last executing test programs: 9.342758215s ago: executing program 0 (id=632): r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) syz_mount_image$fuse(&(0x7f0000000640), &(0x7f0000000700)='./file1\x00', 0x10b2, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) 8.939078061s ago: executing program 3 (id=637): mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.318733897s ago: executing program 0 (id=644): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:\n'], 0x8) close(r2) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = dup3(r4, r3, 0x0) accept(r5, 0x0, 0x0) 8.158953263s ago: executing program 0 (id=647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1e040600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 7.438591852s ago: executing program 0 (id=652): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x0, 0x0) mlockall(0x1) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) 7.313041686s ago: executing program 4 (id=654): socket$inet_tcp(0x2, 0x1, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000000000)) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0xf01, &(0x7f0000002d40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000012980)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000240)={0x0, 0x1560a4de}) 5.909918193s ago: executing program 4 (id=658): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) io_setup(0x0, &(0x7f0000004040)=0x0) io_getevents(r1, 0x3, 0x13, &(0x7f0000004080)=[{}, {}, {}], 0x0) 5.502992239s ago: executing program 0 (id=659): openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$FUSE_ATTR(r0, 0x0, 0x0) close(0xffffffffffffffff) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xa0040, 0x0) ioctl$KDSKBSENT(r1, 0x5452, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0), 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) 4.506384269s ago: executing program 4 (id=661): msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25865) r1 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x7ff) r2 = open(0x0, 0x0, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) dup(r3) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x5450, 0x0) r5 = dup(r0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x5452, &(0x7f0000000080)) write$cgroup_freezer_state(r5, 0x0, 0x0) 4.400316104s ago: executing program 2 (id=662): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) r3 = dup3(r2, r1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001640)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x1003, 0x0) 4.342959596s ago: executing program 0 (id=663): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./bus\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000080)=""/68, &(0x7f0000000180)=0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 4.21877813s ago: executing program 2 (id=665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b000000000000007601"]) 4.126993884s ago: executing program 4 (id=666): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="27050200590200000600002fb96dbcf706e10500000088641100114408000300b8bf", 0x22}, {&(0x7f0000000180), 0xfdbb}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b784ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000240)="11b252367e48683813784895bd82eaff9d7b562ec0b21b423bbcef1578e573bf0bc0ea8e45d3738500d183b6495636baa5cb837a3d5ad6af41045fec0dc056db82ad3342f6b20b008157daa88f153fb3c51fc4ff55b965c58a11bb75ca63536f2816327da7d51f66b76ed7a55565570334842f0b54562faa5335cc88b6fddfe5d3bd04807632a2138de7747d38517f335f7ce89fbff32e93542e47ce2aae8c3dd6edcffb1aa5025bef34023a14f3a4b0c3afc99ddd808aa782908257c4f35f918f88b18e1499903654b7ef8cb5c571668c1999c160e70f65dd0907e4020b915297e3b06e9c7ddebde4a751c0ceb6cdd152e4c47a60189add8c422187f6d62c4c66a70c3468324f20e5097197e6b09a907baaf918e47a6733280685bdbb61f89f01832937e4491c97d0de075412e080688c82d77cee618d0aabb72ebdb8b52f9f4642236bf1eeec21388303e0fde1d82054f37d465f0635bc3addaf0ca3f3167fd005e2f21447942ad8a887d261bf6a6b866e9399d3c9c2636eaccba5fcf6a129e4b3ba7d4ba90554b8ae562c1dc941bff6a7e1fa46783f7cfce9133f7f5e5e8d16f56eba77df89a210f53a0bdb8d4f222289335a11934a1ea5983a9d7c5fa87d9c8b12eaeda6b1f6861a3acdfb840dd08444ded8594919929def6f7b78470bc8bc256aebe1da5dc6fd4c5df556398b029976ed67f14fca8baa432f5fa799adf63c119d689b2449076d7a22eafdc9a2b558df28e302fab95ced3587dcf7309536be6fc28742529083c59fd56965c51d17b26954c276a0738ab8be665650a1db21ee4e8ada836ae1804d389c5482df926b693321cfdf405ff03b356d71556229e9d2a729fb8fc73e483582726c8e8df2b3fa2634a2a52f8acfe6c8be00b8d57f762b70fcd86c474fc335f16215fc33b047f4682ef7d821584758179b64ec74a5c46c2ae9d8ac5178c1d3d692a254bf1124addaf4c473dca514b3cc6b056e2efd78395406da3030fa028d7c3d9003d362dc01cc9667401c51052c53a2f1cbdb69e18e89c4540bfc5ca679126ca8cdf87a6a45a5c42adf0f6eb1f4441a87a4e27661ef6871080cf3aab9c0ac7d44534c4970a605af7ae826cccc98f0d1e6dd5c5b313d096d3c7d92300d14ddc13da2689722505831226e52b76d8ccc83d875f618b4fa62d8f040555d58310a7f350c1d722e06b2c9ebf31e486ec26ec0922bae2cf913756789012f6144faaccc5321eff2a494ccbf0d76f6fb664fba402ecd872df437235d19ecc1c75badee1cd0e0393d0cf803edeb3af951fa7a64af1bca2bd2f78918d31fe6c44290cb5cf89845c594fab7ea7148dee10db39f83e235956a3ee12a8fcd090b08067ebc3a9fcdc4d99983e6ccedd9a4f29468ae58223a86a5fd4790bc49e110467109b4837fbfbb0c9b608870830bcc4b7858908d52ec062b85905fb35f3c0968b17fa72f50f615f40599eb23c3829c57124f52fb4af9a3fbcae6fcb9f09d21991c52e6d2becc6aea2ddf761be2c6859624cefd83583a84ad315347ba4312fdcb18b5b9e9c2da1101f9b12ae8cac9400ae1079b616927ceba14ae40a31a640f3c25b5e8e558bd5ccd6484d83c596a83ba8b4e7a8288c484b626b114565302600779c0052524a5f3eb9fe05d8ce6d4b9604c801a14446d72bc5b2b5a83de70551c799e3316b931fa5d973c2baae7b36045b57dc638cd4dfb6faf67a1e1e600101d2a433611f071c3881e39085e32723995d8ed467a3b57a2434fc5f4e3a55a21f4b5ca5a116d1e6d37ecf1afbeb42103698dca214fe76c3460d1078a71482f5d450d4c2f222fa6ab1750326b5477d319af7c654b1334bf24126c3eedf1fdf3b3965a9fcc8f8c4ecd05d7cbb2932130ba739f48a689c389a8d4cbbb693b70eec3e23d9ee0692b2532fe1776f80ce422226c7d0dfad47066bd8863e81a9cf1d7bcebc3a1b419a5bc73182bbbb4f01e028adb09bea6b9cb3519b7fea28e4678d6fdb3c89f2c3cbf2a2c1bd976094579c1551875068d89fd9a9b0c9f9943357d262917b87d8a994a518ae5eb61dd236ed18e9d8a3c0df4a9e4df2656abb19333e8e2c18aaf2a938cef3ded14433461ef5cf70b8379fd7640bdf9f17c565d65781e3400f185db634b1c91e04f48c8e1cedf5472ef302f092c384a402e750983dd9ae645f9592619e82d32c95b88f2fcba27116bf9acd01258c511eaf97ac2395d83db1f2d39a0ebe0f899be95530bdbcba2e648ff08f7eec912f3ca4c6787fc7431772b7d54cb26497e964335532cec473c393b3bcd2b32563151b88f77295848ee8ad4eb243d4bca865bc2214e0bdd1e8d2fcf3b159dff1248b73eff2774a48d409ca62eef9065863620479774be700dfe6c2181c523847643d85e6f20314c58778d6ece2eef4f640e9b95bdca820dfebd300a1f54dff3c0180b9f942c04f8887e0eb453722165b206b144aa2fe70afeb6a36e100531b25710a6649f299a8764506471cc899f221c33a898d1d9e2433a327e80800b9a20d0bed8ec0baacba65223fbce112247e83a2795e17c5a20f1363ddf9bc3bf92f467e39ce130fd6ad8fcca443cae2fbec0831b4d2f2401d9f4ab9619b30d73b3db42823ce8848936b035ed969b13591a650d3749dfbcfc253c1e789b04f69ea3b3937ddf674bc0c5741ca48246886bf05bd90149a1ebfbcba12c619d07393737720aef98c7010e4009d0d124896e07a5294de04e8f09b1ba95d547b33cefd47854ee2e0aeb0300b02e5ed0e1a9c0622f4faaa941efd4672c166f7ae30b7bc80360b62197fe7dd76774e4bba9f4acd36d84b03431365a491c23fb125a1772f92ced9bccbdb0e6387560e1fb6a6c0e3c41f0dd842c7fdaa86e1449b968d9775a139cbcb8404832140f5f69634937fe0aa4e4715aa3c44de9ce3a77e1c1850a1e17f1cd1a4dec8c2eed54da19fe6a4aed531ee3a4d1b025645e5935f3d6c8b6aca6fe7e7d0cca8681675113e0970a39e9d6fff7d3638c314c6b048f8a6085cc4262469e57777855c67f03d604bd945e1cb88ce0c5463bef3dbc7f9c2d0f7bf2587d4820eaec421cad3429250781cb40d922186ba3ae2d1b0cea0cacb619239166f66f3c41aa9af691ae2fc74c733090bbfac1d38472403f2fecf76b980c1c77eb958580fb62d166fec07504f94ecf2fb913cee611e4b84d89b58501138ae40a49d380cd6872305ecfeeaa6397b98806035eb323bb135425a5a9825e4d1deb3131c0b834b5e29ba00cf5c78bd627360866a977ab574dfe13b5220e1c9a6d688cddfe65fd7dfa38f052e256b8859514f82c84c9f77e5ef81b7439eb0a7d870e6f7ca0aa2f8a0870dac0ecc2a99964a35155cec2322615dea368c4a18391601815d409a6bdd0c06f36fcf3bd288a5871a8132b9d6e3438f4d375b7b640b6a08154f0111f6f7da776385a16b84ae069beaab01801646e1a1144f5a1e0c03fbb8e3ff4b5659ba78c32b751bc20f943522d7caccc03a7862166961ccdcda7625169cf346f8d3eb3ebbd0004a4099bedde948767466e87ca9d4dcc32a0ecd7a2018707672b1ebd7ed9e6c78e938657259df9ecaf7321601bf77ce21964c3f217d4a95d7f584de22ea71654d5d308523ff6dd4e61806b6175a5b603cc2264416fe2a3ff0bc75f994256cbd67a2907c9c68e1a3cf961af9a2eb454810d75dd69129d080e24192095b42f453190d41ae775e9954ab06c7e2e5c09e31848d4357c1272dbfd64f18a7a726f47f2b3c72e04cdc95e22bab87b0161950d5805376b9ee9106290bf04f8b7bc20c522c1c991cf3f20eb6ea80ff4c4402eccdb97b34cac21a81f6a50ae967e7138a092ab46b4c0574af57815f4ac39fe33bd7f22564baa5ac81f6fdff26b5a1efe762c161fa4d265f7af8687c0505385eedbfbbc844037ab68d1ed04b06759740db9fa015bc5f4586d42612a7f96c26cacf4f2b19a3f3c71492e5fe21faf620bb6ee0e90482c106647646558412cd2546ee64541cc3ea05e5c6ec9e3e60166c4470cb4c342275e8f3f115c12daad717dfaa3548b002b1b54aa99630f7a2f170d5e12236fb8d974229ba30c6dd73ddca80954eadb12336704611bc70b68a13411f7a9f00e10600ca4497b42a7dc9ce2c77083fc15c1e4c87235553b211fb6f8fc9a86603a5beff134fd088f1589fb7716b43b395cadd40f564d8f670f523f7fcdb0088dc85a5de510c5fa753913e1bd944fdc09574cca46206f60ca81bcb27df96d6aba73df7ed602cc71329b7c619f9313d2ece4cc605a72e64c9f97a72fcdfafc26351275cf21a06a1382060615d6748551ae9ce21b05b0e7ac36168f1a3e4e9f6445afd194828f9ec6db2ce6c63584724c0bdc5ef08f62cf1798d4e580dfbe126febea4b682c7ff3e3d510516ecc0311133e54af19c95f1746798830972c4a64c231e8115751b84d9648d731db4a0f8a402b8833aaf048ccf82364bab96c83bf5e2abee364725ee2af7d4876ca16d9c7fa76127251d0ee474886090675de389246fe261c8aaa578d724f9dd0bae4ac501b93d617c5028e3c0c2da8351eb0a65be6cb0d76944af9ec9840d48d819b88b1c95161fdd66f58ecc35e66c48d532ddb428fd0855197107f921a83fdbe131207c66ff1de7e68e6655c313793341dbf593593b6769b9f7a5d55f4af8c6c70fcc7d7bde95e21f1cac0d564319d84860f1418fcf551a2724fa65fc22bc3c918720c1e869bfb7bee4baf0ea6cd9741e534fa9f632a8030558611569f58243905ce9a0d2c702a82149450e0e88677abe2d9bd0c159a1aa37236a27971f91ff304d93e5674cc284ec89ae7ad79688693e600fd98d174b4441138ad315064918d0edb6a05a0f6fd83c3cfccab92644add8f5de67cbeb939d0e10f00a45b60b778f3d9dce7d1fe5137df54f0f082cacce8c743bf748b4caf8ce89d32487905e611c7bafb46c1de40de98ab15b4a4a975c1929232a1d761c2097bb8d32e6a3b02a655c3b0d85750b54ec4cd65bbb43a39f5baad986700cbe1cfb266eff472ba330a4ad1fa9291408b86f2ed0ac46446ee0b392004549f18464432b6c4350e77125a18d5eb1e6f48bf98c3e2af70e17fdd41c286dcc691661ad17ebabde2a9222f36d4f806e7832f8bdaa23cd3b1ed4788f23401f5d01fa1404c237ea7d2e6ee9b4e1f682a6ca8f7b51f5459e3d88f00145d42a33d84064561aade6760c2d95f2fbc17594d08752f6443a6e14f450636e5704b204a56efeb5f2902b6b2a2bbe4d216e1a07125d06dd20330f956792d8bf8e3c2579b0ed0", 0xe9f}], 0x4}, 0x0) 4.048753678s ago: executing program 4 (id=667): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x1, @none, 0x8}, 0xe) 3.770740799s ago: executing program 1 (id=669): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_pid(r0, 0x0, 0x2) 3.770372469s ago: executing program 2 (id=670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) 3.769972289s ago: executing program 4 (id=671): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@dioread_nolock}, {@discard}, {@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x46f, &(0x7f0000000580)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 3.583019286s ago: executing program 2 (id=672): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) 3.582774726s ago: executing program 1 (id=673): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x0) 3.417404653s ago: executing program 3 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x27}}}}}, 0x28}}, 0x4008081) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x9}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x5070}, @void, @void, @void}, 0x32) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000000000000000002082848b960c121824"], 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="0543b4dd3998e8095b2fafe505887c50a200", @ANYRES8=r1, @ANYRES32=r4, @ANYBLOB, @ANYRES8=r3, @ANYRES16=0x0], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="9b"}]}, 0x24}}, 0x0) 3.338166676s ago: executing program 1 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000480)=@data_frame={@msdu=@type00={{0x0, 0x2, 0xb}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xffc}, "", @value={0x5, 0x1, 0x3, 0x0, 0x5}}, @a_msdu}, 0x1a) unshare(0x20000400) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040), 0x4) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000400)={@empty, 0x0, 0x2, 0x1}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000940)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @from_mac, {0x1, 0x6}}, 0x80c, 0x5f, @default, @val={0x1, 0x1, [{0xc89830a52361aa23}]}, @val={0x2d, 0x1a, {0x4000, 0x0, 0x3, 0x0, {0xfff, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x1}}}, 0x3d) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100), 0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) poll(&(0x7f0000000440)=[{r7}], 0x1, 0x80) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={@remote, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80160122}) r9 = socket(0x11, 0x2, 0x0) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x4}, 0x4) unshare(0x20000400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r10, 0x0) splice(r7, &(0x7f0000000180)=0xffffffffffffffff, r3, &(0x7f00000001c0)=0x847, 0x1493, 0x0) 1.75103807s ago: executing program 2 (id=676): unshare(0x20000400) r0 = socket(0x2b, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 1.587105866s ago: executing program 1 (id=677): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000200)="f7", 0x1}], 0x1, &(0x7f0000001700)=[@sndinfo={0x20}, @prinfo={0x18}], 0x38}], 0x1, 0x0) 1.538814968s ago: executing program 3 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x2, 0x4000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9006}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28}, {0x6}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1, {[@timestamp={0x44, 0x4, 0x0, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001800), 0x0, 0x0) chown(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), 0x4) connect$bt_l2cap(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) 1.432924873s ago: executing program 2 (id=679): getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) socket(0x0, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5], 0x3c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20044c50) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 318.890327ms ago: executing program 1 (id=680): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b000000000000007601"]) 265.244089ms ago: executing program 3 (id=681): r0 = socket$tipc(0x1e, 0x2, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), 0x10) 110.607966ms ago: executing program 1 (id=682): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x190, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}}, @common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 58.826608ms ago: executing program 3 (id=683): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 0s ago: executing program 3 (id=684): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)={[{0x2d, 'hugetlb'}]}, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) socket$inet(0x2, 0x3, 0x2) socket$inet(0x2, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 51.191749][ T3498] cgroup: Unknown subsys name 'net' [ 51.323036][ T3498] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.986378][ T3498] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.917385][ T3509] chnl_net:caif_netlink_parms(): no params data found [ 54.002450][ T3508] chnl_net:caif_netlink_parms(): no params data found [ 54.029869][ T3507] chnl_net:caif_netlink_parms(): no params data found [ 54.053936][ T3512] chnl_net:caif_netlink_parms(): no params data found [ 54.140228][ T3518] chnl_net:caif_netlink_parms(): no params data found [ 54.234888][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.242459][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.252438][ T3509] device bridge_slave_0 entered promiscuous mode [ 54.290368][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.298918][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.308816][ T3509] device bridge_slave_1 entered promiscuous mode [ 54.326204][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.335417][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.346521][ T3508] device bridge_slave_0 entered promiscuous mode [ 54.359650][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.366960][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.380111][ T3512] device bridge_slave_0 entered promiscuous mode [ 54.397943][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.405112][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.413874][ T3507] device bridge_slave_0 entered promiscuous mode [ 54.423291][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.432459][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.442435][ T3508] device bridge_slave_1 entered promiscuous mode [ 54.459824][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.467436][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.477044][ T3512] device bridge_slave_1 entered promiscuous mode [ 54.492414][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.499722][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.508404][ T3507] device bridge_slave_1 entered promiscuous mode [ 54.540649][ T3509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.568406][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.577126][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.585720][ T3518] device bridge_slave_0 entered promiscuous mode [ 54.607261][ T3509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.626866][ T3508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.637784][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.645160][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.654008][ T3518] device bridge_slave_1 entered promiscuous mode [ 54.665166][ T3512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.684716][ T3507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.697075][ T3508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.715924][ T3512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.746842][ T3507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.787059][ T3509] team0: Port device team_slave_0 added [ 54.811751][ T3518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.825740][ T3512] team0: Port device team_slave_0 added [ 54.840440][ T3509] team0: Port device team_slave_1 added [ 54.856685][ T3508] team0: Port device team_slave_0 added [ 54.865393][ T3518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.876993][ T3512] team0: Port device team_slave_1 added [ 54.907117][ T3507] team0: Port device team_slave_0 added [ 54.923712][ T3508] team0: Port device team_slave_1 added [ 54.945193][ T3507] team0: Port device team_slave_1 added [ 54.952038][ T3509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.961230][ T3509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.989683][ T3509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.021803][ T3518] team0: Port device team_slave_0 added [ 55.036662][ T3509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.043632][ T3509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.070619][ T3509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.102318][ T3512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.109771][ T3512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.139001][ T3512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.152811][ T3518] team0: Port device team_slave_1 added [ 55.169696][ T3508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.176947][ T3508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.203590][ T3508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.215260][ T3512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.222925][ T3512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.251688][ T3512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.271444][ T3507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.279199][ T3507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.307343][ T3507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.321088][ T3507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.328696][ T3507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.358795][ T3507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.371325][ T3508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.379099][ T3508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.410000][ T3508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.452114][ T3518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.460301][ T3518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.489125][ T3518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.513137][ T3509] device hsr_slave_0 entered promiscuous mode [ 55.520873][ T3509] device hsr_slave_1 entered promiscuous mode [ 55.545735][ T3518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.553864][ T3518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.582025][ T3246] Bluetooth: hci1: command 0x0409 tx timeout [ 55.583777][ T3518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.589338][ T3246] Bluetooth: hci0: command 0x0409 tx timeout [ 55.599872][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 55.620098][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 55.641326][ T3508] device hsr_slave_0 entered promiscuous mode [ 55.649429][ T3508] device hsr_slave_1 entered promiscuous mode [ 55.656572][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 55.663232][ T3508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.671307][ T3508] Cannot create hsr debugfs directory [ 55.702037][ T3507] device hsr_slave_0 entered promiscuous mode [ 55.709519][ T3507] device hsr_slave_1 entered promiscuous mode [ 55.716661][ T3507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.724646][ T3507] Cannot create hsr debugfs directory [ 55.749794][ T3512] device hsr_slave_0 entered promiscuous mode [ 55.756921][ T3512] device hsr_slave_1 entered promiscuous mode [ 55.763675][ T3512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.771736][ T3512] Cannot create hsr debugfs directory [ 55.824729][ T3518] device hsr_slave_0 entered promiscuous mode [ 55.832278][ T3518] device hsr_slave_1 entered promiscuous mode [ 55.839598][ T3518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.847461][ T3518] Cannot create hsr debugfs directory [ 56.171153][ T3508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.185653][ T3508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.196313][ T3508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.211411][ T3508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.254646][ T3509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.265899][ T3509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.277255][ T3509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.289977][ T3509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.370069][ T3507] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.379243][ T3507] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.401851][ T3507] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.423180][ T3507] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.434699][ T3518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.451816][ T3518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.469364][ T3518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.481706][ T3518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.552123][ T3508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.607973][ T3512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.636884][ T3512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.650560][ T3512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.660054][ T3512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.685800][ T3508] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.708250][ T3509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.717063][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.728951][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.765843][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.780825][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.790819][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.799358][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.810170][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.819464][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.830321][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.838028][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.847978][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.875460][ T3509] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.899221][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.908352][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.917496][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.928652][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.940501][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.950797][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.969051][ T3507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.999480][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.015156][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.025186][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.035552][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.043585][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.072045][ T3507] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.080672][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.090471][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.105838][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.116588][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.125881][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.135707][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.146091][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.155665][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.163370][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.172836][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.181960][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.190941][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.201009][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.214155][ T3518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.244364][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.254462][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.263882][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.274145][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.283774][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.292958][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.318453][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.332292][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.341463][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.348770][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.357484][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.366606][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.375319][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.383074][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.391965][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.401456][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.435430][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.444428][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.454851][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.464837][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.476997][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.488349][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.498768][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.520397][ T3512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.531907][ T3518] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.541657][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.552233][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.561482][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.572845][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.587266][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.604895][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.629420][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.643570][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.654268][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.663474][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.673020][ T3556] Bluetooth: hci2: command 0x041b tx timeout [ 57.697891][ T3512] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.705922][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.714408][ T3556] Bluetooth: hci3: command 0x041b tx timeout [ 57.724673][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.733177][ T3556] Bluetooth: hci1: command 0x041b tx timeout [ 57.737482][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.750843][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.756901][ T3556] Bluetooth: hci0: command 0x041b tx timeout [ 57.762080][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.774481][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.786461][ T3554] Bluetooth: hci4: command 0x041b tx timeout [ 57.790375][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.802695][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.813614][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.821240][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.830290][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.840288][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.849329][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.870962][ T3507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.885909][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.896735][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.918248][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.938081][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.951561][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.977627][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.990874][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.003031][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.018358][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.030026][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.041824][ T3518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.054100][ T3518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.072159][ T3508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.089044][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.105448][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.115090][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.132998][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.151443][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.164868][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.172709][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.188009][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.235236][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.256550][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.264126][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.275506][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.284801][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.293273][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.311049][ T3509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.342545][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.363474][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.374472][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.381664][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.391644][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.400865][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.442243][ T3507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.450305][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.460121][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.469265][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.478741][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.488042][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.497185][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.505880][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.515244][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.523569][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.544423][ T3508] device veth0_vlan entered promiscuous mode [ 58.564725][ T3508] device veth1_vlan entered promiscuous mode [ 58.580273][ T3512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.592202][ T3512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.604840][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.613473][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.622922][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.632073][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.640999][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.671009][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.679590][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.688856][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.699178][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.723659][ T3518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.741469][ T3509] device veth0_vlan entered promiscuous mode [ 58.755603][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.764914][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.779078][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.792121][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.803267][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.811987][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.825228][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.833297][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.854549][ T3509] device veth1_vlan entered promiscuous mode [ 58.864790][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.887625][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.897230][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.919344][ T3508] device veth0_macvtap entered promiscuous mode [ 58.938562][ T3507] device veth0_vlan entered promiscuous mode [ 58.955207][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.964024][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.974269][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.983997][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.994424][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.004361][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.013271][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.032617][ T3508] device veth1_macvtap entered promiscuous mode [ 59.058094][ T3508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.079784][ T3507] device veth1_vlan entered promiscuous mode [ 59.096731][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.104883][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.114534][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.123161][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.131921][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.140988][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.149040][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.164878][ T3518] device veth0_vlan entered promiscuous mode [ 59.181074][ T3508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.193216][ T3512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.200997][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.216681][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.225514][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.241957][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.251829][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.261749][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.272841][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.281541][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.295226][ T3508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.311998][ T3508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.321061][ T3508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.330966][ T3508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.344452][ T3509] device veth0_macvtap entered promiscuous mode [ 59.391738][ T3509] device veth1_macvtap entered promiscuous mode [ 59.402056][ T3518] device veth1_vlan entered promiscuous mode [ 59.437066][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.447550][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.455644][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.464506][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.473267][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.482334][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.532802][ T3507] device veth0_macvtap entered promiscuous mode [ 59.549030][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.562042][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.576255][ T3509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.603575][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.614433][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.625221][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.635141][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.648955][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.661710][ T3507] device veth1_macvtap entered promiscuous mode [ 59.678455][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.691905][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.703313][ T3509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.719362][ T3518] device veth0_macvtap entered promiscuous mode [ 59.727406][ T3558] Bluetooth: hci2: command 0x040f tx timeout [ 59.759136][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.768978][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.778871][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.789162][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.798781][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.808737][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.822585][ T3575] Bluetooth: hci4: command 0x040f tx timeout [ 59.823113][ T3509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.829013][ T3575] Bluetooth: hci0: command 0x040f tx timeout [ 59.845909][ T3575] Bluetooth: hci1: command 0x040f tx timeout [ 59.846480][ T3509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.852449][ T3575] Bluetooth: hci3: command 0x040f tx timeout [ 59.869336][ T3509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.879133][ T3509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.920315][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.925238][ T3518] device veth1_macvtap entered promiscuous mode [ 59.929452][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.948123][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.960640][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.002794][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.015505][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.027963][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.039905][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.053505][ T3507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.079762][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.081231][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.093452][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.110030][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.110606][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.130601][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.140959][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.155686][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.168002][ T3518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.175799][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.185487][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.195060][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.204191][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.215141][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.229583][ T3512] device veth0_vlan entered promiscuous mode [ 60.239948][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.251669][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.264665][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.281180][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.294084][ T3507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.322014][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.331895][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.350500][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.360738][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.372401][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.382225][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.396383][ T3512] device veth1_vlan entered promiscuous mode [ 60.410294][ T3507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.431634][ T3507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.442623][ T3507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.453503][ T3507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.490229][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.504355][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.515437][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.527009][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.537814][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.549149][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.561862][ T3518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.576494][ T3518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.586817][ T3518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.597337][ T3518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.607222][ T3518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.641127][ T3512] device veth0_macvtap entered promiscuous mode [ 60.657326][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.681506][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.700022][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.724930][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.741228][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.753075][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.814657][ T3512] device veth1_macvtap entered promiscuous mode [ 60.838807][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.851077][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.871345][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.897836][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.942709][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.963699][ T3512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.976716][ T3512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.987755][ T3512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.007887][ T3512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.019654][ T3512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.030595][ T3512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.041450][ T3512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.052205][ T3512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.064667][ T3512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.094689][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.113542][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.128674][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.130331][ T3512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.149931][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.163589][ T3512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.175604][ T3512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.219472][ T3512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.237525][ T3512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.258173][ T3512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.268500][ T3512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.279723][ T3512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.297255][ T3512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.324355][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.333776][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.344436][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.371548][ T3512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.396129][ T3512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.407534][ T3512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.417155][ T3512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.483441][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.496371][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.540169][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.657397][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.665337][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.705360][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.717158][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.725134][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.756349][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.771285][ T3609] loop0: detected capacity change from 0 to 1024 [ 61.807047][ T1065] Bluetooth: hci2: command 0x0419 tx timeout [ 61.883234][ T3609] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 61.897072][ T1065] Bluetooth: hci3: command 0x0419 tx timeout [ 61.908056][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.914834][ T1065] Bluetooth: hci1: command 0x0419 tx timeout [ 61.937181][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.949979][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.960088][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.960478][ T1065] Bluetooth: hci0: command 0x0419 tx timeout [ 62.005474][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.027558][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.030758][ T1065] Bluetooth: hci4: command 0x0419 tx timeout [ 62.134595][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.166452][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.260628][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.303528][ T3609] EXT4-fs (loop0): Test dummy encryption mode enabled [ 62.315618][ T3609] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 62.371711][ T3609] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv0,test_dummy_encryption,max_batch_time=0x0000000000000003,nomblk_io_submit,minixdf,errors=remount-ro,data_err=abort,. Quota mode: writeback. [ 62.647491][ T3609] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 62.980855][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 64.279442][ T3708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 65.438633][ T3741] syz.1.38 (pid 3741) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 66.151277][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 67.553950][ T3803] fuse: Bad value for 'fd' [ 68.756226][ T3856] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.838320][ T3858] loop4: detected capacity change from 0 to 512 [ 68.938033][ T3858] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 69.004235][ T3858] EXT4-fs (loop4): 1 truncate cleaned up [ 69.040613][ T3858] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,journal_dev=0x0000000000000002,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 69.139613][ T26] audit: type=1326 audit(1719865739.778:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3861 comm="syz.1.77" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f546c2e0b99 code=0x0 [ 70.438431][ T3893] loop4: detected capacity change from 0 to 512 [ 70.577071][ T3893] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.90: invalid block [ 70.594598][ T3903] loop3: detected capacity change from 0 to 512 [ 70.665297][ T3893] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.90: invalid indirect mapped block 10 (level 1) [ 70.668027][ T3903] EXT4-fs (loop3): Test dummy encryption mode enabled [ 70.692354][ T3893] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.90: invalid indirect mapped block 8 (level 1) [ 70.717297][ T3893] EXT4-fs (loop4): 1 truncate cleaned up [ 70.723056][ T3893] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.744464][ T3903] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.831348][ T3903] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 70.934186][ T3903] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.94: attempt to clear invalid blocks 2 len 1 [ 71.006339][ T3903] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 71.053808][ T3586] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.098330][ T3903] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.94: invalid indirect mapped block 1819239214 (level 0) [ 71.153772][ T3903] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.94: invalid indirect mapped block 1819239214 (level 1) [ 71.183849][ T3913] EXT4-fs error (device loop4): ext4_lookup:1855: inode #12: comm syz.4.90: unexpected EA_INODE flag [ 71.206101][ T3903] EXT4-fs (loop3): 1 truncate cleaned up [ 71.213389][ T3903] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,dioread_nolock,discard,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 71.425030][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.443863][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.196149][ T3586] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 72.216090][ T3586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 72.236388][ T3586] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 72.282276][ T3901] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 72.328724][ T3923] loop1: detected capacity change from 0 to 512 [ 72.397308][ T3923] ======================================================= [ 72.397308][ T3923] WARNING: The mand mount option has been deprecated and [ 72.397308][ T3923] and is ignored by this kernel. Remove the mand [ 72.397308][ T3923] option from the mount to silence this warning. [ 72.397308][ T3923] ======================================================= [ 72.446358][ T3586] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 72.455471][ T3586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.478696][ T3923] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.495511][ T3586] usb 1-1: Product: syz [ 72.516095][ T3586] usb 1-1: Manufacturer: syz [ 72.521009][ T3586] usb 1-1: SerialNumber: syz [ 72.550065][ T3586] usb 1-1: config 0 descriptor?? [ 72.578168][ T3923] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.98: casefold flag without casefold feature [ 72.597666][ T3905] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.623281][ T3586] dm9601: probe of 1-1:0.0 failed with error -22 [ 72.633996][ T3923] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 72.654574][ T3923] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 72.664632][ T3923] System zones: 0-2, 18-18, 34-35 [ 72.679224][ T3923] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.010585][ T26] audit: type=1326 audit(1719865743.648:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546c2e0b99 code=0x7ffc0000 [ 73.076057][ T26] audit: type=1326 audit(1719865743.688:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f546c2e0b99 code=0x7ffc0000 [ 73.166073][ T26] audit: type=1326 audit(1719865743.778:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546c2e0b99 code=0x7ffc0000 [ 73.276924][ T3933] loop4: detected capacity change from 0 to 512 [ 73.282184][ T26] audit: type=1326 audit(1719865743.778:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546c2e0b99 code=0x7ffc0000 [ 73.291710][ T7] usb 1-1: USB disconnect, device number 2 [ 73.426317][ T3937] loop0: detected capacity change from 0 to 512 [ 73.443197][ T3933] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.102: invalid block [ 73.506453][ T3933] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.102: invalid indirect mapped block 10 (level 1) [ 73.526528][ T3937] EXT4-fs (loop0): Test dummy encryption mode enabled [ 73.544488][ T3937] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.559401][ T3933] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.102: invalid indirect mapped block 8 (level 1) [ 73.607688][ T3933] EXT4-fs (loop4): 1 truncate cleaned up [ 73.613389][ T3933] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.636049][ T3937] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 73.650017][ T3937] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.104: attempt to clear invalid blocks 2 len 1 [ 73.674952][ T3937] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 73.692581][ T3937] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.104: invalid indirect mapped block 1819239214 (level 0) [ 73.710072][ T3937] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.104: invalid indirect mapped block 1819239214 (level 1) [ 73.729809][ T3937] EXT4-fs (loop0): 1 truncate cleaned up [ 73.736946][ T3937] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,dioread_nolock,discard,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 73.785463][ T3942] loop1: detected capacity change from 0 to 512 [ 74.299785][ T3942] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 74.391466][ T3942] EXT4-fs (loop1): bad geometry: block count 117440576 exceeds size of device (64 blocks) [ 77.336663][ T3977] loop0: detected capacity change from 0 to 256 [ 77.519768][ T3975] loop3: detected capacity change from 0 to 4096 [ 77.881615][ T3975] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 77.941131][ T3984] loop0: detected capacity change from 0 to 512 [ 78.005524][ T3975] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 78.015152][ T3984] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 78.016730][ T3985] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 78.031714][ T3968] loop1: detected capacity change from 0 to 32768 [ 78.053567][ T3984] EXT4-fs (loop0): bad geometry: block count 117440576 exceeds size of device (64 blocks) [ 78.089861][ T3985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.119'. [ 78.327503][ T3550] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 78.346635][ T3968] XFS (loop1): Mounting V5 Filesystem [ 78.442691][ T3518] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 78.597133][ T3968] XFS (loop1): Ending clean mount [ 78.809224][ T4004] loop3: detected capacity change from 0 to 1764 [ 78.827899][ T3551] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 78.843536][ T3551] XFS (loop1): Unmount and run xfs_repair [ 78.850806][ T3551] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 78.860093][ T3551] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 78.870253][ T3551] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 78.922864][ T3551] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 78.953996][ T3551] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 78.993053][ T3551] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 79.007241][ T3551] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 79.017760][ T3551] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 79.056129][ T3551] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 79.075906][ T3968] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 79.110779][ T3968] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 79.145634][ T3987] loop4: detected capacity change from 0 to 32768 [ 79.176243][ T3968] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 79.221643][ T3507] XFS (loop1): Unmounting Filesystem [ 79.904948][ T4023] netlink: 'syz.1.130': attribute type 21 has an invalid length. [ 79.986146][ T4023] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 80.021691][ T4023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.130'. [ 80.101955][ T4029] loop0: detected capacity change from 0 to 512 [ 80.211473][ T4029] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 80.239834][ T4029] EXT4-fs (loop0): bad geometry: block count 117440576 exceeds size of device (64 blocks) [ 81.617036][ T4078] loop2: detected capacity change from 0 to 512 [ 81.653761][ T1279] cfg80211: failed to load regulatory.db [ 81.820465][ T4078] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 81.859060][ T4078] EXT4-fs (loop2): bad geometry: block count 117440576 exceeds size of device (64 blocks) [ 89.980630][ T4165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.071358][ T4165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.435140][ T26] audit: type=1800 audit(1719865761.068:7): pid=4173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.183" name="/root/syzkaller.YnHGYi/45/file0" dev="sda1" ino=1971 res=0 errno=0 [ 91.135656][ T4212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.343057][ T4219] device pim6reg1 entered promiscuous mode [ 92.048823][ T1065] Bluetooth: hci0: command 0x0401 tx timeout [ 92.105677][ T4253] device pim6reg1 entered promiscuous mode [ 92.333930][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 92.883409][ T4285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.303011][ T4301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.428364][ T26] audit: type=1800 audit(1719865764.068:8): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.228" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 93.532678][ T4316] netlink: 'syz.2.231': attribute type 10 has an invalid length. [ 93.572720][ T26] audit: type=1800 audit(1719865764.108:9): pid=4312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.228" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 94.241141][ T4342] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.237230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 96.363562][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 96.636614][ T4405] netlink: 'syz.3.260': attribute type 10 has an invalid length. [ 96.652255][ T4405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.260'. [ 96.681651][ T4405] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 96.859782][ T4409] Bluetooth: hci3: invalid length 0, exp 2 for type 27 [ 96.912111][ T4414] loop3: detected capacity change from 0 to 128 [ 97.173669][ T4418] tmpfs: Unknown parameter '&g+`P^m' [ 97.490006][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 97.499751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 98.149894][ T26] audit: type=1800 audit(1719865768.788:10): pid=4429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.268" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 99.082684][ T4435] loop2: detected capacity change from 0 to 2048 [ 99.202027][ T4435] loop2: p1 < > p4 [ 99.227970][ T4435] loop2: p4 size 8388608 extends beyond EOD, truncated [ 99.263428][ T4433] loop0: detected capacity change from 0 to 8192 [ 99.555803][ T4225] udevd[4225]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 99.593855][ T4134] udevd[4134]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 99.623485][ T4418] loop1: detected capacity change from 0 to 40427 [ 99.709132][ T4134] udevd[4134]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 99.726235][ T4418] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 99.734615][ T4418] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 99.833825][ T4445] loop2: detected capacity change from 0 to 512 [ 99.896451][ T4445] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.273: iget: bogus i_mode (0) [ 99.963414][ T4418] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.027746][ T4433] syz.0.270 (4433) used greatest stack depth: 18896 bytes left [ 100.037318][ T4445] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.273: couldn't read orphan inode 17 (err -117) [ 100.094881][ T4445] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.158864][ T4445] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 13: comm syz.2.273: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 100.204050][ T4445] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 13: comm syz.2.273: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 100.583504][ T4462] loop4: detected capacity change from 0 to 256 [ 100.602580][ T4465] loop0: detected capacity change from 0 to 512 [ 100.698089][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 100.722259][ T4462] FAT-fs (loop4): Directory bread(block 64) failed [ 100.766926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 100.794387][ T4462] FAT-fs (loop4): Directory bread(block 65) failed [ 100.806790][ T4465] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0 [ 100.865293][ T4462] FAT-fs (loop4): Directory bread(block 66) failed [ 101.066910][ T4462] FAT-fs (loop4): Directory bread(block 67) failed [ 101.942042][ T4462] FAT-fs (loop4): Directory bread(block 68) failed [ 102.020787][ T4462] FAT-fs (loop4): Directory bread(block 69) failed [ 102.072196][ T4462] FAT-fs (loop4): Directory bread(block 70) failed [ 102.107937][ T4478] loop1: detected capacity change from 0 to 1024 [ 102.137727][ T4462] FAT-fs (loop4): Directory bread(block 71) failed [ 102.179150][ T4462] FAT-fs (loop4): Directory bread(block 72) failed [ 102.188377][ T4462] FAT-fs (loop4): Directory bread(block 73) failed [ 102.243399][ T4478] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,barrier,resuid=0x0000000000000000,nodiscard,acl,errors=remount-ro,usrquota,data_err=abort,resuid=0x0000000000000000,. Quota mode: writeback. [ 102.415764][ T4481] loop0: detected capacity change from 0 to 8192 [ 102.640644][ T26] audit: type=1800 audit(1719865773.278:11): pid=4483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.278" name="bus" dev="loop4" ino=1048594 res=0 errno=0 [ 102.712458][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 102.872023][ T4483] attempt to access beyond end of device [ 102.872023][ T4483] loop4: rw=2051, want=1832, limit=256 [ 102.955747][ T4483] attempt to access beyond end of device [ 102.955747][ T4483] loop4: rw=2051, want=5288, limit=256 [ 103.152525][ T4495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.289'. [ 103.308686][ T4481] syz.0.284 (4481) used greatest stack depth: 18832 bytes left [ 103.514224][ T4501] loop1: detected capacity change from 0 to 1024 [ 103.674489][ T4501] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,barrier,resuid=0x0000000000000000,nodiscard,acl,errors=remount-ro,usrquota,data_err=abort,resuid=0x0000000000000000,. Quota mode: writeback. [ 103.826157][ T4510] netlink: 868 bytes leftover after parsing attributes in process `syz.4.295'. [ 103.924037][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 104.248581][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 104.266013][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 104.351014][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 105.553515][ T4535] loop3: detected capacity change from 0 to 8192 [ 105.562623][ T4545] loop4: detected capacity change from 0 to 1024 [ 105.696348][ T4545] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,barrier,resuid=0x0000000000000000,nodiscard,acl,errors=remount-ro,usrquota,data_err=abort,resuid=0x0000000000000000,. Quota mode: writeback. [ 106.015292][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 106.352523][ T4562] team0 (unregistering): Port device team_slave_0 removed [ 106.484001][ T4562] team0 (unregistering): Port device team_slave_1 removed [ 107.043244][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 107.324951][ T4584] loop3: detected capacity change from 0 to 1024 [ 107.585878][ T4584] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,barrier,resuid=0x0000000000000000,nodiscard,acl,errors=remount-ro,usrquota,data_err=abort,resuid=0x0000000000000000,. Quota mode: writeback. [ 107.761573][ T4592] netlink: 'syz.0.325': attribute type 10 has an invalid length. [ 107.988121][ T4592] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 108.332050][ T4601] loop3: detected capacity change from 0 to 2048 [ 108.394976][ T4601] loop3: p1 < > p4 [ 108.409496][ T4601] loop3: p4 size 8388608 extends beyond EOD, truncated [ 108.424092][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 108.698600][ T4225] udevd[4225]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.752653][ T4225] udevd[4225]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 108.883380][ T4636] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 108.890291][ T4636] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 108.902668][ T4637] vhci_hcd: connection closed [ 108.907378][ T4636] vhci_hcd vhci_hcd.0: Device attached [ 108.921473][ T3918] vhci_hcd: stop threads [ 108.943493][ T3918] vhci_hcd: release socket [ 108.984459][ T4134] udevd[4134]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 109.032134][ T4225] udevd[4225]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 109.051849][ T3918] vhci_hcd: disconnect device [ 109.069942][ T4634] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 109.076665][ T4634] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 109.085144][ T4644] vhci_hcd: connection closed [ 109.085377][ T4634] vhci_hcd vhci_hcd.0: Device attached [ 109.131297][ T3918] vhci_hcd: stop threads [ 109.215703][ T3918] vhci_hcd: release socket [ 109.247374][ T3918] vhci_hcd: disconnect device [ 109.356103][ T1065] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.588197][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.747133][ T1065] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 109.761969][ T1065] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.772681][ T1065] usb 2-1: config 0 descriptor?? [ 109.796310][ T3556] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.936353][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.946003][ T3551] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.029101][ T1065] ath6kl: Failed to submit usb control message: -71 [ 110.036392][ T1065] ath6kl: unable to send the bmi data to the device: -71 [ 110.049407][ T1065] ath6kl: Unable to send get target info: -71 [ 110.062382][ T1065] ath6kl: Failed to init ath6kl core: -71 [ 110.076642][ T1065] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 110.088366][ T1065] usb 2-1: USB disconnect, device number 2 [ 110.101932][ T3556] usb 1-1: Using ep0 maxpacket: 8 [ 110.247236][ T3556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 110.258902][ T3556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.269061][ T3556] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.279175][ T3556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 110.289233][ T3556] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 110.300105][ T3556] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 110.306104][ T3246] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.309445][ T3556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.333008][ T3556] usb 1-1: config 0 descriptor?? [ 110.356360][ T3551] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 110.365452][ T3551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.374132][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.387989][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 110.409197][ T3524] Bluetooth: hci5: urb ffff88801dea7600 submission failed (90) [ 110.423438][ T3551] usb 5-1: config 0 descriptor?? [ 110.477723][ T3551] cp210x 5-1:0.0: cp210x converter detected [ 110.556106][ T3246] usb 4-1: Using ep0 maxpacket: 16 [ 110.600059][ T3556] usb 1-1: USB disconnect, device number 3 [ 110.606517][ T7] usb 3-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=f6.b5 [ 110.629729][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.642943][ T7] usb 3-1: Product: syz [ 110.647516][ T7] usb 3-1: Manufacturer: syz [ 110.652677][ T7] usb 3-1: SerialNumber: syz [ 110.660699][ T7] usb 3-1: config 0 descriptor?? [ 110.677451][ T3246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 110.709015][ T4671] loop1: detected capacity change from 0 to 8192 [ 110.768395][ T3575] Bluetooth: hci3: command 0x2016 tx timeout [ 110.846311][ T3246] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 110.856957][ T3246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.865424][ T3246] usb 4-1: Product: syz [ 110.870021][ T3246] usb 4-1: Manufacturer: syz [ 110.874727][ T3246] usb 4-1: SerialNumber: syz [ 110.882341][ T3246] usb 4-1: config 0 descriptor?? [ 110.923110][ T3551] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 110.932982][ T3246] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 110.946536][ T7] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 110.954812][ T7] hdpvr 3-1:0.0: device init failed [ 110.964648][ T7] hdpvr: probe of 3-1:0.0 failed with error -12 [ 110.976296][ T7] usb 3-1: USB disconnect, device number 2 [ 111.033954][ T3551] usb 5-1: cp210x converter now attached to ttyUSB0 [ 111.142220][ T3246] usb 4-1: USB disconnect, device number 2 [ 111.190212][ T3555] usb 5-1: USB disconnect, device number 2 [ 111.235398][ T3555] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 111.268376][ T3555] cp210x 5-1:0.0: device disconnected [ 111.661794][ T4685] loop1: detected capacity change from 0 to 2048 [ 111.714453][ T4688] loop0: detected capacity change from 0 to 16384 [ 111.855550][ T4685] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.874576][ T4685] ext4 filesystem being mounted at /root/syzkaller.ZyVP6f/86/file0 supports timestamps until 2038 (0x7fffffff) [ 111.894474][ T4693] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 111.901217][ T4693] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 111.914419][ T4695] vhci_hcd: connection closed [ 111.914671][ T4693] vhci_hcd vhci_hcd.0: Device attached [ 111.936855][ T3918] vhci_hcd: stop threads [ 111.941420][ T3918] vhci_hcd: release socket [ 111.972404][ T3918] vhci_hcd: disconnect device [ 112.381335][ T4718] loop3: detected capacity change from 0 to 1024 [ 112.445509][ T4718] EXT4-fs (loop3): Test dummy encryption mode enabled [ 112.477652][ T4718] EXT4-fs (loop3): Ignoring removed orlov option [ 112.510776][ T4718] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 112.826622][ T4718] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 112.846231][ T1279] Bluetooth: hci3: command 0x0406 tx timeout [ 112.997354][ T4739] overlayfs: missing 'lowerdir' [ 113.514735][ T4718] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 114.025580][ T4766] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 114.032521][ T4766] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 114.041490][ T4766] vhci_hcd vhci_hcd.0: Device attached [ 114.045321][ T4767] vhci_hcd: connection closed [ 114.052866][ T144] vhci_hcd: stop threads [ 114.074822][ T144] vhci_hcd: release socket [ 114.094851][ T144] vhci_hcd: disconnect device [ 114.340662][ T4779] syz.4.396 uses obsolete (PF_INET,SOCK_PACKET) [ 114.514589][ T4783] loop0: detected capacity change from 0 to 4096 [ 114.526415][ T4787] loop3: detected capacity change from 0 to 128 [ 114.535518][ T26] audit: type=1804 audit(1719865785.168:12): pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.401" name="/root/syzkaller.ZyVP6f/94/file0" dev="sda1" ino=1970 res=1 errno=0 [ 114.590381][ T4791] loop1: detected capacity change from 0 to 256 [ 114.610804][ T4783] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 114.625240][ T4787] 9pnet_virtio: no channels available for device 127.0.0.1 [ 114.661668][ T4787] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 114.672008][ T4787] FAT-fs (loop3): Filesystem has been set read-only [ 115.033245][ T4800] netlink: 288 bytes leftover after parsing attributes in process `syz.1.408'. [ 116.015913][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 116.268566][ T4826] loop0: detected capacity change from 0 to 1024 [ 116.401909][ T4826] hfsplus: failed to load root directory [ 117.622929][ T4807] loop2: detected capacity change from 0 to 32768 [ 117.767892][ T4803] loop4: detected capacity change from 0 to 32768 [ 117.830576][ T4807] XFS (loop2): Mounting V5 Filesystem [ 117.957578][ T4822] loop1: detected capacity change from 0 to 32768 [ 117.971014][ T4854] netlink: 2220 bytes leftover after parsing attributes in process `syz.0.426'. [ 118.057227][ T4822] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.416 (4822) [ 118.121051][ T4807] XFS (loop2): Ending clean mount [ 118.153054][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 118.185824][ T4807] XFS (loop2): Quotacheck needed: Please wait. [ 118.294150][ T4822] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 118.396139][ T4822] BTRFS info (device loop1): setting nodatacow, compression disabled [ 118.404821][ T4822] BTRFS info (device loop1): force zlib compression, level 3 [ 118.461971][ T4807] XFS (loop2): Quotacheck: Done. [ 118.479824][ T3508] XFS (loop2): Unmounting Filesystem [ 118.506467][ T4822] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 118.635720][ T4822] BTRFS info (device loop1): use lzo compression, level 0 [ 118.655056][ T4822] BTRFS info (device loop1): turning on flush-on-commit [ 118.741627][ T3246] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 118.745386][ T4822] BTRFS info (device loop1): enabling auto defrag [ 118.761162][ T3246] Bluetooth: hci4: Injecting HCI hardware error event [ 118.786940][ T3524] Bluetooth: hci4: hardware error 0x00 [ 119.139183][ T26] audit: type=1326 audit(1719865789.458:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6bb80b99 code=0x7ffc0000 [ 119.170973][ T4822] BTRFS info (device loop1): using free space tree [ 119.326452][ T4822] BTRFS info (device loop1): has skinny extents [ 119.414144][ T26] audit: type=1326 audit(1719865789.458:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6f6bb80b99 code=0x7ffc0000 [ 119.686844][ T26] audit: type=1326 audit(1719865789.468:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6bb80b99 code=0x7ffc0000 [ 119.787937][ T26] audit: type=1326 audit(1719865789.468:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f6f6bb80b99 code=0x7ffc0000 [ 119.860159][ T26] audit: type=1326 audit(1719865789.468:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6bb80b99 code=0x7ffc0000 [ 119.898044][ T4822] BTRFS error (device loop1): open_ctree failed [ 120.662398][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 121.288210][ T4927] loop2: detected capacity change from 0 to 512 [ 121.356872][ T4929] loop4: detected capacity change from 0 to 2048 [ 121.375378][ T4927] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 121.456409][ T4929] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 121.468141][ T4927] System zones: 0-2, 18-18, 34-35 [ 121.500311][ T4927] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 121.502672][ T4929] NILFS (loop4): invalid segment: Checksum error in segment payload [ 121.558818][ T4927] ext4 filesystem being mounted at /root/syzkaller.YnHGYi/89/file0 supports timestamps until 2038 (0x7fffffff) [ 121.616326][ T4929] NILFS (loop4): unable to fall back to spare super block [ 121.635554][ T4929] NILFS (loop4): error -22 while searching super root [ 121.639875][ T4937] team0: Device ipvlan1 failed to register rx_handler [ 121.671335][ T4927] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 121.674615][ T4900] loop3: detected capacity change from 0 to 40427 [ 121.705215][ T4927] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 121.764396][ T4900] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 121.826690][ T4900] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.872428][ T4929] loop4: detected capacity change from 0 to 512 [ 121.882757][ T4900] F2FS-fs (loop3): invalid crc value [ 121.965675][ T4900] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.048159][ T26] audit: type=1804 audit(1719865792.688:18): pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.451" name="/root/syzkaller.YnHGYi/90/bus" dev="sda1" ino=1973 res=1 errno=0 [ 122.090831][ T4929] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000400000,minixdf,,errors=continue. Quota mode: writeback. [ 122.130849][ T4929] ext4 filesystem being mounted at /root/syzkaller.ZlwiI7/69/bus supports timestamps until 2038 (0x7fffffff) [ 122.153711][ T4900] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.161995][ T4900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.758732][ T3508] syz-executor (3508) used greatest stack depth: 18304 bytes left [ 122.985675][ T4946] loop1: detected capacity change from 0 to 40427 [ 123.046705][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.058142][ T4946] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 123.074089][ T4939] loop0: detected capacity change from 0 to 40427 [ 123.082894][ T4946] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.097979][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 123.115360][ T4946] F2FS-fs (loop1): invalid crc value [ 123.165510][ T4946] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.176265][ T4939] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 123.189714][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.191426][ T4939] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 123.272571][ T4939] F2FS-fs (loop0): invalid crc value [ 123.329560][ T4939] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.345467][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.362706][ T4946] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 123.372297][ T4946] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.427499][ T4939] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 123.443910][ T4939] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.541126][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.655828][ T3509] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 124.655905][ T3509] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 124.706077][ T3509] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 124.728272][ T4955] chnl_net:caif_netlink_parms(): no params data found [ 124.729597][ T3509] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 124.754432][ T3509] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 124.776392][ T3509] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 124.796311][ T3509] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 124.808857][ T26] audit: type=1804 audit(1719865795.448:19): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.463" name="/root/syzkaller.ZlwiI7/73/bus" dev="sda1" ino=1964 res=1 errno=0 [ 124.959381][ T1279] Bluetooth: hci1: command 0x0409 tx timeout [ 125.011191][ T4992] device syzkaller0 entered promiscuous mode [ 125.244805][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 125.483383][ T4955] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.507501][ T4955] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.528169][ T4955] device bridge_slave_0 entered promiscuous mode [ 125.580389][ T5011] device syzkaller0 entered promiscuous mode [ 125.656519][ T4955] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.670722][ T4955] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.697028][ T4955] device bridge_slave_1 entered promiscuous mode [ 126.139455][ T4955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.202091][ T4955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.393095][ T4955] team0: Port device team_slave_0 added [ 126.521307][ T4955] team0: Port device team_slave_1 added [ 126.530766][ T26] audit: type=1804 audit(1719865797.168:20): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.473" name="/root/syzkaller.rzLKWd/94/bus" dev="sda1" ino=1960 res=1 errno=0 [ 126.714765][ T4955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.726282][ T4955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.753280][ T4955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.810329][ T4955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.821539][ T4955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.858542][ T5045] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 126.883328][ T4955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.908204][ T5045] kvm: pic: non byte read [ 126.933532][ T5045] kvm: pic: non byte read [ 126.960283][ T5045] kvm: pic: non byte read [ 126.974288][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 126.989313][ T5045] kvm: pic: non byte read [ 126.990863][ T5056] syz.1.469[5056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.994480][ T5056] syz.1.469[5056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.006114][ T3586] Bluetooth: hci1: command 0x041b tx timeout [ 127.137432][ T4955] device hsr_slave_0 entered promiscuous mode [ 127.147846][ T4955] device hsr_slave_1 entered promiscuous mode [ 127.188011][ T4955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.208785][ T4955] Cannot create hsr debugfs directory [ 127.371064][ T5063] device syzkaller0 entered promiscuous mode [ 127.466205][ T5066] device syzkaller0 entered promiscuous mode [ 127.618958][ T9] device hsr_slave_0 left promiscuous mode [ 127.633987][ T9] device hsr_slave_1 left promiscuous mode [ 127.652005][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.663793][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.678161][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.685795][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.705786][ T9] device bridge_slave_1 left promiscuous mode [ 127.714396][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.752101][ T9] device bridge_slave_0 left promiscuous mode [ 127.758857][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.785016][ T9] device veth1_macvtap left promiscuous mode [ 127.792461][ T9] device veth0_macvtap left promiscuous mode [ 127.800322][ T9] device veth1_vlan left promiscuous mode [ 127.807100][ T9] device veth0_vlan left promiscuous mode [ 128.041714][ T9] team0 (unregistering): Port device team_slave_1 removed [ 128.064404][ T9] team0 (unregistering): Port device team_slave_0 removed [ 128.085737][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.138074][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.262440][ T9] bond0 (unregistering): Released all slaves [ 128.421012][ T5085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'. [ 128.811086][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 129.086278][ T3586] Bluetooth: hci1: command 0x040f tx timeout [ 129.505124][ T5125] loop1: detected capacity change from 0 to 128 [ 129.673603][ T26] audit: type=1804 audit(1719865800.308:21): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.492" name="/root/syzkaller.3lzo2o/102/bus" dev="sda1" ino=1968 res=1 errno=0 [ 129.754728][ T4955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.827382][ T4955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.915416][ T4955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.972642][ T4955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.848957][ T144] attempt to access beyond end of device [ 130.848957][ T144] loop1: rw=1, want=1041, limit=128 [ 130.942971][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 131.166093][ T1279] Bluetooth: hci1: command 0x0419 tx timeout [ 131.925845][ T4955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.992510][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.027509][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.039345][ T4955] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.098358][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.121266][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.147274][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.154557][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.242610][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.272740][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.333350][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.373808][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.381030][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.459627][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.495787][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.509127][ T5181] loop1: detected capacity change from 0 to 128 [ 132.570237][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.590321][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.641411][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.676955][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 132.852562][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.861656][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.870710][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.882548][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.892309][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.667756][ T4955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.727258][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.782277][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.808412][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.862974][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.921419][ T154] attempt to access beyond end of device [ 133.921419][ T154] loop1: rw=1, want=1041, limit=128 [ 134.333122][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.347413][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.430846][ T4955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.526938][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.558048][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.658268][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.677007][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.722898][ T4955] device veth0_vlan entered promiscuous mode [ 134.748771][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.768852][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.821328][ T4955] device veth1_vlan entered promiscuous mode [ 134.843116][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.947614][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.958371][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.988377][ T4955] device veth0_macvtap entered promiscuous mode [ 135.043953][ T5245] process 'syz.4.521' launched './file0' with NULL argv: empty string added [ 135.050335][ T4955] device veth1_macvtap entered promiscuous mode [ 135.166991][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.234932][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.295983][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.345497][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.401525][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.438751][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.469211][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.546166][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.606963][ T4955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.621214][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.650015][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.686884][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.695833][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.751023][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.788290][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.838105][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.876025][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.917138][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.948407][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.010027][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.038526][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.098532][ T4955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.124834][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.162552][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.183482][ T4955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.206086][ T4955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.235237][ T4955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.281244][ T4955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.552231][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.568789][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.618915][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.668596][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.721180][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.800028][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.374919][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 137.575645][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 137.669199][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 137.868040][ T5373] loop1: detected capacity change from 0 to 1024 [ 137.967113][ T5373] hfsplus: unable to parse mount options [ 138.031829][ T5380] loop2: detected capacity change from 0 to 1024 [ 138.063808][ T5381] usb usb8: usbfs: process 5381 (syz.4.562) did not claim interface 0 before use [ 138.768748][ T5396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 139.690685][ T5409] loop1: detected capacity change from 0 to 8192 [ 139.817146][ T5419] team0: Port device wlan1 added [ 139.849038][ T5409] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.983187][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 140.013445][ T5426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.579'. [ 140.191345][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 140.824404][ T26] audit: type=1804 audit(1719865811.458:22): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.592" name="/root/syzkaller.tso2zN/13/bus" dev="sda1" ino=1975 res=1 errno=0 [ 140.911816][ T26] audit: type=1804 audit(1719865811.498:23): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.592" name="/root/syzkaller.tso2zN/13/bus" dev="sda1" ino=1975 res=1 errno=0 [ 141.086551][ T26] audit: type=1804 audit(1719865811.498:24): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.592" name="/root/syzkaller.tso2zN/13/bus" dev="sda1" ino=1975 res=1 errno=0 [ 141.703779][ T5464] serio: Serial port ptm0 [ 141.805898][ T5472] loop0: detected capacity change from 0 to 512 [ 141.852425][ T5474] netlink: 104 bytes leftover after parsing attributes in process `syz.3.598'. [ 142.014531][ T5472] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.597: invalid block [ 142.032457][ T5472] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.597: invalid indirect mapped block 10 (level 1) [ 142.116557][ T5472] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.597: invalid indirect mapped block 8 (level 1) [ 142.125134][ T5488] loop4: detected capacity change from 0 to 512 [ 142.193262][ T5488] EXT4-fs (loop4): Test dummy encryption mode enabled [ 142.201143][ T5472] EXT4-fs (loop0): 1 truncate cleaned up [ 142.210971][ T5472] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.217836][ T5488] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.719535][ T5488] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 142.947651][ T5488] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.603: attempt to clear invalid blocks 2 len 1 [ 143.013747][ T5488] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 143.076613][ T5488] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.603: invalid indirect mapped block 1819239214 (level 0) [ 143.135247][ T5488] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.603: invalid indirect mapped block 1819239214 (level 1) [ 143.154622][ T5488] EXT4-fs (loop4): 1 truncate cleaned up [ 143.164331][ T5488] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,dioread_nolock,discard,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 144.486198][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.756789][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 144.782057][ T5502] loop2: detected capacity change from 0 to 40427 [ 144.845746][ T5502] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 144.867976][ T5502] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 144.878161][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.912868][ T5502] F2FS-fs (loop2): invalid crc value [ 144.977927][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 145.005993][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 145.035599][ T7] usb 1-1: SerialNumber: syz [ 145.064821][ T7] usb 1-1: config 0 descriptor?? [ 145.139917][ T5502] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.917837][ T5502] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.946117][ T5502] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.961389][ T5512] loop3: detected capacity change from 0 to 40427 [ 145.986398][ T7] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 145.998439][ T5512] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 146.019755][ T7] usb 1-1: No valid video chain found. [ 146.033178][ T5512] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 146.079041][ T5512] F2FS-fs (loop3): invalid crc value [ 146.153965][ T5512] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.190600][ T3586] usb 1-1: USB disconnect, device number 4 [ 146.239985][ T3550] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 146.263774][ T3550] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 146.379936][ T5512] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 146.409429][ T5533] device syzkaller0 entered promiscuous mode [ 146.424294][ T5512] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 147.179533][ T5544] loop4: detected capacity change from 0 to 512 [ 147.412747][ T547] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 147.658736][ T5544] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.619: invalid block [ 147.681627][ T547] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 147.937155][ T5544] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.619: invalid indirect mapped block 10 (level 1) [ 148.159156][ T5544] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.619: invalid indirect mapped block 8 (level 1) [ 148.253120][ T5544] EXT4-fs (loop4): 1 truncate cleaned up [ 148.270041][ T5555] loop0: detected capacity change from 0 to 256 [ 148.297947][ T5544] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.378449][ T5579] crypto_alloc_aead failed rc=-2 [ 152.025281][ T5617] loop4: detected capacity change from 0 to 512 [ 152.219455][ T5617] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.641: invalid indirect mapped block 10 (level 1) [ 152.243946][ T5617] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.641: invalid indirect mapped block 8 (level 1) [ 152.266177][ T5617] EXT4-fs (loop4): 1 truncate cleaned up [ 152.272043][ T5617] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.599187][ T5632] loop1: detected capacity change from 0 to 512 [ 152.701194][ T5632] EXT4-fs (loop1): Test dummy encryption mode enabled [ 152.720527][ T5632] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.801193][ T5636] device syzkaller0 entered promiscuous mode [ 152.826049][ T5632] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 152.891326][ T5632] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.646: attempt to clear invalid blocks 2 len 1 [ 152.992873][ T5632] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 153.012918][ T5632] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.646: invalid indirect mapped block 1819239214 (level 0) [ 153.050664][ T5632] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.646: invalid indirect mapped block 1819239214 (level 1) [ 153.078163][ T5632] EXT4-fs (loop1): 1 truncate cleaned up [ 153.085789][ T5632] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,dioread_nolock,discard,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 153.672221][ T5657] loop4: detected capacity change from 0 to 4096 [ 153.897636][ T5666] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.550340][ T5685] loop0: detected capacity change from 0 to 2048 [ 157.064930][ T5707] loop4: detected capacity change from 0 to 512 [ 157.388622][ T5707] EXT4-fs (loop4): Test dummy encryption mode enabled [ 157.430797][ T5707] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.494285][ T5715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.556721][ T5707] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 157.586131][ T5718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.617600][ T5715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.644911][ T5707] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.671: attempt to clear invalid blocks 2 len 1 [ 157.682279][ T5716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.784268][ T5707] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 157.855033][ T5715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.885830][ T5707] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.671: invalid indirect mapped block 1819239214 (level 0) [ 157.968361][ T5707] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.671: invalid indirect mapped block 1819239214 (level 1) [ 158.040398][ T5707] EXT4-fs (loop4): 1 truncate cleaned up [ 158.072483][ T5707] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,dioread_nolock,discard,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 158.935933][ C1] sched: RT throttling activated [ 158.990598][ T5718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.540581][ T5737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.679'. [ 160.773587][ T5737] [ 160.776221][ T5737] ====================================================== [ 160.783826][ T5737] WARNING: possible circular locking dependency detected [ 160.790962][ T5737] 5.15.161-syzkaller #0 Not tainted [ 160.796389][ T5737] ------------------------------------------------------ [ 160.804566][ T5737] syz.2.679/5737 is trying to acquire lock: [ 160.810578][ T5737] ffff88801c444d00 (team->team_lock_key#6){+.+.}-{3:3}, at: team_del_slave+0x2e/0x1f0 [ 160.821242][ T5737] [ 160.821242][ T5737] but task is already holding lock: [ 160.831706][ T5737] ffff88807a800628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x127/0x370 [ 160.846490][ T5737] [ 160.846490][ T5737] which lock already depends on the new lock. [ 160.846490][ T5737] [ 160.856904][ T5737] [ 160.856904][ T5737] the existing dependency chain (in reverse order) is: [ 160.866190][ T5737] [ 160.866190][ T5737] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 160.873983][ T5737] lock_acquire+0x1db/0x4f0 [ 160.879051][ T5737] __mutex_lock_common+0x1da/0x25a0 [ 160.884976][ T5737] mutex_lock_nested+0x17/0x20 [ 160.890373][ T5737] ieee80211_open+0x13a/0x1f0 [ 160.895722][ T5737] __dev_open+0x36f/0x500 [ 160.900604][ T5737] dev_open+0xa9/0x260 [ 160.905312][ T5737] team_add_slave+0x981/0x27a0 [ 160.910641][ T5737] do_setlink+0xe71/0x3b00 [ 160.915611][ T5737] rtnl_newlink+0x17a4/0x2070 [ 160.920921][ T5737] rtnetlink_rcv_msg+0x993/0xee0 [ 160.926582][ T5737] netlink_rcv_skb+0x1cf/0x410 [ 160.931914][ T5737] netlink_unicast+0x7b6/0x980 [ 160.937786][ T5737] netlink_sendmsg+0xa30/0xd60 [ 160.943957][ T5737] ____sys_sendmsg+0x59e/0x8f0 [ 160.950227][ T5737] ___sys_sendmsg+0x252/0x2e0 [ 160.955897][ T5737] __se_sys_sendmsg+0x19a/0x260 [ 160.962023][ T5737] do_syscall_64+0x3b/0xb0 [ 160.967076][ T5737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.973651][ T5737] [ 160.973651][ T5737] -> #0 (team->team_lock_key#6){+.+.}-{3:3}: [ 160.981873][ T5737] validate_chain+0x1649/0x5930 [ 160.987469][ T5737] __lock_acquire+0x1295/0x1ff0 [ 160.993411][ T5737] lock_acquire+0x1db/0x4f0 [ 160.998705][ T5737] __mutex_lock_common+0x1da/0x25a0 [ 161.004465][ T5737] mutex_lock_nested+0x17/0x20 [ 161.009783][ T5737] team_del_slave+0x2e/0x1f0 [ 161.015048][ T5737] team_device_event+0x264/0x580 [ 161.020529][ T5737] raw_notifier_call_chain+0xd0/0x170 [ 161.026455][ T5737] unregister_netdevice_many+0xf1b/0x18f0 [ 161.032824][ T5737] unregister_netdevice_queue+0x2e6/0x350 [ 161.039181][ T5737] _cfg80211_unregister_wdev+0x181/0x510 [ 161.045742][ T5737] ieee80211_if_remove+0x1cc/0x2c0 [ 161.051493][ T5737] ieee80211_del_iface+0x15/0x20 [ 161.057251][ T5737] nl80211_del_interface+0x1f5/0x370 [ 161.063281][ T5737] genl_rcv_msg+0xfbd/0x14a0 [ 161.068536][ T5737] netlink_rcv_skb+0x1cf/0x410 [ 161.074311][ T5737] genl_rcv+0x24/0x40 [ 161.078853][ T5737] netlink_unicast+0x7b6/0x980 [ 161.084648][ T5737] netlink_sendmsg+0xa30/0xd60 [ 161.090062][ T5737] ____sys_sendmsg+0x59e/0x8f0 [ 161.095688][ T5737] ___sys_sendmsg+0x252/0x2e0 [ 161.101093][ T5737] __se_sys_sendmsg+0x19a/0x260 [ 161.107518][ T5737] do_syscall_64+0x3b/0xb0 [ 161.112601][ T5737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.119422][ T5737] [ 161.119422][ T5737] other info that might help us debug this: [ 161.119422][ T5737] [ 161.130536][ T5737] Possible unsafe locking scenario: [ 161.130536][ T5737] [ 161.138869][ T5737] CPU0 CPU1 [ 161.144959][ T5737] ---- ---- [ 161.150951][ T5737] lock(&rdev->wiphy.mtx); [ 161.155960][ T5737] lock(team->team_lock_key#6); [ 161.163988][ T5737] lock(&rdev->wiphy.mtx); [ 161.171349][ T5737] lock(team->team_lock_key#6); [ 161.176328][ T5737] [ 161.176328][ T5737] *** DEADLOCK *** [ 161.176328][ T5737] [ 161.184484][ T5737] 3 locks held by syz.2.679/5737: [ 161.189617][ T5737] #0: ffffffff8da45b70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 161.197847][ T5737] #1: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x540 [ 161.207121][ T5737] #2: ffff88807a800628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x127/0x370 [ 161.217738][ T5737] [ 161.217738][ T5737] stack backtrace: [ 161.223651][ T5737] CPU: 1 PID: 5737 Comm: syz.2.679 Not tainted 5.15.161-syzkaller #0 [ 161.231920][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 161.242866][ T5737] Call Trace: [ 161.246252][ T5737] [ 161.249206][ T5737] dump_stack_lvl+0x1e3/0x2d0 [ 161.254010][ T5737] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 161.259675][ T5737] ? print_circular_bug+0x12b/0x1a0 [ 161.264984][ T5737] check_noncircular+0x2f8/0x3b0 [ 161.270031][ T5737] ? add_chain_block+0x850/0x850 [ 161.275175][ T5737] ? lockdep_lock+0x11f/0x2a0 [ 161.279883][ T5737] ? lockdep_unlock+0x166/0x300 [ 161.284878][ T5737] ? lockdep_lock+0x2a0/0x2a0 [ 161.289570][ T5737] validate_chain+0x1649/0x5930 [ 161.294775][ T5737] ? validate_chain+0x13bd/0x5930 [ 161.300000][ T5737] ? reacquire_held_locks+0x660/0x660 [ 161.305388][ T5737] ? reacquire_held_locks+0x660/0x660 [ 161.311047][ T5737] ? register_lock_class+0x100/0x9a0 [ 161.316870][ T5737] ? mark_lock+0x98/0x340 [ 161.321314][ T5737] __lock_acquire+0x1295/0x1ff0 [ 161.326536][ T5737] lock_acquire+0x1db/0x4f0 [ 161.331411][ T5737] ? team_del_slave+0x2e/0x1f0 [ 161.337554][ T5737] ? read_lock_is_recursive+0x10/0x10 [ 161.343035][ T5737] ? __might_sleep+0xc0/0xc0 [ 161.347826][ T5737] ? xsk_notifier+0x376/0x390 [ 161.352618][ T5737] __mutex_lock_common+0x1da/0x25a0 [ 161.357932][ T5737] ? team_del_slave+0x2e/0x1f0 [ 161.363122][ T5737] ? __local_bh_enable_ip+0x164/0x1f0 [ 161.368516][ T5737] ? team_del_slave+0x2e/0x1f0 [ 161.373304][ T5737] ? bond_netdev_event+0xd8/0xe80 [ 161.378353][ T5737] ? mutex_lock_io_nested+0x60/0x60 [ 161.383666][ T5737] ? mutex_unlock+0x10/0x10 [ 161.388192][ T5737] ? timer_delete_sync+0x247/0x2e0 [ 161.393329][ T5737] ? bond_ipsec_offload_ok+0x3e0/0x3e0 [ 161.398817][ T5737] ? memset+0x1f/0x40 [ 161.402819][ T5737] mutex_lock_nested+0x17/0x20 [ 161.408061][ T5737] team_del_slave+0x2e/0x1f0 [ 161.412676][ T5737] team_device_event+0x264/0x580 [ 161.417733][ T5737] raw_notifier_call_chain+0xd0/0x170 [ 161.423327][ T5737] unregister_netdevice_many+0xf1b/0x18f0 [ 161.429076][ T5737] ? kernfs_remove_by_name_ns+0xd0/0x100 [ 161.434747][ T5737] ? __lock_acquire+0x1ff0/0x1ff0 [ 161.439818][ T5737] ? alloc_netdev_mqs+0xc10/0xc10 [ 161.444867][ T5737] ? kasan_quarantine_put+0xd4/0x220 [ 161.450359][ T5737] ? up_write+0x19d/0x580 [ 161.454718][ T5737] unregister_netdevice_queue+0x2e6/0x350 [ 161.460503][ T5737] ? list_netdevice+0x450/0x450 [ 161.465413][ T5737] _cfg80211_unregister_wdev+0x181/0x510 [ 161.469309][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 161.471078][ T5737] ieee80211_if_remove+0x1cc/0x2c0 [ 161.471109][ T5737] ieee80211_del_iface+0x15/0x20 [ 161.492890][ T5737] nl80211_del_interface+0x1f5/0x370 [ 161.498387][ T5737] genl_rcv_msg+0xfbd/0x14a0 [ 161.503010][ T5737] ? genl_bind+0x420/0x420 [ 161.507463][ T5737] ? local_bh_enable+0x5/0x20 [ 161.512180][ T5737] ? mark_lock+0x98/0x340 [ 161.516527][ T5737] ? __lock_acquire+0x1295/0x1ff0 [ 161.521579][ T5737] ? nl80211_new_interface+0xfa0/0xfa0 [ 161.527049][ T5737] netlink_rcv_skb+0x1cf/0x410 [ 161.531838][ T5737] ? genl_bind+0x420/0x420 [ 161.536557][ T5737] ? netlink_ack+0xb10/0xb10 [ 161.541169][ T5737] ? down_read+0x1b3/0x2e0 [ 161.545703][ T5737] ? genl_rcv+0x9/0x40 [ 161.549798][ T5737] genl_rcv+0x24/0x40 [ 161.553794][ T5737] netlink_unicast+0x7b6/0x980 [ 161.558587][ T5737] ? netlink_detachskb+0x90/0x90 [ 161.563553][ T5737] ? __virt_addr_valid+0x39e/0x450 [ 161.568688][ T5737] ? 0xffffffff81000000 [ 161.573025][ T5737] ? __check_object_size+0x300/0x410 [ 161.578574][ T5737] ? bpf_lsm_netlink_send+0x5/0x10 [ 161.584043][ T5737] netlink_sendmsg+0xa30/0xd60 [ 161.588939][ T5737] ? netlink_getsockopt+0x5b0/0x5b0 [ 161.594316][ T5737] ? plist_check_list+0x20d/0x220 [ 161.599348][ T5737] ? aa_sock_msg_perm+0x91/0x150 [ 161.604319][ T5737] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 161.609790][ T5737] ? security_socket_sendmsg+0x7d/0xa0 [ 161.615275][ T5737] ? netlink_getsockopt+0x5b0/0x5b0 [ 161.620533][ T5737] ____sys_sendmsg+0x59e/0x8f0 [ 161.625317][ T5737] ? iovec_from_user+0x300/0x390 [ 161.630297][ T5737] ? __sys_sendmsg_sock+0x30/0x30 [ 161.635447][ T5737] ___sys_sendmsg+0x252/0x2e0 [ 161.640271][ T5737] ? __sys_sendmsg+0x260/0x260 [ 161.645075][ T5737] ? __fdget+0x191/0x220 [ 161.649527][ T5737] __se_sys_sendmsg+0x19a/0x260 [ 161.654389][ T5737] ? __x64_sys_sendmsg+0x80/0x80 [ 161.659337][ T5737] ? syscall_enter_from_user_mode+0x2e/0x240 [ 161.665352][ T5737] ? lockdep_hardirqs_on+0x94/0x130 [ 161.670568][ T5737] ? syscall_enter_from_user_mode+0x2e/0x240 [ 161.676562][ T5737] do_syscall_64+0x3b/0xb0 [ 161.681004][ T5737] ? clear_bhb_loop+0x15/0x70 [ 161.685692][ T5737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.692025][ T5737] RIP: 0033:0x7f0cab854b99 [ 161.696568][ T5737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.716617][ T5737] RSP: 002b:00007f0caa2b4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.725243][ T5737] RAX: ffffffffffffffda RBX: 00007f0cab9e3078 RCX: 00007f0cab854b99 [ 161.733228][ T5737] RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000000000003 [ 161.741290][ T5737] RBP: 00007f0cab8d577e R08: 0000000000000000 R09: 0000000000000000 [ 161.749267][ T5737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.757237][ T5737] R13: 000000000000006e R14: 00007f0cab9e3078 R15: 00007ffd7c975b78 [ 161.765229][ T5737] [ 161.787312][ T5737] team0: Port device wlan1 removed