last executing test programs: 5.879573266s ago: executing program 1 (id=5364): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2d0, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b3, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x6b, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c64afa0d2a1d2"}, {0xdd, 0x2, "4f3fef835ea8"}]}}]}, 0x2d0}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0xff, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f77657865632c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e66732c6e6f646f74732c6e6f646f74732c64656275672c646f74732c756d61736b3d30303030303030303030303030303030303030303230302c00c4cd878e2e225ee8a12ec0f0234a613f191236529e2eb19792d74d539f7b74148c4cd01ca5836451894237f5161f323e3dff6322349bb51c07b887571b07ed2b9f7e59a22824b104346da8", @ANYRESOCT], 0x1, 0x1ff, &(0x7f00000002c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1/file3\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x4a9a8af7, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000400)=@tcp6}, 0x20) r7 = socket$netlink(0x10, 0x3, 0xf) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x301}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x800, 0x2d}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x1, 0x9, 0x9, 0x8]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x800, 0xce}}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.619771615s ago: executing program 1 (id=5366): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000380)={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 4.828072366s ago: executing program 0 (id=5378): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50e7, &(0x7f00000051c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20008}) io_setup(0x20, &(0x7f0000001140)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="0d32818e", 0x4}]) 4.60044498s ago: executing program 1 (id=5381): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1a58ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x2, 0x8, [0x0, 0x0]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) 3.509243007s ago: executing program 0 (id=5387): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x20}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005504000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 3.121926365s ago: executing program 0 (id=5390): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2d0, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b3, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x6b, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c64afa0d2a1d2"}, {0xdd, 0x2, "4f3fef835ea8"}]}}]}, 0x2d0}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0xff, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f77657865632c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e66732c6e6f646f74732c6e6f646f74732c64656275672c646f74732c756d61736b3d30303030303030303030303030303030303030303230302c00c4cd878e2e225ee8a12ec0f0234a613f191236529e2eb19792d74d539f7b74148c4cd01ca5836451894237f5161f323e3dff6322349bb51c07b887571b07ed2b9f7e59a22824b104346da8", @ANYRESOCT], 0x1, 0x1ff, &(0x7f00000002c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1/file3\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x4a9a8af7, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000400)=@tcp6}, 0x20) r7 = socket$netlink(0x10, 0x3, 0xf) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x301}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x800, 0x2d}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x1, 0x9, 0x9, 0x8]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x800, 0xce}}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.975472297s ago: executing program 0 (id=5392): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000500)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x5, 0x5, 0x60, @mcast1, @remote, 0x1, 0x80, 0x6, 0x5}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1}, 0x40000100) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000250000000003000000eba6ce84807c5da511de207fec9608f026e728326236f2da7b2721b6f45e7dcbe655dc322fd4cb79bdc3"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) sendto$packet(r1, &(0x7f0000000000)="003400000081003400000081f360705eb6710f1d4d38a830440488fb", 0x1c, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c0016801800018014000b000000e7ffffffffffffff00000000000008000d"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x9, 0xfc, 0xbe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x8000, 0x80000001, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x0, 0x2, {{0x18, 0x4, 0x2, 0x19, 0x60, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x2b, 0xc9, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @loopback, @local]}, @ssrr={0x89, 0xf, 0xb2, [@empty, @private=0xa010101, @multicast2]}, @cipso={0x86, 0x6, 0x1}, @noop, @timestamp={0x44, 0x8, 0x10, 0x0, 0x9, [0xfffffffc]}]}}}}}) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) 2.821645761s ago: executing program 3 (id=5394): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 2.56639108s ago: executing program 0 (id=5396): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x74) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00'}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="73797a311a3e1079f10157ea5a55858feadc0000000000000000dd018c5f0629637f9735799bcd99e4cd066baa4d43d8d4140cbb6efea0edc79191c7f8e559b7559315"], 0x43) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800050100000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="0600150006000000ffff16800800010000000000ffd850bd9d1c1e9e0c56fcfd014242f77032dd7af31a91215ae9e44d31cdd4da6e981b26ef1952f200037c71f63d55c8e3878f6f9c38f0fab5ac21f2bd3d7a172e9df6bc"], 0x38}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00'}, 0x2c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="34000000130a010200000000000000000100000008000340000056f56a6f3300040900020073c98b271858ced6c3000e0073797a8e00000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f00000004c0)=0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2ec, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getqdisc={0x30, 0x26, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x5, 0xe}, {0xfffa, 0x9}, {0x2, 0xe}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) 2.312238278s ago: executing program 1 (id=5397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000fe"], 0x5c}}, 0x0) 2.223652252s ago: executing program 1 (id=5398): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50e7, &(0x7f00000051c0)="$eJzs3U+IVVUcB/DzZpxxUpl5gcbUbGwrgeIiSDEHI2jC4JWrCnR0EYSQgxTUQhBdSLRoQAl0pYRCITE7Ny6kwBBCaRdUECFCiCC1kP4sYt6958595/rue45jY/r5xMy95/7uOfe8x13M9+W5LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAI4dxTe07V1bdMbVh3fmrnjRO7r945d+zylRAa7eONvL5nxytvvLNrz2sjscP069m22ew2ZNb1l6wx3HFwvl/nz94QwlAywGC+fXmwMmp592B1wFpH1p6cGL+14+KZibNrth9qHKi+dOaNLPcElkt+X11fuJcm278HkjOKdunWa3Tcoln/9Ib7T14EAHBPNrXam+LP0fxP3KJ9OK0n7cmkPZu0418Is+XGYmTjDneb5/q0vkzznMyiwsqu80zq+ftftFtp/6SdRI17mGfnqXmkGek2z5mkvlzzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiYjG597om6+papDevOT+28cWL31Tvnjl2+EkKzfbyRlRvbhv9565mPXlr76apr+xtv35gZzPvF7YrSyeGHuPPCWAj7SpXrcdjfRkNodRbazXCyWni3vTMVCwAAADxKnm7/HijaWRwc6mg32mmy0f4vysLikbUnJ8Zv7bh4ZuLsmu2HGgcWP16ry3iTdx2vaDcXfhqlYBzjbzreQj2eerAyTr10xDTPN78c/6mufyX/N+vzf3zn5H8AAADuh/yfjlOvV/7/869fh+v6V/L/+o5LVvJ/nHHM/wNhcfkfAAAAHmYPOv9PVsap1yv//33zwvG6/pX8v6m//L+iPO148Ls44f1jIWzqNXUAAACgi/j/3Rc+Woh5PfvkIM3r33z9wXTdeJX8P9lf/h9a0lcFAAAA3I/dM5+fqqtX8n+rv/y/8oHOGgAAALgXH+/9/fm6eiX/T/eX/1fl23zlQ9bpcvxXCMfHQhiZ35nJCt+G2e1FAQAAAFgiMad/uObVXXXnVfL/TP3z/+OTDuL6/47n/1XW/5cK2VP/tnowAAAAAI+j6nr++Hj87JsLun3/fr/r/7/fuO3FuutX8v/h/vL/YHm7lN//BwAAAIvwf/v+vzcr49Tr9fz/m/uOvl/Xv5L/Z/vL/3G7uvzyLsX35+hYCOPzO/nTBL+Il9ufFOaGSoW2VtJjV+yRF+ZWlgptM0mPzWMhPDu/czgpPBkLs0nh9mheOJ0UrsVCfj8Uha+SwqV4p302mk83LVyIhXyBxVxcQbG6WBKR9PijW4/5wl17/FhcHAAA4LESw3OeZYc6myGNsnONXies6nXCQK8TBnudsCI5IT2x2/Ew3VmIx9/b/PPGUKOS/0/3l//jWzGcbbqt/w9x/X/+vYbF+v/pWGgmhblYaKVPDGjFa2Rh95N4jWYr73F7vCgAAADAIy1+LjC4zPMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9m7Gxi7qjoB4OfN1+tMpzODYsBKdJRIqUmn01bRuBimdncVNeuwYbNEora0U5ztYGtbEkvMZqBmGwNEiE3W3WxiiaurQaWRbJCNG7oklpAlQiBrdDcQiYoxWbbLuoFtMMvmvXvPm/vOnfdROlM67O+XdN55738+7/voO/fedy4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w/v2vlRtF3//1e9603eu/thzRz/145e+eeTkoyFM1x+vZOHKBwZ+94m1h7Zd+OWhx/dUrn9u30BeLo+H1bU/PfmdL8Zaf7kmhAcqIfSlgQ3DWaA/vz8c67tkOIQLwkKgUWJmKCuRNhx+NBjCsbAQaFT14GAIw4XAtU8+/NCdtcTRwRDeGUKopm08Xc3aGEwDlw1kgaE0sLcvC7z0SqYR+EFPFoCzFt8MjRf98enmDGOLl2vx+utfso69ttLh9cbEWOt8z29d5k4VDKQPTJ/V01aqjmVRenuc8G5bAe+20na+y9NW/CKVf0N5ZSFUDT27ZnbvuHnuYHykJ0xM9LaqaZme55+98IWdZ5JeMa/D2IGxJXkdzk4cPrXt3q333zF13f77KmuvOttu/rSwSYvp5VYN+WtuxTyP0ZTPkxXw9it9Sxr3pSuE8NX5Z15oFy/N/8faz//jyzne9jTljrW+PJLNzeMjwzFxaiSbmwMAAMCKsRL2mt598kN/0a6+0vx/vLvj//GQfz6Zz0Z7IoSpeuLwaAgX1x/PAt+Ozd0wGsLb66np5sDWJHAihDfXE+sbVSUlVsUS40ng1yN5YCoJnIyB6STwjRi4Kwl8MQaOJ4GdMXAiCXwwBsJs8zjeNZKPo+vAYAxszzbi8XgWwm9HYmvJtvq3RlUAAABLJJ8d9jffLZzrcLYZ4vTy+GCnDPEM7JYZqkkN6Qy2Ma1qWUNfpxp6OtXQGPd8++GXaq50qrl0GkalOcPOS+54PrRRmv9Ptp//VxfpSKV0/D+Ea+p/Y+6ePDLXiG+fbsoAAAAAnIW/Wr/7jnbx0vx/qrvz/+M+kd5C5vBY3A2xZzSEyeZAVu3vlQPZUe/VeQAAAABWgsbx+Max8Nn8NjtFO51Pl/NPn2H+eOB/atH8/3P5Hz7Trr+l+f90d+f/DzXfZp04GXvxldEQVhUCj8Re1gJ14zHw86uaA/n4T8YNcHusKj8xoVHV7bHE9hiYTALHWpV4olHi4uZA/mQ1Gj/cGMdsXqIQAAAAgHMu7g6Ix+Xj+f/fHZ3703blSvP/7Wd2/n99Hlw6vX9udQgb+0LoTX8Y8NhQtjBgDAxX8sQ/DmV19aZV3ToUwpW1gaVVPZuv/9+XrjH45GBWVQxc/I5vvXBZLfH1wRA2FgM/uf6e99QSB5NAo/E/GQzhbbXRpo3//aqs8f608b9cFcJbC4FGVTesCqHW2EBa1cPV/DoGaVX3VUN4YyHQqOqKagiHAgArVPyvdFfxwQOHbtmzY25uZv8yJuI+/MGwe3ZuZmLn3rld1RZ92pX0uWkZo1vLY+r2yjdxiaKnjpxe10268TvByWJb+X780omD+f34Xai/Ps7N/U13t6RDvvzSchOh8E2q1ZB7lnnIQ8VKFp7EUv0x/0BYHVbdfGBm/8Tndxw8uH9T9rfb7Juzv/EwU7atNqXbamixvnXx8uh2Ve1Xu63WFSvZePCmfRsPHLplw+xNO26cuXHms5ve/b7Nk5u3bHnvFRtro5rM/nYY6rrFqk6G+so95SEs98tibV+hknPxqSEhIbHSEnf/4umH2n38lOb/+9rP/+OnTvzkz9dnaHX8fywe5s8eXzjMvz0GjnV7/H+s1dH8xokB40lgPgbmHeYHAADg9SHujox7M+Pux4v+6ePXtStXmv/Pd/f7/yVa/7+xdP1HWi3zvz6WmGy1/n+6zH9j/f/5Vuv/p8v8N9b/P/YarP9/cyOQbJLfWv8fAAB4PTh36/93XN4/vUBAKUPH5f3TCwSUMnRcxr/bCwSc8fr/lw59PS4osKjS/P+u7ub/Fu4HAACA88f83955b7t4af5/rLv5/7lf/y+0Ov9/vFVgutXCgNb/AwAAYIVqtf7ff+z9z2fblSvN/493N/+Pp130NOWOtb48kq1pF9I17U6NNH4yAAAAACtDT5iY6O8yb9PKqFtffZtxKdB26aIrP333yXb1leb/J7qb/zf9LmN24vCpbfduvf/lO6au239fZe1VC8f/AQAAgOXT7X4JAAAAAAAAAAAAAADgtff2B7/wtXbx0u//wzX1x1v9/j9e9y/+vuDCptyx1s7r/+X3r/3o9w7Vlyx8bCSES4uBPbftuSDk1+ZfVww89Mn1F9USt6UlfvjMB39VS3w6DXx4wxterCWuTALb4yKJb04D8aqKL65JAnF5xafSQNwex9PAQB740ppsHJV0W/1mONtWlXRb/etwCKOFQGNbPTCctVFJB3g0CTQG+Lk0EAf4R3mgJ+3V91ZnvYqB4Vj0a6uzXgEAcN6K3wL7w+7ZuZnJ+BU+3q7ta76NmpYsu7V1tZ3EpcmeOnJ6XTfp3vS76MK1xvtDtTaETaWvq8Uslfool6aWDpvuwhZD7rTa23JtuoHWIxrMRjSxc+/crv6OA9/SOcvmvo5ZNpUmO8UsPfVN2kUtXfSlixF1uW266HK83xMmJnqTXO+PwbHQpNMrotvf6y+25l+rV0TNXcOHrm5XX2n+P9bd/L9aHNeL+cUA5uOV9b48apl/AAAAWF5f2nr6q/Hfd/du+Uy7vKX5/3h38/+4Bys/FJzt7TgRr/9/eDSE+qX1x7LAt2NzN4yG8PZ6ajqWyC6o/5FYYjILfDvuMFkfS2yfbq5qVQwcTwK/HskDJ5LAyRjI91J8K+S7cu4eCeE99dQ1zSX2xRJjSeDjMTCeBCZiYDIJrImBqSTw72vywHQS+OcYCLPN2+r+Nfm2AgAAOBP5PKu/+W5I53nH+zplqHTKMNQpQ0+nDNVOGVqNIt7/fszQXzwen2eID/WntQ4mtZQyxIvhn3G/ShnCE80504KlpuP5B43zDSrNGf7gif99MLRRmv9Pdjf/H2q+zVo/Gef/C9f/ywKPxO59JZ46Ph4DP7+qOZDvGDgZJ7u3N6qazkvkk/bbY4mpGBhPAvtiYCoJbL8mDxy7qDmQz7QbjR9uND6blygEAAAA4JyLOwjibprG8flNj2xrV640/5/qbv4f21tdbOyLsdZfrgnhgcpCbxqBDcNZIO7HGI4/j79kOIQLCjs4GiVmhrISA0nD4UeD2S/UB9KqHhzMfnwQ71/75MMP3VlLHB0M4Z2FvS+NNp6uZm0MpoHLBrLAUBrY25cF4p6fRuAHPVkAzlpjr2B8QeWnujSMLV6uxevv9XJN0HR4pX2gi+Rb7DdXy6WaPpDvU204s6etVB3LovT2OOHdthLfbWPebcUvUvk3lFcWQtXQs2tm946b5w7GR4q/ZC1Zpud5sV+ytksvwetw/tX3trNq2oHJ5ONjcvFyi78OK7G62YnDp7bdu/X+O6au239fZe1VXXejhbhJZzcfufynhc273Kohf82tuM+TaZ8nK/G/gXFPWwjhvWtOn9n5/9Pdzf/7ktu603FjHhgN4fLCxn0sbv5to9nnYCGQfUq+sRzIDrn/YqTlJycAAAAstcbujsb+gtn8NjshPJ0nl/NPn2H+uL9iatH83fb7ry95203t4qX5//b28/9VSTcd/3f8n2Xi+P+izvdd0avSB+bPald0qTqWheP/izrf322O/y/K8X/H/xfj+H8Hjv8v6nx/2krfkvb50hVCuPhfPrSrXbw0/9/X3fzf+n+LL9rXWP9ve6v1//a1Wv9v3vp/AADAsmqx0Fw6zyut3lfKkK7eV8rQcYHAjksMWv/vjNf/e8t/rfv90EZp/j/f3fw/vhxWF1tfKev/jV/Toqq7YmCfhQEBAAA4H7XaQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBr6zc3XHFRu/j7r37Xm75z9ceeO/qpH7/0zSMnHw1htv54JQtXPjDwu0+sPbTtwi8PPb6ncv1z+6p5uf789i1NuWOtL4+EcKzwyHBMnBqp3VkIXPvR7x3qqyUeGwnh0mJgz217LqglvjESwrpi4KFPrq+P6La0xA+f+eCvaolPp4EPb3jDi7XElXmgknb3b9Zk3a2k3b1zTQijhUCju3+2prmqRhsfygM9aRt/N5y1EQPDsehXh7M2YmAulphdFcLGvhB606oerWZV9aZV/UM1q6o3rerPqyFcGULoS6t6ZiCrqi8d+eMDWVUxcPE7vvXCZbXEsYEQNhYDP7n+nvfUEp9LAo3G/3gghLfVXjJp49/vzxrvTxs/2h/CW0MIA2mJ/+7LSgykJZ7tC+GNhUCj8c/0hXAo8LoQP3x2FR88cOiWPTvm5mb2L2NiIG9rMOyenZuZ2Ll3blc16VMrlUL6lVtf/dh/9sIXdtZunzpyel036b68XH+9y5v7m+5uOd97H/s1VKxk4fko1R/zD4TVYdXNB2b2T3x+x8GD+zdlf7vNvjn725tHs221aam2VW+H8tGr3VbripVsPHjTvo0HDt2yYfamHTfO3Djz2U3vft/myc1btrz3io21UU1mf5diqPeU4z3LPNS1fYVKzsUHgISExEpL9DR9uk0u1Qd5ZZk+3Upf9Bc62h+q9Q/o0rSimKVSH+VSDHprlyNcxBl/T+k4ok2liUMpy+bOWbaUJhMLWQazLPXvdaXJYbGmnvomjfd7wsREy//Ux5rvFjfv80uwebtNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOo2cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//2McwRk=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20008}) io_setup(0x20, &(0x7f0000001140)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="0d32818e", 0x4}]) 1.941579655s ago: executing program 3 (id=5400): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005504000000000000000010000000", @ANYRES32=r7], 0x20}}, 0x0) 1.870352846s ago: executing program 3 (id=5402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xdc0, 0x0, &(0x7f0000001240)="b9ff03076804268c989e", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.826786913s ago: executing program 3 (id=5404): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x30, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x30}], 0x1}, 0x0) 1.730419797s ago: executing program 2 (id=5406): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000500)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x5, 0x5, 0x60, @mcast1, @remote, 0x1, 0x80, 0x6, 0x5}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1}, 0x40000100) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000250000000003000000eba6ce84807c5da511de207fec9608f026e728326236f2da7b2721b6f45e7dcbe655dc322fd4cb79bdc3"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) sendto$packet(r1, &(0x7f0000000000)="003400000081003400000081f360705eb6710f1d4d38a830440488fb", 0x1c, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c0016801800018014000b000000e7ffffffffffffff00000000000008000d"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x9, 0xfc, 0xbe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x8000, 0x80000001, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x2, 0x0, {{0x18, 0x4, 0x2, 0x19, 0x60, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x2b, 0xc9, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @loopback, @local]}, @ssrr={0x89, 0xf, 0xb2, [@empty, @private=0xa010101, @multicast2]}, @cipso={0x86, 0x6, 0x1}, @noop, @timestamp={0x44, 0x8, 0x10, 0x0, 0x9, [0xfffffffc]}]}}}}}) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) 1.696181863s ago: executing program 3 (id=5407): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 1.693254763s ago: executing program 0 (id=5408): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1a58ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x2, 0x8, [0x0, 0x0]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) 1.569359492s ago: executing program 3 (id=5409): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000002030103000000c40e254c9fc24bfe010800010001"], 0x1c}}, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f00000001c0)={@map, 0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000020000001c"], 0x0) 927.25114ms ago: executing program 2 (id=5410): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) 879.789107ms ago: executing program 4 (id=5411): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet(0x2, 0x0, 0x84) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @gre={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8001}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}]}}}]}, 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) 638.270104ms ago: executing program 2 (id=5412): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005504000000000000000010000000", @ANYRES32=r7], 0x20}}, 0x0) 570.379424ms ago: executing program 1 (id=5413): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000380)={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 441.597333ms ago: executing program 2 (id=5414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000fe"], 0x5c}}, 0x0) 380.758252ms ago: executing program 4 (id=5415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 346.074488ms ago: executing program 2 (id=5416): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2d0, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b3, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x6b, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c64afa0d2a1d2"}, {0xdd, 0x2, "4f3fef835ea8"}]}}]}, 0x2d0}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0xff, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f77657865632c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e66732c6e6f646f74732c6e6f646f74732c64656275672c646f74732c756d61736b3d30303030303030303030303030303030303030303230302c00c4cd878e2e225ee8a12ec0f0234a613f191236529e2eb19792d74d539f7b74148c4cd01ca5836451894237f5161f323e3dff6322349bb51c07b887571b07ed2b9f7e59a22824b104346da8", @ANYRESOCT], 0x1, 0x1ff, &(0x7f00000002c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1/file3\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x4a9a8af7, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, 0x0, &(0x7f0000000400)=@tcp6}, 0x20) r8 = socket$netlink(0x10, 0x3, 0xf) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x301}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x800, 0x2d}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x1, 0x9, 0x9, 0x8]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x800, 0xce}}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 268.813339ms ago: executing program 4 (id=5417): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x30, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic]}]}, 0x30}], 0x1}, 0x0) 174.257134ms ago: executing program 2 (id=5418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x74) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00'}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="73797a311a3e1079f10157ea5a55858feadc0000000000000000dd018c5f0629637f9735799bcd99e4cd066baa4d43d8d4140cbb6efea0edc79191c7f8e559b7559315"], 0x43) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800050100000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="0600150006000000ffff16800800010000000000ffd850bd9d1c1e9e0c56fcfd014242f77032dd7af31a91215ae9e44d31cdd4da6e981b26ef1952f200037c71f63d55c8e3878f6f9c38f0fab5ac21f2bd3d7a172e9df6bc"], 0x38}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00'}, 0x2c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="34000000130a010200000000000000000100000008000340000056f56a6f3300040900020073c98b271858ced6c3000e0073797a8e00000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f00000004c0)=0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2ec, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getqdisc={0x30, 0x26, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x5, 0xe}, {0xfffa, 0x9}, {0x2, 0xe}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) 134.38167ms ago: executing program 4 (id=5419): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 60.611541ms ago: executing program 4 (id=5420): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 4 (id=5421): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000500)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x5, 0x5, 0x60, @mcast1, @remote, 0x1, 0x80, 0x6, 0x5}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1}, 0x40000100) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000250000000003000000eba6ce84807c5da511de207fec9608f026e728326236f2da7b2721b6f45e7dcbe655dc322fd4cb79bdc3"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) sendto$packet(r1, &(0x7f0000000000)="003400000081003400000081f360705eb6710f1d4d38a830440488fb", 0x1c, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c0016801800018014000b000000e7ffffffffffffff00000000000008000d"], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x9, 0xfc, 0xbe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x8000, 0x80000001, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x2, 0x0, {{0x18, 0x4, 0x2, 0x19, 0x60, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x2b, 0xc9, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @loopback, @local]}, @ssrr={0x89, 0xf, 0xb2, [@empty, @private=0xa010101, @multicast2]}, @cipso={0x86, 0x6, 0x1}, @noop, @timestamp={0x44, 0x8, 0x10, 0x0, 0x9, [0xfffffffc]}]}}}}}) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) kernel console output (not intermixed with test programs): n: batadv_slave_0 [ 288.570235][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.584108][T14119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.587381][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.589888][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.592194][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.602440][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.624573][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.629231][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.631783][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.634665][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.646305][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.649255][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.652985][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.662903][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.668067][T14119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.671938][T14119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.694259][T14119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.699171][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.701971][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.712690][T14119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.718556][T14119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.724176][T14119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.743483][T14119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.872334][T14334] loop0: detected capacity change from 0 to 32768 [ 288.897152][T14334] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.4034 (14334) [ 288.919503][T14334] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 288.922275][T14334] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 288.924544][T14334] BTRFS info (device loop0): using free space tree [ 288.963071][ T5629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.975052][ T5629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.988996][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.076159][ T5629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.078522][ T5629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.119221][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.255170][T14334] BTRFS info (device loop0): enabling ssd optimizations [ 290.044874][ T4239] Bluetooth: hci3: command tx timeout [ 290.210315][T14407] netlink: 892 bytes leftover after parsing attributes in process `syz.4.4055'. [ 290.444869][ T4240] Bluetooth: hci0: command tx timeout [ 291.241064][T14454] netlink: 892 bytes leftover after parsing attributes in process `syz.2.4075'. [ 291.762946][T14143] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 292.718741][T14513] loop4: detected capacity change from 0 to 128 [ 292.994213][T14498] loop0: detected capacity change from 0 to 32768 [ 293.041485][T14498] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.4096 (14498) [ 293.049173][T14498] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 293.051862][T14498] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 293.054152][T14498] BTRFS info (device loop0): using free space tree [ 293.254906][T14498] BTRFS info (device loop0): enabling ssd optimizations [ 294.108557][T14577] loop3: detected capacity change from 0 to 128 [ 294.201461][T14580] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4122'. [ 295.190778][T14616] loop2: detected capacity change from 0 to 128 [ 295.398381][T14621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4138'. [ 295.801413][T14143] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 297.101729][T14662] loop1: detected capacity change from 0 to 32768 [ 297.115961][T14662] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.4155 (14662) [ 297.131337][T14662] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 297.134002][T14662] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 297.175031][T14662] BTRFS info (device loop1): using free space tree [ 297.425402][T14662] BTRFS info (device loop1): enabling ssd optimizations [ 297.758743][T14735] loop2: detected capacity change from 0 to 128 [ 298.574346][T14752] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4183'. [ 298.928228][T14766] loop4: detected capacity change from 0 to 128 [ 299.411544][ T5125] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 299.777498][T14794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.973827][T14802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4200'. [ 300.244460][T14808] loop4: detected capacity change from 0 to 128 [ 300.282453][T14808] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 300.300091][T14808] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 301.041346][T14838] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4214'. [ 301.337024][T14119] EXT4-fs (loop4): unmounting filesystem. [ 301.522708][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4218'. [ 301.528080][T14854] IPv6: NLM_F_REPLACE set, but no existing node found! [ 301.533479][T14854] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 301.587350][T14858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4218'. [ 301.807502][ T78] block nbd4: Possible stuck request 000000008dd7040e: control (read@0,4096B). Runtime 30 seconds [ 302.449299][T14898] loop0: detected capacity change from 0 to 128 [ 302.754460][T14910] loop1: detected capacity change from 0 to 1024 [ 302.781895][T14910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.878123][T14910] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 302.880311][T14910] System zones: 0-1, 3-12 [ 302.976385][T14910] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 303.155641][ T5125] EXT4-fs (loop1): unmounting filesystem. [ 303.318849][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4248'. [ 303.348605][T14930] IPv6: NLM_F_REPLACE set, but no existing node found! [ 303.367127][T14930] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 303.474371][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4248'. [ 303.573965][T14940] loop3: detected capacity change from 0 to 128 [ 304.246073][T14968] loop4: detected capacity change from 0 to 128 [ 304.753102][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4278'. [ 304.793995][T14996] IPv6: NLM_F_REPLACE set, but no existing node found! [ 304.799419][T14996] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 304.870908][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4278'. [ 306.239258][T15060] loop0: detected capacity change from 0 to 128 [ 306.339183][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4304'. [ 306.341765][T15065] IPv6: NLM_F_REPLACE set, but no existing node found! [ 306.345935][T15065] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 306.409786][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4304'. [ 306.494063][T15068] serio: Serial port pts0 [ 307.464436][T15098] loop0: detected capacity change from 0 to 128 [ 308.047151][T15114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.414292][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4325'. [ 308.453212][T15125] IPv6: NLM_F_REPLACE set, but no existing node found! [ 308.505322][T15125] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 308.566857][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'. [ 308.937977][T15135] loop1: detected capacity change from 0 to 128 [ 308.956256][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 309.923521][T15163] loop4: detected capacity change from 0 to 128 [ 310.334658][T15177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.766080][ T2050] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.767806][ T2050] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.837918][T15195] loop4: detected capacity change from 0 to 128 [ 311.479241][T15221] serio: Serial port pts0 [ 315.071908][T15305] serio: Serial port pts0 [ 316.552166][T15337] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.634464][T15340] process 'syz.1.4413' launched './file1' with NULL argv: empty string added [ 316.899608][T15347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.902003][T15347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.936213][T15347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.938591][T15347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.762835][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4418'. [ 319.085424][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4428'. [ 319.096761][T15383] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.111369][T15384] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4430'. [ 319.535667][T15397] sctp: [Deprecated]: syz.2.4435 (pid 15397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.535667][T15397] Use struct sctp_sack_info instead [ 319.664271][T15403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4437'. [ 319.751555][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4436'. [ 322.154780][ C0] sched: RT throttling activated [ 322.715999][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'. [ 322.956557][T15461] loop3: detected capacity change from 0 to 1024 [ 323.062789][T15461] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 323.222057][T15475] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 324.277774][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4471'. [ 324.573240][ T4225] EXT4-fs (loop3): unmounting filesystem. [ 324.651685][T15522] loop0: detected capacity change from 0 to 1024 [ 324.867226][T15532] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 325.248056][T15543] netlink: 'syz.4.4487': attribute type 1 has an invalid length. [ 325.291795][T15543] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 325.300678][T15543] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 325.378603][T15533] loop2: detected capacity change from 0 to 32768 [ 325.511652][T15533] XFS (loop2): Mounting V5 Filesystem [ 325.556738][T15536] loop3: detected capacity change from 0 to 32768 [ 325.591865][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4488'. [ 325.602046][T15533] XFS (loop2): Ending clean mount [ 325.650328][T15536] XFS (loop3): Mounting V5 Filesystem [ 325.652250][ T4230] XFS (loop2): Unmounting Filesystem [ 325.743501][T15536] XFS (loop3): Ending clean mount [ 325.832518][ T4225] XFS (loop3): Unmounting Filesystem [ 325.920024][T15570] loop0: detected capacity change from 0 to 1024 [ 325.975915][T15570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 325.989350][T15576] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 326.023908][T14143] EXT4-fs (loop0): unmounting filesystem. [ 326.715536][T15590] loop4: detected capacity change from 0 to 164 [ 326.764904][ T4240] Bluetooth: hci2: command 0x0406 tx timeout [ 327.040007][T15594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.040297][T15594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.294391][T15591] 9pnet_fd: p9_fd_create_tcp (15591): problem connecting socket to 127.0.0.1 [ 330.763794][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4501'. [ 331.209564][T15612] loop0: detected capacity change from 0 to 164 [ 331.234245][T15612] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 331.377866][T15615] loop1: detected capacity change from 0 to 128 [ 331.646426][T15622] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 331.802051][T15610] loop2: detected capacity change from 0 to 32768 [ 331.868884][T15610] XFS (loop2): Mounting V5 Filesystem [ 331.896621][ T78] block nbd4: Possible stuck request 000000008dd7040e: control (read@0,4096B). Runtime 60 seconds [ 331.981555][T15643] 9pnet_fd: p9_fd_create_tcp (15643): problem connecting socket to 127.0.0.1 [ 331.983913][ T27] audit: type=1326 audit(331.441:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84742468 code=0x7ffc0000 [ 331.992156][ T27] audit: type=1326 audit(331.441:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff84742468 code=0x7ffc0000 [ 332.017122][ T27] audit: type=1326 audit(331.441:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84742468 code=0x7ffc0000 [ 332.037806][ T27] audit: type=1326 audit(331.441:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84742468 code=0x7ffc0000 [ 332.043576][ T27] audit: type=1326 audit(331.461:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff84742468 code=0x7ffc0000 [ 332.057005][T15610] XFS (loop2): Ending clean mount [ 332.059904][ T27] audit: type=1326 audit(331.461:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84742468 code=0x7ffc0000 [ 332.087815][ T27] audit: type=1326 audit(331.461:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84742468 code=0x7ffc0000 [ 332.110154][ T27] audit: type=1326 audit(331.461:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff84742468 code=0x7ffc0000 [ 332.134358][ T27] audit: type=1326 audit(331.461:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84742468 code=0x7ffc0000 [ 332.142768][ T27] audit: type=1326 audit(331.461:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15640 comm="syz.1.4510" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84742468 code=0x7ffc0000 [ 332.181647][ T4230] XFS (loop2): Unmounting Filesystem [ 332.427432][T15650] mmap: syz.4.4515 (15650) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 333.280445][T15662] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.280618][T15662] FAT-fs (loop5): unable to read boot sector [ 333.424583][T15665] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 333.591261][T15675] loop2: detected capacity change from 0 to 1024 [ 333.617378][T15675] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 333.617567][T15675] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 333.620245][T15675] EXT4-fs (loop2): barriers disabled [ 333.620390][T15675] JBD2: no valid journal superblock found [ 333.620401][T15675] EXT4-fs (loop2): error loading journal [ 333.673045][ T4404] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 333.752272][T15680] overlayfs: failed to resolve './file1': -2 [ 334.149400][T15673] loop1: detected capacity change from 0 to 32768 [ 334.217953][T15673] XFS (loop1): Mounting V5 Filesystem [ 334.250145][T15706] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 334.269270][T15673] XFS (loop1): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 334.310090][T15679] loop4: detected capacity change from 0 to 32768 [ 334.311836][T15682] loop2: detected capacity change from 0 to 32768 [ 334.323095][T15673] XFS (loop1): Starting recovery (logdev: internal) [ 334.351883][T15673] XFS (loop1): Ending recovery (logdev: internal) [ 334.378239][ T5125] XFS (loop1): Unmounting Filesystem [ 334.432121][T15679] XFS (loop4): Mounting V5 Filesystem [ 334.473495][T15720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.483693][T15720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.630014][T15679] XFS (loop4): Ending clean mount [ 334.737739][T14119] XFS (loop4): Unmounting Filesystem [ 335.095464][T15734] netem: change failed [ 335.508431][T15754] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 336.810002][T15750] loop1: detected capacity change from 0 to 32768 [ 336.946577][T15750] XFS (loop1): Mounting V5 Filesystem [ 336.974497][T15750] XFS (loop1): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 337.039464][T15750] XFS (loop1): Starting recovery (logdev: internal) [ 337.051191][T15750] XFS (loop1): Ending recovery (logdev: internal) [ 337.161254][ T5125] XFS (loop1): Unmounting Filesystem [ 337.227422][T15765] loop4: detected capacity change from 0 to 32768 [ 337.284021][T15765] XFS (loop4): Mounting V5 Filesystem [ 337.459396][T15765] XFS (loop4): Ending clean mount [ 337.465528][T15765] XFS (loop4): Quotacheck needed: Please wait. [ 337.533185][T15765] XFS (loop4): Quotacheck: Done. [ 337.571875][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4555'. [ 337.575159][T15796] IPv6: NLM_F_REPLACE set, but no existing node found! [ 337.580961][T15796] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 337.615315][T15799] overlayfs: statfs failed on './file0' [ 337.633746][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'. [ 337.677226][T14119] XFS (loop4): Unmounting Filesystem [ 338.176688][T15816] loop0: detected capacity change from 0 to 2048 [ 338.213194][T15816] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 338.248500][T14143] EXT4-fs (loop0): unmounting filesystem. [ 338.318382][T15829] loop4: detected capacity change from 0 to 764 [ 338.336993][T15829] rock: directory entry would overflow storage [ 338.339809][T15829] rock: sig=0x4654, size=5, remaining=4 [ 338.458253][T15833] overlayfs: failed to resolve './file1': -2 [ 338.576219][T15812] loop3: detected capacity change from 0 to 32768 [ 338.633170][T15812] XFS (loop3): Mounting V5 Filesystem [ 338.684001][T15812] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 338.702141][T15812] XFS (loop3): Starting recovery (logdev: internal) [ 338.745536][T15812] XFS (loop3): Ending recovery (logdev: internal) [ 338.773939][ T4225] XFS (loop3): Unmounting Filesystem [ 338.901288][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4579'. [ 338.904051][T15860] IPv6: NLM_F_REPLACE set, but no existing node found! [ 338.908107][T15860] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 338.924901][ T4279] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 338.928389][T15835] loop4: detected capacity change from 0 to 32768 [ 338.931141][T15835] XFS: ikeep mount option is deprecated. [ 338.942578][T15835] XFS (loop4): Mounting V5 Filesystem [ 338.968028][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4579'. [ 339.016843][T15835] XFS (loop4): Ending clean mount [ 339.020531][T15835] XFS (loop4): Quotacheck needed: Please wait. [ 339.043503][T15835] XFS (loop4): Quotacheck: Done. [ 339.071171][T14119] XFS (loop4): Unmounting Filesystem [ 339.284947][ T4279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.288003][ T4279] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.291497][ T4279] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 339.293997][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.304975][ T4279] usb 1-1: config 0 descriptor?? [ 339.491301][T15879] loop4: detected capacity change from 0 to 764 [ 339.501391][T15879] rock: directory entry would overflow storage [ 339.505155][T15879] rock: sig=0x4654, size=5, remaining=4 [ 339.576744][T15875] loop3: detected capacity change from 0 to 32768 [ 339.615939][T15875] XFS (loop3): Mounting V5 Filesystem [ 339.688439][T15875] XFS (loop3): Ending clean mount [ 340.002083][ T4225] XFS (loop3): Unmounting Filesystem [ 340.293132][T15912] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4593'. [ 340.295076][T15903] loop1: detected capacity change from 0 to 32768 [ 340.342223][T15903] XFS (loop1): Mounting V5 Filesystem [ 340.380405][T15903] XFS (loop1): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 340.409732][T15903] XFS (loop1): Starting recovery (logdev: internal) [ 340.421576][T15903] XFS (loop1): Ending recovery (logdev: internal) [ 340.422573][T15926] loop2: detected capacity change from 0 to 764 [ 340.427823][T15926] rock: directory entry would overflow storage [ 340.429515][T15926] rock: sig=0x4654, size=5, remaining=4 [ 340.471322][ T5125] XFS (loop1): Unmounting Filesystem [ 340.693001][T15934] loop4: detected capacity change from 0 to 128 [ 340.890401][T15942] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4604'. [ 340.953389][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4598'. [ 340.967059][T15945] IPv6: NLM_F_REPLACE set, but no existing node found! [ 340.972947][T15945] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 341.025836][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4598'. [ 341.035300][T15952] loop2: detected capacity change from 0 to 512 [ 341.042673][T15952] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 341.054099][T15952] EXT4-fs (loop2): 1 truncate cleaned up [ 341.059306][T15952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 341.092949][ T4230] EXT4-fs (loop2): unmounting filesystem. [ 341.321446][T15953] loop4: detected capacity change from 0 to 32768 [ 341.332160][T15953] XFS (loop4): Mounting V5 Filesystem [ 341.350426][T15953] XFS (loop4): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 341.372010][T15953] XFS (loop4): Starting recovery (logdev: internal) [ 341.380443][T15953] XFS (loop4): Ending recovery (logdev: internal) [ 341.413545][T14119] XFS (loop4): Unmounting Filesystem [ 341.704998][ T4279] usb 1-1: string descriptor 0 read error: -71 [ 341.708462][ T4279] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 341.720093][ T4279] usb 1-1: USB disconnect, device number 35 [ 341.944244][T15981] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4616'. [ 341.974000][T15971] loop3: detected capacity change from 0 to 32768 [ 342.032903][T15971] XFS (loop3): Mounting V5 Filesystem [ 342.072939][T15999] loop0: detected capacity change from 0 to 1024 [ 342.084366][T15971] XFS (loop3): Ending clean mount [ 342.091470][T15999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 342.110481][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4623'. [ 342.119242][T16001] IPv6: NLM_F_REPLACE set, but no existing node found! [ 342.121902][T16001] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 342.160470][T15999] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 342.162664][T15999] System zones: 0-1, 3-12 [ 342.164358][T15999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 342.170650][ T4279] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 342.176597][ T4279] XFS (loop3): Unmount and run xfs_repair [ 342.178072][ T4279] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 342.179954][ T4279] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 342.197322][ T4279] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 342.204207][ T4279] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 342.213549][ T4279] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 342.223338][ T4279] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 342.224475][T14143] EXT4-fs (loop0): unmounting filesystem. [ 342.231594][ T4279] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 342.241236][ T4279] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 342.255047][ T4279] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 342.263000][T15971] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 342.268212][T15971] XFS (loop3): page discard on page 00000000f954b007, inode 0x1149, pos 0. [ 342.335222][ T4225] XFS (loop3): Unmounting Filesystem [ 342.658215][T15997] loop4: detected capacity change from 0 to 32768 [ 342.687355][T16010] loop0: detected capacity change from 0 to 32768 [ 342.694990][T16010] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.4625 (16010) [ 342.701979][T16008] loop1: detected capacity change from 0 to 32768 [ 342.704426][T16010] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 342.712965][T16010] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 342.723931][T16010] BTRFS info (device loop0): using free space tree [ 342.749918][T15997] XFS (loop4): Mounting V5 Filesystem [ 342.770777][T16008] XFS (loop1): Mounting V5 Filesystem [ 342.787371][T15997] XFS (loop4): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 342.828302][T15997] XFS (loop4): Starting recovery (logdev: internal) [ 342.838180][T15997] XFS (loop4): Ending recovery (logdev: internal) [ 342.870635][T14119] XFS (loop4): Unmounting Filesystem [ 342.927904][T16008] XFS (loop1): Ending clean mount [ 342.940136][T16010] BTRFS info (device loop0): enabling ssd optimizations [ 342.969031][T16050] __nla_validate_parse: 1 callbacks suppressed [ 342.969047][T16050] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4629'. [ 343.116530][ T5125] XFS (loop1): Unmounting Filesystem [ 343.240405][T16061] loop3: detected capacity change from 0 to 1024 [ 343.242984][T16061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.284236][T14143] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 343.305124][T16061] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 343.308969][T16061] System zones: 0-1, 3-12 [ 343.310834][T16061] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 343.441773][ T4225] EXT4-fs (loop3): unmounting filesystem. [ 344.787121][T16086] loop0: detected capacity change from 0 to 2048 [ 344.841195][T16086] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 345.014278][T16088] loop3: detected capacity change from 0 to 32768 [ 345.152099][T16088] XFS (loop3): Mounting V5 Filesystem [ 345.307044][T16088] XFS (loop3): Ending clean mount [ 345.563863][T16088] overlayfs: conflicting lowerdir path [ 345.647534][ T4225] XFS (loop3): Unmounting Filesystem [ 345.802769][T14143] EXT4-fs (loop0): unmounting filesystem. [ 345.954122][T16107] loop2: detected capacity change from 0 to 32768 [ 345.973497][T16107] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.4646 (16107) [ 346.014364][T16107] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 346.046787][T16107] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 346.055161][T16107] BTRFS info (device loop2): using free space tree [ 346.141958][T16107] BTRFS info (device loop2): enabling ssd optimizations [ 346.456858][ T4230] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 346.957345][T16171] loop0: detected capacity change from 0 to 1024 [ 346.973295][T16171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.014507][T16171] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 347.017010][T16171] System zones: 0-1, 3-12 [ 347.026932][T16171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 347.127590][T14143] EXT4-fs (loop0): unmounting filesystem. [ 347.307198][T16168] loop1: detected capacity change from 0 to 32768 [ 347.311920][T16168] XFS: ikeep mount option is deprecated. [ 347.340093][T16168] XFS (loop1): Mounting V5 Filesystem [ 347.450615][T16168] XFS (loop1): Ending clean mount [ 347.467978][T16168] XFS (loop1): Quotacheck needed: Please wait. [ 347.511276][T16168] XFS (loop1): Quotacheck: Done. [ 347.515017][T10595] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 347.593873][ T5125] XFS (loop1): Unmounting Filesystem [ 347.889886][T10595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.892521][T10595] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.898490][T10595] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 347.904178][T10595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.915324][T10595] usb 1-1: config 0 descriptor?? [ 350.188289][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4701'. [ 350.190743][T16290] IPv6: NLM_F_REPLACE set, but no existing node found! [ 350.200517][T16290] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 350.255360][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4701'. [ 350.258398][T16295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4701'. [ 350.665278][T10595] usb 1-1: string descriptor 0 read error: -71 [ 350.668788][T10595] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 350.680605][T10595] usb 1-1: USB disconnect, device number 36 [ 351.031069][T16310] loop0: detected capacity change from 0 to 32768 [ 351.139762][T16310] XFS (loop0): Mounting V5 Filesystem [ 351.202445][T16310] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 351.218970][T16310] XFS (loop0): Starting recovery (logdev: internal) [ 351.266382][T16310] XFS (loop0): Ending recovery (logdev: internal) [ 351.351586][T14143] XFS (loop0): Unmounting Filesystem [ 351.402541][T16351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4721'. [ 351.413565][T16351] IPv6: NLM_F_REPLACE set, but no existing node found! [ 351.422531][T16351] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 351.475781][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4721'. [ 351.490937][T16357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4721'. [ 351.569280][T16361] netlink: 'syz.4.4726': attribute type 1 has an invalid length. [ 351.590208][T16361] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 351.592983][T16361] bond2: (slave batadv2): Enslaving as a backup interface with an up link [ 351.601227][T16361] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 351.646745][T16361] bond2 (unregistering): Released all slaves [ 351.707103][T16332] loop3: detected capacity change from 0 to 32768 [ 351.781743][T16332] XFS (loop3): Mounting V5 Filesystem [ 351.784247][T16369] loop0: detected capacity change from 0 to 2048 [ 351.847234][T16369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 351.875476][T16332] XFS (loop3): Ending clean mount [ 352.754125][T14143] EXT4-fs (loop0): unmounting filesystem. [ 352.860116][ T4225] XFS (loop3): Unmounting Filesystem [ 353.060692][T16404] netlink: 'syz.2.4737': attribute type 1 has an invalid length. [ 353.089980][T16382] loop4: detected capacity change from 0 to 32768 [ 353.090136][T16404] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 353.094487][T16404] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 353.107035][T16404] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 353.141692][T16382] XFS (loop4): Mounting V5 Filesystem [ 353.153106][T16404] bond1 (unregistering): Released all slaves [ 353.206942][T16382] XFS (loop4): Ending clean mount [ 353.244046][ T9723] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 353.254214][ T9723] XFS (loop4): Unmount and run xfs_repair [ 353.261017][ T9723] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 353.266481][ T9723] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 353.279055][ T9723] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 353.286175][ T9723] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 353.291666][ T9723] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 353.296772][ T9723] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 353.300298][ T9723] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 353.306183][ T9723] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 353.308593][ T9723] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 353.311009][T16382] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 353.314210][T16382] XFS (loop4): page discard on page 0000000031bf61f0, inode 0x1149, pos 0. [ 353.344912][T14119] XFS (loop4): Unmounting Filesystem [ 353.346396][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4742'. [ 353.349339][T16423] IPv6: NLM_F_REPLACE set, but no existing node found! [ 353.354083][T16423] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 353.406097][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4742'. [ 353.412010][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4742'. [ 354.150947][T16450] input: syz0 as /devices/virtual/input/input17 [ 354.844575][T16456] loop0: detected capacity change from 0 to 32768 [ 354.852652][T16461] loop3: detected capacity change from 0 to 32768 [ 354.910892][T16461] XFS (loop3): Mounting V5 Filesystem [ 354.921519][T16456] XFS (loop0): Mounting V5 Filesystem [ 354.949326][T16461] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 354.973429][T16456] XFS (loop0): Ending clean mount [ 355.002700][T16461] XFS (loop3): Starting recovery (logdev: internal) [ 355.008846][ T9723] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 355.012061][ T9723] XFS (loop0): Unmount and run xfs_repair [ 355.013528][ T9723] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 355.018295][T16461] XFS (loop3): Ending recovery (logdev: internal) [ 355.026022][ T9723] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 355.035067][ T9723] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 355.047538][ T9723] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 355.051386][ T9723] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 355.053657][ T9723] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 355.067754][ T9723] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 355.076819][ T9723] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 355.088312][ T9723] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 355.098513][T16456] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 355.101936][T16456] XFS (loop0): page discard on page 00000000e02f86ad, inode 0x1149, pos 0. [ 355.119217][T16500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4764'. [ 355.121570][T16500] IPv6: NLM_F_REPLACE set, but no existing node found! [ 355.130446][ T4225] XFS (loop3): Unmounting Filesystem [ 355.130503][T16500] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 355.158683][T14143] XFS (loop0): Unmounting Filesystem [ 355.195335][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4764'. [ 355.234587][T16501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4764'. [ 355.362699][T16505] loop4: detected capacity change from 0 to 2048 [ 355.421902][T16505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 356.205227][ C0] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 356.332922][T14119] EXT4-fs (loop4): unmounting filesystem. [ 356.973843][T16533] loop3: detected capacity change from 0 to 32768 [ 357.033341][T16533] XFS (loop3): Mounting V5 Filesystem [ 357.053295][T16533] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 357.072850][T16533] XFS (loop3): Starting recovery (logdev: internal) [ 357.090323][T16533] XFS (loop3): Ending recovery (logdev: internal) [ 357.123400][ T4225] XFS (loop3): Unmounting Filesystem [ 357.252573][T16546] loop2: detected capacity change from 0 to 164 [ 357.271626][T16546] Unable to read rock-ridge attributes [ 357.292539][T16546] Unable to read rock-ridge attributes [ 357.316526][T16546] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 357.464208][T16552] loop2: detected capacity change from 0 to 2048 [ 357.520107][T16552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 358.425833][ T4230] EXT4-fs (loop2): unmounting filesystem. [ 358.580579][T16560] loop3: detected capacity change from 0 to 32768 [ 358.611120][T16560] XFS (loop3): Mounting V5 Filesystem [ 358.663193][T16560] XFS (loop3): Ending clean mount [ 358.701105][ T4225] XFS (loop3): Unmounting Filesystem [ 358.930924][T16585] loop2: detected capacity change from 0 to 32768 [ 358.973498][T16585] XFS (loop2): Mounting V5 Filesystem [ 359.005353][T16585] XFS (loop2): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 359.025487][T16585] XFS (loop2): Starting recovery (logdev: internal) [ 359.032602][T16585] XFS (loop2): Ending recovery (logdev: internal) [ 359.102980][ T4230] XFS (loop2): Unmounting Filesystem [ 359.799059][T16602] loop3: detected capacity change from 0 to 32768 [ 359.891200][T16602] XFS (loop3): Mounting V5 Filesystem [ 360.078483][T16602] XFS (loop3): Ending clean mount [ 360.089773][T16602] XFS (loop3): Quotacheck needed: Please wait. [ 360.137797][T16602] XFS (loop3): Quotacheck: Done. [ 360.271511][T16612] loop0: detected capacity change from 0 to 32768 [ 360.285493][ T4225] XFS (loop3): Unmounting Filesystem [ 360.338503][T16612] XFS (loop0): Mounting V5 Filesystem [ 360.417021][T16647] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4801'. [ 360.439552][T16612] XFS (loop0): Ending clean mount [ 360.496168][T16635] loop4: detected capacity change from 0 to 32768 [ 360.594226][T16635] XFS (loop4): Mounting V5 Filesystem [ 360.607558][T14143] XFS (loop0): Unmounting Filesystem [ 360.652980][T16635] XFS (loop4): Ending clean mount [ 360.735899][T14119] XFS (loop4): Unmounting Filesystem [ 361.117302][T16666] loop3: detected capacity change from 0 to 32768 [ 361.187783][T16666] XFS (loop3): Mounting V5 Filesystem [ 361.221059][T16666] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 361.250754][T16666] XFS (loop3): Starting recovery (logdev: internal) [ 361.261709][T16693] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4813'. [ 361.273640][T16666] XFS (loop3): Ending recovery (logdev: internal) [ 361.364132][ T4225] XFS (loop3): Unmounting Filesystem [ 362.209066][ T78] block nbd4: Possible stuck request 000000008dd7040e: control (read@0,4096B). Runtime 90 seconds [ 362.380522][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4820'. [ 362.389934][T16711] IPv6: NLM_F_REPLACE set, but no existing node found! [ 362.398385][T16711] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 362.409834][T16709] loop0: detected capacity change from 0 to 2048 [ 362.412265][T16709] ext4: Unknown parameter 'fsmagic' [ 362.451476][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4820'. [ 362.454456][T16714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4820'. [ 362.563572][T16718] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4824'. [ 362.671952][T16725] loop1: detected capacity change from 0 to 512 [ 362.690351][T16721] loop3: detected capacity change from 0 to 2048 [ 362.697734][T16725] EXT4-fs (loop1): orphan cleanup on readonly fs [ 362.711290][T16725] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #3: comm syz.1.4825: corrupted inode contents [ 362.718330][T16725] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #3: comm syz.1.4825: mark_inode_dirty error [ 362.731004][T16725] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #3: comm syz.1.4825: corrupted inode contents [ 362.757046][T16725] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.4825: mark_inode_dirty error [ 362.773769][T16721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 362.809483][T16725] __quota_error: 2 callbacks suppressed [ 362.809498][T16725] Quota error (device loop1): write_blk: dquota write failed [ 362.812939][T16725] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 362.824083][T16725] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.4825: Failed to acquire dquot type 0 [ 362.852961][T16725] EXT4-fs (loop1): 1 orphan inode deleted [ 362.922740][ T9] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 362.927002][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:0: Failed to release dquot type 1 [ 362.938352][T16725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 363.406066][ C1] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 363.442778][T16703] loop4: detected capacity change from 0 to 32768 [ 363.459248][T16724] loop0: detected capacity change from 0 to 32768 [ 363.468096][ T5125] EXT4-fs (loop1): unmounting filesystem. [ 363.547228][T16724] XFS (loop0): Mounting V5 Filesystem [ 363.562355][T16703] XFS (loop4): Mounting V5 Filesystem [ 363.589593][T16724] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 363.638090][ T4225] EXT4-fs (loop3): unmounting filesystem. [ 363.654028][T16703] XFS (loop4): Ending clean mount [ 363.662662][T16724] XFS (loop0): Starting recovery (logdev: internal) [ 363.665160][T16751] loop2: detected capacity change from 0 to 128 [ 363.702209][T16724] XFS (loop0): Ending recovery (logdev: internal) [ 363.741892][T14119] XFS (loop4): Unmounting Filesystem [ 363.750416][T16753] loop3: detected capacity change from 0 to 1024 [ 363.752829][T16753] EXT4-fs: Ignoring removed orlov option [ 363.754286][T16753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.768055][T14143] XFS (loop0): Unmounting Filesystem [ 363.832831][T16753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 363.937701][ T4225] EXT4-fs (loop3): unmounting filesystem. [ 364.032860][T16767] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4835'. [ 364.162745][T16771] loop2: detected capacity change from 0 to 2048 [ 364.182988][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4838'. [ 364.187837][T16773] IPv6: NLM_F_REPLACE set, but no existing node found! [ 364.195774][T16773] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 364.207125][T16771] loop2: p1 p2 p3 [ 364.248458][ T3843] loop2: p1 p2 p3 [ 364.251890][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4838'. [ 364.256995][T16774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4838'. [ 364.350870][ T4404] udevd[4404]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 364.361049][T16778] loop2: detected capacity change from 0 to 2048 [ 364.398298][T16778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 364.453579][ T4404] udevd[4404]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 364.467676][ T4218] udevd[4218]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 364.581440][ T4375] udevd[4375]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 365.222438][ T4404] udevd[4404]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 365.280599][ T4218] udevd[4218]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 365.313502][ T4230] EXT4-fs (loop2): unmounting filesystem. [ 365.363352][T16791] loop0: detected capacity change from 0 to 128 [ 365.772755][T16806] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4847'. [ 365.813691][T16780] loop4: detected capacity change from 0 to 32768 [ 365.906827][T16813] loop2: detected capacity change from 0 to 1024 [ 365.919729][T16813] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.4849: Invalid block bitmap block 0 in block_group 0 [ 365.925884][T16813] Quota error (device loop2): write_blk: dquota write failed [ 365.928375][T16780] XFS (loop4): Mounting V5 Filesystem [ 365.928929][T16813] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 365.932586][T16813] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.4849: Failed to acquire dquot type 0 [ 365.938153][T16813] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.4849: Freeing blocks not in datazone - block = 0, count = 4096 [ 365.942104][T16813] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.4849: Invalid inode bitmap blk 0 in block_group 0 [ 365.946133][T16813] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 365.948865][T16813] EXT4-fs (loop2): 1 orphan inode deleted [ 365.950462][T16813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 365.958071][ T5785] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 365.960650][ T5785] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:10: Failed to release dquot type 0 [ 365.977673][T16813] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 365.985789][T16780] XFS (loop4): Ending clean mount [ 365.991855][T16788] loop1: detected capacity change from 0 to 32768 [ 366.038988][T14119] XFS (loop4): Unmounting Filesystem [ 366.045167][T16792] loop3: detected capacity change from 0 to 32768 [ 366.068435][T16788] XFS (loop1): Mounting V5 Filesystem [ 366.099034][T16792] XFS (loop3): Mounting V5 Filesystem [ 366.102710][ T4230] EXT4-fs (loop2): unmounting filesystem. [ 366.106529][T16788] XFS (loop1): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 366.156505][T16788] XFS (loop1): Starting recovery (logdev: internal) [ 366.166755][T16788] XFS (loop1): Ending recovery (logdev: internal) [ 366.195192][T16792] XFS (loop3): Ending clean mount [ 366.197547][ T5125] XFS (loop1): Unmounting Filesystem [ 366.214719][T16792] XFS (loop3): Quotacheck needed: Please wait. [ 366.276390][T16792] XFS (loop3): Quotacheck: Done. [ 366.375856][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4853'. [ 366.383624][T16840] IPv6: NLM_F_REPLACE set, but no existing node found! [ 366.390032][T16840] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 366.442677][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4853'. [ 366.444118][ T4225] XFS (loop3): Unmounting Filesystem [ 366.445987][T16843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4853'. [ 366.530435][T16847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4856'. [ 366.658216][T16851] netlink: 'syz.4.4858': attribute type 10 has an invalid length. [ 366.660646][T16851] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4858'. [ 366.920665][T16859] loop3: detected capacity change from 0 to 512 [ 366.939923][T16859] ext4: Unknown parameter 'smackfshat' [ 367.242263][T16857] loop4: detected capacity change from 0 to 32768 [ 367.302662][T16875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4867'. [ 367.326326][T16857] XFS (loop4): Mounting V5 Filesystem [ 367.380688][T16857] XFS (loop4): Ending clean mount [ 367.432483][T16863] loop3: detected capacity change from 0 to 32768 [ 367.456146][T14119] XFS (loop4): Unmounting Filesystem [ 367.495524][T16863] XFS (loop3): Mounting V5 Filesystem [ 367.554071][T16863] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 367.592720][T16863] XFS (loop3): Starting recovery (logdev: internal) [ 367.615411][T16863] XFS (loop3): Ending recovery (logdev: internal) [ 367.637016][T16872] loop0: detected capacity change from 0 to 32768 [ 367.684144][ T4225] XFS (loop3): Unmounting Filesystem [ 367.730875][T16872] XFS (loop0): Mounting V5 Filesystem [ 367.818110][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4876'. [ 367.820603][T16912] IPv6: NLM_F_REPLACE set, but no existing node found! [ 367.823260][T16912] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 367.848485][T16872] XFS (loop0): Ending clean mount [ 367.850941][T16872] XFS (loop0): Quotacheck needed: Please wait. [ 367.879301][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4876'. [ 367.882194][T16913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4876'. [ 367.903227][T16872] XFS (loop0): Quotacheck: Done. [ 367.935383][T16872] overlayfs: failed to resolve './file2': -2 [ 367.962987][T14143] XFS (loop0): Unmounting Filesystem [ 368.030699][T16915] netlink: 'syz.4.4869': attribute type 10 has an invalid length. [ 368.305076][T16921] loop3: detected capacity change from 0 to 512 [ 368.307690][T16921] ext4: Unknown parameter 'smackfshat' [ 368.354901][ T4404] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 368.592780][T16919] loop4: detected capacity change from 0 to 32768 [ 368.640508][T16919] XFS (loop4): Mounting V5 Filesystem [ 368.712385][T16919] XFS (loop4): Ending clean mount [ 368.787123][T14119] XFS (loop4): Unmounting Filesystem [ 368.810204][T16949] netlink: 'syz.2.4888': attribute type 10 has an invalid length. [ 368.947858][T16929] loop0: detected capacity change from 0 to 32768 [ 369.023510][T16929] XFS (loop0): Mounting V5 Filesystem [ 369.054472][T16929] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 369.082864][T16929] XFS (loop0): Starting recovery (logdev: internal) [ 369.101233][T16929] XFS (loop0): Ending recovery (logdev: internal) [ 369.145997][T16947] loop1: detected capacity change from 0 to 32768 [ 369.158799][T14143] XFS (loop0): Unmounting Filesystem [ 369.197735][T16947] XFS (loop1): Mounting V5 Filesystem [ 369.262422][T16947] XFS (loop1): Ending clean mount [ 369.273618][T16947] XFS (loop1): Quotacheck needed: Please wait. [ 369.333260][T16947] XFS (loop1): Quotacheck: Done. [ 369.347876][T16947] overlayfs: failed to resolve './file2': -2 [ 369.397894][ T5125] XFS (loop1): Unmounting Filesystem [ 369.569834][T16986] netlink: 'syz.3.4900': attribute type 10 has an invalid length. [ 369.982145][T17000] IPv6: NLM_F_REPLACE set, but no existing node found! [ 369.998729][T17000] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 370.076912][T16984] loop4: detected capacity change from 0 to 32768 [ 370.127658][T16984] XFS (loop4): Mounting V5 Filesystem [ 370.157957][T16984] XFS (loop4): Ending clean mount [ 370.211493][T16994] loop0: detected capacity change from 0 to 32768 [ 370.239109][ T9723] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 370.247331][ T9723] XFS (loop4): Unmount and run xfs_repair [ 370.251261][ T9723] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 370.254488][ T9723] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 370.260725][ T9723] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 370.262509][T16994] XFS (loop0): Mounting V5 Filesystem [ 370.266544][ T9723] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 370.272375][ T9723] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 370.278390][ T9723] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 370.283166][ T9723] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 370.286342][ T9723] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 370.288835][ T9723] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 370.290383][T16994] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 370.295508][ T5785] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 370.299022][ T5785] XFS (loop4): page discard on page 0000000099a62c56, inode 0x1149, pos 0. [ 370.304711][T14119] XFS (loop4): Unmounting Filesystem [ 370.341680][T16994] XFS (loop0): Starting recovery (logdev: internal) [ 370.353113][T16994] XFS (loop0): Ending recovery (logdev: internal) [ 370.368174][T17002] loop2: detected capacity change from 0 to 32768 [ 370.393201][T17002] XFS (loop2): Mounting V5 Filesystem [ 370.400776][T14143] XFS (loop0): Unmounting Filesystem [ 370.458831][T17002] XFS (loop2): Ending clean mount [ 370.463084][T17002] XFS (loop2): Quotacheck needed: Please wait. [ 370.501508][T17002] XFS (loop2): Quotacheck: Done. [ 370.537394][T17002] overlayfs: failed to resolve './file2': -2 [ 370.575540][ T4230] XFS (loop2): Unmounting Filesystem [ 370.718155][T17033] netlink: 'syz.4.4911': attribute type 10 has an invalid length. [ 370.844016][T17037] loop3: detected capacity change from 0 to 128 [ 370.990052][T17046] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 371.240835][T17060] netlink: 'syz.2.4922': attribute type 10 has an invalid length. [ 371.242875][T17060] __nla_validate_parse: 10 callbacks suppressed [ 371.242885][T17060] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4922'. [ 371.318681][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4924'. [ 371.325920][T17064] IPv6: NLM_F_REPLACE set, but no existing node found! [ 371.330961][T17064] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 371.383818][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 371.391356][T17065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4924'. [ 371.490626][T17051] loop0: detected capacity change from 0 to 32768 [ 371.497297][T17049] loop3: detected capacity change from 0 to 32768 [ 371.532191][T17049] XFS (loop3): Mounting V5 Filesystem [ 371.536549][T17051] XFS (loop0): Mounting V5 Filesystem [ 371.576319][T17049] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 371.590643][T17051] XFS (loop0): Ending clean mount [ 371.591589][T17049] XFS (loop3): Starting recovery (logdev: internal) [ 371.593825][T17051] XFS (loop0): Quotacheck needed: Please wait. [ 371.600780][T17049] XFS (loop3): Ending recovery (logdev: internal) [ 371.653872][ T4225] XFS (loop3): Unmounting Filesystem [ 371.664338][T17051] XFS (loop0): Quotacheck: Done. [ 371.697594][T17051] overlayfs: './file2' not a directory [ 371.718768][T14143] XFS (loop0): Unmounting Filesystem [ 371.911987][T17085] loop4: detected capacity change from 0 to 128 [ 372.169205][T17091] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 372.205791][ T2050] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.207560][ T2050] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.296321][T17103] netlink: 'syz.4.4934': attribute type 10 has an invalid length. [ 372.298498][T17103] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4934'. [ 372.722382][T17100] loop2: detected capacity change from 0 to 32768 [ 372.776107][T17100] XFS (loop2): Mounting V5 Filesystem [ 372.812389][T17100] XFS (loop2): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 372.817335][T17112] loop4: detected capacity change from 0 to 32768 [ 372.829294][T17112] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4939 (17112) [ 372.844952][T17112] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 372.853219][T17112] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 372.857727][T17108] loop3: detected capacity change from 0 to 32768 [ 372.858264][T17100] XFS (loop2): Starting recovery (logdev: internal) [ 372.864897][T17112] BTRFS info (device loop4): using free space tree [ 372.874717][T17100] XFS (loop2): Ending recovery (logdev: internal) [ 372.906299][ T4230] XFS (loop2): Unmounting Filesystem [ 372.941464][T17108] XFS (loop3): Mounting V5 Filesystem [ 373.019689][T17108] XFS (loop3): Ending clean mount [ 373.021328][T17112] BTRFS info (device loop4): enabling ssd optimizations [ 373.051701][T17108] XFS (loop3): Quotacheck needed: Please wait. [ 373.118798][T14119] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.129441][T17108] XFS (loop3): Quotacheck: Done. [ 373.144188][T17108] overlayfs: './file2' not a directory [ 373.187277][ T4225] XFS (loop3): Unmounting Filesystem [ 373.370134][T17155] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 373.460509][T17161] netlink: 'syz.1.4946': attribute type 4 has an invalid length. [ 373.570263][T17167] netlink: 'syz.1.4949': attribute type 10 has an invalid length. [ 373.572625][T17167] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4949'. [ 373.798363][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4942'. [ 373.800841][T17181] IPv6: NLM_F_REPLACE set, but no existing node found! [ 373.819296][T17181] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 373.872600][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4942'. [ 373.876122][T17182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4942'. [ 373.974919][T17171] loop2: detected capacity change from 0 to 32768 [ 374.005604][T17171] XFS (loop2): Mounting V5 Filesystem [ 374.036998][T17171] XFS (loop2): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 374.065592][T17171] XFS (loop2): Starting recovery (logdev: internal) [ 374.068966][T17177] loop0: detected capacity change from 0 to 32768 [ 374.076696][T17171] XFS (loop2): Ending recovery (logdev: internal) [ 374.097466][T17177] XFS (loop0): Mounting V5 Filesystem [ 374.101854][ T4230] XFS (loop2): Unmounting Filesystem [ 374.180094][T17177] XFS (loop0): Ending clean mount [ 374.184212][T17177] XFS (loop0): Quotacheck needed: Please wait. [ 374.219401][T17177] XFS (loop0): Quotacheck: Done. [ 374.226495][T17177] overlayfs: './file2' not a directory [ 374.239111][T14143] XFS (loop0): Unmounting Filesystem [ 374.519776][T17200] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 374.633779][T17211] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4958'. [ 374.699564][T17214] netlink: 'syz.2.4963': attribute type 10 has an invalid length. [ 374.858362][T17230] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 375.060616][ T27] audit: type=1326 audit(374.521:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.4971" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80342468 code=0x7ffc0000 [ 375.068817][ T27] audit: type=1326 audit(374.541:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.4971" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff80342468 code=0x7ffc0000 [ 375.086685][ T27] audit: type=1326 audit(374.541:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.4971" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80342468 code=0x7ffc0000 [ 375.105525][ T27] audit: type=1326 audit(374.541:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.4971" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff80342468 code=0x7ffc0000 [ 375.124528][ T27] audit: type=1326 audit(374.541:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.4971" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80342468 code=0x7ffc0000 [ 375.142857][ T27] audit: type=1326 audit(374.541:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.4971" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=212 compat=0 ip=0xffff80342468 code=0x7ffc0000 [ 375.147067][T17238] IPv6: NLM_F_REPLACE set, but no existing node found! [ 375.158509][T17238] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 375.161940][ T27] audit: type=1326 audit(374.541:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.0.4971" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80342468 code=0x7ffc0000 [ 375.226068][T17219] loop4: detected capacity change from 0 to 32768 [ 375.245657][T17224] loop2: detected capacity change from 0 to 32768 [ 375.253279][T17224] XFS (loop2): Mounting V5 Filesystem [ 375.258023][T17219] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz.4.4965 (17219) [ 375.279108][T17219] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 375.283042][T17219] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 375.294073][T17224] XFS (loop2): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 375.294457][T17219] BTRFS info (device loop4): using free space tree [ 375.322347][T17224] XFS (loop2): Starting recovery (logdev: internal) [ 375.331320][T17224] XFS (loop2): Ending recovery (logdev: internal) [ 375.382640][ T4230] XFS (loop2): Unmounting Filesystem [ 375.419824][T17219] BTRFS info (device loop4): enabling ssd optimizations [ 375.769027][T17274] netlink: 'syz.1.4977': attribute type 10 has an invalid length. [ 375.771112][T17274] netlink: 'syz.1.4977': attribute type 4 has an invalid length. [ 375.859550][T14119] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 375.917351][T17283] input: syz0 as /devices/virtual/input/input18 [ 376.369126][T17300] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 376.603240][T17286] loop0: detected capacity change from 0 to 32768 [ 376.659224][T17286] XFS (loop0): Mounting V5 Filesystem [ 376.692677][T17286] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 376.717150][T17286] XFS (loop0): Starting recovery (logdev: internal) [ 376.729949][T17286] XFS (loop0): Ending recovery (logdev: internal) [ 376.777624][T14143] XFS (loop0): Unmounting Filesystem [ 376.930617][T17307] loop4: detected capacity change from 0 to 32768 [ 376.943723][T17307] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz.4.4990 (17307) [ 376.971613][T17307] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 376.974258][T17307] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 376.976904][T17307] BTRFS info (device loop4): using free space tree [ 377.140820][T17336] __nla_validate_parse: 5 callbacks suppressed [ 377.140833][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4993'. [ 377.144957][T17336] IPv6: NLM_F_REPLACE set, but no existing node found! [ 377.147937][T17336] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 377.185615][T17307] BTRFS info (device loop4): enabling ssd optimizations [ 377.192352][T17341] netlink: 'syz.0.4991': attribute type 10 has an invalid length. [ 377.194438][T17341] netlink: 'syz.0.4991': attribute type 4 has an invalid length. [ 377.197023][T17341] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4991'. [ 377.202378][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4993'. [ 377.205969][T17342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4993'. [ 377.237578][T17344] netlink: 'syz.0.4995': attribute type 19 has an invalid length. [ 377.365180][T17348] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 377.661056][T14119] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 377.948035][T17358] loop1: detected capacity change from 0 to 32768 [ 377.986121][T17358] XFS (loop1): Mounting V5 Filesystem [ 378.051656][T17358] XFS (loop1): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 378.077324][T17358] XFS (loop1): Starting recovery (logdev: internal) [ 378.134371][T17358] XFS (loop1): Ending recovery (logdev: internal) [ 378.178389][T17376] netlink: 'syz.2.5005': attribute type 10 has an invalid length. [ 378.181428][ T5125] XFS (loop1): Unmounting Filesystem [ 378.184400][T17376] netlink: 'syz.2.5005': attribute type 4 has an invalid length. [ 378.189202][T17376] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5005'. [ 378.351928][T17383] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 378.414821][T17386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5010'. [ 378.757191][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5014'. [ 378.759569][T17397] IPv6: NLM_F_REPLACE set, but no existing node found! [ 378.792529][T17397] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 378.845707][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5014'. [ 378.848829][T17399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5014'. [ 379.000565][T17403] netlink: 'syz.4.5017': attribute type 10 has an invalid length. [ 379.010038][T17403] netlink: 'syz.4.5017': attribute type 4 has an invalid length. [ 379.017831][T17403] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5017'. [ 379.250455][T17393] loop2: detected capacity change from 0 to 32768 [ 379.270638][T17393] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.5013 (17393) [ 379.289743][T17393] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 379.295069][T17393] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 379.297304][T17393] BTRFS info (device loop2): using free space tree [ 379.453068][T17424] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 379.502965][T17393] BTRFS info (device loop2): enabling ssd optimizations [ 379.588660][T17401] loop1: detected capacity change from 0 to 32768 [ 379.681627][T17435] loop0: detected capacity change from 0 to 2048 [ 379.690120][T17401] XFS (loop1): Mounting V5 Filesystem [ 379.726764][T17401] XFS (loop1): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 379.761193][T17401] XFS (loop1): Starting recovery (logdev: internal) [ 379.772939][T17451] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.778375][T17435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 379.791446][T17401] XFS (loop1): Ending recovery (logdev: internal) [ 379.870089][ T5125] XFS (loop1): Unmounting Filesystem [ 379.969928][ T4230] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 380.325422][T17453] loop3: detected capacity change from 0 to 32768 [ 380.355706][T17453] XFS: noikeep mount option is deprecated. [ 380.409311][T17453] XFS (loop3): Mounting V5 Filesystem [ 380.505903][T17453] XFS (loop3): Ending clean mount [ 380.508989][T17453] XFS (loop3): Quotacheck needed: Please wait. [ 380.509564][T17470] netlink: 'syz.1.5028': attribute type 10 has an invalid length. [ 380.530312][T17470] netlink: 'syz.1.5028': attribute type 4 has an invalid length. [ 380.548750][T17453] XFS (loop3): Quotacheck: Done. [ 380.623445][T17472] loop1: detected capacity change from 0 to 1024 [ 380.630814][T17472] EXT4-fs: quotafile must be on filesystem root [ 380.723321][ T4225] XFS (loop3): Unmounting Filesystem [ 381.186822][T17474] loop4: detected capacity change from 0 to 32768 [ 381.222314][T17483] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 381.250945][T17474] XFS (loop4): Mounting V5 Filesystem [ 381.327232][T17491] IPv6: NLM_F_REPLACE set, but no existing node found! [ 381.344356][T17474] XFS (loop4): Ending clean mount [ 381.348063][T17491] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 381.365862][T17474] XFS (loop4): Quotacheck needed: Please wait. [ 381.425751][T17474] XFS (loop4): Quotacheck: Done. [ 381.435986][T14143] EXT4-fs (loop0): unmounting filesystem. [ 381.510856][T14119] XFS (loop4): Unmounting Filesystem [ 381.653682][T17500] netlink: 'syz.1.5039': attribute type 10 has an invalid length. [ 381.662211][T17500] netlink: 'syz.1.5039': attribute type 4 has an invalid length. [ 381.825403][T17497] loop2: detected capacity change from 0 to 32768 [ 381.836798][T17497] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.5037 (17497) [ 381.851297][T17497] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 381.854488][T17497] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 381.857715][T17497] BTRFS info (device loop2): using free space tree [ 381.942342][T17498] loop0: detected capacity change from 0 to 32768 [ 381.984512][T17497] BTRFS info (device loop2): enabling ssd optimizations [ 381.989207][T17498] XFS (loop0): Mounting V5 Filesystem [ 382.102078][T17531] loop4: detected capacity change from 0 to 1024 [ 382.113797][T17531] EXT4-fs: quotafile must be on filesystem root [ 382.182332][T17498] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 382.225030][T17538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.229257][T17498] XFS (loop0): Starting recovery (logdev: internal) [ 382.239168][T17498] XFS (loop0): Ending recovery (logdev: internal) [ 382.274077][T14143] XFS (loop0): Unmounting Filesystem [ 382.489868][ T4230] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 382.595296][T17539] loop3: detected capacity change from 0 to 32768 [ 382.597849][T17539] XFS: noikeep mount option is deprecated. [ 382.675332][T17539] XFS (loop3): Mounting V5 Filesystem [ 382.727546][T17552] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 382.755971][T17554] __nla_validate_parse: 7 callbacks suppressed [ 382.755985][T17554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5047'. [ 382.763939][T17539] XFS (loop3): Ending clean mount [ 382.769261][T17547] loop1: detected capacity change from 0 to 2048 [ 382.789336][T17539] XFS (loop3): Quotacheck needed: Please wait. [ 382.795252][T17556] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.834729][T17539] XFS (loop3): Quotacheck: Done. [ 382.846824][T17547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 383.060102][ T4225] XFS (loop3): Unmounting Filesystem [ 383.229007][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5053'. [ 383.232469][T17575] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 383.285766][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5053'. [ 383.291755][T17576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5053'. [ 383.503258][T17578] netlink: 'syz.3.5050': attribute type 10 has an invalid length. [ 383.508530][T17578] netlink: 'syz.3.5050': attribute type 4 has an invalid length. [ 383.512017][T17578] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5050'. [ 383.789029][T17580] loop3: detected capacity change from 0 to 32768 [ 383.867598][T17580] XFS (loop3): Mounting V5 Filesystem [ 383.902070][T17580] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 383.932755][T17580] XFS (loop3): Starting recovery (logdev: internal) [ 383.951376][T17580] XFS (loop3): Ending recovery (logdev: internal) [ 384.004379][ T4225] XFS (loop3): Unmounting Filesystem [ 384.142618][T17595] loop4: detected capacity change from 0 to 1024 [ 384.149695][T17582] loop2: detected capacity change from 0 to 32768 [ 384.158880][T17595] EXT4-fs: quotafile must be on filesystem root [ 384.171776][T17582] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.5055 (17582) [ 384.181152][T17582] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 384.183844][T17582] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 384.189134][T17582] BTRFS info (device loop2): using free space tree [ 384.264580][T17607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5059'. [ 384.271246][ T5125] EXT4-fs (loop1): unmounting filesystem. [ 384.333970][T17582] BTRFS info (device loop2): enabling ssd optimizations [ 384.393653][T17618] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 384.421065][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.636336][T17629] netlink: 'syz.3.5064': attribute type 10 has an invalid length. [ 384.638625][T17629] netlink: 'syz.3.5064': attribute type 4 has an invalid length. [ 384.643048][T17629] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5064'. [ 384.771262][T17623] loop1: detected capacity change from 0 to 32768 [ 384.773787][T17623] XFS: noikeep mount option is deprecated. [ 384.809870][ T4230] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 384.877162][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5068'. [ 384.879751][T17641] IPv6: NLM_F_REPLACE set, but no existing node found! [ 384.882485][T17641] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 384.932647][T17623] XFS (loop1): Mounting V5 Filesystem [ 384.942499][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5068'. [ 384.945621][T17644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5068'. [ 384.983460][T17623] XFS (loop1): Ending clean mount [ 384.994396][T17623] XFS (loop1): Quotacheck needed: Please wait. [ 385.042654][T17623] XFS (loop1): Quotacheck: Done. [ 385.205220][T17650] loop2: detected capacity change from 0 to 32768 [ 385.243322][T17650] XFS (loop2): Mounting V5 Filesystem [ 385.258470][ T5125] XFS (loop1): Unmounting Filesystem [ 385.290791][T17657] loop4: detected capacity change from 0 to 1024 [ 385.298039][T17657] EXT4-fs: quotafile must be on filesystem root [ 385.318600][T17650] XFS (loop2): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 385.336315][T17650] XFS (loop2): Starting recovery (logdev: internal) [ 385.344029][ T4404] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 385.388831][T17650] XFS (loop2): Ending recovery (logdev: internal) [ 385.425124][ T4230] XFS (loop2): Unmounting Filesystem [ 385.542298][T17668] netlink: 'syz.4.5075': attribute type 10 has an invalid length. [ 385.544397][T17668] netlink: 'syz.4.5075': attribute type 4 has an invalid length. [ 385.768034][T17674] loop1: detected capacity change from 0 to 2048 [ 385.824236][T17674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 385.893711][T17685] input: syz0 as /devices/virtual/input/input19 [ 386.004001][T17688] loop2: detected capacity change from 0 to 1024 [ 386.007313][T17688] EXT4-fs: quotafile must be on filesystem root [ 386.250552][T17670] loop4: detected capacity change from 0 to 32768 [ 386.304572][T17676] loop0: detected capacity change from 0 to 32768 [ 386.307469][T17670] XFS (loop4): Mounting V5 Filesystem [ 386.324553][T17676] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.5078 (17676) [ 386.338611][T17670] XFS (loop4): Ending clean mount [ 386.342915][T17676] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 386.345685][T17676] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 386.350158][T17670] XFS (loop4): Quotacheck needed: Please wait. [ 386.355645][T17676] BTRFS info (device loop0): using free space tree [ 386.392683][T17670] XFS (loop4): Quotacheck: Done. [ 386.462631][T14119] XFS (loop4): Unmounting Filesystem [ 386.540394][T17676] BTRFS info (device loop0): enabling ssd optimizations [ 386.606595][T17693] loop2: detected capacity change from 0 to 32768 [ 386.737519][T17693] XFS (loop2): Mounting V5 Filesystem [ 386.772744][T17693] XFS (loop2): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 386.790238][T17729] loop3: detected capacity change from 0 to 2048 [ 386.797929][T17693] XFS (loop2): Starting recovery (logdev: internal) [ 386.811774][T17693] XFS (loop2): Ending recovery (logdev: internal) [ 386.853756][T17729] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 386.855999][T17729] UDF-fs: Scanning with blocksize 512 failed [ 386.868013][ T4230] XFS (loop2): Unmounting Filesystem [ 386.908348][T17729] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 386.910430][T17729] UDF-fs: Scanning with blocksize 1024 failed [ 386.927123][T17729] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=515, location=515 [ 386.932135][T17729] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 386.935294][T17729] UDF-fs: Scanning with blocksize 2048 failed [ 386.937594][T17729] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=259, location=259 [ 387.006250][T17729] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=515, location=515 [ 387.012619][T14143] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 387.016099][T17729] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 387.018223][T17729] UDF-fs: Scanning with blocksize 4096 failed [ 387.019785][T17729] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 387.129750][T17733] loop4: detected capacity change from 0 to 128 [ 387.258117][T17735] IPv6: NLM_F_REPLACE set, but no existing node found! [ 387.275668][T17735] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 387.395990][T17743] netlink: 'syz.2.5086': attribute type 10 has an invalid length. [ 387.398362][T17743] netlink: 'syz.2.5086': attribute type 4 has an invalid length. [ 387.478203][T17749] loop4: detected capacity change from 0 to 1024 [ 387.484006][T17749] EXT4-fs: quotafile must be on filesystem root [ 387.529134][ T4404] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 387.619036][T17755] input: syz0 as /devices/virtual/input/input20 [ 387.698644][ T5125] EXT4-fs (loop1): unmounting filesystem. [ 387.794872][T17763] loop2: detected capacity change from 0 to 2048 [ 387.807717][T17763] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 387.810000][T17763] UDF-fs: Scanning with blocksize 512 failed [ 387.822110][T17763] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 387.824300][T17763] UDF-fs: Scanning with blocksize 1024 failed [ 387.841058][T17763] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=515, location=515 [ 387.848013][T17763] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 387.850085][T17763] UDF-fs: Scanning with blocksize 2048 failed [ 387.852585][T17763] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=259, location=259 [ 387.865544][T17763] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=515, location=515 [ 387.868958][T17763] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 387.871189][T17763] UDF-fs: Scanning with blocksize 4096 failed [ 387.872930][T17763] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 388.081644][T17770] netlink: 'syz.2.5101': attribute type 10 has an invalid length. [ 388.090789][T17770] netlink: 'syz.2.5101': attribute type 4 has an invalid length. [ 388.096417][T17770] __nla_validate_parse: 6 callbacks suppressed [ 388.096428][T17770] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5101'. [ 388.381975][T17787] input: syz0 as /devices/virtual/input/input21 [ 389.290982][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5111'. [ 389.320385][T17799] netlink: 'syz.0.5113': attribute type 10 has an invalid length. [ 389.322502][T17799] netlink: 'syz.0.5113': attribute type 4 has an invalid length. [ 389.355053][T17799] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5113'. [ 389.366006][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5112'. [ 389.369912][T17800] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 389.435958][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5112'. [ 389.438768][T17806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5112'. [ 389.492371][T17810] loop1: detected capacity change from 0 to 512 [ 389.537791][T17810] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 389.539907][T17810] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 389.551105][T17810] EXT4-fs (loop1): 1 truncate cleaned up [ 389.552606][T17810] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 389.578145][T17810] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.5117: Logical block already allocated [ 389.595028][T17810] EXT4-fs (loop1): Remounting filesystem read-only [ 389.597989][T17810] EXT4-fs error (device loop1): __ext4_remount:6425: comm syz.1.5117: Abort forced by user [ 389.644428][ T5125] EXT4-fs (loop1): unmounting filesystem. [ 390.783662][T17826] loop3: detected capacity change from 0 to 32768 [ 390.802623][T17826] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.5122 (17826) [ 390.825164][T17826] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 390.832053][T17826] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 390.834697][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5124'. [ 390.845489][T17839] netlink: 'syz.2.5126': attribute type 10 has an invalid length. [ 390.845608][T17826] BTRFS info (device loop3): using free space tree [ 390.847515][T17839] netlink: 'syz.2.5126': attribute type 4 has an invalid length. [ 390.852293][T17839] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5126'. [ 390.895779][T17846] loop4: detected capacity change from 0 to 128 [ 390.982223][T17852] loop1: detected capacity change from 0 to 512 [ 391.056141][T17852] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 391.058207][T17852] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 391.074467][T17852] EXT4-fs (loop1): 1 truncate cleaned up [ 391.080100][T17852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 391.115259][T17852] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.5132: Logical block already allocated [ 391.122494][T17852] EXT4-fs (loop1): Remounting filesystem read-only [ 391.127283][T17852] EXT4-fs error (device loop1): __ext4_remount:6425: comm syz.1.5132: Abort forced by user [ 391.130322][T17826] BTRFS info (device loop3): enabling ssd optimizations [ 391.311160][ T5125] EXT4-fs (loop1): unmounting filesystem. [ 391.998503][T17888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5138'. [ 392.010347][T17888] IPv6: NLM_F_REPLACE set, but no existing node found! [ 392.020027][T17888] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 392.089620][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5138'. [ 392.112209][ T4225] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 392.327182][T17898] netlink: 'syz.0.5140': attribute type 10 has an invalid length. [ 392.349164][T17898] netlink: 'syz.0.5140': attribute type 4 has an invalid length. [ 392.408519][T17904] loop4: detected capacity change from 0 to 128 [ 392.560855][T17914] loop4: detected capacity change from 0 to 512 [ 392.602232][T17914] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 392.604469][T17914] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 392.622585][T17914] EXT4-fs (loop4): 1 truncate cleaned up [ 392.624177][T17914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 392.662448][T17914] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.5148: Logical block already allocated [ 392.677890][T17914] EXT4-fs (loop4): Remounting filesystem read-only [ 392.685391][ T78] block nbd4: Possible stuck request 000000008dd7040e: control (read@0,4096B). Runtime 120 seconds [ 392.707934][T17914] EXT4-fs error (device loop4): __ext4_remount:6425: comm syz.4.5148: Abort forced by user [ 392.788866][T14119] EXT4-fs (loop4): unmounting filesystem. [ 393.269629][T17921] loop3: detected capacity change from 0 to 32768 [ 393.308205][T17921] XFS (loop3): Mounting V5 Filesystem [ 393.359810][T17917] loop0: detected capacity change from 0 to 32768 [ 393.389630][T17921] XFS (loop3): Ending clean mount [ 393.395495][T17921] XFS (loop3): Quotacheck needed: Please wait. [ 393.413735][T17917] XFS (loop0): Mounting V5 Filesystem [ 393.467371][T17921] XFS (loop3): Quotacheck: Done. [ 393.479568][T17917] XFS (loop0): Ending clean mount [ 393.482945][T17921] overlayfs: './file2' not a directory [ 393.555588][ T4225] XFS (loop3): Unmounting Filesystem [ 393.563430][ T4997] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 393.571476][ T4997] XFS (loop0): Unmount and run xfs_repair [ 393.574978][ T4997] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 393.578235][ T4997] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 393.582935][ T4997] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 393.587964][ T4997] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 393.592033][ T4997] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 393.594434][ T4997] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 393.597208][ T4997] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.599587][ T4997] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.602130][ T4997] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.604457][ T39] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 393.607954][ T39] XFS (loop0): page discard on page 000000006bcf4715, inode 0x1149, pos 0. [ 393.613596][T14143] XFS (loop0): Unmounting Filesystem [ 394.329211][T17958] __nla_validate_parse: 3 callbacks suppressed [ 394.329224][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5161'. [ 394.656296][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5164'. [ 394.659030][T17971] IPv6: NLM_F_REPLACE set, but no existing node found! [ 394.661975][T17971] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 394.715541][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5164'. [ 394.718456][T17972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5164'. [ 395.126922][T17981] loop0: detected capacity change from 0 to 128 [ 395.528873][T17983] loop0: detected capacity change from 0 to 32768 [ 395.612795][T17993] loop3: detected capacity change from 0 to 1024 [ 395.620150][T17983] XFS (loop0): Mounting V5 Filesystem [ 395.627922][T17993] EXT4-fs: quotafile must be on filesystem root [ 395.662305][T17983] XFS (loop0): Ending clean mount [ 395.684274][ T4218] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 395.722142][ T9718] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 395.725843][ T9718] XFS (loop0): Unmount and run xfs_repair [ 395.727294][ T9718] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 395.729140][ T9718] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 395.731333][ T9718] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 395.733517][ T9718] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 395.758506][ T9718] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 395.762127][ T9718] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 395.764416][ T9718] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 395.777128][ T9718] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 395.780787][T17987] loop1: detected capacity change from 0 to 32768 [ 395.785139][ T9718] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 395.787535][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 395.791018][ T11] XFS (loop0): page discard on page 0000000028987f5d, inode 0x1149, pos 0. [ 395.873399][T14143] XFS (loop0): Unmounting Filesystem [ 395.901485][T18004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5173'. [ 395.908611][T17987] XFS (loop1): Mounting V5 Filesystem [ 395.973022][T17987] XFS (loop1): Ending clean mount [ 395.977094][T17987] XFS (loop1): Quotacheck needed: Please wait. [ 396.023937][T17987] XFS (loop1): Quotacheck: Done. [ 396.049755][T17987] overlayfs: './file2' not a directory [ 396.103008][ T5125] XFS (loop1): Unmounting Filesystem [ 396.729135][T18033] loop0: detected capacity change from 0 to 128 [ 396.874529][T18037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5180'. [ 396.877291][T18037] IPv6: NLM_F_REPLACE set, but no existing node found! [ 396.880111][T18037] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 396.935946][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5180'. [ 396.940048][T18038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5180'. [ 397.307628][T18046] loop4: detected capacity change from 0 to 32768 [ 397.344531][T18046] XFS (loop4): Mounting V5 Filesystem [ 397.362344][T18046] XFS (loop4): Ending clean mount [ 397.415646][ T4997] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 397.419009][ T4997] XFS (loop4): Unmount and run xfs_repair [ 397.420452][ T4997] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 397.422271][ T4997] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 397.424578][ T4997] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 397.434827][ T4997] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 397.437264][ T4997] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 397.444966][ T4997] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 397.447279][ T4997] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 397.449532][ T4997] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 397.462211][ T4997] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 397.464555][ T4606] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 397.469036][ T4606] XFS (loop4): page discard on page 000000005deb5a33, inode 0x1149, pos 0. [ 397.473166][T14119] XFS (loop4): Unmounting Filesystem [ 397.942765][T18072] loop1: detected capacity change from 0 to 128 [ 398.005186][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5185'. [ 398.114652][T18067] loop0: detected capacity change from 0 to 32768 [ 398.162387][T18067] XFS (loop0): Mounting V5 Filesystem [ 398.209429][T18067] XFS (loop0): Ending clean mount [ 398.212161][T18067] XFS (loop0): Quotacheck needed: Please wait. [ 398.272209][T18067] XFS (loop0): Quotacheck: Done. [ 398.298598][T18067] overlayfs: './file2' not a directory [ 398.322437][T14143] XFS (loop0): Unmounting Filesystem [ 398.972953][T18102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5199'. [ 398.979137][T18102] IPv6: NLM_F_REPLACE set, but no existing node found! [ 398.984233][T18102] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 399.139354][T18096] loop0: detected capacity change from 0 to 32768 [ 399.200173][T18096] XFS (loop0): Mounting V5 Filesystem [ 399.255026][T18096] XFS (loop0): Ending clean mount [ 399.296281][ T8166] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_cntbt block 0x10 [ 399.299463][ T8166] XFS (loop0): Unmount and run xfs_repair [ 399.301040][ T8166] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 399.302950][ T8166] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 399.312860][ T8166] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 399.315601][ T8166] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 399.317874][ T8166] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 399.320104][ T8166] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 399.322350][ T8166] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 399.324577][ T8166] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 399.339267][ T8166] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 399.341771][ T4566] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 399.347562][ T4566] XFS (loop0): page discard on page 00000000ec3ab7db, inode 0x1149, pos 0. [ 399.356080][T14143] XFS (loop0): Unmounting Filesystem [ 399.539309][T18123] loop1: detected capacity change from 0 to 128 [ 399.683009][T18129] fuse: Bad value for 'fd' [ 399.687072][T18126] __nla_validate_parse: 2 callbacks suppressed [ 399.687084][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5204'. [ 399.981997][T18131] loop1: detected capacity change from 0 to 32768 [ 400.018145][T18131] XFS (loop1): Mounting V5 Filesystem [ 400.024729][T18149] netlink: 'syz.4.5210': attribute type 10 has an invalid length. [ 400.027366][T18149] netlink: 'syz.4.5210': attribute type 4 has an invalid length. [ 400.029431][T18149] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5210'. [ 400.084466][T18131] XFS (loop1): Ending clean mount [ 400.088185][T18131] XFS (loop1): Quotacheck needed: Please wait. [ 400.131852][T18131] XFS (loop1): Quotacheck: Done. [ 400.139200][T18131] overlayfs: './file2' not a directory [ 400.160256][ T5125] XFS (loop1): Unmounting Filesystem [ 400.372287][T18155] loop4: detected capacity change from 0 to 32768 [ 400.376287][T18155] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5212 (18155) [ 400.381518][T18155] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.387912][T18155] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 400.392705][T18155] BTRFS info (device loop4): using free space tree [ 400.449862][T18155] BTRFS info (device loop4): enabling ssd optimizations [ 400.510165][T14119] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.685735][T18177] loop0: detected capacity change from 0 to 2048 [ 400.713337][T18179] netlink: 'syz.1.5216': attribute type 1 has an invalid length. [ 400.745582][T18177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 400.973716][T18195] loop1: detected capacity change from 0 to 1024 [ 400.979875][T18195] EXT4-fs: quotafile must be on filesystem root [ 401.035912][ T4404] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 401.171344][T18184] loop3: detected capacity change from 0 to 32768 [ 401.180439][T18184] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.5217 (18184) [ 401.187130][T18184] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 401.189819][T18184] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 401.192158][T18184] BTRFS info (device loop3): using free space tree [ 401.358833][T18184] BTRFS info (device loop3): enabling ssd optimizations [ 401.479380][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5224'. [ 401.712442][T18229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5225'. [ 401.726279][T18229] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 401.780182][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5225'. [ 401.790065][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5225'. [ 401.851387][ T4225] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 401.991385][T18232] loop1: detected capacity change from 0 to 128 [ 402.281553][T14143] EXT4-fs (loop0): unmounting filesystem. [ 402.626573][T18249] netlink: 'syz.4.5233': attribute type 1 has an invalid length. [ 402.670704][ T4240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.679939][ T4240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.683653][ T4240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.687168][ T4240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.690164][ T4240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 402.692350][ T4240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.980936][T18251] chnl_net:caif_netlink_parms(): no params data found [ 403.078262][T18251] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.086165][T18251] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.089229][T18251] device bridge_slave_0 entered promiscuous mode [ 403.092621][T18251] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.094635][T18251] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.097626][T18251] device bridge_slave_1 entered promiscuous mode [ 403.117304][T18251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.125773][T18251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.203786][T18251] team0: Port device team_slave_0 added [ 403.210486][T18251] team0: Port device team_slave_1 added [ 403.253275][T18251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.260272][T18251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.272463][T18251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.292876][T18251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.303556][T18251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.326088][T18251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.386575][T18251] device hsr_slave_0 entered promiscuous mode [ 403.418980][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5237'. [ 403.425529][T18251] device hsr_slave_1 entered promiscuous mode [ 403.466138][T18251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.468325][T18251] Cannot create hsr debugfs directory [ 403.630704][T18280] loop3: detected capacity change from 0 to 128 [ 403.715136][T18282] loop1: detected capacity change from 0 to 2048 [ 403.755428][T18251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.760979][T18282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 403.833436][T18278] loop0: detected capacity change from 0 to 32768 [ 403.843527][T18278] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.5238 (18278) [ 403.913183][T18278] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 403.916948][T18278] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 403.919430][T18278] BTRFS info (device loop0): using free space tree [ 403.924101][T18251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.931580][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5242'. [ 403.943815][T18291] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 403.996540][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5242'. [ 404.000630][T18251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.006685][T18305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5242'. [ 404.067676][T18251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.081914][T18278] BTRFS info (device loop0): enabling ssd optimizations [ 404.666636][T18251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 404.706792][T18251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 404.747486][T18251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 404.767338][T18257] Bluetooth: hci4: command tx timeout [ 404.808442][T18251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 404.899404][T18321] netlink: 'syz.4.5246': attribute type 1 has an invalid length. [ 404.920354][T14143] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 405.013589][ T4239] Bluetooth: hci0: command 0x0406 tx timeout [ 405.013604][T18257] Bluetooth: hci3: command 0x0406 tx timeout [ 405.177785][T18251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.202759][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.205816][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.218260][T18251] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.246924][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.249569][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 405.252272][ T4997] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.254121][ T4997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.278680][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.281176][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.286297][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 405.289067][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.290974][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.293143][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.311748][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5249'. [ 405.322871][T18251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.334365][T18251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.340149][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.342886][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.347461][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.350530][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.354638][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.362673][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.370556][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.373086][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.375961][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.381003][T18338] loop3: detected capacity change from 0 to 128 [ 405.397380][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.407400][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.795276][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.797517][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.809310][T18251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.831537][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.836218][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.838061][ T5125] EXT4-fs (loop1): unmounting filesystem. [ 405.869997][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 405.872634][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.876315][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.879273][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.883616][T18251] device veth0_vlan entered promiscuous mode [ 405.895973][T18251] device veth1_vlan entered promiscuous mode [ 405.924066][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 405.929032][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 405.936632][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 405.941819][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 405.951130][T18251] device veth0_macvtap entered promiscuous mode [ 405.963057][T18251] device veth1_macvtap entered promiscuous mode [ 405.971049][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 405.973576][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 405.997343][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.000051][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.002847][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.006897][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.009705][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.012470][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.015584][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.018339][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.021208][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.024022][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.040925][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.048736][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.058602][T18251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.062061][T10593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 406.066352][T10593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.075970][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.079057][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.085506][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.093019][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.098651][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.101690][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.106557][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.113116][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.137388][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.155659][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.171174][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.173896][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.191151][T18251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.200425][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 406.203128][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.213365][T18251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.219945][T18251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.230864][T18251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.233186][T18251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.266981][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5256'. [ 406.269364][T18359] IPv6: NLM_F_REPLACE set, but no existing node found! [ 406.277253][T18359] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 406.334604][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5256'. [ 406.364681][T18364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5256'. [ 406.389483][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.391711][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.397531][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 406.436277][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.439036][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.445840][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 406.607852][T18369] netlink: 'syz.2.5259': attribute type 1 has an invalid length. [ 406.659917][T18363] loop4: detected capacity change from 0 to 32768 [ 406.662687][T18363] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz.4.5258 (18363) [ 406.676005][T18363] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 406.679042][T18363] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 406.681351][T18363] BTRFS info (device loop4): using free space tree [ 406.845055][ T4231] Bluetooth: hci4: command tx timeout [ 406.869734][T18363] BTRFS info (device loop4): enabling ssd optimizations [ 407.008562][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5260'. [ 407.473636][T18403] loop1: detected capacity change from 0 to 128 [ 407.590761][T18406] loop2: detected capacity change from 0 to 2048 [ 407.705634][T18406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 407.732278][T14119] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 408.009011][T18427] netlink: 'syz.1.5270': attribute type 1 has an invalid length. [ 408.350172][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5273'. [ 408.552765][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5274'. [ 408.563283][T18443] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 408.615864][T18444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5274'. [ 408.619380][T18444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5274'. [ 408.925237][T18257] Bluetooth: hci4: command tx timeout [ 408.933834][T18448] loop3: detected capacity change from 0 to 128 [ 408.990542][T18251] EXT4-fs (loop2): unmounting filesystem. [ 409.141316][T18459] netlink: 'syz.1.5281': attribute type 1 has an invalid length. [ 409.512854][T18457] loop2: detected capacity change from 0 to 32768 [ 409.539503][T18457] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.5277 (18457) [ 409.574528][T18457] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 409.592855][T18457] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 409.605014][T18457] BTRFS info (device loop2): using free space tree [ 409.656828][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5284'. [ 409.748563][T18457] BTRFS info (device loop2): enabling ssd optimizations [ 409.864517][T18500] loop1: detected capacity change from 0 to 2048 [ 409.927102][T18500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 410.502282][T18513] loop4: detected capacity change from 0 to 128 [ 410.579195][T18251] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 411.005320][ T4231] Bluetooth: hci4: command tx timeout [ 411.050817][T18526] netlink: 'syz.2.5295': attribute type 1 has an invalid length. [ 411.086092][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5296'. [ 411.088543][T18528] IPv6: NLM_F_REPLACE set, but no existing node found! [ 411.091311][T18528] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 411.145468][T18535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5296'. [ 411.153040][T18535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5296'. [ 411.306621][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5298'. [ 411.607664][T18550] loop2: detected capacity change from 0 to 128 [ 411.790447][ T5125] EXT4-fs (loop1): unmounting filesystem. [ 412.061062][T18565] netlink: 'syz.0.5309': attribute type 1 has an invalid length. [ 412.367687][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5310'. [ 412.396160][T18552] loop2: detected capacity change from 0 to 32768 [ 412.405073][T18583] loop3: detected capacity change from 0 to 128 [ 412.409270][T18552] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.5303 (18552) [ 412.429829][T18552] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 412.439437][T18552] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 412.446395][T18552] BTRFS info (device loop2): using free space tree [ 412.686667][T18552] BTRFS info (device loop2): enabling ssd optimizations [ 413.110351][T18610] loop3: detected capacity change from 0 to 2048 [ 413.205337][T18610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 413.335210][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5319'. [ 413.354542][T18619] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 413.410528][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5319'. [ 413.420994][T18620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5319'. [ 413.493425][T18251] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 414.001418][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5324'. [ 414.045232][T18636] loop1: detected capacity change from 0 to 128 [ 414.820198][T18661] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 414.859585][T18657] loop1: detected capacity change from 0 to 32768 [ 414.867049][T18657] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.5332 (18657) [ 414.877145][T18657] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 414.882675][T18657] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 414.980143][T18657] BTRFS info (device loop1): using free space tree [ 414.987262][ T4225] EXT4-fs (loop3): unmounting filesystem. [ 415.192384][T18657] BTRFS info (device loop1): enabling ssd optimizations [ 415.320181][T18687] loop4: detected capacity change from 0 to 128 [ 415.382355][T18693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5339'. [ 415.608801][T18693] IPv6: NLM_F_REPLACE set, but no existing node found! [ 415.725531][T18693] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 416.043184][ T5125] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 416.275411][T18718] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 416.384360][T18725] loop3: detected capacity change from 0 to 2048 [ 416.445119][T18725] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 417.050799][T18739] loop0: detected capacity change from 0 to 128 [ 417.207192][T18747] __nla_validate_parse: 3 callbacks suppressed [ 417.207206][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5355'. [ 417.243282][T18747] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 417.306273][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5355'. [ 417.308989][T18752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5355'. [ 417.365528][T18745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5353'. [ 417.575101][T18762] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 417.654563][T18743] loop2: detected capacity change from 0 to 32768 [ 417.672612][T18743] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.5354 (18743) [ 417.681897][T18743] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 417.684445][T18743] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 417.691742][T18743] BTRFS info (device loop2): using free space tree [ 418.011591][T18743] BTRFS info (device loop2): enabling ssd optimizations [ 418.702250][T18800] loop1: detected capacity change from 0 to 128 [ 418.843478][T18251] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 419.198445][ T4225] EXT4-fs (loop3): unmounting filesystem. [ 419.208035][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5368'. [ 419.559096][T18831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5374'. [ 419.561448][T18831] IPv6: NLM_F_REPLACE set, but no existing node found! [ 419.570274][T18831] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 419.621450][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5374'. [ 419.624122][T18838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5374'. [ 419.634272][T18837] loop4: detected capacity change from 0 to 128 [ 419.933957][T18849] loop1: detected capacity change from 0 to 2048 [ 419.979597][T18841] loop0: detected capacity change from 0 to 32768 [ 419.989548][T18849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 419.993177][T18841] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.5378 (18841) [ 419.998622][T18841] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 420.002377][T18841] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 420.003552][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5380'. [ 420.007446][T18841] BTRFS info (device loop0): using free space tree [ 420.120170][T18841] BTRFS info (device loop0): enabling ssd optimizations [ 420.932472][T14143] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 421.379983][T18908] loop0: detected capacity change from 0 to 128 [ 421.691502][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5392'. [ 421.910364][T18926] IPv6: NLM_F_REPLACE set, but no existing node found! [ 421.915952][T18926] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 422.131773][ T5125] EXT4-fs (loop1): unmounting filesystem. [ 422.644966][T18948] loop2: detected capacity change from 0 to 128 [ 422.701650][T18931] loop1: detected capacity change from 0 to 32768 [ 422.715087][T18931] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.5398 (18931) [ 422.746026][T18931] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 422.748731][T18931] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 422.751109][T18931] BTRFS info (device loop1): using free space tree [ 422.774160][ T78] block nbd4: Possible stuck request 000000008dd7040e: control (read@0,4096B). Runtime 150 seconds [ 422.859714][T18963] loop0: detected capacity change from 0 to 2048 [ 422.928317][T18963] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 423.036570][T18959] __nla_validate_parse: 3 callbacks suppressed [ 423.036584][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5406'. [ 423.063815][T18931] BTRFS info (device loop1): enabling ssd optimizations [ 423.872799][ T5125] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 424.166733][T19015] loop2: detected capacity change from 0 to 128 [ 424.338318][T19024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5418'. [ 424.340583][T19024] IPv6: NLM_F_REPLACE set, but no existing node found! [ 424.354256][T19024] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 424.407575][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5418'. [ 424.412759][T19027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5418'. [ 424.608170][T19031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5421'. [ 424.686151][ T28] INFO: task syz.4.3824:13778 blocked for more than 144 seconds. [ 424.688319][ T28] Not tainted 6.1.94-syzkaller #0 [ 424.690012][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.692241][ T28] task:syz.4.3824 state:D stack:0 pid:13778 ppid:7140 flags:0x0000000c [ 424.698012][ T28] Call trace: [ 424.700212][ T28] __switch_to+0x320/0x754 [ 424.702604][ T28] __schedule+0xee4/0x1c98 [ 424.704875][ T28] schedule+0xc4/0x170 [ 424.707147][ T28] io_schedule+0x8c/0x188 [ 424.709039][ T28] folio_wait_bit_common+0x65c/0xb90 [ 424.712725][ T28] __filemap_get_folio+0x5ac/0xb6c [ 424.715444][ T28] truncate_inode_pages_range+0x47c/0xf10 [ 424.719142][ T28] truncate_inode_pages+0x2c/0x3c [ 424.720617][ T28] blkdev_flush_mapping+0x134/0x280 [ 424.723120][ T28] blkdev_put+0x464/0x6e0 [ 424.725417][ T28] blkdev_close+0x58/0x94 [ 424.728925][ T28] __fput+0x30c/0x7bc [ 424.731283][ T28] ____fput+0x20/0x30 [ 424.733490][ T28] task_work_run+0x240/0x2f0 [ 424.735852][ T28] do_exit+0x554/0x1a88 [ 424.738205][ T28] do_group_exit+0x194/0x22c [ 424.740614][ T28] get_signal+0x14a0/0x158c [ 424.744203][ T28] do_notify_resume+0x3ac/0x3474 [ 424.748296][ T28] el0_svc+0x9c/0x168 [ 424.750338][ T28] el0t_64_sync_handler+0x84/0xf0 [ 424.752852][ T28] el0t_64_sync+0x18c/0x190 [ 424.756386][ T28] [ 424.756386][ T28] Showing all locks held in the system: [ 424.760445][ T28] 1 lock held by rcu_tasks_kthre/12: [ 424.763086][ T28] #0: ffff800015a24e70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 424.794792][ T28] 1 lock held by rcu_tasks_trace/13: [ 424.796223][ T28] #0: ffff800015a25670 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 424.799161][ T28] 1 lock held by khungtaskd/28: [ 424.800421][ T28] #0: ffff800015a24ca0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 424.803022][ T28] 2 locks held by getty/3981: [ 424.804101][ T28] #0: ffff0000d5f14098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 424.824818][ T28] #1: ffff80001bcf02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 424.827595][ T28] 2 locks held by kworker/u4:11/11265: [ 424.829062][ T28] 1 lock held by syz.4.3824/13778: [ 424.830527][ T28] #0: ffff0000ce69a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xec/0x6e0 [ 424.833102][ T28] 1 lock held by syz.0.5408/18991: [ 424.834402][ T28] 1 lock held by syz.3.5409/18984: [ 424.844983][ T28] 1 lock held by syz.2.5418/19024: [ 424.846300][ T28] #0: ffff0000ead30130 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xc4/0x674 [ 424.848670][ T28] 1 lock held by syz.4.5421/19029: [ 424.850050][ T28] #0: ffff0000deefd010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 424.852798][ T28] [ 424.853403][ T28] ============================================= [ 424.853403][ T28] [ 424.884838][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 424.886668][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.94-syzkaller #0 [ 424.888643][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 424.891329][ T28] Call trace: [ 424.892134][ T28] dump_backtrace+0x1c8/0x1f4 [ 424.893405][ T28] show_stack+0x2c/0x3c [ 424.894472][ T28] dump_stack_lvl+0x108/0x170 [ 424.895727][ T28] dump_stack+0x1c/0x5c [ 424.896742][ T28] panic+0x300/0x804 [ 424.897773][ T28] hung_task_panic+0x0/0x2c [ 424.898983][ T28] kthread+0x250/0x2d8 [ 424.900070][ T28] ret_from_fork+0x10/0x20 [ 424.901250][ T28] SMP: stopping secondary CPUs [ 424.902560][ T28] Kernel Offset: disabled [ 424.903663][ T28] CPU features: 0x00000,02070084,26017203 [ 424.905242][ T28] Memory Limit: none [ 425.497438][ T28] Rebooting in 86400 seconds..