last executing test programs: 14.92043599s ago: executing program 3 (id=219): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/215, 0x11c}], 0x1, 0x94, 0x0) 14.852091502s ago: executing program 3 (id=221): syz_mount_image$vfat(&(0x7f0000001880), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_mixed}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_mixed}, {@rodir}, {@shortname_mixed}, {@rodir}, {@uni_xlate}, {@utf8no}]}, 0x1, 0x2c3, &(0x7f0000001500)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) 14.744471254s ago: executing program 3 (id=225): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@none, 0x4}) 14.118288448s ago: executing program 3 (id=228): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feff"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0xa43, 0x0, 0x0, 0xf81d76b95c8858cb, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 12.760136989s ago: executing program 0 (id=240): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) socket(0x1d, 0x2, 0x6) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.756407759s ago: executing program 0 (id=241): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000002d80)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x20}, 0x1, 0x7}, 0x4000810) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@mcast2, @remote, @loopback, 0x5, 0x6, 0x0, 0x100, 0x5, 0x500000}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104, r2}) sendmmsg$inet6(r1, 0x0, 0x0, 0x400c0c4) r3 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$l2tp6(r3, &(0x7f0000000040), 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000200), 0x12) bind$x25(r5, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 2.62131919s ago: executing program 0 (id=249): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f086dd", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.564405041s ago: executing program 3 (id=250): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x7, 0x11, "090041c20949e0afc65b200dd6a091"}]}}}], 0x48}, 0x20002800) 2.563826461s ago: executing program 0 (id=252): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 2.563592111s ago: executing program 3 (id=253): socket$inet6_tcp(0xa, 0x1, 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="6d9dda308894184c05a365776f72795f6c6f63616c6576656a74732c00"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xf9, 0x4a4, &(0x7f0000000380)="$eJzs3M1rHGUYAPBndjdJvxNr/WitNlrF4kfSpFULCn6A4EFB0EM9SUzSUps20kRoS7BRSr0IWvAughfRv8CTJ1FPgle9S6FIL62eViY7s26S3U2y+dh8/H4w2Xl33pn3feadj3dmdhLAltWb/kkidkXEHxHRHRGF2gzbK0Oa786tqeF/bk0NJ1Euv/V3ks4Wt29NDedZk+xzZyVRShdUuJrES3XKnbh0+ezQ2NjohSzdP3nug/6JS5efPnNu6PTo6dHzgydOHD828Nyzg8+sSJxpnW4f+Gj84P7X3rn+xvDJ6+/98n0SsSOfXhvHMj3fXR2dqq6TuR5bocLWi90140mpjRVhSboiIm2ujpn9vzuKV/dUp3XHq5+0tXLAqiqXy+XBxpOny8AmlkQrcxWzYwewceUn+vT6Nx/WqOuxLtx8uXIBlMZ9JxsqU0qV+yBdlWuj3atUfm9EnJz+96t0iCXfh+hYpVoBAJvZj2n/56k6/b9SxL01+fZkz4Z6IuKuiNgbEXdHxL6IuCcqee+LiPvrF9P7boPye+ek5/d/CjeWEd6C0v7fC9mzrdn9v+pTsJ5ilto9E39HcurM2OjRbJ0ciY6uND1Qd+lJxHT6+fvnjcqv7f+lQ1p+3hfM6nGj1DV7npGhyaFlB565+XHEgVK9+JMo/R9F7I+IAy2WceaJbw/O/qZYHVs4/iZW4DlT+euIxyvtPx1z4s8lzZ9P9m+LsdGj/flWMd+vv117s1H5lfgL0Tz+7csPtIG0/XfU2/5frMbfk9Q+r52Yt4jOhcq49uenDa9pWt3+O5O3ZxV+cWhy8sJARGfy+vzva25w5+mLI9/N5E/jP3K4/v6/N5snjf+BiEg34gcj4qGIOJTV/eGIeCQiDjeJ/+dXHn2/YfyHFr/9Tzcpo1Vp/CN1j3+N2n8JI9uyJZz96YdG5VfbP2+wuu1/PE/MVGoxx7/F1rSVdQYAAAAbTSEidkVS6KuOFwp9fZXfy++LHYWx8YnJJ0+Nf3h+pPKOQE90FPI7Xd0190MHsnvDeXowS1/J0sey+8ZfFrfPpPuGx8dG2h08bHE7G+z/qb+K7a4dsOrmPUcrd7enIsCa874mbF2t7/+OHLDRLbAXF9aqHsDacxaHrave/n+lNpFE5VfywKbj/A9bV3X//2IRmWte95r78iaw8TQ7//spAGxu+v+wJbX0Xv96GolvIprnSdZLVZc08tlyZi+tQQ2j0Mb109mWRhksRrRxkygt9r9axKXylWUX2u4jEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMr4LwAA//9nM9m2") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x198) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) open(&(0x7f0000000100)='./file0\x00', 0x14f840, 0x1e9) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/user\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000140)={'batadv_slave_1\x00', {0x2, 0x4e1e, @remote}}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000000c0)={0x9, 0x4}) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904"], 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 1.497782876s ago: executing program 2 (id=263): bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={0x0}, 0x18) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) 1.461597356s ago: executing program 4 (id=264): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21880b00000000000000215dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 1.384345818s ago: executing program 2 (id=266): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) socket(0x1d, 0x2, 0x6) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.381252429s ago: executing program 0 (id=267): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000028c0)=@base={0x12, 0x8, 0x4, 0x7, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) 1.374383629s ago: executing program 2 (id=268): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) 1.362617819s ago: executing program 4 (id=270): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) prctl$PR_SET_SECUREBITS(0x1c, 0xb3d6f486854de123) 1.272386051s ago: executing program 1 (id=271): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0xfe, 0x1d0, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000080)={'bridge0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) 1.272101781s ago: executing program 2 (id=272): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@nfs_export_off, 0x0}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ptrace$getsig(0x4202, r2, 0x40a0, &(0x7f0000000180)) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) prctl$PR_SET_SECUREBITS(0x1c, 0xb3d6f486854de123) socket$inet6_udplite(0xa, 0x2, 0x88) clock_adjtime(0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = fsmount(r0, 0x0, 0x0) read(r0, &(0x7f0000000240)=""/91, 0x5b) unshare(0x18000900) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) 917.013369ms ago: executing program 1 (id=273): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000002d80)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x20}, 0x1, 0x7}, 0x4000810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@mcast2, @remote, @loopback, 0x5, 0x6, 0x0, 0x100, 0x5, 0x500000}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104, r2}) sendmmsg$inet6(r1, 0x0, 0x0, 0x400c0c4) r3 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$l2tp6(r3, &(0x7f0000000040), 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000200), 0x12) bind$x25(r5, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 856.909221ms ago: executing program 1 (id=274): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) 420.489531ms ago: executing program 4 (id=275): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d8000000140081054e81f782db44b904021f08020a000000040000a129000200e00000e4ffff0d1208000f0100810401880016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee080005c8400f45312b3429fa0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 420.191571ms ago: executing program 0 (id=276): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) 419.961631ms ago: executing program 1 (id=277): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff020000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) 388.079781ms ago: executing program 1 (id=278): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) socket(0x1d, 0x2, 0x6) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 356.618002ms ago: executing program 4 (id=279): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 335.629053ms ago: executing program 1 (id=280): r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 175.898426ms ago: executing program 4 (id=281): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="cb000000150081054e81f7820244b904021f08010a000000040000a118010200ac479fefecbfdc7c43af73eba443fe141414ffff0d1208000f010081040188001603000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fdae408f456211bef32d400000000cb09efff001fb791643a5ecb001b146218a09345d600a7214f842ea90300000000d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db7d3ac000040fad95667e0060000000000000080bb9ad809d5e1ca", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x24008804) 74.367738ms ago: executing program 2 (id=282): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000010006bcc9e3be3206e17aa31076b876c1d0000007ea60864160af36504001a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb9864f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x900000000000000) 393.84µs ago: executing program 4 (id=283): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xfe, 0x1d0, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000080)={'bridge0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) 0s ago: executing program 2 (id=284): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. syzkaller login: [ 29.302985][ T4315] cgroup: Unknown subsys name 'net' [ 29.528998][ T4315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.823329][ T4315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.989174][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.989324][ T4338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.992270][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.992846][ T4333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.995350][ T4339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.996771][ T4333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.997055][ T4333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.998504][ T4339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.000002][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.000760][ T4339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.001712][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.002999][ T4339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.004019][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.005306][ T4339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.008158][ T4339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.013955][ T4338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.017875][ T4338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.019416][ T4339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.021652][ T4339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.023397][ T4339] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.024581][ T4333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.024812][ T4339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.027401][ T4333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.028834][ T4333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.047006][ T4329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.055072][ T4329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.056924][ T4329] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.058710][ T4329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.060249][ T4329] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.061540][ T4329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.166178][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 31.189932][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 31.194226][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 31.210998][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 31.235223][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.236666][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.238259][ T4328] device bridge_slave_0 entered promiscuous mode [ 31.241683][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.242955][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.244497][ T4328] device bridge_slave_1 entered promiscuous mode [ 31.254249][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.255505][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.258286][ T4337] device bridge_slave_0 entered promiscuous mode [ 31.260233][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.261569][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.263106][ T4337] device bridge_slave_1 entered promiscuous mode [ 31.272782][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 31.288499][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.289903][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.291492][ T4327] device bridge_slave_0 entered promiscuous mode [ 31.296828][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.298153][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.299782][ T4335] device bridge_slave_0 entered promiscuous mode [ 31.302708][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.305277][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.307279][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.308687][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.310200][ T4335] device bridge_slave_1 entered promiscuous mode [ 31.313800][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.315135][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.317307][ T4327] device bridge_slave_1 entered promiscuous mode [ 31.319364][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.321640][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.338875][ T4337] team0: Port device team_slave_0 added [ 31.345168][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.349321][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.351431][ T4337] team0: Port device team_slave_1 added [ 31.353407][ T4328] team0: Port device team_slave_0 added [ 31.355281][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.363188][ T4328] team0: Port device team_slave_1 added [ 31.367660][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.372105][ T4335] team0: Port device team_slave_0 added [ 31.373813][ T4335] team0: Port device team_slave_1 added [ 31.380846][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.382071][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.383751][ T4332] device bridge_slave_0 entered promiscuous mode [ 31.388270][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.389577][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.393953][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.400346][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.401613][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.403276][ T4332] device bridge_slave_1 entered promiscuous mode [ 31.407984][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.409121][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.413631][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.419140][ T4327] team0: Port device team_slave_0 added [ 31.420520][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.421572][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.425840][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.428489][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.429616][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.433548][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.442229][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.443408][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.447770][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.450418][ T4327] team0: Port device team_slave_1 added [ 31.455267][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.456825][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.460950][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.464608][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.465809][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.470356][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.474099][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.480458][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.481676][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.486257][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.491691][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.547242][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.586207][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.677790][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.716247][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.756041][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.757470][ T4335] Cannot create hsr debugfs directory [ 31.760599][ T4332] team0: Port device team_slave_0 added [ 31.766399][ T4332] team0: Port device team_slave_1 added [ 31.827007][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.866181][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.916010][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.917290][ T4328] Cannot create hsr debugfs directory [ 31.956971][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.996163][ T4327] device hsr_slave_1 entered promiscuous mode [ 32.046023][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.047330][ T4327] Cannot create hsr debugfs directory [ 32.057226][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.058560][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.062828][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.073458][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.074641][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.079188][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.177168][ T4332] device hsr_slave_0 entered promiscuous mode [ 32.218475][ T4332] device hsr_slave_1 entered promiscuous mode [ 32.256160][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.257598][ T4332] Cannot create hsr debugfs directory [ 32.328332][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.369637][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.407883][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.450094][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.508816][ T4337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.549517][ T4337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.617530][ T4337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.664634][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.697389][ T4337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.746638][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.811713][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.847132][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.906901][ T4328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.957016][ T4328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.998181][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.000416][ T4328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.033070][ T4328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.046410][ T4340] Bluetooth: hci4: command 0x0409 tx timeout [ 33.047661][ T4340] Bluetooth: hci1: command 0x0409 tx timeout [ 33.048694][ T4340] Bluetooth: hci2: command 0x0409 tx timeout [ 33.049697][ T4340] Bluetooth: hci0: command 0x0409 tx timeout [ 33.060742][ T4332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.087215][ T4332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.126585][ T4333] Bluetooth: hci3: command 0x0409 tx timeout [ 33.129826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.131922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.134909][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.136833][ T4332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.187828][ T4332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.234837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.236649][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.238483][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.239736][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.241545][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.256956][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.262850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.264810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.269187][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.270405][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.271862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.273564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.275594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.278015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.279648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.281356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.287591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.289182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.305869][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.307871][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.309432][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.310984][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.315496][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.320322][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.329375][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.331823][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.333301][ T1671] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.334529][ T1671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.336607][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.348139][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.349923][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.351432][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.352700][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.354084][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.372363][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.380055][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.382413][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.383874][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.385699][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.388300][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.403053][ T4337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.404711][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.412232][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.413895][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.415459][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.416789][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.420250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.422413][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.424344][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.429818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.431531][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.432901][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.434566][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.436837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.443110][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.444650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.449205][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.451228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.452851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.454530][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.455845][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.457530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.459040][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.463799][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.471378][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.474882][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.483899][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.487652][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.489012][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.490497][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.492259][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.493804][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.495177][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.497746][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.499640][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.501235][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.502732][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.504422][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.509444][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.510804][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.512232][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.521469][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.523236][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.524830][ T1671] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.526077][ T1671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.532886][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.534854][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.538088][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.539891][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.557247][ T4335] device veth0_vlan entered promiscuous mode [ 33.559655][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.561474][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.562992][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.564043][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.565611][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.571815][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.573621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.575409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.578312][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.580498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.582100][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.583845][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.585482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.590547][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.592124][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.593916][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.595608][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.599349][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.601006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.602503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.603711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.610390][ T4332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.611898][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.614544][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.616448][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.622170][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.624031][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.625543][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.628024][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.629663][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.631314][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.633301][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.634886][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.640321][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.642080][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.643592][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.645243][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.647538][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.649508][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.651201][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.652836][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.654755][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.657864][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.661375][ T4335] device veth1_vlan entered promiscuous mode [ 33.665755][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.668771][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.672394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.674323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.678797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.687339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.689022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.690587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.702634][ T4335] device veth0_macvtap entered promiscuous mode [ 33.717634][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.720902][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.722636][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.723932][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.727812][ T4335] device veth1_macvtap entered promiscuous mode [ 33.741650][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.743358][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.745014][ T1671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.750314][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.752891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.754503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.757630][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.771504][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.773234][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.775544][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.777946][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.779434][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.780867][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.799144][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.800918][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.802626][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.814123][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.825773][ T4337] device veth0_vlan entered promiscuous mode [ 33.829183][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.830487][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.841152][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.847144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.848535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.858626][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.872382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.874042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.875601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.878890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.881142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.882478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.885462][ T4337] device veth1_vlan entered promiscuous mode [ 33.890767][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.891270][ T4328] device veth0_vlan entered promiscuous mode [ 33.892132][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.895385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.897426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.898897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.900280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.908191][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.915236][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.917210][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.918830][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.923638][ T4328] device veth1_vlan entered promiscuous mode [ 33.930947][ T4337] device veth0_macvtap entered promiscuous mode [ 33.939581][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.941293][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.942791][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.944391][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.948722][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.956512][ T4337] device veth1_macvtap entered promiscuous mode [ 33.958458][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.959860][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.961412][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.963000][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.983720][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.985666][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.991246][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.992537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.994242][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.995794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.998586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.000289][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.001938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.004431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.011103][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.014122][ T4328] device veth0_macvtap entered promiscuous mode [ 34.017071][ T4327] device veth0_vlan entered promiscuous mode [ 34.029131][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.032638][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.035023][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.041439][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.043172][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.044758][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.049960][ T4337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.051491][ T4337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.053181][ T4337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.054770][ T4337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.065823][ T4328] device veth1_macvtap entered promiscuous mode [ 34.081054][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.082862][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.084431][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.087276][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.089659][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.091162][ T4409] loop2: detected capacity change from 0 to 4096 [ 34.093415][ T4327] device veth1_vlan entered promiscuous mode [ 34.102991][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.104689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.109298][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.110951][ T4409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.111088][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.114424][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.124149][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.127936][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.132193][ T55] Bluetooth: hci5: Frame reassembly failed (-84) [ 34.140102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.142012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.147266][ T4409] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.6: corrupted inode contents [ 34.147933][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.151102][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.152781][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.154546][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.157713][ T4409] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #15: comm syz.2.6: mark_inode_dirty error [ 34.158165][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.161292][ T4409] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.6: corrupted inode contents [ 34.161519][ T4327] device veth0_macvtap entered promiscuous mode [ 34.164440][ T4409] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.6: mark_inode_dirty error [ 34.170145][ T4409] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.6: corrupted inode contents [ 34.170672][ T4327] device veth1_macvtap entered promiscuous mode [ 34.173363][ T4409] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.6: mark_inode_dirty error [ 34.178219][ T4409] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.6: corrupted inode contents [ 34.179289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.182120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.183612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.184122][ T4409] EXT4-fs error (device loop2): ext4_truncate:4325: inode #15: comm syz.2.6: mark_inode_dirty error [ 34.185188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.192464][ T4409] EXT4-fs error (device loop2): ext4_evict_inode:292: comm syz.2.6: couldn't truncate inode 15 (err -117) [ 34.197181][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.200209][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.204106][ T4332] device veth0_vlan entered promiscuous mode [ 34.209638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.211247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.213254][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.214770][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.216835][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.218316][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.221364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.222970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.240059][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.241928][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.244086][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.245844][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.248393][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.250288][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.253022][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.255383][ T4332] device veth1_vlan entered promiscuous mode [ 34.265080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.266905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.268417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.270160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.272460][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.274124][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.275889][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.277805][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.279464][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.281211][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.283458][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.287267][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.288720][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.290186][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.291537][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.299833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.301814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.303526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.304960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.327443][ T4332] device veth0_macvtap entered promiscuous mode [ 34.330552][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.331997][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.337685][ T4332] device veth1_macvtap entered promiscuous mode [ 34.339755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.341890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.358102][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.360062][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.361725][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.363203][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.364802][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.367229][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.368882][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.370589][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.373014][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.374305][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.381040][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.387470][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.389194][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.390723][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.393025][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.394659][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.396467][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.398214][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.399905][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.402258][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.408491][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.410047][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.429309][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.430843][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.432268][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.433565][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.434811][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.444451][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.447250][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.448816][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.450296][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.451673][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.468247][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.468357][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.469605][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.469802][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.470711][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.471953][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.494105][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.495632][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.503005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.504748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.508356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.509929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.529943][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.531344][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.532695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.614686][ T4418] tipc: Started in network mode [ 34.615716][ T4418] tipc: Node identity ac14140f, cluster identity 4711 [ 34.622348][ T4418] tipc: Enabled bearer , priority 10 [ 34.926294][ T4378] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.123723][ T4423] loop3: detected capacity change from 0 to 40427 [ 35.135917][ T4423] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 35.141683][ T4423] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 35.153084][ T4423] F2FS-fs (loop3): invalid crc value [ 35.171902][ T4423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.176177][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 35.178869][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 35.180169][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 35.181359][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 35.199733][ T4423] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 35.201273][ T4423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.207891][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 35.296045][ T4378] usb 1-1: Using ep0 maxpacket: 16 [ 35.299211][ T4378] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 35.300833][ T4378] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 35.302376][ T4378] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 35.304119][ T4378] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 35.312552][ T4378] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.314422][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.316043][ T4378] usb 1-1: Product: syz [ 35.317024][ T4378] usb 1-1: Manufacturer: syz [ 35.317909][ T4378] usb 1-1: SerialNumber: syz [ 35.540931][ T4438] loop4: detected capacity change from 0 to 16 [ 35.545257][ T4438] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.553146][ T4438] syz.4.9: attempt to access beyond end of device [ 35.553146][ T4438] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 35.561886][ T4438] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 35.564099][ T4378] usb 1-1: 0:2 : does not exist [ 35.568731][ T4378] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 35.570964][ T4438] syz.4.9: attempt to access beyond end of device [ 35.570964][ T4438] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 35.575615][ T4438] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 35.589416][ T4378] usb 1-1: USB disconnect, device number 2 [ 35.597110][ T4438] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 35.610444][ T4438] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 35.612480][ T4438] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 35.617774][ T4438] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 35.746778][ T4372] tipc: Node number set to 2886997007 [ 35.838132][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 35.910236][ T4448] loop3: detected capacity change from 0 to 16 [ 36.068942][ T4448] erofs: (device loop3): mounted with root inode @ nid 36. [ 36.166148][ T4340] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 36.675296][ T4444] loop4: detected capacity change from 0 to 40427 [ 36.682196][ T4444] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 36.685148][ T4444] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 36.725444][ T4444] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.740381][ T4444] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.741812][ T4444] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.776006][ T4332] syz-executor: attempt to access beyond end of device [ 36.776006][ T4332] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.871387][ T4453] loop3: detected capacity change from 0 to 512 [ 36.900338][ T4453] EXT4-fs (loop3): Test dummy encryption mode enabled [ 36.904249][ T4453] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.3.13: corrupted xattr block 95 [ 36.907375][ T4453] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.909735][ T4453] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.13: bg 0: block 7: invalid block bitmap [ 36.912364][ T4453] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 36.914110][ T4453] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #11: comm syz.3.13: corrupted xattr block 95 [ 36.919803][ T4453] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 36.921385][ T4453] EXT4-fs (loop3): 1 orphan inode deleted [ 36.922347][ T4453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.361928][ T4466] usb usb8: usbfs: process 4466 (syz.3.13) did not claim interface 0 before use [ 37.364219][ T4466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.365716][ T4466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.369137][ T4329] Bluetooth: hci4: command 0x040f tx timeout [ 37.371195][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 37.372538][ T4329] Bluetooth: hci2: command 0x040f tx timeout [ 37.375630][ T4329] Bluetooth: hci0: command 0x040f tx timeout [ 37.376869][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 38.074941][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 38.108447][ T4622] loop4: detected capacity change from 0 to 16 [ 38.127788][ T4622] erofs: (device loop4): mounted with root inode @ nid 36. [ 38.220224][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 38.221950][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 38.225217][ T4631] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.227048][ T4631] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.228500][ T4631] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.230077][ T4631] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.260660][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 38.263388][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 38.267110][ T4631] Zero length message leads to an empty skb [ 39.120752][ T4651] overlayfs: missing 'lowerdir' [ 39.255632][ T4651] hub 8-0:1.0: USB hub found [ 39.257904][ T4651] hub 8-0:1.0: 8 ports detected [ 39.456630][ T4340] Bluetooth: hci3: command 0x0419 tx timeout [ 39.459753][ T4329] Bluetooth: hci0: command 0x0419 tx timeout [ 39.460926][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 39.461987][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 39.463079][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 39.648692][ T4665] loop2: detected capacity change from 0 to 40427 [ 39.665837][ T4665] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 39.668732][ T4665] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.694266][ T4665] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.715825][ T4665] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 39.721599][ T4665] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.762147][ T4335] syz-executor: attempt to access beyond end of device [ 39.762147][ T4335] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.913912][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 39.987061][ T4690] loop1: detected capacity change from 0 to 16 [ 39.992182][ T4690] erofs: (device loop1): mounted with root inode @ nid 36. [ 40.217652][ T4697] loop2: detected capacity change from 0 to 16 [ 40.221534][ T4697] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.626174][ T4699] loop0: detected capacity change from 0 to 256 [ 41.383741][ T4720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 41.385407][ T4720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 42.018855][ T4728] loop1: detected capacity change from 0 to 40427 [ 42.024988][ T4728] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 42.028494][ T4728] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 42.048488][ T4728] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.060749][ T4728] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 42.063193][ T4728] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.086935][ T4327] syz-executor: attempt to access beyond end of device [ 42.086935][ T4327] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 42.310194][ T4736] loop1: detected capacity change from 0 to 512 [ 42.342993][ T4736] EXT4-fs (loop1): Test dummy encryption mode enabled [ 42.397099][ T4736] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.1.38: corrupted xattr block 95 [ 42.400412][ T4736] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.38: bg 0: block 7: invalid block bitmap [ 42.402744][ T4736] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 42.404516][ T4736] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2918: inode #11: comm syz.1.38: corrupted xattr block 95 [ 42.412236][ T4736] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 42.413694][ T4736] EXT4-fs (loop1): 1 orphan inode deleted [ 42.414611][ T4736] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.204573][ T4746] usb usb8: usbfs: process 4746 (syz.1.38) did not claim interface 0 before use [ 43.218565][ T4746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.222580][ T4746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.288404][ T4748] loop4: detected capacity change from 0 to 16 [ 43.291510][ T4748] erofs: (device loop4): mounted with root inode @ nid 36. [ 43.461361][ T4754] loop0: detected capacity change from 0 to 16 [ 43.463511][ T4754] erofs: (device loop0): mounted with root inode @ nid 36. [ 43.959690][ T4757] loop2: detected capacity change from 0 to 256 [ 44.233087][ T4759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.46'. [ 44.234971][ T4759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.46'. [ 44.566100][ T4449] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 44.756109][ T4449] usb 1-1: Using ep0 maxpacket: 32 [ 44.777437][ T4449] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 44.778992][ T4449] usb 1-1: config 0 has no interface number 0 [ 44.780197][ T4449] usb 1-1: config 0 interface 184 has no altsetting 0 [ 44.784667][ T4449] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 44.787469][ T4449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.791066][ T4449] usb 1-1: Product: syz [ 44.791817][ T4449] usb 1-1: Manufacturer: syz [ 44.794886][ T4449] usb 1-1: SerialNumber: syz [ 44.799210][ T4449] usb 1-1: config 0 descriptor?? [ 44.804577][ T4449] smsc75xx v1.0.0 [ 44.824398][ T4767] loop4: detected capacity change from 0 to 40427 [ 44.834476][ T4767] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 44.840163][ T4767] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 44.851315][ T4767] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.870983][ T4767] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 44.873684][ T4767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.902960][ T4332] syz-executor: attempt to access beyond end of device [ 44.902960][ T4332] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.074688][ T4775] loop4: detected capacity change from 0 to 128 [ 45.312044][ T4789] loop2: detected capacity change from 0 to 128 [ 45.321730][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 45.373035][ T4792] loop1: detected capacity change from 0 to 512 [ 45.375818][ T4789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.395602][ T4792] EXT4-fs: Ignoring removed bh option [ 45.409279][ T4449] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 45.411083][ T4449] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 45.424681][ T4792] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.438387][ T4792] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 45.451770][ T4792] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.56: Corrupt directory, running e2fsck is recommended [ 45.463248][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 45.478331][ T4792] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 45.488539][ T4792] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.56: corrupted in-inode xattr [ 45.503009][ T4792] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.56: couldn't read orphan inode 15 (err -117) [ 45.515082][ T4792] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.532984][ T4792] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.541052][ T4792] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 45.550705][ T4792] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.56: Corrupt directory, running e2fsck is recommended [ 45.561080][ T4792] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.56: path /7/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 45.585206][ T4792] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 22: comm syz.1.56: path /7/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 45.610296][ T4792] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 8: comm syz.1.56: path /7/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 45.659136][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 45.802836][ T4803] loop2: detected capacity change from 0 to 256 [ 45.991061][ T4813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'. [ 45.992973][ T4813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'. [ 46.091085][ T4818] loop1: detected capacity change from 0 to 512 [ 46.102978][ T4818] EXT4-fs (loop1): Test dummy encryption mode enabled [ 46.110279][ T4818] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.1.67: corrupted xattr block 95 [ 46.113667][ T4818] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.67: bg 0: block 7: invalid block bitmap [ 46.815264][ T4820] loop2: detected capacity change from 0 to 40427 [ 46.994231][ T4820] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 47.296669][ T4818] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 47.298774][ T4818] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2918: inode #11: comm syz.1.67: corrupted xattr block 95 [ 47.322363][ T4818] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 47.324125][ T4818] EXT4-fs (loop1): 1 orphan inode deleted [ 47.325164][ T4818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.406536][ T4319] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.547513][ T4826] usb usb8: usbfs: process 4826 (syz.1.67) did not claim interface 0 before use [ 47.735377][ T4825] loop3: detected capacity change from 0 to 16 [ 47.755338][ T4825] erofs: (device loop3): mounted with root inode @ nid 36. [ 47.836470][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 47.891115][ T4834] loop1: detected capacity change from 0 to 256 [ 47.892701][ T4834] exfat: Deprecated parameter 'namecase' [ 47.893747][ T4834] exfat: Deprecated parameter 'namecase' [ 47.911669][ T4837] loop4: detected capacity change from 0 to 128 [ 47.912617][ T4834] exfat: Deprecated parameter 'utf8' [ 47.922041][ T4834] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 47.923206][ T4837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.964152][ T4837] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 48.282792][ T4837] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 48.323885][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 48.446532][ T4851] erofs: (device loop1): mounted with root inode @ nid 36. [ 48.832378][ T4858] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.80: dx entry: limit 1024 != root limit 124 [ 48.834854][ T4858] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.80: Corrupt directory, running e2fsck is recommended [ 48.838347][ T4858] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 48.840155][ T4858] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.80: corrupted in-inode xattr [ 48.842629][ T4858] EXT4-fs (loop3): Remounting filesystem read-only [ 48.843969][ T4858] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.80: couldn't read orphan inode 15 (err -117) [ 48.846712][ T4858] EXT4-fs (loop3): Remounting filesystem read-only [ 48.848134][ T4858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 48.852918][ T4858] EXT4-fs (loop3): unmounting filesystem. [ 48.975750][ T4862] erofs: (device loop3): mounted with root inode @ nid 36. [ 49.050552][ T4865] EXT4-fs (loop3): Test dummy encryption mode enabled [ 49.060832][ T4865] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.3.82: corrupted xattr block 95 [ 49.071631][ T4865] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.82: bg 0: block 7: invalid block bitmap [ 49.080080][ T4865] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 49.089314][ T4865] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #11: comm syz.3.82: corrupted xattr block 95 [ 49.097499][ T4865] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 49.103179][ T4865] EXT4-fs (loop3): 1 orphan inode deleted [ 49.104241][ T4865] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.367294][ T4870] usb usb8: usbfs: process 4870 (syz.3.82) did not claim interface 0 before use [ 49.369217][ T4870] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 49.534847][ T4449] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 49.536919][ T4449] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 49.539844][ T4449] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 49.547147][ T4449] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 49.561308][ T4449] usb 1-1: USB disconnect, device number 3 [ 49.576648][ T4874] capability: warning: `syz.1.84' uses 32-bit capabilities (legacy support in use) [ 50.087480][ T4881] set_capacity_and_notify: 4 callbacks suppressed [ 50.087492][ T4881] loop0: detected capacity change from 0 to 256 [ 50.090059][ T4881] exfat: Deprecated parameter 'utf8' [ 50.091054][ T4881] exfat: Deprecated parameter 'namecase' [ 50.092059][ T4881] exfat: Deprecated parameter 'namecase' [ 50.093099][ T4881] exfat: Deprecated parameter 'namecase' [ 50.147448][ T4881] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 50.336094][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 50.344487][ T4882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.348946][ T4882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.744821][ T4898] loop3: detected capacity change from 0 to 16 [ 50.747379][ T4899] loop2: detected capacity change from 0 to 16 [ 50.748994][ T4898] erofs: (device loop3): mounted with root inode @ nid 36. [ 51.102231][ T4899] erofs: (device loop2): mounted with root inode @ nid 36. [ 51.665488][ T4915] loop3: detected capacity change from 0 to 512 [ 51.669943][ T4915] EXT4-fs (loop3): Test dummy encryption mode enabled [ 51.681535][ T4915] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.3.98: corrupted xattr block 95 [ 51.692868][ T4915] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.98: bg 0: block 7: invalid block bitmap [ 51.701347][ T4915] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 52.116098][ T4915] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #11: comm syz.3.98: corrupted xattr block 95 [ 52.120080][ T4915] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 52.121960][ T4915] EXT4-fs (loop3): 1 orphan inode deleted [ 52.123173][ T4915] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.175907][ T4925] loop0: detected capacity change from 0 to 512 [ 52.209192][ T4925] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.217754][ T4925] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.231739][ T4925] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.254418][ T4925] EXT4-fs (loop0): 1 truncate cleaned up [ 52.386686][ T4929] usb usb8: usbfs: process 4929 (syz.3.98) did not claim interface 0 before use [ 52.389261][ T4929] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 52.551157][ T4925] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 52.602071][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 52.641835][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.643807][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.889222][ T4936] loop0: detected capacity change from 0 to 512 [ 52.890839][ T4936] ======================================================= [ 52.890839][ T4936] WARNING: The mand mount option has been deprecated and [ 52.890839][ T4936] and is ignored by this kernel. Remove the mand [ 52.890839][ T4936] option from the mount to silence this warning. [ 52.890839][ T4936] ======================================================= [ 53.036452][ T4936] EXT4-fs error (device loop0): __ext4_iget:5102: inode #11: block 16777240: comm syz.0.102: invalid block [ 53.039273][ T4936] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.102: couldn't read orphan inode 11 (err -117) [ 53.041639][ T4936] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 53.448114][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.463392][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.722215][ T4922] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.723794][ T4922] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.725471][ T4922] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.727391][ T4922] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.984187][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 54.009117][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 54.017079][ T4930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.024067][ T4935] netlink: 'syz.0.102': attribute type 12 has an invalid length. [ 54.038883][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 54.074692][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 54.178913][ T4951] loop1: detected capacity change from 0 to 16 [ 54.183102][ T4953] loop0: detected capacity change from 0 to 8192 [ 54.183941][ T4946] tipc: Enabling of bearer rejected, failed to enable media [ 54.184425][ T4951] erofs: (device loop1): mounted with root inode @ nid 36. [ 54.465443][ T4965] tun0: tun_chr_ioctl cmd 1074025675 [ 54.473476][ T4965] tun0: persist enabled [ 54.479918][ T4965] tun0: tun_chr_ioctl cmd 1074025675 [ 54.480937][ T4965] tun0: persist disabled [ 54.485411][ T4963] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 54.729898][ T4956] loop3: detected capacity change from 0 to 40427 [ 54.737049][ T4956] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 54.738243][ T4956] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 54.761151][ T4956] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.788411][ T4956] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 54.793059][ T4956] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 54.838548][ T4328] syz-executor: attempt to access beyond end of device [ 54.838548][ T4328] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 54.937538][ T4976] loop1: detected capacity change from 0 to 256 [ 54.939014][ T4976] exfat: Deprecated parameter 'utf8' [ 54.939946][ T4976] exfat: Deprecated parameter 'namecase' [ 54.961563][ T4976] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 55.418444][ T5002] loop1: detected capacity change from 0 to 16 [ 55.418445][ T5000] loop3: detected capacity change from 0 to 16 [ 55.428967][ T5000] erofs: (device loop3): mounted with root inode @ nid 36. [ 55.437231][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.128'. [ 55.439401][ T5002] erofs: (device loop1): mounted with root inode @ nid 36. [ 55.439620][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.128'. [ 55.443440][ T5000] syz.3.126: attempt to access beyond end of device [ 55.443440][ T5000] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 55.448587][ T5000] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 55.454441][ T5000] syz.3.126: attempt to access beyond end of device [ 55.454441][ T5000] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 55.462135][ T5000] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 55.464987][ T5000] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 55.470765][ T5000] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 55.474645][ T5000] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 55.479588][ T5000] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 57.386640][ T5032] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 57.485907][ T5036] loop2: detected capacity change from 0 to 16 [ 57.491312][ T5036] erofs: (device loop2): mounted with root inode @ nid 36. [ 57.506637][ T5034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'. [ 57.508409][ T5034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'. [ 57.519463][ T5036] syz.2.141: attempt to access beyond end of device [ 57.519463][ T5036] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 57.531687][ T5036] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 57.540835][ T5036] syz.2.141: attempt to access beyond end of device [ 57.540835][ T5036] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 57.546461][ T5036] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 57.551751][ T5036] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 57.576134][ T5036] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 57.583259][ T5042] binder: 5041:5042 got transaction to invalid handle, 1 [ 57.584686][ T5042] binder: 5042:5041 cannot find target node [ 57.585559][ T5042] binder: 5041:5042 transaction async to 0:0 failed 1/29201/-22, size 0-0 line 3045 [ 57.589010][ T5036] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 57.590937][ T5036] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 57.616500][ T5042] binder: 5041:5042 ioctl c0306201 20000480 returned -14 [ 57.640954][ T5046] loop2: detected capacity change from 0 to 256 [ 57.660799][ T5046] exfat: Deprecated parameter 'namecase' [ 57.682563][ T5050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.685247][ T5050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.690427][ T5046] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 58.245364][ T5063] loop4: detected capacity change from 0 to 512 [ 58.254850][ T5063] EXT4-fs: Ignoring removed oldalloc option [ 58.286597][ T5063] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 58.288592][ T5063] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.293237][ T5063] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 58.307545][ T5063] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 58.313810][ T5063] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.152: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.341668][ T5063] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.152: couldn't read orphan inode 13 (err -117) [ 58.353435][ T5063] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.399862][ T5063] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.152: deleted inode referenced: 12 [ 58.438313][ T5066] loop0: detected capacity change from 0 to 256 [ 58.471870][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 58.526281][ T5070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.154'. [ 58.527926][ T5070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.154'. [ 58.636171][ T5072] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 59.051173][ T5084] loop1: detected capacity change from 0 to 512 [ 59.071414][ T5084] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.160: Unimplemented hash flags: 0x0001 [ 59.075829][ T5084] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.160: Corrupt directory, running e2fsck is recommended [ 59.081261][ T5084] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 59.085297][ T5084] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.160: corrupted in-inode xattr [ 59.091825][ T5084] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.160: couldn't read orphan inode 15 (err -117) [ 59.094459][ T5084] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.100064][ T5084] EXT4-fs (loop1): shut down requested (2) [ 59.121304][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 59.199510][ T5098] loop1: detected capacity change from 0 to 512 [ 59.200835][ T5097] loop3: detected capacity change from 0 to 512 [ 59.202024][ T5098] EXT4-fs (loop1): Test dummy encryption mode enabled [ 59.205420][ T5097] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29310!=33349) [ 59.209166][ T5098] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.1.166: corrupted xattr block 95 [ 59.534620][ T5098] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.166: bg 0: block 7: invalid block bitmap [ 59.539847][ T5097] EXT4-fs (loop3): group descriptors corrupted! [ 59.542503][ T5098] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 59.544386][ T5098] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2918: inode #11: comm syz.1.166: corrupted xattr block 95 [ 59.547229][ T5098] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 59.548890][ T5098] EXT4-fs (loop1): 1 orphan inode deleted [ 59.550040][ T5098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.667569][ T5108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.669242][ T5108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.887812][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.889554][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.229706][ T4317] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.615719][ T5124] device syzkaller0 entered promiscuous mode [ 61.680027][ T5124] tipc: Started in network mode [ 61.681204][ T5124] tipc: Node identity 16b3517823cc, cluster identity 4711 [ 61.683320][ T5124] tipc: Enabled bearer , priority 0 [ 61.727417][ T5122] tipc: Resetting bearer [ 62.052580][ T5133] futex_wake_op: syz.3.174 tries to shift op by 144; fix this program [ 62.116984][ T5136] loop3: detected capacity change from 0 to 256 [ 62.161711][ T5136] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 62.341897][ T27] audit: type=1326 audit(62.200:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.4.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b77fe8 code=0x7ffc0000 [ 62.348698][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 62.361180][ T27] audit: type=1326 audit(62.200:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.4.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b77fe8 code=0x7ffc0000 [ 62.367811][ T5122] tipc: Disabling bearer [ 62.392389][ T27] audit: type=1326 audit(62.200:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.4.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffffa4b77fe8 code=0x7ffc0000 [ 62.403698][ T27] audit: type=1326 audit(62.200:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.4.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b77fe8 code=0x7ffc0000 [ 62.415604][ T27] audit: type=1326 audit(62.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.4.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b77fe8 code=0x7ffc0000 [ 62.425384][ T27] audit: type=1326 audit(62.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.4.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffa4b77fe8 code=0x7ffc0000 [ 62.441295][ T27] audit: type=1326 audit(62.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.4.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b77fe8 code=0x7ffc0000 [ 62.451201][ T27] audit: type=1326 audit(62.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.4.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b77fe8 code=0x7ffc0000 [ 62.458711][ T5142] loop0: detected capacity change from 0 to 256 [ 62.459980][ T27] audit: type=1326 audit(62.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.4.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa4b5aeac code=0x7ffc0000 [ 62.471583][ T5142] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.473738][ T27] audit: type=1326 audit(62.240:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.4.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffffa4b77fe8 code=0x7ffc0000 [ 62.479828][ T5142] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 62.483785][ T5142] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 62.627249][ T5150] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 62.954364][ T5153] loop2: detected capacity change from 0 to 512 [ 62.980416][ T5153] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 62.985587][ T5153] EXT4-fs (loop2): Remounting filesystem read-only [ 62.991181][ T5153] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.181: invalid indirect mapped block 4278190080 (level 0) [ 63.026405][ T5153] EXT4-fs (loop2): Remounting filesystem read-only [ 63.027704][ T5153] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.181: invalid indirect mapped block 1 (level 1) [ 63.030543][ T5153] EXT4-fs (loop2): Remounting filesystem read-only [ 63.032003][ T5153] EXT4-fs (loop2): 1 truncate cleaned up [ 63.033111][ T5153] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.071841][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 63.886843][ T5151] loop0: detected capacity change from 0 to 40427 [ 63.955385][ T5151] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 63.956890][ T5151] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 64.162270][ T5174] loop2: detected capacity change from 0 to 512 [ 64.182218][ T5174] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.188116][ T4339] Bluetooth: hci3: command 0x0407 tx timeout [ 64.217233][ T5151] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.223390][ T5174] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 64.225211][ T5174] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.232120][ T5174] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.186: Allocating blocks 41-42 which overlap fs metadata [ 64.235388][ T5151] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 64.270130][ T5151] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.285631][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.287191][ T5174] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.186: Failed to acquire dquot type 0 [ 64.295470][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.296847][ T5174] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 64.300518][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.301742][ T5174] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.186: corrupted inode contents [ 64.304790][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 64.310899][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.313079][ T5174] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #12: comm syz.2.186: mark_inode_dirty error [ 64.315127][ T5180] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.317697][ T5180] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.319218][ T5180] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.320792][ T5180] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.323998][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.325210][ T5174] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.186: corrupted inode contents [ 64.332756][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.336463][ T5174] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.186: mark_inode_dirty error [ 64.376051][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.377321][ T5174] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.186: corrupted inode contents [ 64.380334][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.381426][ T5174] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 64.386167][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.387390][ T5174] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.186: corrupted inode contents [ 64.393297][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.394378][ T5174] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.186: mark_inode_dirty error [ 64.396893][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.397998][ T5174] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 64.399808][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 64.403218][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.405644][ T5174] EXT4-fs (loop2): 1 truncate cleaned up [ 64.408344][ T5174] EXT4-fs (loop2): pa 0000000068c13c8e: logic 1, phys. 41, len 23 [ 64.409673][ T5174] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 64.414955][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 64.416213][ T5174] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.488000][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489222][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.514906][ T5184] netlink: 'syz.1.191': attribute type 12 has an invalid length. [ 64.516996][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 64.573174][ T5188] loop2: detected capacity change from 0 to 512 [ 64.632408][ T5188] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.635609][ T5188] EXT4-fs (loop2): resizing filesystem from 128 to 2 blocks [ 64.651405][ T5188] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 64.738540][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 64.818987][ T5200] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 64.820708][ T5200] ±ÿ: renamed from team_slave_1 [ 65.337637][ T5203] device veth0 entered promiscuous mode [ 65.338819][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 65.497342][ T5173] loop3: detected capacity change from 0 to 131072 [ 65.507242][ T5173] F2FS-fs (loop3): invalid crc value [ 65.537455][ T5173] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.579839][ T5173] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 65.614254][ T5198] device veth0 left promiscuous mode [ 65.694211][ T5173] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 65.703394][ T5224] loop1: detected capacity change from 0 to 16 [ 65.705809][ T5224] erofs: (device loop1): mounted with root inode @ nid 36. [ 65.708350][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 65.710178][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 65.712529][ T5224] syz.1.201: attempt to access beyond end of device [ 65.712529][ T5224] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 65.715400][ T5224] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 65.724747][ T5224] syz.1.201: attempt to access beyond end of device [ 65.724747][ T5224] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 65.727845][ T5224] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 65.733115][ T5224] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 65.735148][ T5224] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 65.739943][ T5224] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 65.747291][ T5224] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 65.839439][ T5230] loop1: detected capacity change from 0 to 512 [ 65.841097][ T5230] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.873442][ T5230] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 65.875517][ T5230] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 65.881721][ T5230] syz.1.206: attempt to access beyond end of device [ 65.881721][ T5230] loop1: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 66.204059][ T5211] loop0: detected capacity change from 0 to 40427 [ 66.210960][ T5211] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 66.246351][ T4331] Bluetooth: hci3: command 0x0405 tx timeout [ 66.415264][ T5242] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 66.524171][ T5232] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 66.533281][ T5232] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 66.543587][ T5232] F2FS-fs (loop4): invalid crc value [ 66.563326][ T5232] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 66.589185][ T5232] F2FS-fs (loop4): Start checkpoint disabled! [ 66.593302][ T5232] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 66.594727][ T5232] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 67.001658][ T5259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 67.003774][ T5259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 67.139435][ T5264] set_capacity_and_notify: 1 callbacks suppressed [ 67.139444][ T5264] loop2: detected capacity change from 0 to 16 [ 67.156201][ T5264] erofs: (device loop2): mounted with root inode @ nid 36. [ 67.175115][ T5264] syz.2.217: attempt to access beyond end of device [ 67.175115][ T5264] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 67.185331][ T5264] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 67.245415][ T5264] syz.2.217: attempt to access beyond end of device [ 67.245415][ T5264] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 67.266920][ T5264] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 67.269475][ T5264] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 67.271607][ T5264] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 67.273568][ T5264] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 67.275401][ T5264] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 67.317313][ T5273] loop3: detected capacity change from 0 to 256 [ 67.341571][ T5276] loop2: detected capacity change from 0 to 512 [ 67.350020][ T5276] EXT4-fs (loop2): Test dummy encryption mode enabled [ 67.360356][ T5276] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.2.222: corrupted xattr block 95 [ 67.363119][ T5276] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.222: bg 0: block 7: invalid block bitmap [ 67.367338][ T5276] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 67.369221][ T5276] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2918: inode #11: comm syz.2.222: corrupted xattr block 95 [ 67.379676][ T5276] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 67.381558][ T5276] EXT4-fs (loop2): 1 orphan inode deleted [ 67.382679][ T5276] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.608950][ T5287] usb usb8: usbfs: process 5287 (syz.2.222) did not claim interface 9 before use [ 67.961431][ T5287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.963046][ T5287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.037740][ T5292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 68.041517][ T5292] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.043201][ T5292] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.044734][ T5292] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.046232][ T5292] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.053381][ T5292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 68.248716][ T5306] loop1: detected capacity change from 0 to 16 [ 68.260947][ T5306] erofs: (device loop1): mounted with root inode @ nid 36. [ 68.321406][ T5307] syz.1.233: attempt to access beyond end of device [ 68.321406][ T5307] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 68.324206][ T5307] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 68.330065][ T5307] syz.1.233: attempt to access beyond end of device [ 68.330065][ T5307] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 68.332635][ T5307] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 68.335260][ T5307] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 68.340271][ T5307] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 68.342504][ T5307] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 68.344813][ T5307] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 68.463719][ T5313] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.236'. [ 69.607809][ T24] cfg80211: failed to load regulatory.db [ 70.363916][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 79.909754][ T5361] loop3: detected capacity change from 0 to 512 [ 79.917484][ T5361] EXT4-fs (loop3): Test dummy encryption mode enabled [ 79.963442][ T5361] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.3.253: corrupted xattr block 95 [ 79.965829][ T5361] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.253: bg 0: block 7: invalid block bitmap [ 79.972961][ T5361] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 79.974728][ T5361] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #11: comm syz.3.253: corrupted xattr block 95 [ 79.975377][ T5374] loop4: detected capacity change from 0 to 16 [ 79.979238][ T5361] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 79.982433][ T5361] EXT4-fs (loop3): 1 orphan inode deleted [ 79.983597][ T5361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.986638][ T5374] erofs: (device loop4): mounted with root inode @ nid 36. [ 79.994670][ T5374] syz.4.257: attempt to access beyond end of device [ 79.994670][ T5374] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 80.005174][ T5374] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 80.015726][ T5374] syz.4.257: attempt to access beyond end of device [ 80.015726][ T5374] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 80.022779][ T5374] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 80.045040][ T5374] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 80.050786][ T5374] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 80.052914][ T5374] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 80.070225][ T5374] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 80.171418][ T5376] usb usb8: usbfs: process 5376 (syz.3.253) did not claim interface 9 before use [ 80.176545][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.178562][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.549306][ T5359] loop0: detected capacity change from 0 to 40427 [ 80.561826][ T5359] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 80.569074][ T5359] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.603183][ T5359] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.655528][ T5359] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.679224][ T5359] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.777697][ T4337] syz-executor: attempt to access beyond end of device [ 80.777697][ T4337] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.829082][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 80.853846][ T5406] loop1: detected capacity change from 0 to 16 [ 80.871215][ T5406] erofs: (device loop1): mounted with root inode @ nid 36. [ 81.253861][ T5411] overlayfs: missing 'lowerdir' [ 81.368894][ T5419] hub 8-0:1.0: USB hub found [ 81.370483][ T5419] hub 8-0:1.0: 8 ports detected [ 81.730914][ T5423] netlink: 'syz.4.275': attribute type 2 has an invalid length. [ 81.732801][ T5423] netlink: 144 bytes leftover after parsing attributes in process `syz.4.275'. [ 81.842274][ T5433] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 81.844479][ T5433] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 81.947275][ T5431] loop4: detected capacity change from 0 to 40427 [ 81.951050][ T5431] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 81.952300][ T5431] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 81.955642][ T5431] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.965000][ T5431] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 81.966605][ T5431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.983620][ T4332] syz-executor: attempt to access beyond end of device [ 81.983620][ T4332] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.098320][ T5437] netlink: 175 bytes leftover after parsing attributes in process `syz.4.281'. [ 82.105471][ T5439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.282'. [ 82.132912][ T5441] loop4: detected capacity change from 0 to 16 [ 82.136897][ T5441] erofs: (device loop4): mounted with root inode @ nid 36. [ 82.156506][ T5441] syz.4.283: attempt to access beyond end of device [ 82.156506][ T5441] loop4: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 82.160114][ T5441] syz.4.283: attempt to access beyond end of device [ 82.160114][ T5441] loop4: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 82.167246][ T5441] ================================================================== [ 82.168712][ T5441] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494 [ 82.170091][ T5441] Read of size 4096 at addr ffff0000d9f71000 by task syz.4.283/5441 [ 82.171431][ T5441] [ 82.171831][ T5441] CPU: 1 PID: 5441 Comm: syz.4.283 Not tainted syzkaller #0 [ 82.173115][ T5441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 82.174835][ T5441] Call trace: [ 82.175511][ T5441] dump_backtrace+0x1c4/0x1f0 [ 82.176486][ T5441] show_stack+0x2c/0x3c [ 82.177350][ T5441] __dump_stack+0x30/0x40 [ 82.178152][ T5441] dump_stack_lvl+0xf4/0x15c [ 82.179020][ T5441] print_address_description+0x88/0x218 [ 82.180022][ T5441] print_report+0x50/0x68 [ 82.180796][ T5441] kasan_report+0xa8/0xfc [ 82.181596][ T5441] kasan_check_range+0x258/0x290 [ 82.182479][ T5441] memcpy+0x48/0x90 [ 82.183234][ T5441] z_erofs_transform_plain+0x39c/0x494 [ 82.184269][ T5441] z_erofs_decompress+0x9c/0xd4 [ 82.185148][ T5441] z_erofs_decompress_queue+0x103c/0x1bf4 [ 82.186328][ T5441] z_erofs_runqueue+0x1540/0x16a8 [ 82.187354][ T5441] z_erofs_read_folio+0x2dc/0x5cc [ 82.188252][ T5441] filemap_read_folio+0x134/0x384 [ 82.189127][ T5441] filemap_fault+0x990/0xe98 [ 82.189932][ T5441] __do_fault+0x11c/0x3d8 [ 82.190698][ T5441] handle_mm_fault+0x1d04/0x3018 [ 82.191607][ T5441] do_page_fault+0x310/0x99c [ 82.192368][ T5441] do_translation_fault+0x94/0xc8 [ 82.193201][ T5441] do_mem_abort+0x70/0x198 [ 82.193906][ T5441] el1_abort+0x3c/0x5c [ 82.194745][ T5441] el1h_64_sync_handler+0x50/0xac [ 82.195711][ T5441] el1h_64_sync+0x64/0x68 [ 82.196437][ T5441] __arch_copy_from_user+0xc8/0x230 [ 82.197346][ T5441] l2cap_sock_setsockopt+0x454/0x1ac0 [ 82.198288][ T5441] __sys_setsockopt+0x2fc/0x50c [ 82.199197][ T5441] __arm64_sys_setsockopt+0xc0/0xdc [ 82.200106][ T5441] invoke_syscall+0x98/0x290 [ 82.200885][ T5441] el0_svc_common+0x13c/0x258 [ 82.201689][ T5441] do_el0_svc+0x5c/0x134 [ 82.202467][ T5441] el0_svc+0x58/0x128 [ 82.203182][ T5441] el0t_64_sync_handler+0x84/0xf0 [ 82.204080][ T5441] el0t_64_sync+0x18c/0x190 [ 82.204818][ T5441] [ 82.205295][ T5441] Allocated by task 5232: [ 82.206197][ T5441] kasan_set_track+0x4c/0x80 [ 82.207010][ T5441] kasan_save_alloc_info+0x24/0x30 [ 82.207963][ T5441] __kasan_kmalloc+0xa0/0xb8 [ 82.208805][ T5441] __kmalloc_node+0xdc/0x184 [ 82.209615][ T5441] kvmalloc_node+0x88/0x1d4 [ 82.210416][ T5441] f2fs_kvzalloc+0x11c/0x2f8 [ 82.211215][ T5441] f2fs_build_node_manager+0xc90/0x1b48 [ 82.212259][ T5441] f2fs_fill_super+0x369c/0x57b8 [ 82.213137][ T5441] mount_bdev+0x264/0x35c [ 82.213938][ T5441] f2fs_mount+0x44/0x58 [ 82.214652][ T5441] legacy_get_tree+0xd8/0x174 [ 82.215519][ T5441] vfs_get_tree+0x90/0x278 [ 82.216325][ T5441] do_new_mount+0x228/0x804 [ 82.217151][ T5441] path_mount+0x5ac/0xe6c [ 82.217938][ T5441] __arm64_sys_mount+0x4a0/0x5a0 [ 82.218832][ T5441] invoke_syscall+0x98/0x290 [ 82.219651][ T5441] el0_svc_common+0x13c/0x258 [ 82.220489][ T5441] do_el0_svc+0x5c/0x134 [ 82.221251][ T5441] el0_svc+0x58/0x128 [ 82.221963][ T5441] el0t_64_sync_handler+0x84/0xf0 [ 82.222924][ T5441] el0t_64_sync+0x18c/0x190 [ 82.223710][ T5441] [ 82.224099][ T5441] The buggy address belongs to the object at ffff0000d9f71000 [ 82.224099][ T5441] which belongs to the cache kmalloc-128 of size 128 [ 82.226515][ T5441] The buggy address is located 0 bytes inside of [ 82.226515][ T5441] 128-byte region [ffff0000d9f71000, ffff0000d9f71080) [ 82.228729][ T5441] [ 82.229154][ T5441] The buggy address belongs to the physical page: [ 82.230251][ T5441] page:000000009f4d6489 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d9f71b00 pfn:0x119f71 [ 82.232252][ T5441] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 82.233535][ T5441] raw: 05ffc00000000200 fffffc0003488548 fffffc00036a9808 ffff0000c0002300 [ 82.234956][ T5441] raw: ffff0000d9f71b00 0000000000100002 00000001ffffffff 0000000000000000 [ 82.236404][ T5441] page dumped because: kasan: bad access detected [ 82.237462][ T5441] [ 82.237905][ T5441] Memory state around the buggy address: [ 82.238882][ T5441] ffff0000d9f70f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.240214][ T5441] ffff0000d9f70f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.241553][ T5441] >ffff0000d9f71000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.242929][ T5441] ^ [ 82.243613][ T5441] ffff0000d9f71080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.245043][ T5441] ffff0000d9f71100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.246442][ T5441] ================================================================== [ 82.251325][ T5441] Disabling lock debugging due to kernel taint [ 82.626365][ T4328] EXT4-fs (loop3): unmounting filesystem.