last executing test programs: 7.427006202s ago: executing program 3 (id=63): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x31) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd6a010000004d1100fc020000000000000000000000000000ff0200000000000000000000000000014e214e20004d90"], 0x0) 7.413077472s ago: executing program 3 (id=64): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x5, 0x1, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x2000000000000007, 0x0, 0x4}, 0x4000006, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d2, 0x2b}, 0x0, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0xc, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 7.396726643s ago: executing program 3 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) read$FUSE(r0, 0x0, 0x0) 7.359901255s ago: executing program 3 (id=66): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0x6}, {0x3}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000008c403001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0x484c}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.315536917s ago: executing program 3 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000400)={0x80400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 7.292376768s ago: executing program 3 (id=68): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r0, r1, 0x3, 0x0, @val=@netkit}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) 5.101159001s ago: executing program 4 (id=106): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.991897236s ago: executing program 4 (id=110): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000014) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) 4.800143875s ago: executing program 4 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7030000080000547d03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[], 0x0) 4.720984829s ago: executing program 4 (id=115): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@nogrpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) 4.426112613s ago: executing program 4 (id=116): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x20, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4, 0x100000}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 3.684177847s ago: executing program 4 (id=127): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x44804) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 3.640348589s ago: executing program 32 (id=127): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x44804) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 2.693881394s ago: executing program 2 (id=147): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.688706844s ago: executing program 0 (id=148): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xd) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) preadv2(r2, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/217, 0xd9}], 0x1, 0x2, 0x40, 0x0) 2.668127005s ago: executing program 2 (id=150): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x85) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0b, &(0x7f0000000540)="040000000000000000489d8343642a02c34ac02820f17ca4d8cd023adb9cdc71652f20900d019142a210efc81386335c24f5608ec9646bc73a07b6edb0caf0f85d1677520d2260e2a086624f78285060c32f538ef744151e5ee76c") 2.581311859s ago: executing program 0 (id=151): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.827817115s ago: executing program 2 (id=160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'dummy0\x00', @remote}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 1.726055569s ago: executing program 0 (id=161): socket(0x10, 0x803, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) 1.516617679s ago: executing program 0 (id=164): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r0, 0x2, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="b970cb2b79989428", 0x8, 0x1000, 0x0, 0xbd4c3b8bc89fc43d, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000000040), 0x0, 0x40000000005, 0x0, 0x3, r1}]) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.426414533s ago: executing program 1 (id=166): eventfd(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0x40000000, 0x10000}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x3, 0x6, 0x6, 0xf61, 0x3, 0x5}]}) 1.356583097s ago: executing program 1 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.333934758s ago: executing program 2 (id=170): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="09000000e700140000007e70fbf788a83baa9900d6f180350000000000000000", 0x20, 0x24040011, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) eventfd2(0x5, 0x1) 1.311776319s ago: executing program 1 (id=171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000140)=""/173, 0xad}], 0x1}, 0xea}], 0x1, 0x2, 0x0) 1.26605377s ago: executing program 2 (id=172): mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xad4fe258c4a9bb06}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.26589199s ago: executing program 1 (id=173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001540)=0x40) 1.265636461s ago: executing program 2 (id=174): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x5516, &(0x7f00000006c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j525yEojhOIB2BkbwKxLj3qu4g2N4BJcuDQfwEhwBr+AFPAPuPIIBQzsQETQmdJho3kuG0mHyS0tg0X+TAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNeq2mo6eH68d9c+aLXynjw72w9UGOuQAAAAC7zarpKL4ZpP5pff+8vnVZ94sQwnLxvmtR3wlHG5mdOqf65vnqyxieQ4gJRSwNpOskhHBTX+8XTX8LAAAA8H+9jCfDtFpPL4O2B8QhpaJNeXabKa8IIVSDt0xp5TLvKlNY/H13w32mtFjA6mcKSyW3bq60bTui4999XbXrf2qK1JQ/R2abOwAAcECdjabBVQgAAAAtu2t7ALSjCKutzPVWYC819fbe8UYPAAAA+IOKtgcAAAAANC6u/9s8/29VgHD+HwAAADQnnf8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk2bVdFSNJ8N9c+aL/eSZDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8sD/vKBACYRAGe9d3JnP/w0qDpqYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rycAAjEYBiMbz0p23+vyo9agwgzIH4k5LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn5z7/e+er/o3hsRRVWOmiSnjVlVzVoklq8Sag8SWg/bpkwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527uc1jioOAPh3f8zGVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlbczk7zGoFtKZ5bm84E377vTx3vfNwsl35lJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjvv78W9dJgv42517tb9a2upv72vT25s3VlKLcWd6txcU4nPvlfzD53F9hIBAADg8OjV9X1E3C22V1LfnZ/U/0U9JtX8PzxfxnU9v7/ur/u69k/t99/uvby70Hy5Tpr03Pp4dPzfqfSf3C5n2wv/O6I/ufKTey+9yRfS/WjzpZ1icj073928+cFgErrJAgAz61jdV0H981Dqh20mBsCh0c8K77r+7823mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAE3Y249k67kTEUn8vTm7fv7Z2UH9j685S3U5fv76Vz5mmKCLi3Pp4dLzBvcy6y1euXlgdj0eXmg9ei4i2Vn+v2v6FT6YYHNHK9RH8ZzA39eBu9WW3n/PjB0W1lye/Vkv/IQEA8NQqqpbq+rvF9ko611mIePDjw/X/m1kcU9b/9z49fStfK6//h43tcPYtb1z8cvnylatvr19cPT86P/r8nRPDd4cnz5w6dWZ5cq9k2R0TAAAAHs+gann9P9g3Jv3b0SyOKev/r74ffpPP01P/H2jvoV/bmQAAABxuL77+15+dA853BoP4enVj49KwPO5+PlEeW0j1kc1VLa//ewttZwUAAAA0YWez89D7/2ezOKZ8/v/cT6/8ks/Zi4gj1fP/Y2tfjM82t52Z1sSvLre9RwAAANp1pGr58/9iIdX/3d1XHroR8dYbZVz9GcCp6v/eh9/+nK+Vv/9/srktzqTuYnk9Jv1iRH+x7YwAAAB4Wv39IOKZKFsq9v8otlc++/XoxwPv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA07Z8AAAD//ylXMzw=") write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 1.200077234s ago: executing program 5 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x3, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x13, 0x0, &(0x7f0000000340)="00001a09ff01ce2528673b968b61f2f6972523", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.159340346s ago: executing program 1 (id=177): r0 = socket$inet(0x2, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.142184816s ago: executing program 0 (id=178): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 1.06873812s ago: executing program 0 (id=179): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.06849654s ago: executing program 1 (id=180): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noquota}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\x00', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) syz_fuse_handle_req(r0, &(0x7f0000000c40)="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", 0x2000, &(0x7f000000a3c0)={&(0x7f0000002c40)={0x50, 0xffffffffffffffda, 0xffffffffb4aec602, {0x7, 0x2d, 0xfffffffa, 0x20010000, 0x1, 0x5, 0xfffffff1, 0x1, 0x0, 0x0, 0x40, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r0, r1, 0x0, 0xfffe80) 257.702518ms ago: executing program 5 (id=181): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/103, 0x67}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 128.286854ms ago: executing program 5 (id=182): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8004745a, 0x0) 72.822167ms ago: executing program 5 (id=183): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 45.796608ms ago: executing program 5 (id=184): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x18, {0x40, 0x0, 0x4, 0x1, 0x2, 0xf1e}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {0x0, 0x0, 0x0, 0x40}, 0x0, [0x1, 0x6, 0x0, 0x0, 0x40000000, 0x2, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xffff], [0x0, 0x0, 0x3, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x81, 0x0, 0x202, 0x10000000, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x6, 0x8], [0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x6, 0x0, 0x3, 0x0, 0x0, 0xe8c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0xffffffff, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0xfffffffd, 0xfae6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x38000], [0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2a, 0x0, 0x0, 0x0, 0x27, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x37, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80b8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x10000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 5 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f0000000400), 0x1000) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.989569][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 14.989584][ T30] audit: type=1400 audit(1790216358.100:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.001426][ T30] audit: type=1400 audit(1790216358.110:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.009681][ T30] audit: type=1400 audit(1790216358.120:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[13958]" dev="pipefs" ino=13958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.032076][ T30] audit: type=1400 audit(1790216358.120:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.051141][ T30] audit: type=1400 audit(1790216358.120:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 22.590992][ T30] audit: type=1400 audit(1790216365.710:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.595035][ T277] cgroup: Unknown subsys name 'net' [ 22.613885][ T30] audit: type=1400 audit(1790216365.710:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.641343][ T30] audit: type=1400 audit(1790216365.740:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.641787][ T277] cgroup: Unknown subsys name 'devices' [ 22.811739][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.817364][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.957116][ T30] audit: type=1400 audit(1790216366.070:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.980326][ T30] audit: type=1400 audit(1790216366.070:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.005225][ T30] audit: type=1400 audit(1790216366.070:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.024620][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.037160][ T30] audit: type=1400 audit(1790216366.150:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.063226][ T30] audit: type=1400 audit(1790216366.150:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.097888][ T30] audit: type=1400 audit(1790216366.210:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.124002][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.124025][ T30] audit: type=1400 audit(1790216366.210:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.632490][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.639594][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.647099][ T285] device bridge_slave_0 entered promiscuous mode [ 23.655555][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.662665][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.670165][ T285] device bridge_slave_1 entered promiscuous mode [ 23.764869][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.771977][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.779287][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.786359][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.835546][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.842712][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.850319][ T287] device bridge_slave_0 entered promiscuous mode [ 23.862306][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.869372][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.876925][ T288] device bridge_slave_0 entered promiscuous mode [ 23.885275][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.892400][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.899884][ T287] device bridge_slave_1 entered promiscuous mode [ 23.916227][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.923334][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.930803][ T288] device bridge_slave_1 entered promiscuous mode [ 23.943668][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.950766][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.958240][ T289] device bridge_slave_0 entered promiscuous mode [ 23.977242][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.984414][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.991899][ T289] device bridge_slave_1 entered promiscuous mode [ 24.012230][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.019308][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.026842][ T286] device bridge_slave_0 entered promiscuous mode [ 24.037003][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.044252][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.051659][ T286] device bridge_slave_1 entered promiscuous mode [ 24.157036][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.164118][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.171417][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.178459][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.186644][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.193919][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.201760][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.209089][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.218105][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.225780][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.262789][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.271409][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.278452][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.286105][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.294619][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.301717][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.322947][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.331815][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.344492][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.368893][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.377374][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.384503][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.395965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.404342][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.411414][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.437809][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.463290][ T285] device veth0_vlan entered promiscuous mode [ 24.470553][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.478490][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.486910][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.495298][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.502892][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.523435][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.555501][ T285] device veth1_macvtap entered promiscuous mode [ 24.562825][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.571840][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.580576][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.587988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.595585][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.603808][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.610849][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.618202][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.626600][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.633671][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.641935][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.650003][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.657955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.666655][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.675292][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.688446][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.696006][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.706126][ T287] device veth0_vlan entered promiscuous mode [ 24.721477][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.731040][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.739201][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.746279][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.754437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.762970][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.771282][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.778307][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.785732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.794222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.802833][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.811442][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.832054][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.842499][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.851199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.859264][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.867651][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.875778][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.884312][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.892947][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.901421][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.909640][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.916690][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.924211][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.932712][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.941007][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.948037][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.955591][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.967518][ T289] device veth0_vlan entered promiscuous mode [ 24.982212][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.990558][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 24.991116][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.017732][ T286] device veth0_vlan entered promiscuous mode [ 25.029021][ T287] device veth1_macvtap entered promiscuous mode [ 25.041847][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.049351][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.057102][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.065990][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.074168][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.082730][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.091288][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.099324][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.107436][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.115398][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.123622][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.131868][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.140107][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.147695][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.155265][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.173795][ T286] device veth1_macvtap entered promiscuous mode [ 25.181657][ T289] device veth1_macvtap entered promiscuous mode [ 25.188511][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.197723][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.207354][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.215272][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.227904][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.233170][ T313] process 'syz.0.6' launched './file0' with NULL argv: empty string added [ 25.237213][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.253399][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.262159][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.270442][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.280056][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.301174][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.309639][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.329475][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.337957][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.347514][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.361674][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.370385][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.379065][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.387587][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.396146][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.410106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.418229][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.426525][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.434422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.450097][ T288] device veth0_vlan entered promiscuous mode [ 25.487266][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.496171][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.511067][ T288] device veth1_macvtap entered promiscuous mode [ 25.540574][ T330] loop0: detected capacity change from 0 to 128 [ 25.555260][ T327] ip_tables: iptables: counters copy to user failed while replacing table [ 25.568676][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.578979][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.596796][ T334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.598517][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.622035][ T330] ======================================================= [ 25.622035][ T330] WARNING: The mand mount option has been deprecated and [ 25.622035][ T330] and is ignored by this kernel. Remove the mand [ 25.622035][ T330] option from the mount to silence this warning. [ 25.622035][ T330] ======================================================= [ 25.669268][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.684554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.730340][ T330] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 25.754539][ T330] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,init_itable=0x000000000000007f,,errors=continue. Quota mode: none. [ 25.788669][ T330] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 26.290422][ T366] program syz.2.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 26.571451][ T382] SELinux: failed to load policy [ 26.586875][ T369] loop0: detected capacity change from 0 to 40427 [ 26.616529][ T369] F2FS-fs (loop0): invalid crc value [ 26.646844][ T369] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 26.701040][ T369] F2FS-fs (loop0): Start checkpoint disabled! [ 26.713524][ T369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 26.876566][ T408] loop4: detected capacity change from 0 to 128 [ 26.908295][ T409] attempt to access beyond end of device [ 26.908295][ T409] loop0: rw=2049, want=45104, limit=40427 [ 26.938435][ T413] netlink: 'syz.1.41': attribute type 16 has an invalid length. [ 26.956426][ T413] netlink: 'syz.1.41': attribute type 17 has an invalid length. [ 27.020064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 27.029412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.048775][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 27.056858][ T26] tap0: tun_net_xmit 90 [ 27.069051][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.107894][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.119030][ T306] attempt to access beyond end of device [ 27.119030][ T306] loop0: rw=2049, want=40976, limit=40427 [ 27.138370][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.159922][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.174098][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.184248][ T414] tap0: tun_chr_ioctl cmd 1074025677 [ 27.189816][ T414] tap0: Linktype set failed because interface is up [ 27.220359][ T421] overlayfs: missing 'lowerdir' [ 27.260392][ T413] syz.1.41 (413) used greatest stack depth: 21344 bytes left [ 27.371389][ T433] xt_hashlimit: size too large, truncated to 1048576 [ 27.521773][ T440] netlink: 'syz.4.52': attribute type 4 has an invalid length. [ 27.541592][ T440] netlink: 'syz.4.52': attribute type 4 has an invalid length. [ 27.629636][ T20] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 27.685051][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 27.685066][ T30] audit: type=1400 audit(1790216370.800:146): avc: denied { ioctl } for pid=449 comm="syz.1.56" path="socket:[16527]" dev="sockfs" ino=16527 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.745250][ T30] audit: type=1400 audit(1790216370.860:147): avc: denied { create } for pid=453 comm="syz.2.58" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.769867][ T30] audit: type=1400 audit(1790216370.880:148): avc: denied { read write } for pid=453 comm="syz.2.58" name="file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.793334][ T30] audit: type=1400 audit(1790216370.880:149): avc: denied { open } for pid=453 comm="syz.2.58" path="/13/file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.819055][ T30] audit: type=1400 audit(1790216370.880:150): avc: denied { watch } for pid=453 comm="syz.2.58" path="/13/file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.864102][ T30] audit: type=1400 audit(1790216370.980:151): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.900952][ T460] xt_hashlimit: size too large, truncated to 1048576 [ 27.929694][ T30] audit: type=1400 audit(1790216371.000:152): avc: denied { read } for pid=457 comm="syz.2.60" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.953436][ T30] audit: type=1400 audit(1790216371.000:153): avc: denied { open } for pid=457 comm="syz.2.60" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.969655][ T26] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 27.977920][ T30] audit: type=1400 audit(1790216371.000:154): avc: denied { ioctl } for pid=457 comm="syz.2.60" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.010442][ T30] audit: type=1400 audit(1790216371.000:155): avc: denied { set_context_mgr } for pid=457 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 28.030295][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 28.041311][ T20] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 28.062610][ T20] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 28.156834][ T471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 28.170534][ T471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 28.179557][ T471] Zero length message leads to an empty skb [ 28.249600][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.258703][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.278412][ T20] usb 1-1: Product: syz [ 28.287126][ T20] usb 1-1: Manufacturer: syz [ 28.297084][ T20] usb 1-1: SerialNumber: syz [ 28.339593][ T429] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.339739][ T26] usb 5-1: not running at top speed; connect to a high speed hub [ 28.377599][ T474] x86/PAT: syz.3.67:474 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 28.439582][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.449834][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 28.458928][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.500389][ T26] usb 5-1: Found UVC 1.00 device (046d:0825) [ 28.507373][ T26] usb 5-1: No streaming interface found for terminal 2. [ 28.561218][ T429] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.568224][ T429] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.667679][ T493] syz.1.77 (493) used greatest stack depth: 20224 bytes left [ 28.707842][ T293] usb 5-1: USB disconnect, device number 2 [ 28.755954][ T495] loop1: detected capacity change from 0 to 2048 [ 28.783324][ T497] loop2: detected capacity change from 0 to 16 [ 28.821756][ T495] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 28.841902][ T497] erofs: (device loop2): mounted with root inode @ nid 36. [ 28.894953][ T497] attempt to access beyond end of device [ 28.894953][ T497] loop2: rw=524288, want=32, limit=16 [ 28.908606][ T497] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -11 in[50, 4046] out[4096] [ 28.965759][ T497] erofs: (device loop2): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 28.974887][ T497] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 28.984098][ T497] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 28.994009][ T497] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 29.004036][ T497] attempt to access beyond end of device [ 29.004036][ T497] loop2: rw=524288, want=56, limit=16 [ 29.015447][ T497] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -11 in[50, 4046] out[4096] [ 29.045784][ T497] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -11 in[50, 4046] out[8192] [ 29.090493][ T497] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -11 in[50, 4046] out[8192] [ 29.176910][ T509] loop4: detected capacity change from 0 to 7 [ 29.238968][ T429] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.252648][ T429] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.261794][ T513] loop1: detected capacity change from 0 to 512 [ 29.321520][ T513] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.347638][ T524] netlink: 27 bytes leftover after parsing attributes in process `syz.4.89'. [ 29.368224][ T513] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.382208][ T513] EXT4-fs (loop1): shut down requested (1) [ 29.388736][ T513] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 29.398018][ T513] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 29.408735][ T513] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 29.428608][ T528] input: syz0 as /devices/virtual/input/input4 [ 29.510225][ T20] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 29.526164][ T20] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 29.563244][ T537] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 29.626818][ T540] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 29.732567][ T20] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 29.745155][ T535] loop1: detected capacity change from 0 to 40427 [ 29.775437][ T20] usb 1-1: USB disconnect, device number 2 [ 29.793588][ T535] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 29.809964][ T535] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 29.821168][ T20] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 29.856888][ T535] F2FS-fs (loop1): invalid crc value [ 29.890825][ T549] SELinux: failed to load policy [ 29.896720][ T535] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 29.953386][ T535] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 29.962874][ T535] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 30.022211][ T535] attempt to access beyond end of device [ 30.022211][ T535] loop1: rw=2049, want=53256, limit=40427 [ 30.139767][ T287] attempt to access beyond end of device [ 30.139767][ T287] loop1: rw=2049, want=45104, limit=40427 [ 30.440766][ T595] Illegal XDP return value 5, expect packet loss! [ 30.509219][ T600] pimreg1: tun_chr_ioctl cmd 1074025677 [ 30.526739][ T600] pimreg1: linktype set to 778 [ 30.572840][ T602] loop4: detected capacity change from 0 to 4096 [ 30.616631][ T602] EXT4-fs (loop4): Test dummy encryption mode enabled [ 30.638432][ T602] EXT4-fs (loop4): Ignoring removed orlov option [ 30.648628][ T602] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 30.807492][ T616] loop4: detected capacity change from 0 to 512 [ 30.824322][ T616] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.843350][ T616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 30.863479][ T616] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.884473][ T616] EXT4-fs (loop4): 1 truncate cleaned up [ 30.901924][ T616] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,inode_readahead_blks=0x0000000008000000,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 31.085329][ T288] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /19/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.171406][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 31.186718][ T288] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 31.210679][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 31.217347][ T288] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /19/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.272898][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 31.302985][ T288] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 31.360931][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 31.368042][ T288] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /19/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.393485][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 31.410003][ T288] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 31.431880][ T629] loop0: detected capacity change from 0 to 256 [ 31.438867][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 31.453382][ T288] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /19/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.481176][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 31.487876][ T288] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 31.515582][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 31.530392][ T288] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /19/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 31.556336][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 31.573128][ T288] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 31.598403][ T629] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 31.616399][ T629] FAT-fs (loop0): Filesystem has been set read-only [ 31.626332][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 32.001131][ T636] loop2: detected capacity change from 0 to 40427 [ 32.029842][ T636] F2FS-fs (loop2): invalid crc value [ 32.061327][ T636] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 32.140659][ T636] F2FS-fs (loop2): Start checkpoint disabled! [ 32.147079][ T655] netlink: 'syz.1.133': attribute type 16 has an invalid length. [ 32.156586][ T636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 32.164406][ T655] netlink: 'syz.1.133': attribute type 17 has an invalid length. [ 32.296359][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.327325][ T645] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.370024][ T645] device bridge_slave_0 entered promiscuous mode [ 32.377195][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.390171][ T645] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.397706][ T645] device bridge_slave_1 entered promiscuous mode [ 32.435962][ T306] attempt to access beyond end of device [ 32.435962][ T306] loop2: rw=2049, want=40976, limit=40427 [ 32.585185][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.592323][ T645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.599680][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.606734][ T645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.665611][ T678] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.710858][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.720754][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.741839][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.790357][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.798933][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.806035][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.841069][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 32.841084][ T30] audit: type=1400 audit(1790216375.960:250): avc: denied { mount } for pid=692 comm="syz.0.148" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 32.869459][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.886298][ T695] loop2: detected capacity change from 0 to 512 [ 32.898736][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.905841][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.917013][ T699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 32.936145][ T30] audit: type=1400 audit(1790216376.010:251): avc: denied { append } for pid=692 comm="syz.0.148" name="trigger" dev="tracefs" ino=1650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 32.946230][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.976998][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.987556][ T695] EXT4-fs (loop2): Ignoring removed bh option [ 33.003972][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.017022][ T695] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.029631][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.053788][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.063470][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.076059][ T645] device veth0_vlan entered promiscuous mode [ 33.086082][ T695] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 33.105052][ T695] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.115437][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.116120][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.150209][ T30] audit: type=1400 audit(1790216376.270:252): avc: denied { write } for pid=694 comm="syz.2.150" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.196078][ T645] device veth1_macvtap entered promiscuous mode [ 33.203516][ T30] audit: type=1400 audit(1790216376.300:253): avc: denied { ioctl } for pid=694 comm="syz.2.150" path="/42/file1/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 33.210792][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.237508][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.245491][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.253783][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.262306][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.284296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.295890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.311347][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.326544][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.381153][ T30] audit: type=1400 audit(1790216376.500:254): avc: denied { mounton } for pid=645 comm="syz-executor" path="/root/syzkaller.2UBr6e/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.570350][ T729] loop5: detected capacity change from 0 to 512 [ 33.587252][ T729] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 33.621913][ T729] EXT4-fs (loop5): Ignoring removed nobh option [ 33.631061][ T306] device bridge_slave_1 left promiscuous mode [ 33.638440][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.659127][ T306] device bridge_slave_0 left promiscuous mode [ 33.668769][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.681321][ T30] audit: type=1400 audit(1790216376.800:255): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.705090][ T306] device veth1_macvtap left promiscuous mode [ 33.714710][ T306] device veth0_vlan left promiscuous mode [ 33.716153][ T729] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,bsddf,journal_dev=0x0000000000000007,nobh,,errors=continue. Quota mode: writeback. [ 33.721413][ T30] audit: type=1400 audit(1790216376.830:256): avc: denied { unlink } for pid=289 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 33.760082][ T729] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.790576][ T30] audit: type=1400 audit(1790216376.850:257): avc: denied { rmdir } for pid=289 comm="syz-executor" name="dev" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.813691][ T30] audit: type=1400 audit(1790216376.910:258): avc: denied { setattr } for pid=726 comm="syz.1.158" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.858658][ T729] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.159: corrupted xattr block 33 [ 33.897098][ T30] audit: type=1400 audit(1790216377.010:259): avc: denied { read } for pid=734 comm="syz.0.161" path="socket:[17739]" dev="sockfs" ino=17739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.915317][ T729] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 33.945446][ T729] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.159: corrupted xattr block 33 [ 33.958861][ T740] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.159: corrupted xattr block 33 [ 33.971147][ T729] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 34.009689][ T740] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 34.020012][ T729] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.159: corrupted xattr block 33 [ 34.053340][ T740] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.159: corrupted xattr block 33 [ 34.066223][ T729] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 34.082323][ T740] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 34.457900][ T785] loop1: detected capacity change from 0 to 1024 [ 34.557887][ T772] loop2: detected capacity change from 0 to 40427 [ 35.272304][ T772] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 35.279058][ T772] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 35.322994][ T785] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,noquota,,errors=continue. Quota mode: none. [ 35.323397][ T772] F2FS-fs (loop2): invalid crc value [ 35.436994][ T772] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.489980][ T800] input: syz1 as /devices/virtual/input/input5 [ 35.522113][ T772] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 35.552184][ T772] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.574494][ T796] ================================================================== [ 35.582628][ T796] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 35.590747][ T796] Read of size 4 at addr ffff888128aa1c00 by task syz.5.182/796 [ 35.598411][ T796] [ 35.600757][ T796] CPU: 1 PID: 796 Comm: syz.5.182 Not tainted syzkaller #0 [ 35.607974][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.618080][ T796] Call Trace: [ 35.621392][ T796] [ 35.624344][ T796] __dump_stack+0x21/0x30 [ 35.628700][ T796] dump_stack_lvl+0x110/0x170 [ 35.633397][ T796] ? show_regs_print_info+0x20/0x20 [ 35.638644][ T796] ? load_image+0x3f0/0x3f0 [ 35.643180][ T796] ? __local_bh_enable_ip+0x58/0x80 [ 35.648411][ T796] print_address_description+0x7f/0x2c0 [ 35.653989][ T796] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 35.659745][ T796] kasan_report+0x10f/0x150 [ 35.664270][ T796] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 35.670022][ T796] __asan_report_load4_noabort+0x14/0x20 [ 35.675685][ T796] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 35.681273][ T796] pppol2tp_release+0x150/0x2b0 [ 35.686156][ T796] sock_close+0xb8/0x200 [ 35.690429][ T796] ? sock_mmap+0xa0/0xa0 [ 35.694700][ T796] __fput+0x22b/0x900 [ 35.698747][ T796] ____fput+0x15/0x20 [ 35.702766][ T796] task_work_run+0x127/0x190 [ 35.707386][ T796] do_exit+0xb70/0x29a0 [ 35.711569][ T796] ? __se_sys_clock_nanosleep+0x30b/0x3a0 [ 35.717321][ T796] ? put_task_struct+0x90/0x90 [ 35.722117][ T796] ? __kasan_check_write+0x14/0x20 [ 35.727270][ T796] __x64_sys_exit+0x40/0x40 [ 35.731824][ T796] x64_sys_call+0x44/0x9a0 [ 35.736267][ T796] do_syscall_64+0x4c/0xa0 [ 35.740712][ T796] ? clear_bhb_loop+0x50/0xa0 [ 35.745417][ T796] ? clear_bhb_loop+0x50/0xa0 [ 35.750126][ T796] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.756057][ T796] RIP: 0033:0x7f328bbfb159 [ 35.760494][ T796] Code: Unable to access opcode bytes at RIP 0x7f328bbfb12f. [ 35.767880][ T796] RSP: 002b:00007f328a653ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 35.776325][ T796] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f328bbfb159 [ 35.784326][ T796] RDX: 00007f328a6549c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.792320][ T796] RBP: 00007f328bc9206b R08: 0000000000000000 R09: 0000000000000058 [ 35.800316][ T796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.808312][ T796] R13: 00007f328be83038 R14: 00007f328be82fa0 R15: 00007ffe6fd17068 [ 35.816327][ T796] [ 35.819393][ T796] [ 35.821735][ T796] Allocated by task 795: [ 35.825991][ T796] __kasan_kmalloc+0xd4/0x100 [ 35.830694][ T796] __kmalloc+0x13d/0x2c0 [ 35.834957][ T796] l2tp_session_create+0x39/0xb60 [ 35.840010][ T796] pppol2tp_connect+0xbf5/0x1640 [ 35.844978][ T796] __sys_connect+0x3cb/0x450 [ 35.849594][ T796] __x64_sys_connect+0x7a/0x90 [ 35.854376][ T796] x64_sys_call+0x7c/0x9a0 [ 35.858814][ T796] do_syscall_64+0x4c/0xa0 [ 35.863254][ T796] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.869180][ T796] [ 35.871521][ T796] Freed by task 8: [ 35.875251][ T796] kasan_set_track+0x4a/0x70 [ 35.879860][ T796] kasan_set_free_info+0x23/0x40 [ 35.879881][ T45] tipc: Subscription rejected, illegal request [ 35.890981][ T796] ____kasan_slab_free+0x125/0x160 [ 35.896158][ T796] __kasan_slab_free+0x11/0x20 [ 35.900951][ T796] slab_free_freelist_hook+0xc2/0x190 [ 35.906347][ T796] kfree+0xc4/0x270 [ 35.910186][ T796] l2tp_session_put+0xaf/0x1a0 [ 35.915013][ T796] l2tp_session_delete+0x3a9/0x4a0 [ 35.920160][ T796] l2tp_tunnel_del_work+0x180/0x3d0 [ 35.925391][ T796] process_one_work+0x6c8/0xbb0 [ 35.930270][ T796] worker_thread+0xaa0/0x1250 [ 35.934972][ T796] kthread+0x3f5/0x4f0 [ 35.939086][ T796] ret_from_fork+0x1f/0x30 [ 35.943560][ T796] [ 35.945902][ T796] The buggy address belongs to the object at ffff888128aa1c00 [ 35.945902][ T796] which belongs to the cache kmalloc-512 of size 512 [ 35.960913][ T796] The buggy address is located 0 bytes inside of [ 35.960913][ T796] 512-byte region [ffff888128aa1c00, ffff888128aa1e00) [ 35.974051][ T796] The buggy address belongs to the page: [ 35.979753][ T796] page:ffffea0004a2a800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128aa0 [ 35.990043][ T796] head:ffffea0004a2a800 order:2 compound_mapcount:0 compound_pincount:0 [ 35.998663][ T796] flags: 0x4000000000010200(slab|head|zone=1) [ 36.004777][ T796] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 36.013403][ T796] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 36.022005][ T796] page dumped because: kasan: bad access detected [ 36.028435][ T796] page_owner tracks the page as allocated [ 36.034205][ T796] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, ts 24312057208, free_ts 0 [ 36.052411][ T796] post_alloc_hook+0x192/0x1b0 [ 36.057212][ T796] prep_new_page+0x1c/0x110 [ 36.061746][ T796] get_page_from_freelist+0x2c3a/0x2cd0 [ 36.067336][ T796] __alloc_pages+0x1a2/0x460 [ 36.071954][ T796] new_slab+0xa0/0x4d0 [ 36.076044][ T796] ___slab_alloc+0x3ac/0x840 [ 36.080664][ T796] __slab_alloc+0x49/0x90 [ 36.085036][ T796] __kmalloc+0x16a/0x2c0 [ 36.089311][ T796] qdisc_alloc+0x79/0x7b0 [ 36.093663][ T796] qdisc_create_dflt+0x6b/0x390 [ 36.098876][ T796] dev_activate+0x28e/0x1030 [ 36.103502][ T796] __dev_open+0x3e9/0x500 [ 36.107861][ T796] __dev_change_flags+0x1e4/0x6a0 [ 36.112923][ T796] dev_change_flags+0x80/0x1a0 [ 36.117726][ T796] do_setlink+0xc95/0x2970 [ 36.122174][ T796] rtnl_newlink+0x1598/0x1900 [ 36.126876][ T796] page_owner free stack trace missing [ 36.132269][ T796] [ 36.134613][ T796] Memory state around the buggy address: [ 36.140269][ T796] ffff888128aa1b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 36.148364][ T796] ffff888128aa1b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.156541][ T796] >ffff888128aa1c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.164628][ T796] ^ [ 36.168721][ T796] ffff888128aa1c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.176806][ T796] ffff888128aa1d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.184894][ T796] ================================================================== [ 36.192980][ T796] Disabling lock debugging due to kernel taint [ 36.304476][ T796] ------------[ cut here ]------------ [ 36.318260][ T796] WARNING: CPU: 0 PID: 796 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.345806][ T796] Modules linked in: [ 36.370042][ T796] CPU: 0 PID: 796 Comm: syz.5.182 Tainted: G B syzkaller #0 [ 36.378698][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.516479][ T796] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.523308][ T796] Code: 5d c3 e8 0c f9 0a fd be 02 00 00 00 eb 0a e8 00 f9 0a fd be 01 00 00 00 4c 89 f7 e8 03 69 f1 fd e9 0f ff ff ff e8 e9 f8 0a fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 d8 f8 0a fd 4c 89 f7 be 03 [ 36.543521][ T796] RSP: 0018:ffffc90000c57bf0 EFLAGS: 00010293 [ 36.549826][ T796] RAX: ffffffff845eceb7 RBX: ffff8881075b0000 RCX: ffff8881150313c0 [ 36.557830][ T796] RDX: 0000000000000000 RSI: 0000000009c74880 RDI: 000000000c04eb7d [ 36.571188][ T796] RBP: ffffc90000c57c10 R08: 0000000000000003 R09: 0000000000000004 [ 36.579230][ T796] R10: dffffc0000000000 R11: fffffbfff0e18e4c R12: dffffc0000000000 [ 36.587867][ T796] R13: dffffc0000000000 R14: 0000000009c74880 R15: ffff888128aa1c00 [ 36.596772][ T796] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.608803][ T796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.615631][ T796] CR2: 00005555631e07d0 CR3: 000000010d678000 CR4: 00000000003506b0 [ 36.623810][ T796] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.632238][ T796] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.640403][ T796] Call Trace: [ 36.643710][ T796] [ 36.646662][ T796] pppol2tp_release+0x150/0x2b0 [ 36.651998][ T796] sock_close+0xb8/0x200 [ 36.656420][ T796] ? sock_mmap+0xa0/0xa0 [ 36.662962][ T796] __fput+0x22b/0x900 [ 36.666981][ T796] ____fput+0x15/0x20 [ 36.671199][ T796] task_work_run+0x127/0x190 [ 36.675819][ T796] do_exit+0xb70/0x29a0 [ 36.680203][ T796] ? __se_sys_clock_nanosleep+0x30b/0x3a0 [ 36.686105][ T796] ? put_task_struct+0x90/0x90 [ 36.693708][ T796] ? __kasan_check_write+0x14/0x20 [ 36.698873][ T796] __x64_sys_exit+0x40/0x40 [ 36.703640][ T796] x64_sys_call+0x44/0x9a0 [ 36.708088][ T796] do_syscall_64+0x4c/0xa0 [ 36.712922][ T796] ? clear_bhb_loop+0x50/0xa0 [ 36.717633][ T796] ? clear_bhb_loop+0x50/0xa0 [ 36.722575][ T796] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.728504][ T796] RIP: 0033:0x7f328bbfb159 [ 36.735654][ T796] Code: Unable to access opcode bytes at RIP 0x7f328bbfb12f. [ 36.743246][ T796] RSP: 002b:00007f328a653ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 36.751870][ T796] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f328bbfb159 [ 36.760275][ T796] RDX: 00007f328a6549c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.768281][ T796] RBP: 00007f328bc9206b R08: 0000000000000000 R09: 0000000000000058 [ 36.776736][ T796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.787064][ T796] R13: 00007f328be83038 R14: 00007f328be82fa0 R15: 00007ffe6fd17068 [ 36.796453][ T796] [ 36.799631][ T796] ---[ end trace 5265d00cbb2c91d4 ]--- [ 36.890793][ T8] device bridge_slave_1 left promiscuous mode [ 36.896998][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.904878][ T8] device bridge_slave_0 left promiscuous mode [ 36.911140][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.919338][ T8] device veth1_macvtap left promiscuous mode [ 36.925651][ T8] device veth0_vlan left promiscuous mode [ 38.080534][ T8] device bridge_slave_1 left promiscuous mode [ 38.086666][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.094304][ T8] device bridge_slave_0 left promiscuous mode [ 38.100553][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.108531][ T8] device bridge_slave_1 left promiscuous mode [ 38.114761][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.122370][ T8] device bridge_slave_0 left promiscuous mode [ 38.128493][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.136528][ T8] device bridge_slave_1 left promiscuous mode [ 38.142931][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.150500][ T8] device bridge_slave_0 left promiscuous mode [ 38.156620][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.165167][ T8] device veth1_macvtap left promiscuous mode [ 38.171212][ T8] device veth0_vlan left promiscuous mode [ 38.177278][ T8] device veth1_macvtap left promiscuous mode [ 38.183374][ T8] device veth0_vlan left promiscuous mode [ 38.189639][ T8] device veth1_macvtap left promiscuous mode [ 38.195644][ T8] device veth0_vlan left promiscuous mode