last executing test programs: 1m3.292131002s ago: executing program 4 (id=155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000200)=0x3) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 57.45108393s ago: executing program 4 (id=196): creat(0x0, 0x0) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040), 0x4) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x819008, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r6, r3, 0x2, 0x0, 0x4000}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e20}, 0xffffffc8) 55.543486056s ago: executing program 4 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000200)=0x3) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 55.179555035s ago: executing program 4 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001050016000200000004001200050017"], 0x60}}, 0x0) 48.501196341s ago: executing program 2 (id=254): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ftruncate(r1, 0x20cf01) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x1000000201005) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 47.112688984s ago: executing program 2 (id=257): creat(0x0, 0x0) open(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040), 0x4) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x819008, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r6, r3, 0x2, 0x0, 0x4000}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e20}, 0xffffffc8) 45.57711029s ago: executing program 2 (id=260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000140)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}, {@noblock_validity}, {@nodelalloc}]}, 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) 44.978730729s ago: executing program 2 (id=267): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x11, 0x5109, &(0x7f000000f400)="$eJzs3U+IVVUcB/Dz5o8zKcw8QcighS3chhQtVIYeYZCL9KUQtDAnF0EIMtguwWxEEIwaCaSsQAuG3MgDIUGYEBe1CTRJEFqY4KaVQrtaFO/de968d67vvueojennEzP3nvu759zzHncx35fnvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhDVv194vq09tvHJh4eyWg7MHGsdvzh89EkKldbyS13e/8tqOd3fufn08dph+I9tWq72GzLr+njVWdB1s9uv+eSeEMJoMMJxvXx0ujNq5u784YKlrx/adnj25fdPCmvVTl3bNnyu+dJrGl3sCyyW/r24t3ku11u+h5Ix2u+PWq3Tdoln/9Ib7T14EAHBPNtRbm/afo/mfuO32obSetGtJey5px78Q5jobS5GNu6LXPNel9WWaZy2LCmM955nU8/e/3a6n/ZN2EjXuYZ7dp+aRZrzXPGeS+nLNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRcqb2wday+tTGKxcWzm45OHugcfzm/NEjIVRbxytZufL07RMjY9e3/fDRja9PvrT66t/Deb+4Hek4OVyPOxsnQ9jTUbkVh/1jIoR6d6HVDF8UC++1drbGAgAAAI+TZ1q/h9rtLA6OdrUrrTRZaf0XZWHx2rF9p2dPbt+0sGb91KVd8+eWPl69x3i1u47XblcXfyodwTjG33S8xXo8dX9hnHLpiGmeP//Ltq/K+hfyf7U8/8d3Tv4HAADgfsj/6Tjl+uX/PZufnSnrX8j/67ouWcj/ccYx/w+FpeV/AAAAeJQ97PxfK4xTrl/+f/Hwm9+X9S/k/w2D5f+RzmnHgz/HCe+dDGFDv6kDAAAAPcT/77740ULM69knB2lev/rNU7+WjVfI/7XB8v/oA31VAAAAwP3YXr3xfFm9kP/rg+X/sYc6awAAAOBefF75ZLasXsj/04Pl/5X5Nl/5kHX6Mf4rhM8mQxhv7sxkhZ/C3MvtAgAAAPCAxJz+6cffXi47r5D/Z8qf/x+fdBDX/3c9/6+w/r+jkD31b7MHAwAAAPAkKq7nj4/Hz765oNf37w+6/n/i5u3vyq5fyP+HBsv/w53bB/n9fwAAALAE/7fv/3urME65fs///2von4tl/Qv5f26w/B+3qzpf3sX4/hyeDGFtcyd/muCZeLm9SaEx2lFoqSc9dsYeeaEx1lFomUl6vDAZwnPNnUNJYXUszCWFOxN54VRSuBwL+f3QLpxNChfjnXZiIp9uWjgfC/kCi0ZcQbGqvSQi6fFnrx7Nwl17/Na+OAAAwBMlhuc8y452N0MaZRuVfies7HfCUL8ThvudMJKckJ7Y63iY7i7E4x/uOP1lKFHI/6cGy//xrViRbXqt/w9x/X/+vYbt9f/TsVBNCo1YqKdPDKjHa2Rh91i8RrWe97iztl0AAACAx1r8XGB4mecBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7J3rzFyXfUBwM8+Z3e93l0TpASKYAElIZW8Xm+wpZAgbKAEgQSbynyoUISNvUk33iTGDwmHh9YOQaAUNSkpCShQuxUUf0lWVIhHgVioGFVN1SiVkNOURwgUIUFNSJSKOpGrmXvP7J1zdx6Odx1v+vtJ3jkz//O8c2c85947ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP8fjt3xhotaxd981SPf/u4Db//44Y8s3P3EVz51RwjTtce7snDXxac+11s5+Z7vHfrpF7+wad2jp/vzcnk8rKn+6c7vfCLW+ou1IXyjK4TeNLB+OAv05feHY32vGg5hXVgM1EvMDGUl0obDDwZDOBIWA/WqvjUYwnAhsO3R7z/0mWrinsEQLg0hVNI2flzJ2hhMA5f1Z4GhNHBrbxb4nzOZeuCb3VkAzll8MdR3+oXpxgxjS5drsv/1LVvHXlzp8HpiYqx5vt9uXeFOFfSnD0yf09NWqo4VUXp5HPdqWwWvttJ2vsvTVvwglX9CObMYqoTuXTM37Dgwtz8+0h0mJnqa1bRCz/NjT31059mkV81+GDswtiz74b2f//nHvvTktfff98l3XP/gM78fP9dunixs0mJ6pVVCvs+tmucx2uL9ZBW8/EqfksbbPm21Ii/xD12f/tnf/kmreGn+P9Z6/h9353jb3ZA71np6JJubx0eGY+LUSDY3BwAAgFVjNRw1nf/K1VOt6ivN/8c7O/8fT/nnk/lstMdD2FJL3D4awiW1x7PAsdjcB0dDeG0tNd0Y2JoEjofwilriinpVSYmBWGI8CfxqJA9sSQInYmA6CXw5Bu5KAp+IgYUksDMGjieBt8ZAmG0cxx+P5OPoODAYA9uzjbgQr0J4eiS2lmyrx+tVAQAALJN8dtjXeLdwrcO5ZojTy4XBdhniFdhNM1SSGtIZbH1a1bSG3nY1dLeroT7u+dbDL9Xc1a7m0mUYXY0Z9n70d38WWijN/ydbz/8rS3Skq3T+P4Tran9j7u48MlePb59uyAAAAACcgzVbb9nWKl6a/2/p7Pr/eEykp5A5PBwPQ+weDWGyMZBVe3U5kJ31XpMHAAAAYDWon4+vnwufzW+zS7TT+XQ5//RZ5o8n/rcsmf/X73zTTa36W5r/T3d2/f9Q423WiROxF58dDWGgEPhh7GU1UDMeAz97S2MgH/+JuAHujFXlFybUq7ozltgeA5NJ4EizEo/US1zSGMifrHrjt9fHMZuXKAQAAADgvIuHA+J5+Xj9/2MHTr6tVbnS/H/72V3/X5sHly7vn1sTwobeEHrSLwY8PJQtDBgDw1154rtDWV09aVWHhkK4pjqwtKon8vX/e9M1Bh8dzKqKgUte99WnLqsm/m4whA3FwI/ef3RTNbE/CdQbf99gCK+pjjZt/OsDWeN9aeP3DoTw6kKgXtUHB0KoNtafVvX9Sv47BmlVD1ZCuKgQqFe1uRLCwQDAKhX/K91VfHDfwdt275ibm9m7gol4DH8w3DA7NzOx89a5XZUmfdqV9LlhGaND5TE1XQ4p8Xi+RNGx564a6SRd/57gZLEv+XH80oWD+f34WaivNs6pvoa7V6ZDfsPry02EwiepF2vIQ8VKFp/EUv0xf39YEwYO7JvZO/HhHfv3792Y/e00+1T2Nw4q21Yb0201tFTfLoDd4/JiJRv237xnw76Dt62fvXnHjTM3ztwyNfnGTZs3TU1u3ryhOqrJ7G+boV6+VNXJUM8cPf9DfWVvoZLz8a4hISGx2hLztx9d0+rtpzT/39N6/h/fdeI7f74+Q7Pz/2PxNH/2+OJp/u0xcKTT8/9jzc7m1y8MGE8C8zEw7zQ/AAAALw3xcGQ87BiPWvcfvfI3rcqV5v/znX3/f5nW/68vXf+uZsv8XxFLTDZb/z9d5r++/v98s/X/02X+6+v/H3kR1v8/UA8km+Rp6/8DAAAvBedv/f+2y/unPxBQytB2ef/0BwJKGdou49/pDwSc9fr/Uzf99BehhdL8/67O5v8W7gcAAIALx93/9NRrWsVL8/8jnc3/z//6f6HZ9f/jzQLTzRYGtP4fAAAAq1Sz9f/OjP7F+1qVK83/Fzqb/8fLLrobcsdaT49ka9qFdE27UyP1rwwAAADA6tAdJib6OszbsDLq1hfe5mP5UqCt0kU/vPq/bmxVX2n+f7yz+X/D9zLu/fzPP/alJ6+9//R9n3zH9Q8+8/vxxfP/AAAAwMrp9LgEAAAAAAAAAAAAAADw4jvwgX891Spe+v5/uK72eLPv/8ff/YvfL3h5Q+5Ya/v1//L72979wMHakoUPj4Tw+mJg9+Hd60L+2/yXFwMPXX/FxdXE4bTEd37y1l9WEx9IA+9c/7Jnq4lrksD2uEjiK9JA/FXFZ9cmgbi84r+ngbg9FtJAfx749NpsHF3ptvr1cLatutJt9R/DIYwWAvVt9Y3hrI2udID3JIH6AD+UBuIA35MHutNePbAm61UMDMeif7Mm6xUAABes+CmwL9wwOzczGT/Cx9tX9jbeRg1Llh0qV9vTYfOP50uTHXvuqpFO0j3pZ9HF3xrvC5XqEDaWPq4Ws3TVRrk8tbTZdC9vMuR2q72t1Kbrbz6iwWxEEztvndvV13bgV7bPMtXbNsvG0mSnmKW7tkk7qKWDvnQwog63TQddjve7w8RET5LrTTE4Fhq02yM6/b5+cZ2/ZntBMc+hub7nW9VXmv+PdTb/rxTH9Wz+YwDz8Zf1/nLUMv8AAACwsj699Q/3xX/fGX3vf7bKW5r/j3c2/48HxvJTwdnRjuPx9/9vHw2h9tP6Y1ngWGzug6MhvLaWmo4lsh/Uf1csMZkFjsUDJlfEEtunG6saiIGFJPCrkTxwPAmciIH8KMVXQ34o5+6REDbVUtc1ltgTS4wlgffGwHgSmIiBySSwNga2JIHfrM0D00ngX2IgzDZuq39Ym28rAACAs5HPs/oa74Z0nrfQ2y5DV7sMQ+0ydLfLUGmXodko4v2vxQx9xfPxeYb4UF9a62BSSylD/DH8s+5XKUN4pDFnWrDUdP1KkrHGnDHDtoXDa0MLpfn/ZGfz/6HG26z1E3H+v/j7f1ngh7F7n42Xjo/HwM/e0hjIDwyciJPdO+tVTecl8kn7nbHElhgYTwJ7YmBLEth+XR44cnFjIJ9p1xu/vd74bF6iEAAAAIDzLh4giIdp4vz/vwee/+tW5Urz/y2dzf9je2uKjX0i1vqLtSF8o2uxN/XA+uEsEI9jDMevx79qOIR1hQMc9RIzQ1mJ/qTh8IPB7Bvq/WlV3xrMvnwQ72979PsPfaaauGcwhEsLR1/qbfy4krUxmAYu688CQ2ng1t4sEI/81APf7M4CcM7qRwXjDpVf6lI3tnS5JvvfS+U3QdPhlY6BLpFvqe9crZRK+kB+TLXu7J62UnWsjHT7H/dqWw2vtufz/4Pr/fJqK36QOpNsnuoQu3fN3LDjwNz++Ejxm6wlK/Q8F7+l2kl6GfbD+Rfe26i7aaSSdmAyefuYXLrc0vthV6zu3s///GNfevLa++/75Duuf/CZ34+362C7/Td+UfiWm/535GRh8660Ssj3uQv+/SR9YNr7yWr4byB9YNzTFkK4Y+GSp1vFS/P/6c7m/73Jbc0f4sbcNxrCGwob9+G4+d82mr0PFgLZu+RF5UB2yv3JkabvnAAAALDc6oc76scLZvPb7ILwdJ5czj99lvnj8YotS+bvtN8fufTSf2wVL83/t7ee/w8k3XT+3/l/Vojz/0u60A9FD6QPzJ/ToehSdayI0svD+f+wCl5tpTM1zv8H5/+X7N8ynP9vzvn/lpz/X90u9Ket9Clpjw9dIYTBr1/9SKt4af6/p7P5v/X/ll60r77+3/Zm6//tabb+37z1/wAAgBXVZKG5dJ5XWr2vlCFdva+Uoe0CgW2XGLT+31mv/zf0V+//XWihNP+f72z+H3eHNcXWV8v6f+PXNanqrhjYY2FAAAAALkTNDhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4vrVyaG3t4q/+apHvv3dB97+8cMfWbj7ia986o4QZmuPd2XhrotPfa63cvI93zv00y9+YdO6R09X8nJ9+e0fNeSOtZ4eCeFI4ZHhmDg1Ur2zGNj27gcO9lYTD4+E8PpiYPfh3euqiS+PhHB5MfDQ9VdcXE0cTkt85ydv/WU18YE08M71L3u2mrgmD3Sl3b1/bdbdrrS7n1kbwmghUO/uTWsbq6q3cW0e6E7b+PvhrI0YGI5F7xvO2oiBuVhidiCEDb0h9KRV/XMlq6onrerblayqnrSqj1dCuCaE0JtW9ZP+rKredOT/1p9VFQOXvO6rT11WTRzpD2FDMfCj9x/dVE18KAnUG//T/hBeU91l0sa/1pc13pc2fk9fCK8OIfSnJZ7pzUr0pyWe6A3hokKg3vif94ZwMPCSEN98dhUf3Hfwtt075uZm9q5goj9vazDcMDs3M7Hz1rldlaRPzXQV0mcOlePdHY798ac+urN6e+y5q0Y6Sffm5fpqXZ7qa7h75XL1vmuFeh/7NVSsZPH5KNUf8/eHNWHgwL6ZvRMf3rF//96N2d9Os09lf3vyaLatNi7XturUC91Wlxcr2bD/5j0b9h28bf3szTtunLlx5papyTdu2rxpanLz5g3VUU1mf5djqEfL8Z4VHuorewuVnI83AAkJidWW6G54d5u80P/LLn3QX+xoX6jU3qBL04pilq7aKJdj0Ftbx89y0NUeNf+c0nZEG0sTh1KWqfZZrixNJhazDGZZap/rSpPDYk3dtU0a73eHiYmm/9ONNd4tbr7fLrF5O/VYvuk6TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA///jqU04") r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r1 = creat(&(0x7f0000001180)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x3fffe) fallocate(r0, 0x3, 0xefff, 0x2) 32.390039827s ago: executing program 4 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001050016000200000004001200050017"], 0x60}}, 0x0) 27.647173431s ago: executing program 2 (id=267): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x11, 0x5109, &(0x7f000000f400)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r1 = creat(&(0x7f0000001180)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x3fffe) fallocate(r0, 0x3, 0xefff, 0x2) 9.090834484s ago: executing program 0 (id=422): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='[:\x00\x00', 0x0) 8.948469046s ago: executing program 0 (id=424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$igmp6(0xa, 0x3, 0x2) rt_tgsigqueueinfo(r2, r2, 0x6, &(0x7f0000000300)={0x2, 0x0, 0x3}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) write$UHID_CREATE(r1, &(0x7f0000001500)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000013c0)=""/111, 0x6f, 0xfde6, 0x1f, 0x9, 0x6}}, 0x120) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) io_uring_setup(0x62df, &(0x7f0000000440)={0x0, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 8.486094885s ago: executing program 4 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001050016000200000004001200050017"], 0x60}}, 0x0) 7.778285153s ago: executing program 0 (id=426): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x632, &(0x7f0000001840)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1000}]}, 0x24}}, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000200), 0x4) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) timer_create(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00"], 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0xfd, 0x4}, {0x1000, 0x2}}]}}, 0x11) 5.014891473s ago: executing program 3 (id=438): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40087602, 0x0) 4.583836439s ago: executing program 3 (id=439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af80e00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.482975088s ago: executing program 0 (id=440): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') 4.195716111s ago: executing program 2 (id=267): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x11, 0x5109, &(0x7f000000f400)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r1 = creat(&(0x7f0000001180)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x3fffe) fallocate(r0, 0x3, 0xefff, 0x2) 3.275264108s ago: executing program 3 (id=442): ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="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"}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4,\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 3.274596568s ago: executing program 0 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001f4a46d4850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r0, &(0x7f0000000740)="195290a87c6dafbae84f79151d6b839d656330ba2da5e1ec96d9ee0230cd078bd5626978ddd84db572625e6ae4153b01a9c2d6904901173727f4bbc4fb24d8a38f326d6200d7e884553113b30955c6a1877d3704c4b235f7c88f56bf7d51151cc5fc5f67319acebf0bf0f84bb68a5805dd47fe25d6c3d8a0c82d77ffa59bff9a225f8df30f27bf97ef929e825555aa12b3074a051d9f1d90fd0be1a326da21b8a4b46567749956fecab201afe4ad44accaf14f82435a7cadc3b0a331f55405a268a65895cacd0123"}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r1, 0x20, &(0x7f00000004c0)={&(0x7f0000000540)=""/230, 0xe6, 0x0, &(0x7f0000000740)=""/155, 0x9b}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000840)=ANY=[@ANYBLOB="18010000000000200000090000000000181900005fd3f62186ab09606831b201e09b67e1945c3e6d2fd08f070966239595c6a43dd65998e8eaa88720a3bdb7cbf0239e2dc947f3992af15e263d6952c4fbf6ed3370abc725757b7aa6cb9a247a8653a8d4e9552c9fb39500ebba07e3dc55168a4e7d72297238036a8ea905fa34fa19761142ed7f9dd62d7351f0cfca38e3ba41d4c999589313563304521ec6a04a1a182cbc2d79e683274aeae24cf956f51a1105e7cc791e522f3d38c8711364258f75914629e3c18ab2cac2c574b694c41174d0c459bb9064b7a1dd92107c", @ANYRES32=r3, @ANYBLOB="000000cef0f07b8af8ff0000000000a2000100000000070200f1f8ffffffb703000008000000b7040000000000008500060024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.swap.current\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40001) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f7000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000bdb200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffff2d, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x9fffffff}, [@generic={0x2c}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_lookup_start\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r11}, @generic={0x2c}, @map_val={0x18, 0x0, 0x2, 0x0, r11}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222}, 0x90) write$cgroup_int(r10, &(0x7f00000001c0), 0xfffffdef) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r12}, 0x10) r14 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r13}, 0x8) write$cgroup_int(r14, &(0x7f00000001c0), 0xfffffdef) 3.175335316s ago: executing program 3 (id=446): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='[:\x00\x00', 0x0) 3.00849502s ago: executing program 1 (id=447): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="9fcef773371e4e035a4ff190bea4efd68642046c23be8a9aae70a0043860f98931e9a9d2a4cb9b6cbfab8d88542eafc9851179a8bc28dad0fbfc05804b2b"], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0xfffffffffffffe30) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 2.990836152s ago: executing program 3 (id=448): r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0xaa80, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0404309, &(0x7f0000000040)={0x43, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x541b) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r6, 0x1, 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x10001, 0x90) syz_genetlink_get_family_id$nl80211(0x0, r10) setsockopt$packet_int(r10, 0x107, 0xb, &(0x7f00000000c0), 0x4) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xc22b01) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x8, 0xc00, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x69}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcaf7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x440c4}, 0x48000) write$evdev(r11, &(0x7f0000000540)=[{{0x77359400}, 0x11, 0xf}], 0x18) 2.706606465s ago: executing program 1 (id=449): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2242, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20}, 0x20) sendfile(r0, r1, &(0x7f0000000080), 0xf9) 636.554028ms ago: executing program 0 (id=450): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40087602, 0x0) 635.654908ms ago: executing program 3 (id=451): r0 = syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1117, &(0x7f00000024c0)="$eJzs2cFq1FAUBuD/JqPtbiTug6ALF1JaxgewC4XZutWNSEGwqw4Iiq/hG/gWvoJ25b50r4uCSyESM3GqDKh0KgjfB8k9OcnJyV3emwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvknwqyfUqacZclaQkbXs8P03Sjvlr7+sqJQ8P5ov7R7MHiyT198fLo6T0VX1Zmr2b282smTV7zd17+7c+LF6+ev7k8PDgaPmakjYnZxudRRlP9flc2WgPAAAA+G91FzbNmxd/0unqJfUHAAAAfmfT+wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6ubruJmDKokJWnb4/lpknZN3ZV/9H0AAADAxZVUeTxdlx+2AVbu5OO0/Mj345fSx7t5u6YeAAAAWHn27qfLbmsZnP+//rUb9Ovu25kM6/Lt4d6NTLKzM8TLIZ/3kzrJ7i+9Ts5ePx2P0tXJ1uXMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//YwzhLg==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff020447cd9caded4abf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/240, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16, @ANYRESDEC=r0, @ANYRES16, @ANYRESDEC, @ANYRES64=r0], 0x1, 0x0, &(0x7f0000000480)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) 541.687195ms ago: executing program 1 (id=452): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x62}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xff82}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x9e}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0xde, &(0x7f0000000340)=""/222}, 0x90) 358.6478ms ago: executing program 1 (id=453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af80e00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 101.062602ms ago: executing program 1 (id=454): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') 0s ago: executing program 1 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200040, 0x1, 0x0, 0x6, 0x0, 0x2000}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x500, 0x80000007, 0x20}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): o=18 res=0 errno=0 [ 72.419294][ T3866] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 72.425357][ T3876] loop3: detected capacity change from 0 to 16 [ 72.425902][ T3866] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.444684][ T3855] vhci_hcd vhci_hcd.0: Device attached [ 72.475319][ T3876] erofs: (device loop3): mounted with root inode @ nid 36. [ 72.518980][ T3876] syz.3.82: attempt to access beyond end of device [ 72.518980][ T3876] loop3: rw=0, sector=16, nr_sectors = 32 limit=16 [ 72.522468][ T3873] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 72.548600][ T3866] vhci_hcd vhci_hcd.0: Device attached [ 72.567066][ T3879] loop1: detected capacity change from 0 to 512 [ 72.573919][ T3876] syz.3.82: attempt to access beyond end of device [ 72.573919][ T3876] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 72.603993][ T3879] ======================================================= [ 72.603993][ T3879] WARNING: The mand mount option has been deprecated and [ 72.603993][ T3879] and is ignored by this kernel. Remove the mand [ 72.603993][ T3879] option from the mount to silence this warning. [ 72.603993][ T3879] ======================================================= [ 72.639887][ T3878] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 72.646495][ T3878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.650704][ T3876] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 72.666046][ T3623] vhci_hcd: vhci_device speed not set [ 72.701067][ T3878] vhci_hcd vhci_hcd.0: Device attached [ 72.708785][ T3879] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.710560][ T3595] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 72.725383][ T3876] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 72.737573][ T3595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.739491][ T3855] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 72.752153][ T3855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.765492][ T3623] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 72.768532][ T3595] usb 1-1: Product: syz [ 72.786386][ T3595] usb 1-1: Manufacturer: syz [ 72.791361][ T3855] vhci_hcd vhci_hcd.0: Device attached [ 72.793813][ T3595] usb 1-1: SerialNumber: syz [ 72.824481][ T3881] vhci_hcd: connection closed [ 72.830346][ T3879] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.83: bg 0: block 64: padding at end of block bitmap is not set [ 72.840354][ T3664] vhci_hcd: stop threads [ 72.860574][ T3595] usb 1-1: config 0 descriptor?? [ 72.866684][ T3883] vhci_hcd: connection closed [ 72.866824][ T3869] vhci_hcd: connection reset by peer [ 72.867255][ T3872] vhci_hcd: connection closed [ 72.886138][ T3664] vhci_hcd: release socket [ 72.916544][ T3664] vhci_hcd: disconnect device [ 72.924006][ T3595] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 72.954657][ T3879] Quota error (device loop1): write_blk: dquota write failed [ 72.962398][ T3664] vhci_hcd: stop threads [ 72.966654][ T3664] vhci_hcd: release socket [ 72.980487][ T3664] vhci_hcd: disconnect device [ 72.981403][ T3879] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 73.022947][ T3879] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.83: Failed to acquire dquot type 0 [ 73.072661][ T3879] EXT4-fs (loop1): 1 truncate cleaned up [ 73.107633][ T3664] vhci_hcd: stop threads [ 73.114137][ T3879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.136662][ T3664] vhci_hcd: release socket [ 73.170134][ T3664] vhci_hcd: disconnect device [ 73.175276][ T3664] vhci_hcd: stop threads [ 73.179533][ T3664] vhci_hcd: release socket [ 73.184592][ T3664] vhci_hcd: disconnect device [ 73.830903][ T3897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.839845][ T3897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.472678][ T3595] gspca_stk1135: reg_w 0x2 err -110 [ 74.478966][ T3595] gspca_stk1135: serial bus timeout: status=0x00 [ 74.490447][ T3595] gspca_stk1135: Sensor write failed [ 74.495770][ T3595] gspca_stk1135: serial bus timeout: status=0x00 [ 74.520308][ T3595] gspca_stk1135: Sensor write failed [ 74.530791][ T3595] gspca_stk1135: serial bus timeout: status=0x00 [ 74.549094][ T3595] gspca_stk1135: Sensor read failed [ 74.577892][ T3595] gspca_stk1135: serial bus timeout: status=0x00 [ 74.588946][ T3595] gspca_stk1135: Sensor read failed [ 74.601340][ T3595] gspca_stk1135: Detected sensor type unknown (0x0) [ 74.614888][ T3595] gspca_stk1135: serial bus timeout: status=0x00 [ 74.622604][ T3595] gspca_stk1135: Sensor read failed [ 74.627901][ T3595] gspca_stk1135: serial bus timeout: status=0x00 [ 74.701445][ T3906] trusted_key: encrypted_key: insufficient parameters specified [ 74.726270][ T3906] loop4: detected capacity change from 0 to 16 [ 74.738783][ T3906] erofs: (device loop4): mounted with root inode @ nid 36. [ 74.850354][ T3595] gspca_stk1135: Sensor read failed [ 74.857850][ T3595] gspca_stk1135: serial bus timeout: status=0x00 [ 74.865401][ T3595] gspca_stk1135: Sensor write failed [ 74.870928][ T3595] gspca_stk1135: serial bus timeout: status=0x00 [ 75.032558][ T3595] gspca_stk1135: Sensor write failed [ 75.048637][ T3595] stk1135: probe of 1-1:0.0 failed with error -110 [ 75.604925][ T3879] syz.1.83 (3879) used greatest stack depth: 19552 bytes left [ 75.669182][ T3593] usb 1-1: USB disconnect, device number 2 [ 75.708510][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 76.329822][ T155] cfg80211: failed to load regulatory.db [ 76.402353][ T3919] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 76.907156][ T3931] tipc: Started in network mode [ 76.928567][ T3931] tipc: Node identity 1e67900e634a, cluster identity 4711 [ 76.978853][ T3931] tipc: Enabled bearer , priority 0 [ 77.036328][ T3932] tipc: Resetting bearer [ 77.202526][ T3930] tipc: Disabling bearer [ 78.100462][ T3623] vhci_hcd: vhci_device speed not set [ 78.192308][ T3949] loop0: detected capacity change from 0 to 512 [ 78.232819][ T3949] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.326423][ T3950] loop4: detected capacity change from 0 to 4096 [ 78.407376][ T3949] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.104: bg 0: block 64: padding at end of block bitmap is not set [ 78.445943][ T3949] Quota error (device loop0): write_blk: dquota write failed [ 78.454445][ T3963] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.466935][ T3949] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 78.502962][ T3949] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.104: Failed to acquire dquot type 0 [ 78.520871][ T3949] EXT4-fs (loop0): 1 truncate cleaned up [ 78.525689][ T26] audit: type=1800 audit(1720593606.302:4): pid=3950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.102" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 78.530828][ T3949] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.636588][ T26] audit: type=1800 audit(1720593606.332:5): pid=3950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.102" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 78.639840][ T3964] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 78.663070][ T3964] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.773135][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 78.828655][ T3964] vhci_hcd vhci_hcd.0: Device attached [ 78.860483][ T3971] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 78.867121][ T3971] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.998293][ T3971] vhci_hcd vhci_hcd.0: Device attached [ 79.020514][ T3593] vhci_hcd: vhci_device speed not set [ 79.210448][ T3978] loop1: detected capacity change from 0 to 2048 [ 79.278262][ T3561] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 79.343324][ T3964] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 79.356786][ T3964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.747623][ T3593] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 79.769272][ T3964] vhci_hcd vhci_hcd.0: Device attached [ 79.775366][ T3978] loop1: p1 < > p4 [ 79.784415][ T3978] loop1: p4 size 8388608 extends beyond EOD, truncated [ 79.816269][ T3971] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 79.822897][ T3971] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.851133][ T3947] loop2: detected capacity change from 0 to 32768 [ 79.873835][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 79.874885][ T3856] udevd[3856]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 79.902673][ T3971] vhci_hcd vhci_hcd.0: Device attached [ 79.965259][ T3947] ERROR: (device loop2): dtSearch: stack overrun! [ 79.965259][ T3947] [ 79.985401][ T3980] vhci_hcd: connection closed [ 79.985583][ T3977] vhci_hcd: connection closed [ 79.985843][ T3972] vhci_hcd: connection closed [ 79.991034][ T3666] vhci_hcd: stop threads [ 80.021850][ T3666] vhci_hcd: release socket [ 80.026098][ T3965] vhci_hcd: connection reset by peer [ 80.030777][ T3666] vhci_hcd: disconnect device [ 80.036241][ T3947] ERROR: (device loop2): remounting filesystem as read-only [ 80.059123][ T3666] vhci_hcd: stop threads [ 80.083949][ T3947] btstack dump: [ 80.087442][ T3947] bn = 0, index = 4 [ 80.092882][ T3666] vhci_hcd: release socket [ 80.097364][ T3666] vhci_hcd: disconnect device [ 80.119011][ T3947] bn = 0, index = 4 [ 80.128143][ T3666] vhci_hcd: stop threads [ 80.138281][ T3947] bn = 0, index = 4 [ 80.142414][ T3666] vhci_hcd: release socket [ 80.160381][ T3666] vhci_hcd: disconnect device [ 80.166377][ T3947] bn = 0, index = 4 [ 80.189856][ T3987] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.203649][ T3666] vhci_hcd: stop threads [ 80.231159][ T3666] vhci_hcd: release socket [ 80.233472][ T3947] bn = 0, index = 4 [ 80.251254][ T3947] bn = 0, index = 4 [ 80.251386][ T3666] vhci_hcd: disconnect device [ 80.295844][ T3947] bn = 0, index = 4 [ 80.305953][ T3947] bn = 0, index = 0 [ 80.316403][ T3947] jfs_lookup: dtSearch returned -5 [ 80.383217][ T3991] loop0: detected capacity change from 0 to 1024 [ 80.406739][ T3991] EXT4-fs: Ignoring removed orlov option [ 80.436288][ T3991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.486152][ T3991] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.528959][ T3991] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 80.548097][ T3991] EXT4-fs (loop0): invalid journal inode [ 80.553957][ T3991] EXT4-fs (loop0): can't get journal size [ 80.563356][ T3991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 80.631995][ T3997] IPv6: addrconf: prefix option has invalid lifetime [ 80.638762][ T3997] IPv6: addrconf: prefix option has invalid lifetime [ 80.647672][ T3962] loop3: detected capacity change from 0 to 40427 [ 80.660316][ T3962] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 80.669385][ T3962] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 80.754881][ T3962] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.859570][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 80.946218][ T3962] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 80.970692][ T3962] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.143531][ T4016] trusted_key: encrypted_key: insufficient parameters specified [ 81.173186][ T4016] loop4: detected capacity change from 0 to 16 [ 81.186684][ T4016] erofs: (device loop4): mounted with root inode @ nid 36. [ 81.332030][ T3561] Bluetooth: hci0: command tx timeout [ 81.970010][ T4014] loop2: detected capacity change from 0 to 4096 [ 82.100424][ T4022] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.161063][ T26] audit: type=1800 audit(1720593609.912:6): pid=4014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.119" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 82.264090][ T4025] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 82.404522][ T4026] loop0: detected capacity change from 0 to 2048 [ 82.418005][ T3561] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 82.573768][ T4026] loop0: p1 < > p4 [ 82.641869][ T4026] loop0: p4 size 8388608 extends beyond EOD, truncated [ 82.906320][ T4025] Remounting filesystem read-only [ 82.921418][ T3856] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.960966][ T4028] loop0: detected capacity change from 0 to 256 [ 82.995970][ T3551] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 83.009471][ T3856] udevd[3856]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 83.012396][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 83.024304][ T4023] loop4: detected capacity change from 0 to 8192 [ 83.045713][ T3551] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 83.076933][ T3551] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 83.091808][ T3551] NILFS (loop2): discard dirty page: offset=4096, ino=18 [ 83.109171][ T3551] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 83.153974][ T3551] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 83.161513][ T4023] loop4: p1 p2 p3 p4 [ 83.161513][ T4023] p4: [ 83.195661][ T3551] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 83.211925][ T4023] loop4: partition table partially beyond EOD, truncated [ 83.229996][ T3551] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 83.240015][ T4023] loop4: p1 start 17825536 is beyond EOD, truncated [ 83.248012][ T3551] NILFS (loop2): discard dirty block: blocknr=27, size=4096 [ 83.265966][ T3551] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 83.275722][ T4023] loop4: p2 size 64053 extends beyond EOD, truncated [ 83.293375][ T3551] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 83.314635][ T3551] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 83.341769][ T4023] loop4: p3 start 458496 is beyond EOD, truncated [ 83.354052][ T3551] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 83.387367][ T4023] loop4: p4 size 50331904 extends beyond EOD, truncated [ 83.410466][ T3552] Bluetooth: hci0: command 0x0406 tx timeout [ 83.417748][ T4023] loop4: p5 start 17825536 is beyond EOD, truncated [ 83.420727][ T3551] NILFS (loop2): discard dirty page: offset=270336, ino=3 [ 83.450280][ T3551] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 83.470308][ T4023] loop4: p6 size 64053 extends beyond EOD, truncated [ 83.531960][ T4036] netlink: 'syz.1.126': attribute type 1 has an invalid length. [ 83.535796][ T4023] loop4: p7 size 50331904 extends beyond EOD, truncated [ 83.808878][ T4049] xt_TPROXY: Can be used only with -p tcp or -p udp [ 84.128593][ T4061] loop4: detected capacity change from 0 to 256 [ 84.170889][ T4057] loop1: detected capacity change from 0 to 4096 [ 84.214087][ T4061] exfat: Deprecated parameter 'utf8' [ 84.285802][ T4064] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.307489][ T4061] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 84.319918][ T26] audit: type=1800 audit(1720593612.082:7): pid=4057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.134" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 84.439181][ T4068] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 84.451418][ T3548] Bluetooth: hci1: command tx timeout [ 84.464391][ T26] audit: type=1326 audit(1720593612.242:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4065 comm="syz.2.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb6d775bd9 code=0x0 [ 84.586154][ T4068] Remounting filesystem read-only [ 84.818114][ T4035] loop0: detected capacity change from 0 to 40427 [ 84.836414][ T4035] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 84.850369][ T3593] vhci_hcd: vhci_device speed not set [ 84.997805][ T26] audit: type=1804 audit(1720593612.772:9): pid=4081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.143" name="/newroot/30/bus/file0" dev="overlay" ino=185 res=1 errno=0 [ 85.017721][ T4085] loop0: detected capacity change from 0 to 128 [ 85.036708][ T3545] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 85.054824][ T3545] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 85.072858][ T3545] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 85.080443][ T3545] NILFS (loop1): discard dirty page: offset=4096, ino=18 [ 85.096657][ T4085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.117894][ T3545] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 85.157123][ T4085] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038 (0x7fffffff) [ 85.234922][ T3545] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 85.264657][ T3545] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 85.273251][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 85.279987][ T3545] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 85.292270][ T3545] NILFS (loop1): discard dirty block: blocknr=27, size=4096 [ 85.306379][ T3545] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 85.313336][ T3545] NILFS (loop1): discard dirty block: blocknr=28, size=4096 [ 85.355119][ T3545] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 85.376912][ T3545] NILFS (loop1): discard dirty block: blocknr=29, size=4096 [ 85.403226][ T3545] NILFS (loop1): discard dirty page: offset=270336, ino=3 [ 85.453584][ T3545] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 85.608598][ T4106] trusted_key: encrypted_key: insufficient parameters specified [ 85.637775][ T4106] loop4: detected capacity change from 0 to 16 [ 85.656580][ T4106] erofs: (device loop4): mounted with root inode @ nid 36. [ 86.538480][ T3552] Bluetooth: hci1: command 0x0406 tx timeout [ 86.684052][ T26] audit: type=1804 audit(1720593614.462:10): pid=4119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.158" name="/newroot/35/bus/file0" dev="overlay" ino=204 res=1 errno=0 [ 86.810679][ T4121] device syzkaller0 entered promiscuous mode [ 87.023125][ T4135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.059381][ T26] audit: type=1326 audit(1720593614.832:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4130 comm="syz.0.162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc55375bd9 code=0x0 [ 87.241558][ T4132] kvm: emulating exchange as write [ 87.277016][ T4142] loop2: detected capacity change from 0 to 256 [ 87.304247][ T4142] exfat: Deprecated parameter 'utf8' [ 87.362503][ T4142] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 87.624240][ T4124] loop1: detected capacity change from 0 to 40427 [ 87.640089][ T4124] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 87.653866][ T4124] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.720946][ T4146] trusted_key: encrypted_key: insufficient parameters specified [ 87.734188][ T4146] loop2: detected capacity change from 0 to 16 [ 87.755626][ T4146] erofs: (device loop2): mounted with root inode @ nid 36. [ 88.029287][ T4124] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.517570][ T4124] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.555724][ T4124] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.715225][ T26] audit: type=1326 audit(1720593617.492:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4173 comm="syz.1.177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13ce575bd9 code=0x0 [ 90.048993][ T4189] loop0: detected capacity change from 0 to 4096 [ 90.658427][ T4193] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.720072][ T26] audit: type=1800 audit(1720593618.492:13): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 90.806216][ T4197] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 90.852655][ T4195] syz.3.182[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.852780][ T4195] syz.3.182[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.886251][ T4197] Remounting filesystem read-only [ 91.114074][ T3546] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 91.123100][ T3546] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 91.136333][ T3546] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 91.151114][ T3546] NILFS (loop0): discard dirty page: offset=4096, ino=18 [ 91.164275][ T3546] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 91.231369][ T3546] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 91.249594][ T3546] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 91.258715][ T3546] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 91.272122][ T3546] NILFS (loop0): discard dirty block: blocknr=27, size=4096 [ 91.296102][ T3546] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 91.314465][ T3546] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 91.329230][ T3546] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 91.343638][ T3546] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 91.358855][ T3546] NILFS (loop0): discard dirty page: offset=270336, ino=3 [ 91.371007][ T3546] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 91.905844][ T3548] Bluetooth: hci4: command tx timeout [ 93.082264][ T4240] loop0: detected capacity change from 0 to 1024 [ 93.177115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.199490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 93.214127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 93.224578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 93.233990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 93.243427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 93.252853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 93.265451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 93.274842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 93.287332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 93.350576][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.600458][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 93.940515][ T22] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 93.969061][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.998105][ T22] usb 2-1: Product: syz [ 94.027296][ T22] usb 2-1: Manufacturer: syz [ 94.041012][ T4262] Driver unsupported XDP return value 0 on prog (id 46) dev N/A, expect packet loss! [ 94.056469][ T22] usb 2-1: SerialNumber: syz [ 94.121308][ T22] usb 2-1: config 0 descriptor?? [ 94.139683][ T4240] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.162293][ T22] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 94.196395][ T4240] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 94.270834][ T26] audit: type=1804 audit(1720593622.042:14): pid=4240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.197" name="/newroot/34/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 94.607867][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 94.690213][ T4273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.699816][ T4273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.740428][ T22] gspca_stk1135: reg_w 0x2 err -110 [ 94.802379][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 95.031799][ T22] gspca_stk1135: Sensor write failed [ 95.193762][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 95.321807][ T22] gspca_stk1135: Sensor write failed [ 95.356445][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 95.382631][ T22] gspca_stk1135: Sensor read failed [ 95.391068][ T4268] loop2: detected capacity change from 0 to 32768 [ 95.405758][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 95.468201][ T22] gspca_stk1135: Sensor read failed [ 95.488259][ T22] gspca_stk1135: Detected sensor type unknown (0x0) [ 95.498149][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 95.515884][ T22] gspca_stk1135: Sensor read failed [ 95.525343][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 95.534525][ T22] gspca_stk1135: Sensor read failed [ 95.552784][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 95.575061][ T22] gspca_stk1135: Sensor write failed [ 95.614309][ T22] gspca_stk1135: serial bus timeout: status=0x00 [ 95.629282][ T22] gspca_stk1135: Sensor write failed [ 95.641431][ T22] stk1135: probe of 2-1:0.0 failed with error -110 [ 95.700180][ T4282] loop3: detected capacity change from 0 to 4096 [ 95.726452][ T3698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.728630][ T3552] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.752960][ T3552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.759104][ T4285] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.774760][ T26] audit: type=1800 audit(1720593623.552:15): pid=4282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.212" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 95.777550][ T3561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.811671][ T3561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.820331][ T3561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.827772][ T3561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.916388][ T3698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.949022][ T4288] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 95.969598][ T4288] Remounting filesystem read-only [ 96.015462][ T3698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.111600][ T3698] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.243023][ T3553] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 96.252088][ T3553] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 96.258943][ T3553] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 96.266833][ T3553] NILFS (loop3): discard dirty page: offset=4096, ino=18 [ 96.274361][ T3553] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 96.320663][ T3553] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 96.330763][ T3553] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 96.350892][ T3553] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 96.357608][ T3553] NILFS (loop3): discard dirty block: blocknr=27, size=4096 [ 96.460802][ T3592] usb 2-1: USB disconnect, device number 2 [ 96.470212][ T3553] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 96.477090][ T3553] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 96.484454][ T3553] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 96.493195][ T3553] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 96.500637][ T3553] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 96.507769][ T3553] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 96.544129][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 97.184773][ T4315] loop3: detected capacity change from 0 to 1024 [ 97.278481][ T4315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.291663][ T4315] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038 (0x7fffffff) [ 97.395861][ T26] audit: type=1804 audit(1720593625.172:16): pid=4315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.222" name="/newroot/54/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 97.430222][ T4292] loop2: detected capacity change from 0 to 32768 [ 97.445704][ T4292] gfs2: can't find protocol dlm [ 97.877892][ T4340] IPVS: set_ctl: invalid protocol: 0 172.30.0.1:0 [ 97.897885][ T3561] Bluetooth: hci2: command tx timeout [ 97.908538][ T3553] EXT4-fs (loop3): unmounting filesystem. [ 97.951266][ T3561] Bluetooth: hci0: unexpected event for opcode 0x200c [ 97.964698][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.964779][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.965805][ T4283] device bridge_slave_0 entered promiscuous mode [ 97.967520][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.967578][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.968533][ T4283] device bridge_slave_1 entered promiscuous mode [ 98.083815][ T4346] loop0: detected capacity change from 0 to 256 [ 98.183239][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.186929][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.319552][ T4283] team0: Port device team_slave_0 added [ 98.357622][ T4355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.233'. [ 98.379204][ T4283] team0: Port device team_slave_1 added [ 98.519338][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.527623][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.563899][ T4356] pit: kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 98.598423][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.644473][ T4356] pit: kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 98.671531][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.678501][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.680636][ T4356] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 98.746731][ T4364] loop1: detected capacity change from 0 to 2048 [ 98.771247][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.784931][ T4356] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 98.860499][ T4364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.880375][ T3623] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.892284][ T4364] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.235: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 98.919958][ T4364] EXT4-fs (loop1): Remounting filesystem read-only [ 98.952117][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 99.078360][ T4283] device hsr_slave_0 entered promiscuous mode [ 99.088497][ T4373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 99.117168][ T4283] device hsr_slave_1 entered promiscuous mode [ 99.124112][ T3623] usb 1-1: Using ep0 maxpacket: 16 [ 99.154440][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.173607][ T4283] Cannot create hsr debugfs directory [ 99.252295][ T3623] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.338490][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 99.407768][ T4381] netlink: 'syz.1.239': attribute type 1 has an invalid length. [ 99.431640][ T4386] loop2: detected capacity change from 0 to 1024 [ 99.442066][ T3623] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=c5.ff [ 99.449525][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 99.459234][ T3623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.515955][ T3623] usb 1-1: Product: syz [ 99.540367][ T3623] usb 1-1: Manufacturer: syz [ 99.546030][ T3623] usb 1-1: SerialNumber: syz [ 99.554266][ T4386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 99.573352][ T4386] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038 (0x7fffffff) [ 99.597303][ T3623] usb 1-1: config 0 descriptor?? [ 99.628403][ T26] audit: type=1804 audit(1720593627.402:17): pid=4386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.240" name="/newroot/47/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 99.681433][ T3623] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 99.695887][ T3623] ftdi_sio ttyUSB0: unknown device type: 0xc5ff [ 99.749160][ T4392] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:0 [ 99.854825][ T3698] device hsr_slave_0 left promiscuous mode [ 99.869983][ T4361] loop3: detected capacity change from 0 to 32768 [ 99.918860][ T3698] device hsr_slave_1 left promiscuous mode [ 99.919974][ T4361] gfs2: can't find protocol dlm [ 99.939805][ T4396] loop1: detected capacity change from 0 to 256 [ 99.954026][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.968128][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.970540][ T3561] Bluetooth: hci2: command tx timeout [ 100.004410][ T7] usb 1-1: USB disconnect, device number 3 [ 100.027562][ T7] ftdi_sio 1-1:0.0: device disconnected [ 100.039422][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.069191][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.104214][ T3551] EXT4-fs (loop2): unmounting filesystem. [ 100.119610][ T3698] device bridge_slave_1 left promiscuous mode [ 100.145161][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.239165][ T3698] device bridge_slave_0 left promiscuous mode [ 100.276561][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.365641][ T3698] device veth1_macvtap left promiscuous mode [ 100.386233][ T3698] device veth0_macvtap left promiscuous mode [ 100.398060][ T3698] device veth1_vlan left promiscuous mode [ 100.400910][ T4402] loop1: detected capacity change from 0 to 4096 [ 100.411068][ T3698] device veth0_vlan left promiscuous mode [ 100.445915][ T4407] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.472935][ T26] audit: type=1800 audit(1720593628.252:18): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.245" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 100.599635][ T4410] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 100.626772][ T4409] loop2: detected capacity change from 0 to 2048 [ 100.635360][ T4410] Remounting filesystem read-only [ 100.678475][ T4409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.704149][ T4409] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.247: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 100.768512][ T4409] EXT4-fs (loop2): Remounting filesystem read-only [ 100.825782][ T3551] EXT4-fs (loop2): unmounting filesystem. [ 101.024901][ T3545] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 101.044601][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 101.058584][ T3545] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 101.072594][ T4420] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 101.082282][ T3545] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 101.089514][ T3545] NILFS (loop1): discard dirty page: offset=4096, ino=18 [ 101.098549][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 101.107435][ T3545] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 101.139363][ T3545] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 101.146474][ T3545] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 101.169747][ T3545] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 101.242193][ T3545] NILFS (loop1): discard dirty block: blocknr=27, size=4096 [ 101.315204][ T3545] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 101.453427][ T3545] NILFS (loop1): discard dirty block: blocknr=28, size=4096 [ 101.526134][ T3545] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 101.621085][ T3545] NILFS (loop1): discard dirty block: blocknr=29, size=4096 [ 101.685888][ T4426] loop2: detected capacity change from 0 to 1024 [ 101.734710][ T3545] NILFS (loop1): discard dirty page: offset=270336, ino=3 [ 101.840947][ T3545] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 101.887249][ T4426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.902307][ T4426] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038 (0x7fffffff) [ 101.953475][ T26] audit: type=1804 audit(1720593629.732:19): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.254" name="/newroot/53/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 102.070450][ T3561] Bluetooth: hci2: command tx timeout [ 102.662566][ T3698] team0 (unregistering): Port device team_slave_1 removed [ 102.769436][ T3551] EXT4-fs (loop2): unmounting filesystem. [ 103.045134][ T3698] team0 (unregistering): Port device team_slave_0 removed [ 103.120805][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.249836][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.817354][ T4434] loop0: detected capacity change from 0 to 32768 [ 103.850371][ T4434] gfs2: can't find protocol dlm [ 104.133644][ T3561] Bluetooth: hci2: command tx timeout [ 104.138917][ T4042] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.234324][ T3698] bond0 (unregistering): Released all slaves [ 104.340339][ T3623] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.351456][ T4399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'. [ 104.566022][ T4463] input: syz1 as /devices/virtual/input/input5 [ 104.600626][ T3623] usb 2-1: Using ep0 maxpacket: 16 [ 104.720914][ T3623] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.920642][ T3623] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=c5.ff [ 104.929721][ T3623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.953653][ T3623] usb 2-1: Product: syz [ 104.958242][ T3623] usb 2-1: Manufacturer: syz [ 104.983164][ T4479] loop0: detected capacity change from 0 to 128 [ 104.986434][ T3623] usb 2-1: SerialNumber: syz [ 105.029416][ T3623] usb 2-1: config 0 descriptor?? [ 105.081783][ T3623] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 105.101041][ T4480] loop3: detected capacity change from 0 to 2048 [ 105.108909][ T3623] ftdi_sio ttyUSB0: unknown device type: 0xc5ff [ 105.116345][ T4479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.130625][ T4479] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 105.165590][ T4480] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 105.198424][ T4480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.262595][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.339035][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.349203][ T3548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.365638][ T3548] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.376705][ T3552] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.387604][ T3548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.396194][ T3548] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 105.411742][ T3548] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.436953][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.462903][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 105.481116][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.680894][ T155] usb 2-1: USB disconnect, device number 3 [ 105.701396][ T155] ftdi_sio 2-1:0.0: device disconnected [ 105.873571][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.883088][ T4496] netlink: 108 bytes leftover after parsing attributes in process `syz.0.272'. [ 105.934917][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.951001][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.973421][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.071330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.080009][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.096582][ T4502] loop3: detected capacity change from 0 to 1764 [ 106.106081][ T4504] loop0: detected capacity change from 0 to 128 [ 106.117288][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.124427][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.168769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.185999][ T4504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.203311][ T4500] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 106.210369][ T4504] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038 (0x7fffffff) [ 106.222061][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.251371][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.258504][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.289545][ T4500] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 106.298964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.351628][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.370957][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.396807][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.407659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.422930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.435236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.446369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.458382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.469225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.483394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.508608][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.533014][ T4486] chnl_net:caif_netlink_parms(): no params data found [ 106.567377][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.577514][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 107.000918][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.012280][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.025171][ T4526] loop3: detected capacity change from 0 to 4096 [ 107.033481][ T4486] device bridge_slave_0 entered promiscuous mode [ 107.046343][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.060706][ T4526] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 107.089320][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.110414][ T4486] device bridge_slave_1 entered promiscuous mode [ 107.158987][ T4526] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 107.173359][ T4530] input: syz1 as /devices/virtual/input/input6 [ 107.224681][ T4486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.278180][ T4486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.375153][ T4534] loop0: detected capacity change from 0 to 128 [ 107.439143][ T4486] team0: Port device team_slave_0 added [ 107.457006][ T4486] team0: Port device team_slave_1 added [ 107.476764][ T4534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.490897][ T3548] Bluetooth: hci4: command tx timeout [ 107.512701][ T4534] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 107.550670][ T3666] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 107.561788][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.569444][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.603510][ T3553] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 107.658158][ T4486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.696744][ T4486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.734807][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 107.813198][ T4486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.837443][ T4546] netlink: 108 bytes leftover after parsing attributes in process `syz.0.284'. [ 107.875080][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.903050][ T4486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.926254][ T4551] loop3: detected capacity change from 0 to 128 [ 107.930272][ T4486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.016139][ T4486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.018861][ T4551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.104273][ T4551] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038 (0x7fffffff) [ 108.124105][ T4486] device hsr_slave_0 entered promiscuous mode [ 108.192946][ T4486] device hsr_slave_1 entered promiscuous mode [ 108.217256][ T4486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.241964][ T4486] Cannot create hsr debugfs directory [ 108.281181][ T3553] EXT4-fs (loop3): unmounting filesystem. [ 108.419791][ T4573] input: syz1 as /devices/virtual/input/input7 [ 108.758272][ T4486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.825686][ T4580] loop1: detected capacity change from 0 to 4096 [ 108.875054][ T4580] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 108.923885][ T4486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.952752][ T4580] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.022998][ T4486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.090858][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.112817][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.144970][ T4565] loop0: detected capacity change from 0 to 32768 [ 109.165188][ T4565] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop0 scanned by syz.0.289 (4565) [ 109.182174][ T4486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.196439][ T3699] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 109.208076][ T3545] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 109.234008][ T4565] BTRFS info (device loop0): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 109.250880][ T4565] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 109.271082][ T4565] BTRFS info (device loop0): using free space tree [ 109.355715][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.374099][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.410014][ T4283] device veth0_vlan entered promiscuous mode [ 109.467702][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.482198][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.525382][ T4283] device veth1_vlan entered promiscuous mode [ 109.570677][ T3548] Bluetooth: hci4: command tx timeout [ 109.685906][ T4565] BTRFS info (device loop0): enabling ssd optimizations [ 110.739769][ T4486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.825823][ T4486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.834742][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.851649][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.859710][ T4486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.100988][ T4486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.142176][ T3546] BTRFS info (device loop0): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 111.185587][ T4283] device veth0_macvtap entered promiscuous mode [ 111.230102][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.257166][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.275753][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.321222][ T4643] input: syz1 as /devices/virtual/input/input8 [ 111.488606][ T4283] device veth1_macvtap entered promiscuous mode [ 111.521340][ T4653] loop0: detected capacity change from 0 to 128 [ 111.603259][ T4657] syz.3.306 uses obsolete (PF_INET,SOCK_PACKET) [ 111.633630][ T4653] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.650777][ T3561] Bluetooth: hci4: command tx timeout [ 111.678320][ T4653] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038 (0x7fffffff) [ 111.725074][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.750304][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.773936][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.787717][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.797816][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.809660][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.821365][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.832240][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.852827][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 111.878702][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.895833][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.937202][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.978155][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.068528][ T4674] netlink: 108 bytes leftover after parsing attributes in process `syz.0.308'. [ 112.184967][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.227456][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.540344][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.717025][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.879421][ T4679] loop0: detected capacity change from 0 to 2048 [ 112.914738][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.942258][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.976015][ T4679] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 112.994516][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.008263][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.023321][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.039716][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.049179][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.078021][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.109074][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.138137][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.166525][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.228281][ T3698] device hsr_slave_0 left promiscuous mode [ 113.251645][ T3698] device hsr_slave_1 left promiscuous mode [ 113.258084][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.270784][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.282964][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.291619][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.299867][ T3698] device bridge_slave_1 left promiscuous mode [ 113.329609][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.360407][ T155] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.375465][ T3698] device bridge_slave_0 left promiscuous mode [ 113.385756][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.399348][ T4699] input: syz1 as /devices/virtual/input/input9 [ 113.448754][ T3698] device veth1_macvtap left promiscuous mode [ 113.455142][ T3698] device veth0_macvtap left promiscuous mode [ 113.470430][ T3698] device veth1_vlan left promiscuous mode [ 113.481790][ T3698] device veth0_vlan left promiscuous mode [ 113.683489][ T4705] pit: kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 113.696387][ T4710] loop0: detected capacity change from 0 to 128 [ 113.723614][ T4705] pit: kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 113.730414][ T3561] Bluetooth: hci4: command tx timeout [ 113.756108][ T4705] pit: kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 113.764700][ T155] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.775126][ T4710] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.787932][ T155] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.801066][ T4705] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 113.809425][ T155] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.825483][ T4710] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038 (0x7fffffff) [ 113.838326][ T155] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.886289][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 114.010432][ T155] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.026140][ T155] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.035441][ T155] usb 2-1: Product: syz [ 114.039714][ T155] usb 2-1: Manufacturer: syz [ 114.050935][ T3593] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.094177][ T155] cdc_wdm 2-1:1.0: skipping garbage [ 114.101744][ T155] cdc_wdm 2-1:1.0: skipping garbage [ 114.140270][ T155] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 114.146509][ T155] cdc_wdm 2-1:1.0: Unknown control protocol [ 114.162380][ T4717] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 114.305053][ T3593] usb 4-1: Using ep0 maxpacket: 16 [ 114.346036][ T41] usb 2-1: USB disconnect, device number 4 [ 114.356594][ T3698] team0 (unregistering): Port device team_slave_1 removed [ 114.402805][ T3698] team0 (unregistering): Port device team_slave_0 removed [ 114.430596][ T3593] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.441953][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.473113][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.601433][ T3593] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=c5.ff [ 114.611119][ T3593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.619124][ T3593] usb 4-1: Product: syz [ 114.623687][ T3593] usb 4-1: Manufacturer: syz [ 114.628502][ T3593] usb 4-1: SerialNumber: syz [ 114.643770][ T3593] usb 4-1: config 0 descriptor?? [ 114.682624][ T3593] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 114.693052][ T3593] ftdi_sio ttyUSB0: unknown device type: 0xc5ff [ 114.870568][ T3698] bond0 (unregistering): Released all slaves [ 114.913210][ T3593] usb 4-1: USB disconnect, device number 2 [ 114.926216][ T3593] ftdi_sio 4-1:0.0: device disconnected [ 115.075187][ T4486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.116220][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.125946][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.161114][ T4486] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.183238][ T3664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.224105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.237054][ T3664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.247134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.281190][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.288269][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.319487][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.328286][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.344034][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.352989][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.357497][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.375160][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.432425][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.439557][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.680975][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.792273][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.034457][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.071922][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.086679][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.107476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.178076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.206475][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.228536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.258906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.437961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.447058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.457523][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.671460][ T4745] loop1: detected capacity change from 0 to 2048 [ 117.048524][ T4745] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 117.230814][ T4745] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 117.290462][ T4745] UDF-fs: Scanning with blocksize 512 failed [ 117.456782][ T4745] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.480310][ T4745] UDF-fs: Scanning with blocksize 1024 failed [ 117.517390][ T4745] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.552649][ T4745] UDF-fs: Scanning with blocksize 2048 failed [ 117.610454][ T4745] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=385, location=385 [ 117.640310][ T4745] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 117.647969][ T4745] UDF-fs: Scanning with blocksize 4096 failed [ 117.721252][ T4745] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 117.831157][ T3548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.840361][ T3548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.848038][ T3548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.861080][ T3548] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.868592][ T3548] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.876468][ T3548] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.899478][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.920429][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.933953][ T4486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.024669][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.033936][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.054775][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.066757][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.076416][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.092889][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.123214][ T4486] device veth0_vlan entered promiscuous mode [ 118.262935][ T4486] device veth1_vlan entered promiscuous mode [ 118.293941][ T3561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.312056][ T3561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.319911][ T3561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.329108][ T3561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.336798][ T3561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 118.344440][ T3561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.520185][ T4486] device veth0_macvtap entered promiscuous mode [ 118.546389][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.556512][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.585953][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.742994][ T4486] device veth1_macvtap entered promiscuous mode [ 118.818772][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.078613][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.510290][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.600533][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.636257][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.654416][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.680289][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.701138][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.743346][ T4486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.783046][ T4757] chnl_net:caif_netlink_parms(): no params data found [ 119.805253][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.825219][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.839114][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.853602][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.871603][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.890338][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.901026][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.910870][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.918675][ T4803] loop1: detected capacity change from 0 to 4096 [ 119.921357][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.956318][ T4486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.966889][ T4486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.970373][ T3561] Bluetooth: hci1: command tx timeout [ 119.978550][ T4486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.017363][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.044810][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.070534][ T4803] ntfs: volume version 3.1. [ 120.133126][ T4486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.163532][ T4486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.195380][ T4486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.204850][ T4810] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.213960][ T4486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.236979][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.246096][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.253878][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.267801][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.323939][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 120.332172][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.339606][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.348494][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.356519][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.365280][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 120.372986][ T3561] Bluetooth: hci2: command tx timeout [ 120.380064][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.400030][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.408940][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.418271][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.460401][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.467803][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.501343][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.508758][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.530800][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.538202][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.563049][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.568642][ T4757] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.578392][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.593781][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.608360][ T4757] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.610554][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.636611][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.654134][ T4757] device bridge_slave_0 entered promiscuous mode [ 120.667320][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.690571][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.697970][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.700984][ T4757] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.729172][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.735606][ T4757] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.752932][ T4757] device bridge_slave_1 entered promiscuous mode [ 120.760430][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.767833][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.774198][ T4769] chnl_net:caif_netlink_parms(): no params data found [ 120.790462][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.797864][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.820609][ T3623] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 120.855889][ T3623] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 120.988881][ T3658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.025177][ T3658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.036372][ T4757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.107710][ T4757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.150611][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.163417][ T155] rtc_cmos 00:00: Alarms can be up to one day in the future [ 121.180513][ T155] rtc_cmos 00:00: Alarms can be up to one day in the future [ 121.187965][ T155] rtc_cmos 00:00: Alarms can be up to one day in the future [ 121.197507][ T155] rtc_cmos 00:00: Alarms can be up to one day in the future [ 121.208474][ T155] rtc rtc0: __rtc_set_alarm: err=-22 [ 121.233671][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.242707][ T4769] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.251728][ T4769] device bridge_slave_0 entered promiscuous mode [ 121.283941][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.296883][ T4769] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.305877][ T4769] device bridge_slave_1 entered promiscuous mode [ 121.340720][ T4757] team0: Port device team_slave_0 added [ 121.403101][ T4757] team0: Port device team_slave_1 added [ 121.409456][ T3658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.421274][ T3658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.477187][ T4769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.513744][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.571372][ T4769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.616384][ T4757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.616656][ T4830] loop3: detected capacity change from 0 to 8192 [ 121.635876][ T4757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.704877][ T4757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.738216][ T4830] REISERFS warning (device loop3): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 121.801157][ T4757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.808389][ T4757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.836952][ T4757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.852634][ T4769] team0: Port device team_slave_0 added [ 121.882481][ T4769] team0: Port device team_slave_1 added [ 121.927697][ T3698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.977738][ T4757] device hsr_slave_0 entered promiscuous mode [ 121.996102][ T4757] device hsr_slave_1 entered promiscuous mode [ 122.018702][ T4757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.036405][ T4757] Cannot create hsr debugfs directory [ 122.050624][ T3561] Bluetooth: hci1: command tx timeout [ 122.118946][ T3698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.181030][ T4769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.188637][ T4769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.217426][ T4769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.232204][ T4769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.254226][ T4769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.312541][ T4769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.375315][ T3698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.450692][ T3561] Bluetooth: hci2: command tx timeout [ 122.539178][ T3698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.574150][ T3548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.583008][ T3548] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.596343][ T3548] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.605160][ T3548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.613227][ T3548] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 122.623989][ T3548] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.667011][ T4844] loop1: detected capacity change from 0 to 4096 [ 122.678996][ T4769] device hsr_slave_0 entered promiscuous mode [ 122.686030][ T4769] device hsr_slave_1 entered promiscuous mode [ 122.695381][ T4769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.696058][ T4844] ntfs3: Bad value for 'gid' [ 122.712614][ T4769] Cannot create hsr debugfs directory [ 122.774804][ T4841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 122.961531][ T26] audit: type=1326 audit(1720593650.742:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4840 comm="syz.1.358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13ce575bd9 code=0x0 [ 123.023664][ T4853] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.054023][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.063431][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.065206][ T3698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.078261][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.089689][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.098084][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 123.105898][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.117115][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.124922][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.136519][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.147384][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 123.162748][ T3595] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.163020][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.173215][ T3595] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.194555][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.198419][ T3595] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.209549][ T3595] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.210325][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.225626][ T3595] rtc rtc0: __rtc_set_alarm: err=-22 [ 123.231632][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.239119][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.247171][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.255883][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.269918][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.278760][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.293841][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.303897][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.317933][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.328441][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.339846][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.354847][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.380379][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.387865][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.407288][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.425194][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.437300][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.457568][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.473373][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.481083][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.488475][ T3623] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 123.502952][ T3623] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 123.616280][ T3698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.769699][ T3698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.861386][ T3698] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.965947][ T4882] capability: warning: `syz.3.367' uses deprecated v2 capabilities in a way that may be insecure [ 124.004022][ T4842] chnl_net:caif_netlink_parms(): no params data found [ 124.130785][ T3548] Bluetooth: hci1: command tx timeout [ 124.367888][ T4889] loop3: detected capacity change from 0 to 4096 [ 124.423138][ T4889] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 124.437790][ T4889] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 124.448114][ T4889] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 124.462943][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.470026][ T4842] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.492110][ T4889] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 124.502485][ T4842] device bridge_slave_0 entered promiscuous mode [ 124.506053][ T4889] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 124.518865][ T4889] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 124.530541][ T3548] Bluetooth: hci2: command tx timeout [ 124.537145][ T4889] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 124.557724][ T4889] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 124.628763][ T4889] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 124.650535][ T4889] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 124.660882][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.667973][ T4842] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.687417][ T4842] device bridge_slave_1 entered promiscuous mode [ 124.701466][ T3548] Bluetooth: hci4: command tx timeout [ 124.892433][ T4902] xt_SECMARK: invalid mode: 0 [ 125.046836][ T4842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.067367][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 125.109017][ T4842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.273736][ T4842] team0: Port device team_slave_0 added [ 125.299134][ T4906] loop3: detected capacity change from 0 to 4096 [ 125.300946][ T4916] rtc_cmos 00:00: Alarms can be up to one day in the future [ 125.342569][ T4906] ntfs3: Bad value for 'gid' [ 125.357056][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.366447][ T4842] team0: Port device team_slave_1 added [ 125.390984][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.399328][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.421246][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.428760][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 125.445141][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.450458][ T26] audit: type=1326 audit(1720593653.222:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.3.372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c0fb75bd9 code=0x0 [ 125.460303][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.500699][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.508128][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.516096][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 125.523550][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.531838][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.539218][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.547176][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.554749][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.562285][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.570172][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.578814][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.586273][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.593731][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.601185][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.608572][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.616043][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.623434][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.630865][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.638248][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.645657][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.653261][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.660716][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.668087][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.676096][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.683592][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.691012][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.698413][ T155] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 125.727063][ T155] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 125.790908][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.801213][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.844382][ T4842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.854602][ T4921] loop1: detected capacity change from 0 to 8192 [ 125.864331][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.871588][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.911345][ T4842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.923847][ T4921] loop1: p1 < > p4 < > [ 126.117938][ T4930] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 126.139654][ T4842] device hsr_slave_0 entered promiscuous mode [ 126.162420][ T155] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.169893][ T155] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.182878][ T4842] device hsr_slave_1 entered promiscuous mode [ 126.191136][ T3003] loop1: p1 < > p4 < > [ 126.197261][ T4842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.205143][ T155] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.213458][ T3548] Bluetooth: hci1: command tx timeout [ 126.225771][ T4934] kvm: pic: single mode not supported [ 126.228248][ T4934] kvm: pic: non byte read [ 126.232842][ T155] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.246254][ T4842] Cannot create hsr debugfs directory [ 126.255790][ T155] rtc rtc0: __rtc_set_alarm: err=-22 [ 126.263345][ T3003] loop1: p1 < > p4 < > [ 126.291107][ T4934] kvm: pic: level sensitive irq not supported [ 126.291184][ T4934] kvm: pic: non byte read [ 126.320977][ T4934] kvm: pic: level sensitive irq not supported [ 126.321057][ T4934] kvm: pic: non byte read [ 126.368547][ T4934] kvm: pic: level sensitive irq not supported [ 126.369067][ T4934] kvm: pic: non byte read [ 126.385919][ T4757] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.517702][ T4757] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.620436][ T3548] Bluetooth: hci2: command tx timeout [ 126.680131][ T4757] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.770475][ T3548] Bluetooth: hci4: command tx timeout [ 126.834819][ T4757] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.867449][ T4769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.916236][ T4769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.935837][ T3856] udevd[3856]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 126.949106][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 127.033843][ T4769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.092203][ T4042] udevd[4042]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 127.110214][ T3856] udevd[3856]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 127.139648][ T3856] udevd[3856]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 127.140348][ T4042] udevd[4042]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 127.278620][ T4769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.362906][ T3698] device hsr_slave_0 left promiscuous mode [ 127.382745][ T4957] loop1: detected capacity change from 0 to 8192 [ 127.393095][ T3698] device hsr_slave_1 left promiscuous mode [ 127.427791][ T4957] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 127.439810][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.472021][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.503401][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.520543][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.528325][ T3698] device bridge_slave_1 left promiscuous mode [ 127.580644][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.656125][ T3698] device bridge_slave_0 left promiscuous mode [ 127.667877][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.709373][ T3698] device hsr_slave_0 left promiscuous mode [ 127.754387][ T3698] device hsr_slave_1 left promiscuous mode [ 127.763522][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.811109][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.820994][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.840022][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.849817][ T3698] device bridge_slave_1 left promiscuous mode [ 127.852361][ T4977] xt_SECMARK: invalid mode: 0 [ 127.856668][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.891324][ T3698] device bridge_slave_0 left promiscuous mode [ 127.897560][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.031404][ T3698] device veth1_macvtap left promiscuous mode [ 128.037463][ T3698] device veth0_macvtap left promiscuous mode [ 128.052135][ T3698] device veth1_vlan left promiscuous mode [ 128.057955][ T3698] device veth0_vlan left promiscuous mode [ 128.090798][ T3698] device veth1_macvtap left promiscuous mode [ 128.097453][ T3698] device veth0_macvtap left promiscuous mode [ 128.114862][ T3698] device veth1_vlan left promiscuous mode [ 128.128199][ T3698] device veth0_vlan left promiscuous mode [ 128.891854][ T3548] Bluetooth: hci4: command tx timeout [ 129.340165][ T3698] team0 (unregistering): Port device team_slave_1 removed [ 129.375232][ T3698] team0 (unregistering): Port device team_slave_0 removed [ 129.403504][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.436711][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.706629][ T3698] bond0 (unregistering): Released all slaves [ 130.015112][ T3698] team0 (unregistering): Port device team_slave_1 removed [ 130.044265][ T3698] team0 (unregistering): Port device team_slave_0 removed [ 130.075451][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.105203][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.374856][ T3698] bond0 (unregistering): Released all slaves [ 130.512143][ T4757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.632858][ T4842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.690094][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.711450][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.768603][ T4842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.792378][ T4757] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.833550][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.848335][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.857162][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.864318][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.923590][ T4842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.940323][ T3548] Bluetooth: hci4: command tx timeout [ 130.997860][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.016115][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.026211][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.046237][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.053356][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.089170][ T5014] loop1: detected capacity change from 0 to 4096 [ 131.104687][ T4769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.155305][ T4769] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.223035][ T4842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.245122][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.332121][ T5014] ntfs: volume version 3.1. [ 132.043107][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.070720][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.079737][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.090839][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.100957][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.109414][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.123182][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.140798][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.147890][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.160705][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.169423][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.190960][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.198068][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.230636][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.270702][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.281162][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.311014][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.329868][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.361249][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.369520][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.401355][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.409812][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.430848][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.439164][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.471030][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.479480][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.500877][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.511507][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.538292][ T4769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.558065][ T4769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.601687][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.612355][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.618652][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.620539][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.681171][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.689437][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.736453][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.785297][ T5019] loop1: detected capacity change from 0 to 32768 [ 132.802337][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.929584][ T4842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.952250][ T5019] XFS (loop1): Mounting V5 Filesystem [ 132.971829][ T5023] loop3: detected capacity change from 0 to 32768 [ 133.001797][ T4842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.109892][ T5023] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.398 (5023) [ 133.154046][ T5023] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 133.166751][ T5019] XFS (loop1): Ending clean mount [ 133.190593][ T5023] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 133.222137][ T4769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.222612][ T5019] XFS (loop1): Quotacheck needed: Please wait. [ 133.229128][ T4842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.240390][ T5023] BTRFS info (device loop3): using free space tree [ 133.282654][ T4842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.331771][ T5019] XFS (loop1): Quotacheck: Done. [ 133.371237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.379112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.585104][ T4842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.604252][ T4842] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.631119][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.647307][ T5023] BTRFS info (device loop3): enabling ssd optimizations [ 133.649074][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.679382][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.692570][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.701230][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.708320][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.718265][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.788125][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.809488][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.816652][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.833637][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.841739][ T26] audit: type=1804 audit(1720593661.612:22): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.398" name="/newroot/119/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 133.874761][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.895517][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.907131][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.915258][ T26] audit: type=1800 audit(1720593661.612:23): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.398" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 133.922495][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.950153][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.962256][ T5023] Invalid ELF header magic: != ELF [ 133.983020][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.003095][ T3545] XFS (loop1): Unmounting Filesystem [ 134.015677][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.046931][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.062569][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.087474][ T4842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.157180][ T3553] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 134.170610][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.205680][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.221125][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.229395][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.243493][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.262194][ T4757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.346574][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.366941][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.449467][ T4757] device veth0_vlan entered promiscuous mode [ 134.486772][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.501658][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.550775][ T4757] device veth1_vlan entered promiscuous mode [ 134.580498][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.588230][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.629625][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.704262][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.718284][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.777489][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.789309][ T4757] device veth0_macvtap entered promiscuous mode [ 134.824231][ T4757] device veth1_macvtap entered promiscuous mode [ 134.869268][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.928509][ T5086] loop3: detected capacity change from 0 to 64 [ 134.952470][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.980565][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.043371][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.084116][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.115630][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.180606][ T4757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.791273][ T5092] loop3: detected capacity change from 0 to 1024 [ 135.943058][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.951561][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.959873][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.968620][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.977773][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.987213][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.997220][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.035517][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.110574][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.138614][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.148859][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.170903][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.195774][ T4757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.222708][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 136.246689][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.271308][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.280025][ T5094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.403'. [ 136.283025][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.305454][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.345642][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.377753][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.391780][ T4769] device veth0_vlan entered promiscuous mode [ 136.423389][ T4757] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.441327][ T4757] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.450101][ T4757] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.466980][ T4757] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.786964][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.794616][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.811873][ T4842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.200169][ T4769] device veth1_vlan entered promiscuous mode [ 137.529070][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.545001][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.661418][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.669485][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.673862][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.695413][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.753733][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.777047][ T4769] device veth0_macvtap entered promiscuous mode [ 137.794709][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.811146][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.838270][ T4769] device veth1_macvtap entered promiscuous mode [ 137.886037][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.904880][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.938987][ T4769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.955186][ T4769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.966471][ T4769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.978149][ T4769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.988534][ T4769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.999447][ T4769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.011424][ T4769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.023440][ T4769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.037230][ T4769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.050653][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.059858][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.077097][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.088814][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.112299][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.126438][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.139389][ T4842] device veth0_vlan entered promiscuous mode [ 138.159805][ T4769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.198136][ T4769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.245690][ T4769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.298630][ T4769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.312347][ T4769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.327881][ T4769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.343839][ T4769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.374544][ T4769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.398527][ T4769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.415331][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.428766][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.454175][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.478405][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.489691][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.516359][ T4769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.525352][ T4769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.564773][ T4769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.585306][ T4769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.615648][ T4842] device veth1_vlan entered promiscuous mode [ 138.629422][ T5111] loop1: detected capacity change from 0 to 32768 [ 138.650169][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.817143][ T5118] Bluetooth: MGMT ver 1.22 [ 138.817177][ T5111] XFS (loop1): Mounting V5 Filesystem [ 138.881229][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.889777][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.985631][ T4842] device veth0_macvtap entered promiscuous mode [ 139.045538][ T4842] device veth1_macvtap entered promiscuous mode [ 139.068442][ T5111] XFS (loop1): Ending clean mount [ 139.072363][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.083433][ T5111] XFS (loop1): Quotacheck needed: Please wait. [ 139.097503][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.115857][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.138112][ T5128] loop0: detected capacity change from 0 to 64 [ 139.142897][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.158543][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.171969][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.173707][ T5111] XFS (loop1): Quotacheck: Done. [ 139.182443][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.198231][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.209455][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.233726][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.259014][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.307752][ T3699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.326664][ T3699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.405414][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.422632][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.442428][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.475782][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.508323][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.573045][ T3545] XFS (loop1): Unmounting Filesystem [ 139.623589][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.637635][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.688561][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.700882][ T5132] loop0: detected capacity change from 0 to 1024 [ 139.707253][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.745640][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.756699][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.767163][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.785716][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.795700][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.806643][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.846895][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.899715][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.911090][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.924308][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 139.970003][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.982400][ T4842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.995530][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.003832][ T4842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.030321][ T4842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.086516][ T4842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.125958][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.212139][ T3561] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 140.222442][ T3561] Bluetooth: hci3: Injecting HCI hardware error event [ 140.231698][ T3548] Bluetooth: hci3: hardware error 0x00 [ 140.563401][ T3699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.605567][ T3699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.641563][ T5152] kAFS: unparsable volume name [ 140.693561][ T5154] loop1: detected capacity change from 0 to 64 [ 140.726813][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.750553][ T5076] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.802831][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.819142][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.962026][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.600643][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 141.704227][ T5160] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.713449][ T5160] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.722201][ T5160] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.730937][ T5160] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.740032][ T5076] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.751745][ T5160] device vxlan0 entered promiscuous mode [ 141.760383][ T5076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.784919][ T5076] usb 4-1: config 0 descriptor?? [ 141.792536][ T3698] device hsr_slave_0 left promiscuous mode [ 141.812110][ T3698] device hsr_slave_1 left promiscuous mode [ 141.831431][ T5076] cp210x 4-1:0.0: cp210x converter detected [ 141.842811][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.860186][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.869084][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.909374][ T5167] loop0: detected capacity change from 0 to 1024 [ 141.927299][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.947385][ T3698] device bridge_slave_1 left promiscuous mode [ 141.971173][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.987938][ T3698] device bridge_slave_0 left promiscuous mode [ 142.012933][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.089044][ T3698] device veth1_macvtap left promiscuous mode [ 142.107768][ T3698] device veth0_macvtap left promiscuous mode [ 142.132697][ T3698] device veth1_vlan left promiscuous mode [ 142.152869][ T3698] device veth0_vlan left promiscuous mode [ 142.287015][ T5076] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 142.315076][ T3552] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.324241][ T5076] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 142.332982][ T5076] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 142.339465][ T3552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.348483][ T3552] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.362854][ T3552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.370858][ T3548] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 142.377725][ T3552] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 142.385165][ T3552] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.399793][ T5076] usb 4-1: cp210x converter now attached to ttyUSB0 [ 142.415612][ T5076] usb 4-1: USB disconnect, device number 3 [ 142.425741][ T5076] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.433987][ T5076] cp210x 4-1:0.0: device disconnected [ 143.250171][ T3698] team0 (unregistering): Port device team_slave_1 removed [ 143.360629][ T3698] team0 (unregistering): Port device team_slave_0 removed [ 143.448338][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.510486][ T5187] kAFS: unparsable volume name [ 143.511669][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.890754][ T3552] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 143.899492][ T3552] Bluetooth: hci1: Injecting HCI hardware error event [ 143.910964][ T3561] Bluetooth: hci1: hardware error 0x00 [ 144.359253][ T5207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.436'. [ 144.451325][ T3548] Bluetooth: hci2: command tx timeout [ 144.794746][ T5214] loop3: detected capacity change from 0 to 8192 [ 144.823282][ T5214] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.836460][ T5214] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 144.846829][ T5214] REISERFS (device loop3): using ordered data mode [ 144.853978][ T5214] reiserfs: using flush barriers [ 144.863387][ T5214] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.881219][ T5214] REISERFS (device loop3): checking transaction log (loop3) [ 144.987269][ T3698] bond0 (unregistering): Released all slaves [ 145.015544][ T5214] REISERFS (device loop3): Using tea hash to sort names [ 145.025716][ T5214] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 145.109391][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 146.274255][ T5172] chnl_net:caif_netlink_parms(): no params data found [ 146.281277][ T3561] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 146.417448][ T5232] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 146.417448][ T5232] SȘȞZ6' [ 146.512173][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.520696][ T5172] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.528767][ T5172] device bridge_slave_0 entered promiscuous mode [ 146.540373][ T3561] Bluetooth: hci2: command tx timeout [ 146.575654][ T5239] kAFS: unparsable volume name [ 146.592869][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.600018][ T5172] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.620935][ T5172] device bridge_slave_1 entered promiscuous mode [ 146.734221][ T5243] loop1: detected capacity change from 0 to 64 [ 146.755642][ T5172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.833240][ T5172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.924050][ T5246] Zero length message leads to an empty skb [ 148.836297][ T3561] Bluetooth: hci2: command tx timeout [ 148.885058][ T3548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.894227][ T3548] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.902417][ T3548] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.920855][ T3552] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.928365][ T3552] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.950468][ T3552] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.971683][ T5172] team0: Port device team_slave_0 added [ 149.038380][ T5172] team0: Port device team_slave_1 added [ 149.187465][ T5252] loop0: detected capacity change from 0 to 8192 [ 149.201426][ T5172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.208418][ T5172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.272752][ T5252] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.305137][ T5172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.328461][ T5172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.336243][ T5172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.362340][ T5172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.370443][ T5252] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 149.403129][ T5254] loop3: detected capacity change from 0 to 8192 [ 149.451543][ T5252] REISERFS (device loop0): using ordered data mode [ 149.458345][ T5254] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.476928][ T5252] reiserfs: using flush barriers [ 149.484518][ T5252] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.490337][ T5254] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 149.507194][ T5252] REISERFS (device loop0): checking transaction log (loop0) [ 149.523196][ T5172] device hsr_slave_0 entered promiscuous mode [ 149.540745][ T5172] device hsr_slave_1 entered promiscuous mode [ 149.545079][ T5254] REISERFS (device loop3): using ordered data mode [ 149.563471][ T5254] reiserfs: using flush barriers [ 149.574010][ T5254] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.616697][ T5254] REISERFS (device loop3): checking transaction log (loop3) [ 149.624368][ T5172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.658258][ T5172] Cannot create hsr debugfs directory [ 149.664904][ T5254] REISERFS (device loop3): Using r5 hash to sort names [ 149.700807][ T5254] reiserfs: enabling write barrier flush mode [ 149.754204][ T5254] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 149.881341][ T5252] REISERFS (device loop0): Using tea hash to sort names [ 149.899393][ T5252] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 149.961117][ T5254] [ 149.963555][ T5254] ====================================================== [ 149.970568][ T5254] WARNING: possible circular locking dependency detected [ 149.977592][ T5254] 6.1.97-syzkaller #0 Not tainted [ 149.982617][ T5254] ------------------------------------------------------ [ 149.989627][ T5254] syz.3.451/5254 is trying to acquire lock: [ 149.995515][ T5254] ffff88805b5f9020 (&type->i_mutex_dir_key#19){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 150.005398][ T5254] [ 150.005398][ T5254] but task is already holding lock: [ 150.012762][ T5254] ffff88807ec28460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 150.021583][ T5254] [ 150.021583][ T5254] which lock already depends on the new lock. [ 150.021583][ T5254] [ 150.031981][ T5254] [ 150.031981][ T5254] the existing dependency chain (in reverse order) is: [ 150.040989][ T5254] [ 150.040989][ T5254] -> #2 (sb_writers#28){.+.+}-{0:0}: [ 150.048476][ T5254] lock_acquire+0x1f8/0x5a0 [ 150.053513][ T5254] sb_start_write+0x4d/0x1c0 [ 150.058629][ T5254] mnt_want_write_file+0x5a/0x1f0 [ 150.064179][ T5254] reiserfs_ioctl+0x170/0x340 [ 150.069378][ T5254] __se_sys_ioctl+0xf1/0x160 [ 150.074494][ T5254] do_syscall_64+0x3b/0xb0 [ 150.079412][ T5254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.085828][ T5254] [ 150.085828][ T5254] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 150.093013][ T5254] lock_acquire+0x1f8/0x5a0 [ 150.098014][ T5254] __mutex_lock+0x132/0xd80 [ 150.103016][ T5254] reiserfs_write_lock+0x76/0xd0 [ 150.108450][ T5254] reiserfs_lookup+0x15c/0x4b0 [ 150.113714][ T5254] __lookup_slow+0x27e/0x3d0 [ 150.118803][ T5254] lookup_one_len+0x187/0x2d0 [ 150.123979][ T5254] reiserfs_lookup_privroot+0x85/0x1e0 [ 150.129938][ T5254] reiserfs_fill_super+0x21bd/0x2620 [ 150.135721][ T5254] mount_bdev+0x2c9/0x3f0 [ 150.140560][ T5254] legacy_get_tree+0xeb/0x180 [ 150.145849][ T5254] vfs_get_tree+0x88/0x270 [ 150.150779][ T5254] do_new_mount+0x2ba/0xb40 [ 150.155784][ T5254] __se_sys_mount+0x2d5/0x3c0 [ 150.160967][ T5254] do_syscall_64+0x3b/0xb0 [ 150.165907][ T5254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.172301][ T5254] [ 150.172301][ T5254] -> #0 (&type->i_mutex_dir_key#19){+.+.}-{3:3}: [ 150.180803][ T5254] validate_chain+0x1661/0x5950 [ 150.186176][ T5254] __lock_acquire+0x125b/0x1f80 [ 150.191527][ T5254] lock_acquire+0x1f8/0x5a0 [ 150.196528][ T5254] down_write+0x36/0x60 [ 150.201190][ T5254] path_openat+0x7b6/0x2e60 [ 150.206211][ T5254] do_filp_open+0x230/0x480 [ 150.211214][ T5254] do_sys_openat2+0x13b/0x500 [ 150.216392][ T5254] __x64_sys_openat+0x243/0x290 [ 150.221757][ T5254] do_syscall_64+0x3b/0xb0 [ 150.226703][ T5254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.233097][ T5254] [ 150.233097][ T5254] other info that might help us debug this: [ 150.233097][ T5254] [ 150.243328][ T5254] Chain exists of: [ 150.243328][ T5254] &type->i_mutex_dir_key#19 --> &sbi->lock --> sb_writers#28 [ 150.243328][ T5254] [ 150.256604][ T5254] Possible unsafe locking scenario: [ 150.256604][ T5254] [ 150.264033][ T5254] CPU0 CPU1 [ 150.269389][ T5254] ---- ---- [ 150.274744][ T5254] lock(sb_writers#28); [ 150.278974][ T5254] lock(&sbi->lock); [ 150.285450][ T5254] lock(sb_writers#28); [ 150.292214][ T5254] lock(&type->i_mutex_dir_key#19); [ 150.297477][ T5254] [ 150.297477][ T5254] *** DEADLOCK *** [ 150.297477][ T5254] [ 150.305595][ T5254] 1 lock held by syz.3.451/5254: [ 150.310507][ T5254] #0: ffff88807ec28460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 150.319704][ T5254] [ 150.319704][ T5254] stack backtrace: [ 150.325587][ T5254] CPU: 1 PID: 5254 Comm: syz.3.451 Not tainted 6.1.97-syzkaller #0 [ 150.333454][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 150.343496][ T5254] Call Trace: [ 150.346758][ T5254] [ 150.349672][ T5254] dump_stack_lvl+0x1e3/0x2cb [ 150.354335][ T5254] ? nf_tcp_handle_invalid+0x642/0x642 [ 150.359783][ T5254] ? print_circular_bug+0x12b/0x1a0 [ 150.364964][ T5254] check_noncircular+0x2fa/0x3b0 [ 150.369884][ T5254] ? add_chain_block+0x850/0x850 [ 150.374804][ T5254] ? lockdep_lock+0x11f/0x2a0 [ 150.379462][ T5254] ? validate_chain+0x13ce/0x5950 [ 150.384467][ T5254] ? _find_first_zero_bit+0xd0/0x100 [ 150.389733][ T5254] validate_chain+0x1661/0x5950 [ 150.394576][ T5254] ? reacquire_held_locks+0x660/0x660 [ 150.399927][ T5254] ? look_up_lock_class+0x77/0x140 [ 150.405022][ T5254] ? mark_lock+0x9a/0x340 [ 150.409331][ T5254] ? mark_lock+0x9a/0x340 [ 150.413640][ T5254] __lock_acquire+0x125b/0x1f80 [ 150.418473][ T5254] lock_acquire+0x1f8/0x5a0 [ 150.422957][ T5254] ? path_openat+0x7b6/0x2e60 [ 150.427613][ T5254] ? read_lock_is_recursive+0x10/0x10 [ 150.432963][ T5254] ? __might_sleep+0xb0/0xb0 [ 150.437528][ T5254] ? rcu_read_lock_any_held+0xb3/0x160 [ 150.442976][ T5254] ? rcu_read_lock_bh_held+0x110/0x110 [ 150.448416][ T5254] ? __mnt_want_write+0x64/0x2a0 [ 150.453336][ T5254] ? __mnt_want_write+0x64/0x2a0 [ 150.458253][ T5254] down_write+0x36/0x60 [ 150.462390][ T5254] ? path_openat+0x7b6/0x2e60 [ 150.467063][ T5254] path_openat+0x7b6/0x2e60 [ 150.471548][ T5254] ? mark_lock+0x9a/0x340 [ 150.475863][ T5254] ? do_filp_open+0x480/0x480 [ 150.480542][ T5254] do_filp_open+0x230/0x480 [ 150.485053][ T5254] ? vfs_tmpfile+0x4a0/0x4a0 [ 150.489634][ T5254] ? _raw_spin_unlock+0x24/0x40 [ 150.494472][ T5254] ? alloc_fd+0x59c/0x640 [ 150.498787][ T5254] do_sys_openat2+0x13b/0x500 [ 150.503451][ T5254] ? do_sys_open+0x220/0x220 [ 150.508024][ T5254] ? set_fs_pwd+0x1cc/0x290 [ 150.512508][ T5254] ? mntput+0xb0/0xb0 [ 150.516470][ T5254] __x64_sys_openat+0x243/0x290 [ 150.521312][ T5254] ? __ia32_sys_open+0x270/0x270 [ 150.526259][ T5254] ? syscall_enter_from_user_mode+0x2e/0x230 [ 150.532226][ T5254] ? lockdep_hardirqs_on+0x94/0x130 [ 150.537402][ T5254] ? syscall_enter_from_user_mode+0x2e/0x230 [ 150.543361][ T5254] do_syscall_64+0x3b/0xb0 [ 150.547757][ T5254] ? clear_bhb_loop+0x45/0xa0 [ 150.552414][ T5254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.558290][ T5254] RIP: 0033:0x7f2c0fb75bd9 [ 150.562695][ T5254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.582287][ T5254] RSP: 002b:00007f2c1094f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.590688][ T5254] RAX: ffffffffffffffda RBX: 00007f2c0fd03f60 RCX: 00007f2c0fb75bd9 [ 150.598658][ T5254] RDX: 0000000000143042 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 150.606608][ T5254] RBP: 00007f2c0fbe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 150.614558][ T5254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.622509][ T5254] R13: 000000000000000b R14: 00007f2c0fd03f60 R15: 00007fff9196ff48 [ 150.630463][ T5254] [ 151.027530][ T3561] Bluetooth: hci4: command tx timeout [ 151.027527][ T3552] Bluetooth: hci2: command tx timeout [ 151.064693][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 151.124381][ T5172] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.202645][ T5172] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.228279][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.235625][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.244072][ T5247] device bridge_slave_0 entered promiscuous mode [ 151.251819][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.258922][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.270894][ T5247] device bridge_slave_1 entered promiscuous mode [ 151.279662][ T5172] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.301847][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.313069][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.331987][ T5247] team0: Port device team_slave_0 added [ 151.339444][ T3698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.353833][ T5247] team0: Port device team_slave_1 added [ 151.361593][ T5172] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.385233][ T3698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.396432][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.403629][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.429669][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.441378][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.448319][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.475526][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.512575][ T3698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.525195][ T5247] device hsr_slave_0 entered promiscuous mode [ 151.531837][ T5247] device hsr_slave_1 entered promiscuous mode [ 151.538172][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.546907][ T5247] Cannot create hsr debugfs directory [ 151.554354][ T3698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.599627][ T5172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.615006][ T5172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.632726][ T5172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.641409][ T5172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.748052][ T5172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.782274][ T5172] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.796588][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.807019][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.816360][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.827317][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.835808][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.842902][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.868721][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.876689][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.886083][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.895002][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.902121][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.921600][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.930341][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.938793][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.950187][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.966003][ T5172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.977990][ T5172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.998350][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.006559][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.015163][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.023750][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.033016][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.043861][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.052325][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.062047][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.200601][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.208006][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.225568][ T5172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.402651][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.411604][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.434364][ T5172] device veth0_vlan entered promiscuous mode [ 152.441597][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.452873][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.464465][ T5172] device veth1_vlan entered promiscuous mode [ 152.472196][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.479671][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.487671][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.508855][ T5172] device veth0_macvtap entered promiscuous mode [ 152.516516][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.524639][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.533170][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.542827][ T5172] device veth1_macvtap entered promiscuous mode [ 152.551863][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.559645][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.572765][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.586590][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.597193][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.609260][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.619227][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.630003][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.640517][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.650948][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.660879][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.671348][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.689586][ T5172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.704298][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.713692][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.735138][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.746023][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.755854][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.766607][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.776611][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.787052][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.796947][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.807681][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.817561][ T5172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.828168][ T5172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.838930][ T5172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.856929][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.865377][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.875413][ T5172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.887726][ T5172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.896876][ T5172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.906809][ T5172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.917819][ T5247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.927710][ T5247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.937335][ T5247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.955645][ T5247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.981728][ T5172] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 153.005387][ T3698] device hsr_slave_0 left promiscuous mode [ 153.012058][ T3698] device hsr_slave_1 left promiscuous mode [ 153.018162][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.025769][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.033433][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.040955][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.048344][ T3698] device bridge_slave_1 left promiscuous mode [ 153.054645][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.063084][ T3698] device bridge_slave_0 left promiscuous mode [ 153.069217][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.079663][ T3698] device hsr_slave_0 left promiscuous mode [ 153.085777][ T3698] device hsr_slave_1 left promiscuous mode [ 153.092290][ T3548] Bluetooth: hci4: command tx timeout [ 153.099313][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.106842][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.114560][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.122187][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.129563][ T3698] device bridge_slave_1 left promiscuous mode [ 153.135768][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.143483][ T3698] device bridge_slave_0 left promiscuous mode [ 153.149593][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.159568][ T3698] device veth1_macvtap left promiscuous mode [ 153.165819][ T3698] device veth0_macvtap left promiscuous mode [ 153.172507][ T3698] device veth1_vlan left promiscuous mode [ 153.178245][ T3698] device veth0_vlan left promiscuous mode [ 153.185476][ T3698] device veth1_macvtap left promiscuous mode [ 153.191507][ T3698] device veth0_macvtap left promiscuous mode [ 153.197551][ T3698] device veth1_vlan left promiscuous mode [ 153.205209][ T3698] device veth0_vlan left promiscuous mode [ 153.348427][ T3698] team0 (unregistering): Port device team_slave_1 removed [ 153.366639][ T3698] team0 (unregistering): Port device team_slave_0 removed [ 153.383334][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.403554][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.443294][ T3698] bond0 (unregistering): Released all slaves [ 153.555817][ T3698] team0 (unregistering): Port device team_slave_1 removed [ 153.574410][ T3698] team0 (unregistering): Port device team_slave_0 removed [ 153.591404][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.609598][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.647848][ T3698] bond0 (unregistering): Released all slaves [ 153.703829][ T3899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.716635][ T5172] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 153.726501][ T3899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.738205][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.778933][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.793089][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.796038][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.809073][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.816613][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.826805][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.841513][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.861198][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.870112][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.882688][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.889751][ T5076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.920882][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.928595][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.937388][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.945752][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.952854][ T5069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.961016][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.969468][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.978037][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.986443][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.994688][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.003033][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.018286][ T5247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.031089][ T5247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.052923][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.070835][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.078951][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.094302][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.102690][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.112176][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.185108][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.193240][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.201655][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.233271][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.242327][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.253543][ T5247] device veth0_vlan entered promiscuous mode [ 154.262036][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.269994][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.282133][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.289796][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.300350][ T5247] device veth1_vlan entered promiscuous mode [ 154.314012][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.322300][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.330067][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.338548][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.348159][ T5247] device veth0_macvtap entered promiscuous mode [ 154.358014][ T5247] device veth1_macvtap entered promiscuous mode [ 154.369541][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.381351][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.391254][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.401736][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.411563][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.422108][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.431940][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.442493][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.453745][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.462493][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.470570][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.478296][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.487647][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.497986][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.508555][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.518406][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.529462][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.539777][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.550948][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.560796][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.572206][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.582831][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.592397][ T5247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.601224][ T5247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.609907][ T5247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.618967][ T5247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.629579][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.638291][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.671951][ T5247] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 154.698237][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.714030][ T5247] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 154.723311][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.736253][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.756671][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.766046][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.777365][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.384635][ T3831] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.724837][ T3831] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.783841][ T3831] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.843762][ T3831] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.568354][ T3831] device hsr_slave_0 left promiscuous mode [ 158.580441][ T3831] device hsr_slave_1 left promiscuous mode [ 158.602899][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.620290][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.630827][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.650322][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.657706][ T3831] device bridge_slave_1 left promiscuous mode [ 158.672583][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.681471][ T3831] device bridge_slave_0 left promiscuous mode [ 158.687637][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.698142][ T3831] device veth1_macvtap left promiscuous mode [ 158.704205][ T3831] device veth0_macvtap left promiscuous mode [ 158.710470][ T3831] device veth1_vlan left promiscuous mode [ 158.716253][ T3831] device veth0_vlan left promiscuous mode [ 158.849897][ T3831] team0 (unregistering): Port device team_slave_1 removed [ 158.874729][ T3831] team0 (unregistering): Port device team_slave_0 removed [ 158.896322][ T3831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.923274][ T3831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.975159][ T3831] bond0 (unregistering): Released all slaves [ 159.883945][ T3831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.947806][ T3831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0