: attempt to access beyond end of device [ 101.129213][ T9] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 101.317724][ T4726] loop5: detected capacity change from 0 to 7 [ 101.338355][ T4726] Dev loop5: unable to read RDB block 7 [ 101.347171][ T4726] loop5: unable to read partition table [ 101.355647][ T4726] loop5: partition table beyond EOD, truncated [ 101.375913][ T4726] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.215458][ T4737] input: syz1 as /devices/virtual/input/input7 [ 102.537185][ T128] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.727227][ T128] usb 1-1: Using ep0 maxpacket: 16 [ 102.751331][ T128] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 102.789945][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.814667][ T128] usb 1-1: Product: syz [ 102.830030][ T128] usb 1-1: Manufacturer: syz [ 102.846378][ T128] usb 1-1: SerialNumber: syz [ 102.855898][ T4742] device syzkaller0 entered promiscuous mode [ 102.867382][ T128] usb 1-1: config 0 descriptor?? [ 103.313411][ T128] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 103.362307][ T128] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.410669][ T128] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 103.451361][ T128] usb 1-1: media controller created [ 103.513928][ T4737] dtv5100: wlen = 0, aborting. [ 103.562996][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.688877][ T128] zl10353_read_register: readreg error (reg=127, ret==0) [ 103.701911][ T128] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 103.744807][ T128] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 103.817327][ T128] usb 1-1: USB disconnect, device number 3 [ 103.927462][ T128] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 103.991046][ T4772] loop5: detected capacity change from 0 to 7 [ 104.011130][ T4357] Dev loop5: unable to read RDB block 7 [ 104.037698][ T4357] loop5: unable to read partition table [ 104.043495][ T4357] loop5: partition table beyond EOD, truncated [ 104.098489][ T4772] Dev loop5: unable to read RDB block 7 [ 104.104361][ T4772] loop5: unable to read partition table [ 104.134948][ T4772] loop5: partition table beyond EOD, truncated [ 104.177001][ T4772] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 104.641601][ T4786] device syzkaller0 entered promiscuous mode [ 104.827406][ T4770] loop3: detected capacity change from 0 to 40427 [ 104.848432][ T4770] F2FS-fs (loop3): invalid crc value [ 104.868665][ T4770] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 105.044826][ T4770] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 105.105668][ T4770] F2FS-fs (loop3): Start checkpoint disabled! [ 105.173591][ T4770] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 105.399936][ T4806] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 105.406826][ T4806] CacheFiles: File cache on CacheFiles registered [ 105.500839][ T4808] device syzkaller0 entered promiscuous mode [ 105.516664][ T4769] CacheFiles: File cache on CacheFiles unregistering [ 105.523641][ T4769] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 105.531308][ T47] kworker/u4:3: attempt to access beyond end of device [ 105.531308][ T47] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 106.043852][ T4814] loop5: detected capacity change from 0 to 7 [ 106.087884][ T4812] input: syz1 as /devices/virtual/input/input8 [ 106.090299][ T4814] Dev loop5: unable to read RDB block 7 [ 106.144805][ T4814] loop5: unable to read partition table [ 106.167247][ T4814] loop5: partition table beyond EOD, truncated [ 106.207096][ T4814] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.397569][ T4320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.647995][ T4821] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4280] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4821] [ 106.717330][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 106.722467][ T4828] device syzkaller0 entered promiscuous mode [ 106.789384][ T4320] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 106.824618][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.841341][ T4320] usb 4-1: Product: syz [ 106.849928][ T4320] usb 4-1: Manufacturer: syz [ 106.865922][ T4320] usb 4-1: SerialNumber: syz [ 106.880222][ T4320] usb 4-1: config 0 descriptor?? [ 107.296731][ T4320] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 107.336666][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.377400][ T4320] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 107.385390][ T4320] usb 4-1: media controller created [ 107.479477][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.497324][ T4812] dtv5100: wlen = 0, aborting. [ 107.562993][ T4842] device syzkaller0 entered promiscuous mode [ 107.587397][ T4320] zl10353_read_register: readreg error (reg=127, ret==0) [ 107.594525][ T4320] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 107.647095][ T4320] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 107.695323][ T4320] usb 4-1: USB disconnect, device number 2 [ 107.823174][ T4320] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 108.354405][ T4851] loop5: detected capacity change from 0 to 7 [ 108.398860][ T4851] Dev loop5: unable to read RDB block 7 [ 108.424437][ T4851] loop5: unable to read partition table [ 108.445698][ T4851] loop5: partition table beyond EOD, truncated [ 108.469396][ T4851] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 108.731999][ T4840] loop0: detected capacity change from 0 to 40427 [ 108.782150][ T4840] F2FS-fs (loop0): invalid crc value [ 108.819330][ T4840] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 108.945412][ T4840] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 109.013499][ T4840] F2FS-fs (loop0): Start checkpoint disabled! [ 109.062752][ T4840] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 109.350145][ T4878] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 109.358335][ T4878] CacheFiles: File cache on CacheFiles registered [ 109.477176][ T4839] CacheFiles: File cache on CacheFiles unregistering [ 109.483918][ T4839] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 109.498287][ T4342] kworker/u4:8: attempt to access beyond end of device [ 109.498287][ T4342] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 109.974263][ T4877] device syzkaller0 entered promiscuous mode [ 110.597202][ T4893] input: syz1 as /devices/virtual/input/input9 [ 110.686888][ T4897] device syzkaller0 entered promiscuous mode [ 111.026271][ T4910] loop5: detected capacity change from 0 to 7 [ 111.037278][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.067871][ T4910] Dev loop5: unable to read RDB block 7 [ 111.073546][ T4910] loop5: unable to read partition table [ 111.139067][ T4910] loop5: partition table beyond EOD, truncated [ 111.163457][ T4910] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.228829][ T4909] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4909] [ 111.257192][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 111.266270][ T14] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 111.292826][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.313140][ T14] usb 3-1: Product: syz [ 111.323273][ T14] usb 3-1: Manufacturer: syz [ 111.328817][ T14] usb 3-1: SerialNumber: syz [ 111.342503][ T14] usb 3-1: config 0 descriptor?? [ 111.759162][ T14] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 111.801042][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.849116][ T14] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 111.881119][ T14] usb 3-1: media controller created [ 111.944227][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.027408][ T14] zl10353_read_register: readreg error (reg=127, ret==0) [ 112.036803][ T14] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 112.057126][ T14] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 112.094452][ T14] usb 3-1: USB disconnect, device number 2 [ 112.202712][ T14] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 112.264172][ T4934] device syzkaller0 entered promiscuous mode [ 112.459284][ T4928] loop0: detected capacity change from 0 to 40427 [ 112.521368][ T4928] F2FS-fs (loop0): invalid crc value [ 112.541201][ T4928] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 112.741514][ T4928] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 112.779174][ T4928] F2FS-fs (loop0): Start checkpoint disabled! [ 112.828427][ T4928] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 113.163420][ T4952] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 113.170436][ T4952] CacheFiles: File cache on CacheFiles registered [ 113.289075][ T4925] CacheFiles: File cache on CacheFiles unregistering [ 113.295818][ T4925] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 113.759940][ T4326] kworker/u4:6: attempt to access beyond end of device [ 113.759940][ T4326] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 114.097730][ T4958] device syzkaller0 entered promiscuous mode [ 114.330535][ T4964] loop5: detected capacity change from 0 to 7 [ 114.363502][ T4964] Dev loop5: unable to read RDB block 7 [ 114.371807][ T4964] loop5: unable to read partition table [ 114.388637][ T4964] loop5: partition table beyond EOD, truncated [ 114.422464][ T4964] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 114.582322][ T4972] device syzkaller0 entered promiscuous mode [ 115.112723][ T4985] input: syz1 as /devices/virtual/input/input10 [ 115.416442][ T4992] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4280] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4992] [ 115.421887][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.637092][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 115.666154][ T14] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 115.707312][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.815713][ T14] usb 1-1: Product: syz [ 115.834169][ T14] usb 1-1: Manufacturer: syz [ 115.859996][ T14] usb 1-1: SerialNumber: syz [ 115.886016][ T14] usb 1-1: config 0 descriptor?? [ 116.354076][ T5011] device syzkaller0 entered promiscuous mode [ 116.534072][ T14] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 116.548752][ T5003] loop2: detected capacity change from 0 to 40427 [ 116.591792][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.599189][ T5003] F2FS-fs (loop2): invalid crc value [ 116.606871][ T5014] loop5: detected capacity change from 0 to 7 [ 116.629842][ T4572] Dev loop5: unable to read RDB block 7 [ 116.631486][ T14] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 116.635445][ T4572] loop5: unable to read partition table [ 116.635824][ T4572] loop5: partition table beyond EOD, [ 116.674077][ T14] usb 1-1: media controller created [ 116.691690][ T5003] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 116.734680][ T4572] truncated [ 116.775067][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.852406][ T5018] device syzkaller0 entered promiscuous mode [ 116.865593][ T5014] Dev loop5: unable to read RDB block 7 [ 116.874841][ T5014] loop5: unable to read partition table [ 116.887381][ T14] zl10353_read_register: readreg error (reg=127, ret==0) [ 116.894465][ T14] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 116.898218][ T5014] loop5: partition table beyond EOD, [ 116.915099][ T5003] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 116.933106][ T5014] truncated [ 116.959209][ T5014] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.967309][ T14] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 116.980391][ T5003] F2FS-fs (loop2): Start checkpoint disabled! [ 116.999821][ T14] usb 1-1: USB disconnect, device number 4 [ 117.027787][ T5003] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 117.217964][ T14] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 117.320484][ T5022] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 117.327500][ T5022] CacheFiles: File cache on CacheFiles registered [ 117.446698][ T5002] CacheFiles: File cache on CacheFiles unregistering [ 117.453481][ T5002] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 117.967321][ T4326] kworker/u4:6: attempt to access beyond end of device [ 117.967321][ T4326] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 119.014666][ T5053] device syzkaller0 entered promiscuous mode [ 119.312125][ T5062] loop5: detected capacity change from 0 to 7 [ 119.337592][ T4367] Dev loop5: unable to read RDB block 7 [ 119.344242][ T4367] loop5: unable to read partition table [ 119.379849][ T4367] loop5: partition table beyond EOD, truncated [ 119.404242][ T5062] Dev loop5: unable to read RDB block 7 [ 119.424460][ T5062] loop5: unable to read partition table [ 119.445740][ T5062] loop5: partition table beyond EOD, truncated [ 119.479101][ T5062] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.534911][ T5065] input: syz1 as /devices/virtual/input/input11 [ 119.837286][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.017146][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 120.026395][ T26] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 120.045972][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.055222][ T26] usb 1-1: Product: syz [ 120.117125][ T26] usb 1-1: Manufacturer: syz [ 120.121790][ T26] usb 1-1: SerialNumber: syz [ 120.160843][ T26] usb 1-1: config 0 descriptor?? [ 120.420742][ T5080] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5080] [ 120.573069][ T26] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 120.596081][ T26] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.638437][ T26] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 120.666964][ T26] usb 1-1: media controller created [ 120.763441][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.810080][ T5069] loop4: detected capacity change from 0 to 40427 [ 120.869265][ T5069] F2FS-fs (loop4): invalid crc value [ 120.898811][ T26] zl10353_read_register: readreg error (reg=127, ret==0) [ 120.914035][ T26] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 120.925941][ T5069] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 120.968752][ T26] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 121.031195][ T26] usb 1-1: USB disconnect, device number 5 [ 121.153417][ T26] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 121.293174][ T5069] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 121.319965][ T5069] F2FS-fs (loop4): Start checkpoint disabled! [ 121.400059][ T5069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 121.719967][ T5112] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 121.727003][ T5112] CacheFiles: File cache on CacheFiles registered [ 121.848259][ T5068] CacheFiles: File cache on CacheFiles unregistering [ 121.854989][ T5068] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 122.044020][ T4331] kworker/u4:7: attempt to access beyond end of device [ 122.044020][ T4331] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 123.826074][ T5150] input: syz1 as /devices/virtual/input/input12 [ 124.167103][ T4317] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.377557][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 124.402360][ T4317] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 124.420518][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.430462][ T4317] usb 4-1: Product: syz [ 124.434662][ T4317] usb 4-1: Manufacturer: syz [ 124.447125][ T4317] usb 4-1: SerialNumber: syz [ 124.475848][ T4317] usb 4-1: config 0 descriptor?? [ 124.722913][ T5169] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4280] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5169] [ 124.921706][ T4317] dvb_usb_dtv5100: probe of 4-1:0.0 failed with error -71 [ 124.943608][ T4317] usb 4-1: USB disconnect, device number 3 [ 124.952232][ T5161] loop0: detected capacity change from 0 to 40427 [ 124.989846][ T5161] F2FS-fs (loop0): invalid crc value [ 125.023572][ T5161] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 125.202765][ T5161] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 125.229643][ T5161] F2FS-fs (loop0): Start checkpoint disabled! [ 125.272314][ T5161] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 125.555952][ T5193] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 125.562933][ T5193] CacheFiles: File cache on CacheFiles registered [ 125.681732][ T5160] CacheFiles: File cache on CacheFiles unregistering [ 125.688680][ T5160] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 126.049384][ T9] kworker/u4:0: attempt to access beyond end of device [ 126.049384][ T9] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 126.979028][ T5208] device syzkaller0 entered promiscuous mode [ 127.521379][ T5226] device syzkaller0 entered promiscuous mode [ 128.003920][ T5238] input: syz1 as /devices/virtual/input/input13 [ 128.347182][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.420456][ T5249] device syzkaller0 entered promiscuous mode [ 128.501434][ T5232] loop4: detected capacity change from 0 to 40427 [ 128.530925][ T5232] F2FS-fs (loop4): invalid crc value [ 128.538973][ T5232] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 128.548050][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 128.573540][ T14] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 128.608535][ T5232] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 128.617508][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.633174][ T14] usb 2-1: Product: syz [ 128.642881][ T5232] F2FS-fs (loop4): Start checkpoint disabled! [ 128.651449][ T14] usb 2-1: Manufacturer: syz [ 128.659819][ T14] usb 2-1: SerialNumber: syz [ 128.693913][ T14] usb 2-1: config 0 descriptor?? [ 128.710937][ T5232] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 129.007418][ T5257] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 129.014372][ T5257] CacheFiles: File cache on CacheFiles registered [ 129.133405][ T5231] CacheFiles: File cache on CacheFiles unregistering [ 129.140179][ T5231] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 129.638526][ T14] dvb_usb_dtv5100: probe of 2-1:0.0 failed with error -110 [ 129.662642][ T60] kworker/u4:5: attempt to access beyond end of device [ 129.662642][ T60] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 129.676933][ T14] usb 2-1: USB disconnect, device number 3 [ 130.018403][ T5263] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5263] [ 130.533792][ T5283] device syzkaller0 entered promiscuous mode [ 131.126888][ T5295] device syzkaller0 entered promiscuous mode [ 132.414012][ T5319] input: syz1 as /devices/virtual/input/input14 [ 132.471292][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.477663][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.569484][ T5305] loop4: detected capacity change from 0 to 40427 [ 132.606281][ T5305] F2FS-fs (loop4): invalid crc value [ 132.662923][ T5305] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 132.757135][ T1173] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.798575][ T5337] device syzkaller0 entered promiscuous mode [ 132.846079][ T5339] device syzkaller0 entered promiscuous mode [ 132.928838][ T5305] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 132.955478][ T5305] F2FS-fs (loop4): Start checkpoint disabled! [ 132.977227][ T1173] usb 3-1: Using ep0 maxpacket: 16 [ 132.988504][ T1173] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 133.026614][ T1173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.035171][ T5305] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 133.066452][ T1173] usb 3-1: Product: syz [ 133.090718][ T1173] usb 3-1: Manufacturer: syz [ 133.263837][ T1173] usb 3-1: SerialNumber: syz [ 133.282650][ T1173] usb 3-1: config 0 descriptor?? [ 133.389363][ T5347] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 133.396313][ T5347] CacheFiles: File cache on CacheFiles registered [ 133.515366][ T5304] CacheFiles: File cache on CacheFiles unregistering [ 133.522382][ T5304] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 133.535999][ T4331] kworker/u4:7: attempt to access beyond end of device [ 133.535999][ T4331] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 133.898305][ T5348] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4280] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5348] [ 134.023204][ T1173] dvb_usb_dtv5100: probe of 3-1:0.0 failed with error -71 [ 134.045659][ T1173] usb 3-1: USB disconnect, device number 3 [ 134.742963][ T5378] device syzkaller0 entered promiscuous mode [ 135.453767][ T5392] device syzkaller0 entered promiscuous mode [ 135.948210][ T5409] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5409] [ 136.191273][ T5415] device syzkaller0 entered promiscuous mode [ 136.224489][ T5416] input: syz1 as /devices/virtual/input/input15 [ 136.343796][ T5398] loop3: detected capacity change from 0 to 40427 [ 136.383625][ T5398] F2FS-fs (loop3): invalid crc value [ 136.418089][ T5398] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 136.587138][ T4262] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.623553][ T5398] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 136.671365][ T5398] F2FS-fs (loop3): Start checkpoint disabled! [ 136.710340][ T5398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 136.797293][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 136.806427][ T4262] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 136.959768][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.030485][ T4262] usb 3-1: Product: syz [ 137.052802][ T5432] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 137.059779][ T5432] CacheFiles: File cache on CacheFiles registered [ 137.097570][ T4262] usb 3-1: Manufacturer: syz [ 137.136326][ T4262] usb 3-1: SerialNumber: syz [ 137.177612][ T5397] CacheFiles: File cache on CacheFiles unregistering [ 137.184327][ T5397] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 137.203804][ T60] kworker/u4:5: attempt to access beyond end of device [ 137.203804][ T60] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 137.263285][ T4262] usb 3-1: config 0 descriptor?? [ 137.888164][ T4262] dvb_usb_dtv5100: probe of 3-1:0.0 failed with error -71 [ 137.941605][ T4262] usb 3-1: USB disconnect, device number 4 [ 138.217397][ T5437] device syzkaller0 entered promiscuous mode [ 139.260863][ T5469] device syzkaller0 entered promiscuous mode [ 139.917987][ T5487] input: syz1 as /devices/virtual/input/input16 [ 139.936413][ T5472] loop4: detected capacity change from 0 to 40427 [ 139.953759][ T5472] F2FS-fs (loop4): invalid crc value [ 139.993032][ T5489] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4280] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5489] [ 140.012406][ T5472] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 140.142480][ T5472] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 140.154062][ T5472] F2FS-fs (loop4): Start checkpoint disabled! [ 140.183136][ T5472] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 140.340633][ T1173] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.887405][ T1173] usb 3-1: Using ep0 maxpacket: 16 [ 140.910676][ T1173] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 140.931464][ T1173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.960688][ T1173] usb 3-1: Product: syz [ 140.967447][ T1173] usb 3-1: Manufacturer: syz [ 141.011827][ T1173] usb 3-1: SerialNumber: syz [ 141.038541][ T1173] usb 3-1: config 0 descriptor?? [ 141.467642][ T1173] dvb_usb_dtv5100: probe of 3-1:0.0 failed with error -71 [ 141.487408][ T1173] usb 3-1: USB disconnect, device number 5 [ 143.064094][ T5553] input: syz1 as /devices/virtual/input/input17 [ 143.385023][ T5539] loop0: detected capacity change from 0 to 40427 [ 143.397102][ T1173] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 143.444076][ T5539] F2FS-fs (loop0): invalid crc value [ 143.522331][ T5539] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 143.597187][ T1173] usb 4-1: Using ep0 maxpacket: 16 [ 143.606035][ T1173] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 143.643277][ T1173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.670976][ T1173] usb 4-1: Product: syz [ 143.683218][ T1173] usb 4-1: Manufacturer: syz [ 143.693834][ T1173] usb 4-1: SerialNumber: syz [ 143.714888][ T1173] usb 4-1: config 0 descriptor?? [ 143.747429][ T5539] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 143.787745][ T5539] F2FS-fs (loop0): Start checkpoint disabled! [ 143.831638][ T5539] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 144.213258][ T1173] dvb_usb_dtv5100: probe of 4-1:0.0 failed with error -71 [ 144.538769][ T1173] usb 4-1: USB disconnect, device number 4 [ 144.621152][ T5571] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5571] [ 146.734213][ T5625] input: syz1 as /devices/virtual/input/input18 [ 146.982412][ T5611] loop3: detected capacity change from 0 to 40427 [ 147.023155][ T5611] F2FS-fs (loop3): invalid crc value [ 147.049746][ T5611] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 147.255847][ T5611] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 147.281539][ T5611] F2FS-fs (loop3): Start checkpoint disabled! [ 147.368063][ T5611] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 148.561855][ T5662] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5662] [ 149.637273][ T5684] input: syz1 as /devices/virtual/input/input19 [ 149.719863][ T5685] device syzkaller0 entered promiscuous mode [ 151.021187][ T5692] loop0: detected capacity change from 0 to 40427 [ 151.066330][ T5692] F2FS-fs (loop0): invalid crc value [ 151.082116][ T5692] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 151.298918][ T5692] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 151.359304][ T5692] F2FS-fs (loop0): Start checkpoint disabled! [ 151.439665][ T5692] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 151.790975][ T5742] CacheFiles: No cache directory specified [ 153.377235][ T5754] input: syz1 as /devices/virtual/input/input20 [ 154.417494][ T5765] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5765] [ 155.721448][ T1173] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.804299][ T5781] loop0: detected capacity change from 0 to 40427 [ 155.862836][ T5781] F2FS-fs (loop0): invalid crc value [ 155.921929][ T5781] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 155.947307][ T1173] usb 5-1: Using ep0 maxpacket: 16 [ 155.965588][ T1173] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 156.015839][ T1173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.076219][ T1173] usb 5-1: Product: syz [ 156.106639][ T1173] usb 5-1: Manufacturer: syz [ 156.126908][ T1173] usb 5-1: SerialNumber: syz [ 156.143134][ T1173] usb 5-1: config 0 descriptor?? [ 156.163509][ T5781] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 156.235747][ T5781] F2FS-fs (loop0): Start checkpoint disabled! [ 156.310589][ T5781] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 156.595200][ T1173] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 156.623515][ T5805] CacheFiles: No cache directory specified [ 156.955939][ T1173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.998635][ T1173] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 157.042044][ T5802] device syzkaller0 entered promiscuous mode [ 157.048126][ T1173] usb 5-1: media controller created [ 157.099836][ T1173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.189037][ T1173] zl10353_read_register: readreg error (reg=127, ret==0) [ 157.201827][ T1173] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 157.256838][ T1173] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 157.292173][ T1173] usb 5-1: USB disconnect, device number 2 [ 157.347716][ T1173] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 159.972268][ T5860] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4280] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5860] [ 160.528645][ T1173] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.673834][ T5853] loop4: detected capacity change from 0 to 40427 [ 160.747191][ T1173] usb 1-1: Using ep0 maxpacket: 16 [ 160.761772][ T1173] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 160.779688][ T5853] F2FS-fs (loop4): invalid crc value [ 160.804159][ T1173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.838251][ T1173] usb 1-1: Product: syz [ 160.842447][ T1173] usb 1-1: Manufacturer: syz [ 160.872744][ T5853] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 160.904350][ T1173] usb 1-1: SerialNumber: syz [ 160.945957][ T1173] usb 1-1: config 0 descriptor?? [ 161.150900][ T5853] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 161.201568][ T5853] F2FS-fs (loop4): Start checkpoint disabled! [ 161.370106][ T1173] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 161.386385][ T5853] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 161.399791][ T1173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.427627][ T1173] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 161.492458][ T1173] usb 1-1: media controller created [ 161.555364][ T1173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.570517][ T5867] dtv5100: wlen = 0, aborting. [ 161.737401][ T5884] CacheFiles: No cache directory specified [ 162.111881][ T1173] zl10353_read_register: readreg error (reg=127, ret==0) [ 162.137105][ T1173] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 162.183547][ T1173] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 162.246805][ T1173] usb 1-1: USB disconnect, device number 6 [ 162.397874][ T1173] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 162.779469][ T5892] device syzkaller0 entered promiscuous mode [ 164.355818][ T5927] loop4: detected capacity change from 0 to 40427 [ 164.382469][ T5927] F2FS-fs (loop4): invalid crc value [ 164.446074][ T5927] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 164.555333][ T5927] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 164.578920][ T5927] F2FS-fs (loop4): Start checkpoint disabled! [ 164.631026][ T5927] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 164.920783][ T5940] CacheFiles: No cache directory specified [ 165.316596][ T5941] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5941] [ 165.989799][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.177313][ T4317] usb 5-1: Using ep0 maxpacket: 16 [ 166.187520][ T4317] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 166.196627][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.223764][ T4317] usb 5-1: Product: syz [ 166.237531][ T4317] usb 5-1: Manufacturer: syz [ 166.242419][ T4317] usb 5-1: SerialNumber: syz [ 166.279934][ T4317] usb 5-1: config 0 descriptor?? [ 166.692072][ T4317] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 166.705194][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.741390][ T4317] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 166.756106][ T4317] usb 5-1: media controller created [ 166.858349][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.895313][ T5944] dtv5100: wlen = 0, aborting. [ 166.947562][ T4317] zl10353_read_register: readreg error (reg=127, ret==0) [ 166.954671][ T4317] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 167.034841][ T4317] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 167.094847][ T4317] usb 5-1: USB disconnect, device number 3 [ 167.161348][ T4317] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 167.391892][ T5974] device syzkaller0 entered promiscuous mode [ 168.059530][ T5971] loop1: detected capacity change from 0 to 40427 [ 168.122594][ T5971] F2FS-fs (loop1): invalid crc value [ 168.185563][ T5971] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 168.408806][ T5971] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 168.434306][ T5971] F2FS-fs (loop1): Start checkpoint disabled! [ 168.481855][ T5971] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 168.800629][ T5995] CacheFiles: No cache directory specified [ 169.940012][ T6016] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6016] [ 170.897537][ T6018] ------------[ cut here ]------------ [ 170.903303][ T6018] WARNING: CPU: 1 PID: 6018 at net/sched/sch_taprio.c:1022 taprio_get_start_time+0x139/0x160 [ 170.913560][ T6018] Modules linked in: [ 170.917525][ T6018] CPU: 1 PID: 6018 Comm: syz.1.468 Not tainted syzkaller #0 [ 170.924846][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.934964][ T6018] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 170.941063][ T6018] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5c a8 6a f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 07 63 19 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 170.960779][ T6018] RSP: 0018:ffffc90004646d68 EFLAGS: 00010287 [ 170.966844][ T6018] RAX: ffffffff8868cfd9 RBX: ffffc90004646e78 RCX: 0000000000080000 [ 170.974839][ T6018] RDX: ffffc90005e09000 RSI: 0000000000000e77 RDI: 0000000000000e78 [ 170.982856][ T6018] RBP: 0000000000000000 R08: ffffffff90b0f39f R09: 1ffffffff2161e73 [ 170.990863][ T6018] R10: dffffc0000000000 R11: fffffbfff2161e74 R12: 18d783867bea4688 [ 170.998906][ T6018] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.006922][ T6018] FS: 00007f3a492666c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 171.015874][ T6018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.022477][ T6018] CR2: 00005555661954e8 CR3: 00000000233ff000 CR4: 00000000003506e0 [ 171.030472][ T6018] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.038463][ T6018] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.046432][ T6018] Call Trace: [ 171.049736][ T6018] [ 171.052668][ T6018] taprio_change+0x3f99/0x5390 [ 171.057471][ T6018] ? taprio_destroy+0x4b0/0x4b0 [ 171.062329][ T6018] ? lockdep_init_map_type+0x98/0x8d0 [ 171.067732][ T6018] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 171.072855][ T6018] ? memset+0x1e/0x40 [ 171.076836][ T6018] ? fifo_init+0x3f6/0x6d0 [ 171.081280][ T6018] ? qdisc_peek_head+0x40/0x40 [ 171.086076][ T6018] ? mutex_is_locked+0xe/0x40 [ 171.090790][ T6018] ? taprio_peek+0x590/0x590 [ 171.095386][ T6018] qdisc_create+0x7ef/0x10c0 [ 171.100003][ T6018] ? qdisc_notify+0x370/0x370 [ 171.104688][ T6018] tc_modify_qdisc+0xb43/0x1de0 [ 171.109565][ T6018] ? qdisc_offload_query_caps+0x150/0x150 [ 171.115298][ T6018] ? qdisc_offload_query_caps+0x150/0x150 [ 171.121039][ T6018] rtnetlink_rcv_msg+0x863/0xfb0 [ 171.125976][ T6018] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 171.131113][ T6018] ? rtnetlink_bind+0x80/0x80 [ 171.135790][ T6018] ? __local_bh_enable_ip+0x136/0x1c0 [ 171.141183][ T6018] ? lockdep_hardirqs_on+0x94/0x140 [ 171.146395][ T6018] ? __local_bh_enable_ip+0x136/0x1c0 [ 171.151783][ T6018] ? _local_bh_enable+0xa0/0xa0 [ 171.156651][ T6018] ? __dev_queue_xmit+0x281/0x3810 [ 171.161785][ T6018] ? __dev_queue_xmit+0x281/0x3810 [ 171.166897][ T6018] ? __dev_queue_xmit+0x1d84/0x3810 [ 171.172125][ T6018] ? __dev_queue_xmit+0x281/0x3810 [ 171.177282][ T6018] ? ref_tracker_free+0x682/0x830 [ 171.182313][ T6018] ? refcount_inc+0x70/0x70 [ 171.186821][ T6018] ? memcpy+0x3c/0x60 [ 171.190827][ T6018] ? __copy_skb_header+0x3ba/0x4f0 [ 171.195943][ T6018] ? __skb_clone+0x446/0x6c0 [ 171.200595][ T6018] netlink_rcv_skb+0x1ef/0x440 [ 171.205423][ T6018] ? rtnetlink_bind+0x80/0x80 [ 171.210159][ T6018] ? netlink_ack+0x1160/0x1160 [ 171.214938][ T6018] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.220178][ T6018] netlink_unicast+0x7ad/0x920 [ 171.224961][ T6018] netlink_sendmsg+0x8ad/0xbd0 [ 171.229788][ T6018] ? netlink_getsockopt+0x550/0x550 [ 171.235018][ T6018] ? apparmor_socket_sendmsg+0x8a/0x330 [ 171.240636][ T6018] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 171.245929][ T6018] ? security_socket_sendmsg+0x7c/0xa0 [ 171.251429][ T6018] ? netlink_getsockopt+0x550/0x550 [ 171.256629][ T6018] ____sys_sendmsg+0x5ed/0x9a0 [ 171.261413][ T6018] ? __sys_sendmsg_sock+0x30/0x30 [ 171.266434][ T6018] ? __import_iovec+0x306/0x510 [ 171.271319][ T6018] ? import_iovec+0x6f/0xa0 [ 171.275829][ T6018] ___sys_sendmsg+0x2a2/0x360 [ 171.280546][ T6018] ? __sys_sendmsg+0x2a0/0x2a0 [ 171.285357][ T6018] __se_sys_sendmsg+0x1c3/0x2b0 [ 171.290244][ T6018] ? __x64_sys_sendmsg+0x80/0x80 [ 171.295192][ T6018] ? lockdep_hardirqs_on+0x94/0x140 [ 171.300415][ T6018] do_syscall_64+0x4c/0xa0 [ 171.304829][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 171.309553][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 171.314242][ T6018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.320196][ T6018] RIP: 0033:0x7f3a4839e159 [ 171.324623][ T6018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.344245][ T6018] RSP: 002b:00007f3a49266028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.352748][ T6018] RAX: ffffffffffffffda RBX: 00007f3a48625fa0 RCX: 00007f3a4839e159 [ 171.360753][ T6018] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 171.368748][ T6018] RBP: 00007f3a4843506b R08: 0000000000000000 R09: 0000000000000000 [ 171.376724][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.384718][ T6018] R13: 00007f3a48626038 R14: 00007f3a48625fa0 R15: 00007ffe49b61028 [ 171.392716][ T6018] [ 171.395757][ T6018] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.403068][ T6018] CPU: 1 PID: 6018 Comm: syz.1.468 Not tainted syzkaller #0 [ 171.410372][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.420432][ T6018] Call Trace: [ 171.423717][ T6018] [ 171.426664][ T6018] dump_stack_lvl+0x188/0x24e [ 171.431349][ T6018] ? memcpy+0x3c/0x60 [ 171.435341][ T6018] ? show_regs_print_info+0x12/0x12 [ 171.440558][ T6018] ? load_image+0x410/0x410 [ 171.445088][ T6018] panic+0x2d3/0x710 [ 171.448999][ T6018] ? bpf_jit_dump+0xd0/0xd0 [ 171.453524][ T6018] __warn+0x2f8/0x4f0 [ 171.457515][ T6018] ? taprio_get_start_time+0x139/0x160 [ 171.462991][ T6018] ? taprio_get_start_time+0x139/0x160 [ 171.468463][ T6018] report_bug+0x2ba/0x4f0 [ 171.472795][ T6018] ? taprio_get_start_time+0x139/0x160 [ 171.478279][ T6018] handle_bug+0x3a/0x70 [ 171.482460][ T6018] exc_invalid_op+0x16/0x40 [ 171.486974][ T6018] asm_exc_invalid_op+0x16/0x20 [ 171.491834][ T6018] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 171.497922][ T6018] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5c a8 6a f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 07 63 19 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 171.517540][ T6018] RSP: 0018:ffffc90004646d68 EFLAGS: 00010287 [ 171.523633][ T6018] RAX: ffffffff8868cfd9 RBX: ffffc90004646e78 RCX: 0000000000080000 [ 171.531654][ T6018] RDX: ffffc90005e09000 RSI: 0000000000000e77 RDI: 0000000000000e78 [ 171.539633][ T6018] RBP: 0000000000000000 R08: ffffffff90b0f39f R09: 1ffffffff2161e73 [ 171.547609][ T6018] R10: dffffc0000000000 R11: fffffbfff2161e74 R12: 18d783867bea4688 [ 171.555591][ T6018] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.563570][ T6018] ? taprio_get_start_time+0x139/0x160 [ 171.569063][ T6018] ? taprio_get_start_time+0x139/0x160 [ 171.574545][ T6018] taprio_change+0x3f99/0x5390 [ 171.579351][ T6018] ? taprio_destroy+0x4b0/0x4b0 [ 171.584238][ T6018] ? lockdep_init_map_type+0x98/0x8d0 [ 171.589631][ T6018] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 171.594749][ T6018] ? memset+0x1e/0x40 [ 171.598743][ T6018] ? fifo_init+0x3f6/0x6d0 [ 171.603183][ T6018] ? qdisc_peek_head+0x40/0x40 [ 171.607982][ T6018] ? mutex_is_locked+0xe/0x40 [ 171.612710][ T6018] ? taprio_peek+0x590/0x590 [ 171.617337][ T6018] qdisc_create+0x7ef/0x10c0 [ 171.621946][ T6018] ? qdisc_notify+0x370/0x370 [ 171.626641][ T6018] tc_modify_qdisc+0xb43/0x1de0 [ 171.631506][ T6018] ? qdisc_offload_query_caps+0x150/0x150 [ 171.637251][ T6018] ? qdisc_offload_query_caps+0x150/0x150 [ 171.642984][ T6018] rtnetlink_rcv_msg+0x863/0xfb0 [ 171.647951][ T6018] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 171.653073][ T6018] ? rtnetlink_bind+0x80/0x80 [ 171.657756][ T6018] ? __local_bh_enable_ip+0x136/0x1c0 [ 171.663146][ T6018] ? lockdep_hardirqs_on+0x94/0x140 [ 171.668355][ T6018] ? __local_bh_enable_ip+0x136/0x1c0 [ 171.673742][ T6018] ? _local_bh_enable+0xa0/0xa0 [ 171.678611][ T6018] ? __dev_queue_xmit+0x281/0x3810 [ 171.683732][ T6018] ? __dev_queue_xmit+0x281/0x3810 [ 171.688863][ T6018] ? __dev_queue_xmit+0x1d84/0x3810 [ 171.694085][ T6018] ? __dev_queue_xmit+0x281/0x3810 [ 171.699215][ T6018] ? ref_tracker_free+0x682/0x830 [ 171.704251][ T6018] ? refcount_inc+0x70/0x70 [ 171.708771][ T6018] ? memcpy+0x3c/0x60 [ 171.712758][ T6018] ? __copy_skb_header+0x3ba/0x4f0 [ 171.717878][ T6018] ? __skb_clone+0x446/0x6c0 [ 171.722479][ T6018] netlink_rcv_skb+0x1ef/0x440 [ 171.727249][ T6018] ? rtnetlink_bind+0x80/0x80 [ 171.731939][ T6018] ? netlink_ack+0x1160/0x1160 [ 171.736769][ T6018] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.741983][ T6018] netlink_unicast+0x7ad/0x920 [ 171.746776][ T6018] netlink_sendmsg+0x8ad/0xbd0 [ 171.751565][ T6018] ? netlink_getsockopt+0x550/0x550 [ 171.756782][ T6018] ? apparmor_socket_sendmsg+0x8a/0x330 [ 171.762345][ T6018] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 171.767637][ T6018] ? security_socket_sendmsg+0x7c/0xa0 [ 171.773112][ T6018] ? netlink_getsockopt+0x550/0x550 [ 171.778353][ T6018] ____sys_sendmsg+0x5ed/0x9a0 [ 171.783132][ T6018] ? __sys_sendmsg_sock+0x30/0x30 [ 171.788161][ T6018] ? __import_iovec+0x306/0x510 [ 171.793077][ T6018] ? import_iovec+0x6f/0xa0 [ 171.797602][ T6018] ___sys_sendmsg+0x2a2/0x360 [ 171.802295][ T6018] ? __sys_sendmsg+0x2a0/0x2a0 [ 171.807096][ T6018] __se_sys_sendmsg+0x1c3/0x2b0 [ 171.811961][ T6018] ? __x64_sys_sendmsg+0x80/0x80 [ 171.816926][ T6018] ? lockdep_hardirqs_on+0x94/0x140 [ 171.822136][ T6018] do_syscall_64+0x4c/0xa0 [ 171.826560][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 171.831248][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 171.835935][ T6018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.841843][ T6018] RIP: 0033:0x7f3a4839e159 [ 171.846267][ T6018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.865882][ T6018] RSP: 002b:00007f3a49266028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.874301][ T6018] RAX: ffffffffffffffda RBX: 00007f3a48625fa0 RCX: 00007f3a4839e159 [ 171.882284][ T6018] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 171.890267][ T6018] RBP: 00007f3a4843506b R08: 0000000000000000 R09: 0000000000000000 [ 171.898243][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.906223][ T6018] R13: 00007f3a48626038 R14: 00007f3a48625fa0 R15: 00007ffe49b61028 [ 171.914228][ T6018] [ 171.917833][ T6018] Kernel Offset: disabled [ 171.922220][ T6018] Rebooting in 86400 seconds..