last executing test programs: 33.557766995s ago: executing program 2 (id=257): r0 = socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 32.416203198s ago: executing program 2 (id=258): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x101402, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="640f2380c4c3396d926c6900000a0f20dc35200000000f22d88fe8781cc232d182d1020b0000b846c40000ba000000000f30660fd9e40fc7be8b000000c744240000100000c744240200000000c7442406000000000f011424c4e17913b4680f000000b942020000c4e1a9fd5900", 0x6e}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.091619408s ago: executing program 2 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x6) 29.923514968s ago: executing program 2 (id=268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "37472a4452e219e0", "9425f400ed4769823930617831c320e288cbed7e493b42cd2f9b1f53f3e0681c", "3a9f4479", "c7fe327b7c843779"}, 0x38) write$binfmt_aout(r4, 0x0, 0xfdef) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 26.453250169s ago: executing program 2 (id=281): syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x200000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001380)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 25.123945584s ago: executing program 2 (id=285): socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @empty, 0x2}, 0x1c) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 18.041333297s ago: executing program 4 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, 0x0}, 0x4005) 16.079942873s ago: executing program 4 (id=307): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x14) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4], 0x4c}}, 0x0) 13.995970895s ago: executing program 4 (id=310): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000002380)={0x73622a85, 0x100}) 13.251564903s ago: executing program 0 (id=311): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000005c0)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@nombcache}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000001fffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000280)=0xb, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') 13.169320428s ago: executing program 4 (id=313): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) 10.428544413s ago: executing program 3 (id=314): epoll_create1(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000040)={0xa, 0x4f24, 0xe799, @empty, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@tclass={{0xffc0, 0x29, 0x43, 0x3}}], 0x18}}], 0x1, 0x60004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x1000, 0x3, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 10.391840046s ago: executing program 4 (id=316): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) kexec_load(0x0, 0x0, 0x0, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9.309093785s ago: executing program 32 (id=285): socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @empty, 0x2}, 0x1c) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 9.291850856s ago: executing program 3 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2108, r4}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, 0x0) 8.378717644s ago: executing program 3 (id=319): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) sendfile(r0, r1, 0x0, 0x120fffe82) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffa) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x16d401a, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r2], 0x3, 0x6e1, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x42, 0x22) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 7.839917549s ago: executing program 0 (id=320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x14) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4], 0x4c}}, 0x0) 6.477554566s ago: executing program 0 (id=321): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.372746667s ago: executing program 1 (id=323): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000002380)={0x73622a85, 0x100}) 4.984676162s ago: executing program 1 (id=324): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 4.619906125s ago: executing program 3 (id=325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setresuid(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2108, r4}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000080)={"dd7ff7bc", 0xf09b, 0x6, 0x7, 0x10001, 0x4, "785144b84ef7ebe60630484ac7b0c8", "02004900", "cd5ca376", "b4538793", ["1aff03000000000000a7e33f", "000000000000000000f58704", "11430600000800", "ffffd39271af6300"]}) 3.856170874s ago: executing program 0 (id=326): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x4, 0x5, '\x00', [@generic={0xfe, 0x11, "f4a4a3142ee1e12b9826287997a6b33d89"}, @generic={0x80, 0x4, "09e12e5f"}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@generic={0xff}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}], 0xa8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xe98}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.507905976s ago: executing program 3 (id=327): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0xfffff109, 0x3132564e, 0x1, 0xc, [{0x27b, 0x1}, {0x7, 0xffffff65}, {0x3ff, 0x7f}, {0x7, 0xa}, {0x0, 0x10001}, {0x8da, 0x2}, {0xbbf3, 0x80000001}, {0x4b82}], 0xd2, 0x7, 0x9, 0x1, 0x2}}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x450000, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 2.589030555s ago: executing program 1 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2108, r4}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, 0x0) 1.896401039s ago: executing program 0 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042bbd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c00810005000100a000000006001a1f250000001c0011"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.691917532s ago: executing program 1 (id=330): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xfd, 0x12fa80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r3, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x16]}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.688298312s ago: executing program 3 (id=331): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x14) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x80480, 0xcd) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4], 0x4c}}, 0x0) 664.932088ms ago: executing program 0 (id=332): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000880)={{r2}, 0x0, 0x1c, @inherit={0x60, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000300000000000000da00000000000000ff0f0000000000000000000000000000ffffffff00000000040000000000000001000000000000000900000000000000000000000000008004000000000000000900000000000000ce6921ddae05cd5215"]}, @subvolid=0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1d, 0x2, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a3000000000e4000000160a0104000000000000001c020000020900020073797a30000000000900010073797a3000000000b800038008000240000000010800014000000000a4000380140001007767300000000000000000000000000014000100767863616e31000000000000000000001400010067726530000000000000000000000000140001006272696467655f736c6176655f3100001400010070696d36726567000000000000000000140001006970766c616e300000000000000000001400010000000000000000000000000000000000140001750824a00073797a6b616c6c657230000000000000140000001100010000000000000000000100000a"], 0x138}}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xc7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r8 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000002480)=@chain) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0x4, 0x69, 0xc9fa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 297.841301ms ago: executing program 4 (id=333): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$setperm(0x5, 0x0, 0x100) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x186, 0x904) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000001280)=0x10001) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0xd, {0xfffffff7, 0x1, 0xe, 0xfffffff8}, {0x5, 0x0, 0x4, 0xd50f}, {0x2c00, 0x3}}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=@newsa={0x184, 0x10, 0x713, 0x800, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@mcast1, 0x4, 0x0, 0x4e23, 0x80, 0x0, 0x0, 0x20, 0x1d}, {@in=@remote, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x4, 0x800, 0x8000000000000000}, {}, {0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x80}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 291.572952ms ago: executing program 1 (id=334): r0 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 0s ago: executing program 1 (id=335): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 52.710284][ T4173] cgroup: Unknown subsys name 'net' [ 52.805039][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.338987][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.838200][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 55.871954][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 55.908367][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 55.997253][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 56.010988][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 56.053131][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.060362][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.068545][ T4191] device bridge_slave_0 entered promiscuous mode [ 56.110408][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.117497][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.126150][ T4191] device bridge_slave_1 entered promiscuous mode [ 56.133485][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.140800][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.148536][ T4186] device bridge_slave_0 entered promiscuous mode [ 56.162043][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.169135][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.177153][ T4186] device bridge_slave_1 entered promiscuous mode [ 56.184259][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.191392][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.199023][ T4185] device bridge_slave_0 entered promiscuous mode [ 56.229364][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.236451][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.244964][ T4185] device bridge_slave_1 entered promiscuous mode [ 56.269604][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.300209][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.310953][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.351351][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.362148][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.371969][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.379040][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.386915][ T4193] device bridge_slave_0 entered promiscuous mode [ 56.397904][ T4191] team0: Port device team_slave_0 added [ 56.415089][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.422438][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.430455][ T4192] device bridge_slave_0 entered promiscuous mode [ 56.440052][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.455445][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.462755][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.470610][ T4193] device bridge_slave_1 entered promiscuous mode [ 56.478456][ T4191] team0: Port device team_slave_1 added [ 56.496473][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.504579][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.512640][ T4192] device bridge_slave_1 entered promiscuous mode [ 56.546102][ T4186] team0: Port device team_slave_0 added [ 56.562642][ T4185] team0: Port device team_slave_0 added [ 56.579934][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.590161][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.597154][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.623214][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.636165][ T4186] team0: Port device team_slave_1 added [ 56.643762][ T4185] team0: Port device team_slave_1 added [ 56.651343][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.662849][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.673305][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.682799][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.689872][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.715781][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.757339][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.764486][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.790664][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.830006][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.836979][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.863189][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.875471][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.882956][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.909063][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.930508][ T4192] team0: Port device team_slave_0 added [ 56.938135][ T4193] team0: Port device team_slave_0 added [ 56.947796][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.954868][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.980927][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.005574][ T4191] device hsr_slave_0 entered promiscuous mode [ 57.012310][ T4191] device hsr_slave_1 entered promiscuous mode [ 57.021882][ T4192] team0: Port device team_slave_1 added [ 57.028570][ T4193] team0: Port device team_slave_1 added [ 57.080151][ T4185] device hsr_slave_0 entered promiscuous mode [ 57.087168][ T4185] device hsr_slave_1 entered promiscuous mode [ 57.094349][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.102459][ T4185] Cannot create hsr debugfs directory [ 57.118202][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.125292][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.152114][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.169691][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.176773][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.203040][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.218674][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.225956][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.251985][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.270908][ T4186] device hsr_slave_0 entered promiscuous mode [ 57.277693][ T4186] device hsr_slave_1 entered promiscuous mode [ 57.284456][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.292147][ T4186] Cannot create hsr debugfs directory [ 57.311838][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.318798][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.345189][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.438267][ T4193] device hsr_slave_0 entered promiscuous mode [ 57.445293][ T4193] device hsr_slave_1 entered promiscuous mode [ 57.452875][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.461034][ T4193] Cannot create hsr debugfs directory [ 57.470196][ T4192] device hsr_slave_0 entered promiscuous mode [ 57.476936][ T4192] device hsr_slave_1 entered promiscuous mode [ 57.483819][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.491456][ T4192] Cannot create hsr debugfs directory [ 57.520465][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 57.527141][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 57.529419][ T4197] Bluetooth: hci0: command 0x0409 tx timeout [ 57.599533][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 57.599750][ T4197] Bluetooth: hci3: command 0x0409 tx timeout [ 57.785655][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.796527][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.806679][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.819119][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.881165][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.893488][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.910391][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.932393][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.993839][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.011338][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.029798][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.047726][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.057406][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.066773][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.081098][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.093968][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.107934][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.152457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.161887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.194068][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.214694][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.223711][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.253019][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.262631][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.272317][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.279535][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.288823][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.301039][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.309550][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.316602][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.324331][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.334168][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.349972][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.371715][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.383116][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.394154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.403015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.411001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.419693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.428027][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.435411][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.444314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.456126][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.468871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.479027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.489021][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.496128][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.513522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.525486][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.575905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.587233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.596256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.605929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.615187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.624848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.635454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.645249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.671507][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.686668][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.697541][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.712588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.721153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.730688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.739945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.748498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.757402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.765819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.774187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.783803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.794433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.827905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.836983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.847642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.859739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.871276][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.889418][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.922958][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.953290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.970041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.987534][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.013781][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.022816][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.033908][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.044189][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.051301][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.060432][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.069184][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.078001][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.085090][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.093555][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.102381][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.128504][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.137962][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.156678][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.168423][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.175549][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.187092][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.196005][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.204969][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.212062][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.224491][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.253594][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.263852][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.274522][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.284377][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.293408][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.301256][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.308877][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.318131][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.338258][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.348527][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.362883][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.372554][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.382173][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.389806][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.397198][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.406060][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.414911][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.424266][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.433261][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.441818][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.448952][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.457102][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.472742][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.502585][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.511471][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.522065][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.529146][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.536823][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.546033][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.554533][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.566015][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.574889][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.583460][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.592776][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.600832][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 59.602473][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.615385][ T2372] Bluetooth: hci0: command 0x041b tx timeout [ 59.621919][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.621991][ T2372] Bluetooth: hci1: command 0x041b tx timeout [ 59.635425][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.645403][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.680343][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 59.686691][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.694215][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 59.701918][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.713402][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.722952][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.732255][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.741476][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.750826][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.759087][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.768392][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.777164][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.791857][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.821547][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.834228][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.845027][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.854446][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.867926][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.885856][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.905323][ T4191] device veth0_vlan entered promiscuous mode [ 59.919092][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.928943][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.937796][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.947879][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.956220][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.964372][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.983568][ T4186] device veth0_vlan entered promiscuous mode [ 59.994727][ T4191] device veth1_vlan entered promiscuous mode [ 60.034635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.049994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.083751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.100275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.112835][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.123423][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.139022][ T4191] device veth0_macvtap entered promiscuous mode [ 60.154458][ T4186] device veth1_vlan entered promiscuous mode [ 60.168671][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.178859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.194389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.205084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.218941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.232141][ T4191] device veth1_macvtap entered promiscuous mode [ 60.266798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.282901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.291216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.298586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.315929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.324425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.342587][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.364698][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.372185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.381137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.390435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.398982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.413452][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.426254][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.443071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.455770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.474373][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.493139][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.507287][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.517046][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.531229][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.540050][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.579997][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.588595][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.612724][ T4192] device veth0_vlan entered promiscuous mode [ 60.636886][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.648900][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.658654][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.667788][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.679896][ T4186] device veth0_macvtap entered promiscuous mode [ 60.690016][ T4186] device veth1_macvtap entered promiscuous mode [ 60.724791][ T4185] device veth0_vlan entered promiscuous mode [ 60.750631][ T4192] device veth1_vlan entered promiscuous mode [ 60.757510][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.767151][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.783960][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.793109][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.802308][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.811527][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.819487][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.842463][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.856006][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.867805][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.886391][ T4185] device veth1_vlan entered promiscuous mode [ 60.909714][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.917855][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.926431][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.936402][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.948166][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.959203][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.973884][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.004819][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.014204][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.026182][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.035463][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.048377][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.058239][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.084107][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.093202][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.106114][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.116609][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.133440][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.138980][ T4185] device veth0_macvtap entered promiscuous mode [ 61.142235][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.174515][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.184282][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.195898][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.205403][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.217354][ T4185] device veth1_macvtap entered promiscuous mode [ 61.230543][ T4192] device veth0_macvtap entered promiscuous mode [ 61.243822][ T4192] device veth1_macvtap entered promiscuous mode [ 61.277929][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.290041][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.300256][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.311428][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.322939][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.340462][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.351603][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.363063][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.373812][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.384772][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.401593][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.414301][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.422376][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.432097][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.441942][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.451177][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.459683][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.467871][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.476785][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.485871][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.495875][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.511996][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.518927][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.527166][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.530658][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.545009][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.553778][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.565626][ T4193] device veth0_vlan entered promiscuous mode [ 61.577791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.593673][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.608399][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.620699][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.631270][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.641228][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.651718][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.662846][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.680250][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 61.686580][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.689841][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 61.699320][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 61.708249][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.725151][ T4193] device veth1_vlan entered promiscuous mode [ 61.738156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.750160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.759001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.768222][ T2372] Bluetooth: hci2: command 0x040f tx timeout [ 61.775471][ T2372] Bluetooth: hci3: command 0x040f tx timeout [ 61.790267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.800398][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.810909][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.821317][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.832687][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.842942][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.853486][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.864752][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.881748][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.890815][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.899979][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.908672][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.967700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.984891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.998150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.049190][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.080476][ T4193] device veth0_macvtap entered promiscuous mode [ 62.093296][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.110612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.129067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.151216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.188564][ T4193] device veth1_macvtap entered promiscuous mode [ 62.230169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.238715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.321173][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.334356][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.357284][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.381994][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.403952][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.419861][ T4298] loop3: detected capacity change from 0 to 1024 [ 62.426509][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.451251][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.463333][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.485822][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.500158][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.545896][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.594858][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.614344][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.626965][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.644452][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.655926][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.673339][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.685929][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.702850][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.734493][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.767521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.767880][ T4302] loop2: detected capacity change from 0 to 128 [ 62.788886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.799473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.812055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.824175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.092809][ T4302] FAT-fs (loop2): Directory bread(block 414) failed [ 63.375811][ T4302] FAT-fs (loop2): Directory bread(block 415) failed [ 63.401990][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.418593][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.428048][ T4302] FAT-fs (loop2): Directory bread(block 416) failed [ 63.477126][ T4302] FAT-fs (loop2): Directory bread(block 417) failed [ 63.493878][ T4302] FAT-fs (loop2): Directory bread(block 418) failed [ 63.507595][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.519606][ T4302] FAT-fs (loop2): Directory bread(block 419) failed [ 63.526266][ T4302] FAT-fs (loop2): Directory bread(block 420) failed [ 63.533484][ T4302] FAT-fs (loop2): Directory bread(block 421) failed [ 63.539935][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.549646][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.558943][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.568161][ T4302] FAT-fs (loop2): Directory bread(block 414) failed [ 63.575284][ T4302] FAT-fs (loop2): Directory bread(block 415) failed [ 63.590111][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.607643][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.617823][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.658343][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.756775][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.759764][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 63.766755][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 63.797320][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 63.797347][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.839888][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 63.846840][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 63.901870][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.024715][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.153646][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.169906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 64.272352][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 64.302958][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.374741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 64.886569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 64.896616][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 64.937629][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 64.946720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 64.955768][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 64.964906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 64.973961][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 65.873240][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.897700][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.901732][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.908711][ T4326] bond0: (slave rose0): Enslaving as an active interface with an up link [ 66.000533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 66.026268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.383690][ T4330] loop2: detected capacity change from 0 to 512 [ 66.396507][ T4310] loop3: detected capacity change from 0 to 32768 [ 66.584255][ T4342] loop4: detected capacity change from 0 to 1024 [ 66.617564][ T4310] XFS: noattr2 mount option is deprecated. [ 66.743537][ T4310] XFS: attr2 mount option is deprecated. [ 67.012293][ T4310] XFS (loop3): attr2 and noattr2 cannot both be specified. [ 67.020716][ T4330] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.11: iget: bad extra_isize 50264 (inode size 256) [ 67.171223][ T4330] EXT4-fs (loop2): Remounting filesystem read-only [ 67.178001][ T4330] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.11: couldn't read orphan inode 15 (err -117) [ 67.217845][ T4330] EXT4-fs (loop2): Remounting filesystem read-only [ 67.227752][ T4330] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,noauto_da_alloc,nodiscard,barrier=0x0000000000000006,errors=continue,errors=continue,errors=remount-ro,inode_readahead_blks=0x0000000000000004,i_version,norecovery,stripe=0x0000000000000005,journal_ioprio=0x00000000000. Quota mode: none. [ 68.887842][ T26] audit: type=1326 audit(1770882264.674:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501ac2f79 code=0x7ffc0000 [ 68.956318][ T4384] loop1: detected capacity change from 0 to 128 [ 68.964642][ T4380] loop4: detected capacity change from 0 to 4096 [ 69.070619][ T4384] ======================================================= [ 69.070619][ T4384] WARNING: The mand mount option has been deprecated and [ 69.070619][ T4384] and is ignored by this kernel. Remove the mand [ 69.070619][ T4384] option from the mount to silence this warning. [ 69.070619][ T4384] ======================================================= [ 69.107140][ T4380] ntfs3: Unknown parameter 'hide_dot_files' [ 69.130860][ T26] audit: type=1326 audit(1770882264.674:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501ac2f79 code=0x7ffc0000 [ 69.153044][ T26] audit: type=1326 audit(1770882264.684:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501ac2f79 code=0x7ffc0000 [ 69.181402][ T26] audit: type=1326 audit(1770882264.684:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501ac2f79 code=0x7ffc0000 [ 69.878659][ T4384] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 69.951020][ T4384] FAT-fs (loop1): Filesystem has been set read-only [ 70.034642][ T26] audit: type=1326 audit(1770882264.684:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1501ac2f79 code=0x7ffc0000 [ 71.309230][ T4398] mmap: syz.0.25 (4398) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 71.328280][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.353888][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.709355][ T26] audit: type=1326 audit(1770882264.684:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1501ac2ce2 code=0x7ffc0000 [ 71.857685][ T26] audit: type=1326 audit(1770882264.724:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1501a8384e code=0x7ffc0000 [ 71.886037][ T26] audit: type=1326 audit(1770882264.754:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1501ac2da7 code=0x7ffc0000 [ 71.910074][ T4404] loop0: detected capacity change from 0 to 1024 [ 72.188764][ T26] audit: type=1326 audit(1770882264.754:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1501a8384e code=0x7ffc0000 [ 72.277219][ T26] audit: type=1326 audit(1770882264.754:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4379 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1501ac2c0b code=0x7ffc0000 [ 74.432672][ T4242] Bluetooth: hci0: command 0x0406 tx timeout [ 76.112970][ T4469] loop3: detected capacity change from 0 to 1024 [ 76.435030][ T1326] cfg80211: failed to load regulatory.db [ 76.447047][ T4473] loop0: detected capacity change from 0 to 1024 [ 80.945072][ T4497] input: syz1 as /devices/virtual/input/input5 [ 81.253267][ T4518] xt_hashlimit: max too large, truncated to 1048576 [ 81.262514][ T4518] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 82.109806][ T1326] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 82.231404][ T4525] loop0: detected capacity change from 0 to 2048 [ 82.702989][ T4535] overlayfs: missing 'lowerdir' [ 83.729578][ T1326] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 83.764604][ T1326] usb 2-1: config 0 has no interface number 0 [ 83.786809][ T4525] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 83.811065][ T1326] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 84.039558][ T1326] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 84.086307][ T1326] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 84.126705][ T1326] usb 2-1: Product: syz [ 84.211444][ T1326] usb 2-1: config 0 descriptor?? [ 84.298855][ T1326] usb 2-1: can't set config #0, error -71 [ 84.369610][ T1326] usb 2-1: USB disconnect, device number 2 [ 84.509293][ C1] sched: RT throttling activated [ 84.869599][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 84.869616][ T26] audit: type=1800 audit(1770882280.634:40): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.58" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 85.163891][ T4554] netlink: 48 bytes leftover after parsing attributes in process `syz.4.62'. [ 85.832423][ T4560] loop4: detected capacity change from 0 to 1024 [ 86.124329][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.969489][ T1111] usb 4-1: Using ep0 maxpacket: 8 [ 88.099832][ T1111] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 88.269898][ T1111] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 88.281103][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.291510][ T1111] usb 4-1: Product: syz [ 88.296064][ T1111] usb 4-1: Manufacturer: syz [ 88.309770][ T1111] usb 4-1: SerialNumber: syz [ 88.318421][ T1111] usb 4-1: config 0 descriptor?? [ 88.362963][ T1111] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 88.605192][ T1111] gspca_zc3xx: reg_w_i err -71 [ 89.260115][ T1111] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 89.266593][ T1111] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 89.332602][ T4593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 89.346287][ T4592] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.380194][ T4593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 89.579832][ T1111] usb 4-1: USB disconnect, device number 2 [ 91.218664][ T4613] loop4: detected capacity change from 0 to 1024 [ 91.277179][ T4609] loop3: detected capacity change from 0 to 4096 [ 91.345744][ T4609] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 91.518221][ T2372] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.699372][ T4242] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.739400][ T26] audit: type=1800 audit(1770882287.524:41): pid=4609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.79" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 92.292890][ T4186] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 92.334577][ T4186] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 92.349693][ T4242] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 92.357852][ T4242] usb 1-1: config 0 has no interface number 0 [ 92.389704][ T4186] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 92.406212][ T4242] usb 1-1: config 0 interface 41 has no altsetting 0 [ 92.689434][ T2372] usb 2-1: Using ep0 maxpacket: 32 [ 93.649576][ T2372] usb 2-1: config index 0 descriptor too short (expected 3364, got 36) [ 93.686772][ T2372] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 93.738493][ T2372] usb 2-1: config 0 has no interface number 0 [ 93.929580][ T2372] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 93.952181][ T2372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.995507][ T2372] usb 2-1: Product: syz [ 94.018952][ T2372] usb 2-1: Manufacturer: syz [ 94.043489][ T2372] usb 2-1: SerialNumber: syz [ 94.140804][ T2372] usb 2-1: config 0 descriptor?? [ 94.180711][ T2372] smsc95xx v2.0.0 [ 94.360308][ T2372] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 94.421970][ T2372] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 94.517814][ T2372] usb 2-1: USB disconnect, device number 3 [ 96.361412][ T4242] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 96.373460][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.382297][ T4242] usb 1-1: Product: syz [ 96.386576][ T4242] usb 1-1: Manufacturer: syz [ 96.394019][ T4242] usb 1-1: config 0 descriptor?? [ 96.419550][ T4242] usb 1-1: can't set config #0, error -71 [ 96.454177][ T4242] usb 1-1: USB disconnect, device number 2 [ 98.652391][ T4681] loop1: detected capacity change from 0 to 512 [ 98.737634][ T4681] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 98.793096][ T4681] EXT4-fs (loop1): inline encryption not supported [ 98.910253][ T4681] EXT4-fs (loop1): Test dummy encryption mode enabled [ 98.942671][ T4681] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 99.089335][ T4681] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.165360][ T4681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.391587][ T4681] EXT4-fs (loop1): 1 truncate cleaned up [ 99.398862][ T4681] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 99.494202][ T4669] loop0: detected capacity change from 0 to 32768 [ 99.892074][ T4705] Zero length message leads to an empty skb [ 100.475863][ T4669] XFS (loop0): Mounting V5 Filesystem [ 100.592395][ T4669] XFS (loop0): Ending clean mount [ 100.671284][ T4669] XFS (loop0): Quotacheck needed: Please wait. [ 100.697721][ T4713] loop3: detected capacity change from 0 to 64 [ 100.728758][ T4714] loop2: detected capacity change from 0 to 8 [ 100.882048][ T4694] loop4: detected capacity change from 0 to 40427 [ 100.898123][ T4669] XFS (loop0): Quotacheck: Done. [ 101.002042][ T4694] F2FS-fs (loop4): invalid crc value [ 101.038895][ T4694] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 101.107439][ T4720] loop3: detected capacity change from 0 to 1024 [ 101.186701][ T4723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.103'. [ 101.225598][ T4192] XFS (loop0): Unmounting Filesystem [ 101.412217][ T4694] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 102.182705][ T4694] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 102.611004][ T4733] loop3: detected capacity change from 0 to 2048 [ 102.757848][ T4733] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 102.803542][ T4733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.561364][ T4748] 8021q: VLANs not supported on hsr0 [ 105.660035][ T4748] syz.4.109 uses obsolete (PF_INET,SOCK_PACKET) [ 107.437195][ T4765] loop4: detected capacity change from 0 to 1024 [ 115.533123][ T4822] loop2: detected capacity change from 0 to 1024 [ 115.674635][ T4824] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 118.214151][ T4845] overlayfs: missing 'lowerdir' [ 120.357755][ T4853] loop0: detected capacity change from 0 to 2048 [ 120.533173][ T4853] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 126.228263][ T4907] overlayfs: missing 'lowerdir' [ 127.553329][ T4904] loop2: detected capacity change from 0 to 2048 [ 128.301413][ T4909] infiniband syz0: set active [ 128.306384][ T4909] infiniband syz0: added bond_slave_1 [ 128.444991][ T4909] RDS/IB: syz0: added [ 128.450050][ T4909] smc: adding ib device syz0 with port count 1 [ 128.456384][ T4909] smc: ib device syz0 port 1 has pnetid [ 128.671868][ T4904] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.730980][ T4904] NILFS (loop2): error -4 creating segctord thread [ 132.130325][ T4937] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 132.139800][ T4937] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 132.149422][ T4937] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.208445][ T26] audit: type=1800 audit(1770882327.924:42): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.160" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 132.444782][ T4943] loop1: detected capacity change from 0 to 256 [ 133.239956][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.246296][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.354872][ T4943] FAT-fs (loop1): Directory bread(block 64) failed [ 133.362094][ T4943] FAT-fs (loop1): Directory bread(block 65) failed [ 133.368726][ T4943] FAT-fs (loop1): Directory bread(block 66) failed [ 133.375355][ T4943] FAT-fs (loop1): Directory bread(block 67) failed [ 133.382072][ T4943] FAT-fs (loop1): Directory bread(block 68) failed [ 133.388634][ T4943] FAT-fs (loop1): Directory bread(block 69) failed [ 133.395599][ T4943] FAT-fs (loop1): Directory bread(block 70) failed [ 133.402160][ T4943] FAT-fs (loop1): Directory bread(block 71) failed [ 133.408711][ T4943] FAT-fs (loop1): Directory bread(block 72) failed [ 133.415323][ T4943] FAT-fs (loop1): Directory bread(block 73) failed [ 133.732984][ T4953] loop3: detected capacity change from 0 to 512 [ 133.790297][ T4954] loop1: detected capacity change from 0 to 64 [ 133.957809][ T4953] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 134.048561][ T4954] attempt to access beyond end of device [ 134.048561][ T4954] loop1: rw=0, want=1026, limit=64 [ 134.099760][ T4953] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.131608][ T4954] Buffer I/O error on dev loop1, logical block 512, async page read [ 134.187803][ T4954] attempt to access beyond end of device [ 134.187803][ T4954] loop1: rw=0, want=113154, limit=64 [ 134.275391][ T4954] Buffer I/O error on dev loop1, logical block 56576, async page read [ 135.079471][ T4962] EXT4-fs (loop3): shut down requested (2) [ 137.276115][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 138.276029][ T4982] loop3: detected capacity change from 0 to 1024 [ 138.363038][ T4982] EXT4-fs (loop3): Ignoring removed orlov option [ 138.379555][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 139.567913][ T4982] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 140.932943][ T5001] EXT4-fs error (device loop3): __ext4_new_inode:1286: comm syz.3.173: failed to insert inode 15: doubly allocated? [ 141.205264][ T5001] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 141.788348][ T5001] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 142.584985][ T5001] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 145.997673][ T5029] loop3: detected capacity change from 0 to 512 [ 146.904553][ T5029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.140766][ T5029] EXT4-fs (loop3): 1 truncate cleaned up [ 147.146461][ T5029] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,nombcache,,errors=continue. Quota mode: none. [ 148.153929][ T5044] loop0: detected capacity change from 0 to 512 [ 148.207849][ T5044] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 148.257707][ T5044] EXT4-fs (loop0): inline encryption not supported [ 148.269605][ T5044] EXT4-fs (loop0): Test dummy encryption mode enabled [ 148.276520][ T5044] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 148.319575][ T5044] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.320594][ T5049] loop1: detected capacity change from 0 to 128 [ 148.419890][ T5051] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 148.478187][ T5044] EXT4-fs (loop0): 1 truncate cleaned up [ 148.489395][ T5044] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 150.473132][ T5072] loop1: detected capacity change from 0 to 512 [ 151.409925][ T5072] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 151.491679][ T5072] FAT-fs (loop1): Filesystem has been set read-only [ 153.661961][ T5099] loop3: detected capacity change from 0 to 512 [ 153.874322][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 153.889446][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.603345][ T5099] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 154.657890][ T5099] EXT4-fs (loop3): inline encryption not supported [ 154.679612][ T5099] EXT4-fs (loop3): Test dummy encryption mode enabled [ 154.686631][ T5099] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 154.776237][ T5099] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.816926][ T5102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.864876][ T5099] EXT4-fs (loop3): 1 truncate cleaned up [ 154.875129][ T5099] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 154.942602][ T5105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.953795][ T5110] loop2: detected capacity change from 0 to 512 [ 155.093336][ T5110] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 155.346881][ T5110] EXT4-fs (loop2): inline encryption not supported [ 155.582558][ T5110] EXT4-fs (loop2): Test dummy encryption mode enabled [ 155.590668][ T5110] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 155.597817][ T5110] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.666710][ T5110] EXT4-fs (loop2): 1 truncate cleaned up [ 155.690220][ T5110] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 155.719492][ T5116] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 155.731670][ T5105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.434412][ T5105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.606893][ T5105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.400477][ T5143] 9pnet_virtio: no channels available for device syz [ 158.864599][ T5143] overlayfs: unrecognized mount option "/" or missing value [ 161.062689][ T5156] loop3: detected capacity change from 0 to 512 [ 161.272662][ T5105] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.296928][ T5156] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.315154][ T5158] loop0: detected capacity change from 0 to 512 [ 161.542809][ T5158] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 161.845416][ T5156] EXT4-fs (loop3): 1 truncate cleaned up [ 161.889534][ T5105] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.897898][ T5156] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 161.946015][ T5158] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 161.989663][ T5158] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 162.000975][ T5105] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.045203][ T5158] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 162.097930][ T5105] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.205018][ T5169] device syzkaller0 entered promiscuous mode [ 162.267163][ T5175] loop2: detected capacity change from 0 to 512 [ 162.441237][ T5175] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 162.448433][ T5175] EXT4-fs (loop2): inline encryption not supported [ 162.500301][ T5175] EXT4-fs (loop2): Test dummy encryption mode enabled [ 162.632941][ T5175] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 162.673113][ T5175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.062321][ T5175] EXT4-fs (loop2): 1 truncate cleaned up [ 163.068039][ T5175] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 163.116689][ T5185] loop0: detected capacity change from 0 to 512 [ 163.345817][ T5185] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 163.385553][ T5185] EXT4-fs (loop0): inline encryption not supported [ 163.669890][ T5185] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.676720][ T5185] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 163.900260][ T5185] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.174864][ T5185] EXT4-fs (loop0): 1 truncate cleaned up [ 164.180752][ T5185] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 164.209459][ T5194] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 164.719463][ T2372] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.009465][ T2372] usb 2-1: Using ep0 maxpacket: 32 [ 165.143027][ T2372] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 165.163165][ T2372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.361169][ T2372] usb 2-1: config 0 descriptor?? [ 165.401998][ T2372] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 166.251493][ T5227] loop2: detected capacity change from 0 to 2048 [ 166.399541][ T5234] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.571552][ T2372] gspca_vc032x: reg_w err -71 [ 166.599696][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.625788][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.645237][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.651533][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.687757][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.690269][ T5241] device syzkaller0 entered promiscuous mode [ 166.708041][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.724202][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.744475][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.774885][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.795174][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.815854][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.835689][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.857882][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.885040][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.891141][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.916869][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.939010][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.959505][ T2372] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.976717][ T2372] gspca_vc032x: Unknown sensor... [ 166.984355][ T2372] vc032x: probe of 2-1:0.0 failed with error -22 [ 167.004101][ T2372] usb 2-1: USB disconnect, device number 4 [ 167.303946][ T5229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 167.818312][ T5229] device syz_tun entered promiscuous mode [ 171.006590][ T5266] loop3: detected capacity change from 0 to 512 [ 171.152914][ T5266] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 171.179365][ T5266] EXT4-fs (loop3): inline encryption not supported [ 171.186072][ T5266] EXT4-fs (loop3): Test dummy encryption mode enabled [ 171.253454][ T5277] overlayfs: failed to resolve './file1': -2 [ 171.501714][ T5266] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 171.509020][ T5266] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.522777][ T5279] netlink: 'syz.1.237': attribute type 12 has an invalid length. [ 171.559546][ T5279] netlink: 'syz.1.237': attribute type 29 has an invalid length. [ 171.567322][ T5279] netlink: 148 bytes leftover after parsing attributes in process `syz.1.237'. [ 171.657182][ T5266] EXT4-fs (loop3): 1 truncate cleaned up [ 171.676168][ T5266] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 171.700059][ T5279] netlink: 51 bytes leftover after parsing attributes in process `syz.1.237'. [ 174.841894][ T5308] device syzkaller0 entered promiscuous mode [ 175.688595][ T5331] overlayfs: failed to resolve './file1': -2 [ 176.053259][ T5336] loop2: detected capacity change from 0 to 512 [ 176.191242][ T5340] xt_hashlimit: max too large, truncated to 1048576 [ 176.198669][ T5340] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 176.420127][ T5336] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 176.525885][ T5336] EXT4-fs (loop2): inline encryption not supported [ 176.688880][ T5336] EXT4-fs (loop2): Test dummy encryption mode enabled [ 176.726144][ T5336] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 176.868542][ T5336] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 176.925567][ T5336] EXT4-fs (loop2): 1 truncate cleaned up [ 176.932146][ T5336] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 179.376050][ T5368] device syzkaller0 entered promiscuous mode [ 180.948955][ T5386] overlayfs: failed to resolve './file0': -2 [ 180.958763][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 181.199019][ T2372] Bluetooth: hci2: command 0x0406 tx timeout [ 181.325294][ T2372] Bluetooth: hci3: command 0x0406 tx timeout [ 181.673791][ T5383] loop4: detected capacity change from 0 to 1024 [ 183.618377][ T5415] comedi: No check for data length of config insn id 109 is implemented [ 183.626878][ T5415] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 183.636276][ T5415] comedi: Assuming n=15 is correct [ 184.260972][ T5420] device syzkaller0 entered promiscuous mode [ 184.463372][ T2372] Bluetooth: hci0: command 0x0406 tx timeout [ 185.368070][ T5435] overlayfs: failed to resolve './file0': -2 [ 188.419353][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 189.467496][ T5482] loop4: detected capacity change from 0 to 512 [ 189.468844][ T5466] device syzkaller0 entered promiscuous mode [ 189.669986][ T5482] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 189.677415][ T5482] EXT4-fs (loop4): inline encryption not supported [ 189.684591][ T5482] EXT4-fs (loop4): Test dummy encryption mode enabled [ 189.691763][ T5482] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 189.699026][ T5482] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.927786][ T5482] EXT4-fs (loop4): 1 truncate cleaned up [ 189.935839][ T5482] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 191.485881][ T5500] overlayfs: failed to resolve './file0': -2 [ 192.607011][ T5508] loop5: detected capacity change from 0 to 7 [ 192.674002][ T1276] loop: Write error at byte offset 1, length 3584. [ 192.687086][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 192.698349][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 194.164068][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.172102][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.371800][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 197.025225][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.054994][ T7] usb 3-1: can't set config #1, error -32 [ 197.281130][ T5557] loop0: detected capacity change from 0 to 512 [ 197.385332][ T5557] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 197.413414][ T5557] EXT4-fs (loop0): inline encryption not supported [ 197.420224][ T5557] EXT4-fs (loop0): Test dummy encryption mode enabled [ 197.429486][ T5560] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 197.440215][ T5557] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 197.450275][ T5557] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.499114][ T5557] EXT4-fs (loop0): 1 truncate cleaned up [ 197.505118][ T5557] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 201.247094][ T5590] loop0: detected capacity change from 0 to 512 [ 201.402949][ T5590] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.226156][ T5590] EXT4-fs (loop0): 1 truncate cleaned up [ 202.237790][ T5590] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,nombcache,,errors=continue. Quota mode: none. [ 202.259273][ T4327] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.909772][ T4327] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 203.087011][ T4327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.210249][ T4327] usb 2-1: config 0 descriptor?? [ 203.470265][ T5604] process 'syz.4.316' launched '/dev/fd/8' with NULL argv: empty string added [ 204.370179][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 204.562348][ T5619] device syz_tun entered promiscuous mode [ 204.579407][ T4327] pegasus 2-1:0.0: can't reset MAC [ 204.585760][ T4327] pegasus: probe of 2-1:0.0 failed with error -5 [ 204.798654][ T4327] usb 2-1: USB disconnect, device number 5 [ 205.351558][ T5626] loop0: detected capacity change from 0 to 512 [ 205.406669][ T5626] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 205.420565][ T5608] loop3: detected capacity change from 0 to 32768 [ 205.575583][ T5626] EXT4-fs (loop0): inline encryption not supported [ 205.667439][ T5608] (syz.3.319,5608,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.745638][ T5626] EXT4-fs (loop0): Test dummy encryption mode enabled [ 205.861823][ T5626] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 205.932378][ T5608] (syz.3.319,5608,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.981012][ T5626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.128238][ T5608] JBD2: Ignoring recovery information on journal [ 206.211911][ T4314] Bluetooth: hci5: command 0x0409 tx timeout [ 206.223219][ T4290] usb 3-1: USB disconnect, device number 2 [ 206.293814][ T5626] EXT4-fs (loop0): 1 truncate cleaned up [ 206.304213][ T5626] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 206.344463][ T5608] JBD2: recovery failed [ 206.348745][ T5608] (syz.3.319,5608,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 206.358625][ T5608] (syz.3.319,5608,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 206.395522][ T5608] (syz.3.319,5608,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 206.405699][ T5608] (syz.3.319,5608,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 206.437471][ T5608] (syz.3.319,5608,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 207.122372][ T240] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.066940][ T5613] chnl_net:caif_netlink_parms(): no params data found [ 208.385386][ T4197] Bluetooth: hci5: command 0x041b tx timeout [ 208.424803][ T240] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.640902][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.667051][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.690280][ T5613] device bridge_slave_0 entered promiscuous mode [ 209.738100][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.758359][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.809307][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 209.847223][ T5613] device bridge_slave_1 entered promiscuous mode [ 210.043345][ T5683] loop3: detected capacity change from 0 to 7 [ 210.059821][ T5683] Dev loop3: unable to read RDB block 7 [ 210.065797][ T5683] loop3: unable to read partition table [ 210.072222][ T5683] loop3: partition table beyond EOD, truncated [ 210.078498][ T5683] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 210.331403][ T240] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.705890][ T4197] Bluetooth: hci5: command 0x040f tx timeout [ 210.880289][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.226962][ T240] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.354237][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.597799][ T5613] team0: Port device team_slave_0 added [ 211.642694][ T5698] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 211.651824][ T5698] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5698, name: syz.4.333 [ 211.660864][ T5698] 7 locks held by syz.4.333/5698: [ 211.665902][ T5698] #0: ffffffff8d4462e8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 211.675314][ T5698] #1: ffffffff8d4461a8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 211.685837][ T5698] #2: ffff888061bd8698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 211.696620][ T5698] #3: ffffffff8d520188 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 211.707152][ T5698] #4: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 211.716552][ T5698] #5: ffffc90001802a40 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 211.726657][ T5698] #6: ffff88807e570120 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 211.737363][ T5698] Preemption disabled at: [ 211.737377][ T5698] [<0000000000000000>] 0x0 [ 211.746305][ T5698] CPU: 0 PID: 5698 Comm: syz.4.333 Not tainted syzkaller #0 [ 211.753604][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 211.763672][ T5698] Call Trace: [ 211.766962][ T5698] [ 211.769911][ T5698] dump_stack_lvl+0x188/0x250 [ 211.774615][ T5698] ? show_regs_print_info+0x20/0x20 [ 211.779833][ T5698] ? load_image+0x400/0x400 [ 211.784356][ T5698] ? __local_bh_enable_ip+0x136/0x1c0 [ 211.789760][ T5698] ___might_sleep+0x493/0x610 [ 211.794464][ T5698] ? __might_sleep+0xf0/0xf0 [ 211.799070][ T5698] ? nla_put+0x130/0x1e0 [ 211.803428][ T5698] ? read_lock_is_recursive+0x10/0x10 [ 211.808821][ T5698] ? sock_diag_put_meminfo+0xc6/0x120 [ 211.814210][ T5698] ? sock_diag_save_cookie+0xc0/0xc0 [ 211.819517][ T5698] __lock_sock_fast+0x2f/0xe0 [ 211.824211][ T5698] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 211.829435][ T5698] mptcp_diag_get_info+0x1fe/0x9e0 [ 211.834571][ T5698] inet_sk_diag_fill+0xf5e/0x1ca0 [ 211.839632][ T5698] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 211.845373][ T5698] ? do_raw_spin_lock+0x128/0x2f0 [ 211.850434][ T5698] ? __rwlock_init+0x140/0x140 [ 211.855220][ T5698] ? inet_diag_bc_sk+0x18b/0x1120 [ 211.860267][ T5698] ? mptcp_diag_dump+0xfd7/0x12b0 [ 211.865311][ T5698] mptcp_diag_dump+0xce6/0x12b0 [ 211.870197][ T5698] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 211.876819][ T5698] __inet_diag_dump+0x1f6/0x380 [ 211.881696][ T5698] inet_diag_dump_compat+0x17e/0x220 [ 211.887000][ T5698] ? inet_diag_dump_start_compat+0x20/0x20 [ 211.892844][ T5698] ? __alloc_skb+0x473/0x750 [ 211.897463][ T5698] netlink_dump+0x694/0xcf0 [ 211.901998][ T5698] ? netlink_lookup+0x1d0/0x1d0 [ 211.906871][ T5698] ? __inet_diag_dump_start+0x805/0x970 [ 211.912622][ T5698] __netlink_dump_start+0x523/0x700 [ 211.917857][ T5698] inet_diag_rcv_msg_compat+0x207/0x420 [ 211.923430][ T5698] ? inet_diag_unregister+0xb0/0xb0 [ 211.928648][ T5698] ? __mutex_trylock_common+0x155/0x260 [ 211.934218][ T5698] ? mutex_lock_io_nested+0x60/0x60 [ 211.939440][ T5698] ? __inet_diag_dump+0x380/0x380 [ 211.944489][ T5698] ? inet_diag_dump_start_compat+0x20/0x20 [ 211.950313][ T5698] ? inet_diag_dump+0x50/0x50 [ 211.955034][ T5698] ? inet_diag_unregister+0xb0/0xb0 [ 211.960254][ T5698] sock_diag_rcv_msg+0x164/0x3e0 [ 211.965228][ T5698] netlink_rcv_skb+0x1f5/0x440 [ 211.970013][ T5698] ? sock_diag_bind+0xa0/0xa0 [ 211.974730][ T5698] ? netlink_ack+0xb50/0xb50 [ 211.979354][ T5698] ? __lock_acquire+0x7d10/0x7d10 [ 211.984452][ T5698] sock_diag_rcv+0x26/0x40 [ 211.988891][ T5698] netlink_unicast+0x774/0x920 [ 211.993663][ T5698] netlink_sendmsg+0x8ba/0xbe0 [ 211.998547][ T5698] ? netlink_getsockopt+0x570/0x570 [ 212.003752][ T5698] ? aa_sock_msg_perm+0x94/0x150 [ 212.008693][ T5698] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 212.013974][ T5698] ? security_socket_sendmsg+0x7c/0xa0 [ 212.019457][ T5698] ? netlink_getsockopt+0x570/0x570 [ 212.024698][ T5698] ____sys_sendmsg+0x5b7/0x8f0 [ 212.029471][ T5698] ? __sys_sendmsg_sock+0x30/0x30 [ 212.034492][ T5698] ? import_iovec+0x6f/0xa0 [ 212.038991][ T5698] ___sys_sendmsg+0x236/0x2e0 [ 212.043664][ T5698] ? __sys_sendmsg+0x2a0/0x2a0 [ 212.048443][ T5698] __se_sys_sendmsg+0x1af/0x290 [ 212.053286][ T5698] ? __x64_sys_sendmsg+0x80/0x80 [ 212.058216][ T5698] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 212.064193][ T5698] ? lockdep_hardirqs_on+0x94/0x140 [ 212.069390][ T5698] do_syscall_64+0x4c/0xa0 [ 212.073797][ T5698] ? clear_bhb_loop+0x30/0x80 [ 212.078460][ T5698] ? clear_bhb_loop+0x30/0x80 [ 212.083120][ T5698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.089003][ T5698] RIP: 0033:0x7f1501ac2f79 [ 212.093412][ T5698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.113008][ T5698] RSP: 002b:00007f14ffcdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.121411][ T5698] RAX: ffffffffffffffda RBX: 00007f1501d3d180 RCX: 00007f1501ac2f79 [ 212.129465][ T5698] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 212.137725][ T5698] RBP: 00007f1501b597e0 R08: 0000000000000000 R09: 0000000000000000 [ 212.145724][ T5698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.153691][ T5698] R13: 00007f1501d3d218 R14: 00007f1501d3d180 R15: 00007ffcd2571ce8 [ 212.161677][ T5698] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 212.387051][ T5613] team0: Port device team_slave_1 added [ 212.792619][ T4193] device syz_tun left promiscuous mode [ 213.575691][ T5693] device syz_tun left promiscuous mode [ 214.404902][ T240] device hsr_slave_0 left promiscuous mode [ 214.421478][ T240] device hsr_slave_1 left promiscuous mode [ 214.428316][ T240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.442618][ T240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.456123][ T240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.467458][ T240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.480044][ T240] device bridge_slave_1 left promiscuous mode [ 214.488079][ T240] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.526985][ T240] device bridge_slave_0 left promiscuous mode [ 214.533379][ T240] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.578410][ T240] device veth1_macvtap left promiscuous mode [ 214.592633][ T240] device veth0_macvtap left promiscuous mode [ 214.605040][ T240] device veth1_vlan left promiscuous mode [ 214.614212][ T240] device veth0_vlan left promiscuous mode [ 214.795221][ T240] team0 (unregistering): Port device team_slave_1 removed [ 214.809805][ T240] team0 (unregistering): Port device team_slave_0 removed [ 214.824454][ T240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.844811][ T240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.910023][ T240] bond0 (unregistering): Released all slaves [ 216.883346][ T240] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.976657][ T240] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.037662][ T240] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.089020][ T240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.219187][ T240] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.288065][ T240] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.355117][ T240] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.419127][ T240] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.557367][ T240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.616249][ T240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.665922][ T240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.716380][ T240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.662146][ T240] device hsr_slave_0 left promiscuous mode [ 219.668470][ T240] device hsr_slave_1 left promiscuous mode [ 219.682960][ T240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.695202][ T240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.704626][ T240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.717492][ T240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.726864][ T240] device bridge_slave_1 left promiscuous mode [ 219.738102][ T240] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.748596][ T240] device bridge_slave_0 left promiscuous mode [ 219.763631][ T240] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.776785][ T240] device bridge_slave_1 left promiscuous mode [ 219.787065][ T240] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.798481][ T240] device bridge_slave_0 left promiscuous mode [ 219.808492][ T240] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.829077][ T240] device hsr_slave_0 left promiscuous mode [ 219.838047][ T240] device hsr_slave_1 left promiscuous mode [ 219.848787][ T240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.862985][ T240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.873887][ T240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.885522][ T240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.896329][ T240] device bridge_slave_1 left promiscuous mode [ 219.906584][ T240] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.924027][ T240] device bridge_slave_0 left promiscuous mode [ 219.930390][ T240] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.944398][ T240] device hsr_slave_0 left promiscuous mode [ 219.950747][ T240] device hsr_slave_1 left promiscuous mode [ 219.957135][ T240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.964807][ T240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.972885][ T240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.980555][ T240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.988072][ T240] device bridge_slave_1 left promiscuous mode [ 219.994883][ T240] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.003343][ T240] device bridge_slave_0 left promiscuous mode [ 220.010305][ T240] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.025259][ T240] device veth1_macvtap left promiscuous mode [ 220.031511][ T240] device veth0_macvtap left promiscuous mode [ 220.037546][ T240] device veth1_vlan left promiscuous mode [ 220.043488][ T240] device veth0_vlan left promiscuous mode [ 220.053751][ T240] device veth1_macvtap left promiscuous mode [ 220.059998][ T240] device veth0_macvtap left promiscuous mode [ 220.066034][ T240] device veth1_vlan left promiscuous mode [ 220.071880][ T240] device veth0_vlan left promiscuous mode [ 220.080126][ T240] device veth1_macvtap left promiscuous mode [ 220.086164][ T240] device veth0_macvtap left promiscuous mode [ 220.092360][ T240] device veth1_vlan left promiscuous mode [ 220.098227][ T240] device veth0_vlan left promiscuous mode [ 220.395303][ T240] team0 (unregistering): Port device team_slave_1 removed [ 220.409575][ T240] team0 (unregistering): Port device team_slave_0 removed [ 220.422317][ T240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.438887][ T240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.503261][ T240] bond0 (unregistering): Released all slaves [ 220.559935][ T240] team0 (unregistering): Port device team_slave_1 removed [ 220.575674][ T240] team0 (unregistering): Port device team_slave_0 removed [ 220.587034][ T240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.600457][ T240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.661804][ T240] bond0 (unregistering): Released all slaves [ 220.804835][ T240] team0 (unregistering): Port device team_slave_1 removed [ 220.820819][ T240] team0 (unregistering): Port device team_slave_0 removed [ 220.836391][ T240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.851518][ T240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.914244][ T240] bond0 (unregistering): Released all slaves [ 221.034929][ T240] team0 (unregistering): Port device team_slave_1 removed [ 221.048230][ T240] team0 (unregistering): Port device team_slave_0 removed [ 221.065508][ T240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.081056][ T240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.138175][ T240] bond0 (unregistering): Released all slaves