last executing test programs: 2m11.652494846s ago: executing program 0 (id=1): ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x8840) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) io_setup(0x80000001, &(0x7f0000000400)) fcntl$dupfd(r4, 0x0, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x64000600) 1m55.678754862s ago: executing program 32 (id=1): ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x8840) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) io_setup(0x80000001, &(0x7f0000000400)) fcntl$dupfd(r4, 0x0, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x64000600) 1m40.33893316s ago: executing program 3 (id=48): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 1m40.26835491s ago: executing program 3 (id=49): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2543e3a1bf44f182, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 1m39.014764856s ago: executing program 3 (id=53): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r7, &(0x7f0000002240)=""/237, 0xed, 0x4eb) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="006e1a1e6134913470dc5da8fd4fb37e15af1abafe4f2767c5019691f553403559cf1c5e03c42bbdf376d43cc48274a930effe3b144afec156f2add8935d1ff0784348d9d4b23f834e36c3c20a7cee5beae3f2c3700c96170edf6c"], 0x1, 0x2b0, &(0x7f0000001780)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') 1m37.798221511s ago: executing program 3 (id=56): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTAT(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4a0000007d0200000043000c00010000000802000000070000000000000000004019ffff0000d4010000ffffffffffffff7f0300210b7d02002e5c030039700008006c5d5c5e24407d3a"], 0x4a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000140)={&(0x7f0000000280)=@x25, 0x80, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) 1m36.509970387s ago: executing program 3 (id=59): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 1m35.766869456s ago: executing program 3 (id=63): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80801) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="6d932bbd7000000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m35.42152648s ago: executing program 33 (id=63): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80801) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="6d932bbd7000000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 14.904501337s ago: executing program 6 (id=262): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x442, &(0x7f0000000780)={[{@resuid}, {@nomblk_io_submit}, {@jqfmt_vfsold}, {@noblock_validity}, {@grpid}]}, 0x3f, 0x540, &(0x7f0000000100)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000800)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x4b749000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20008840, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r6, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x36, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr=0x3}}}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r7, 0x40, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 13.386750986s ago: executing program 4 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(r0, 0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44000) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000b40)={0x17c04, r5, 0x800, 0x40eca, 0x8000000000000001, 0x10003}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 10.801160817s ago: executing program 6 (id=275): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@bh}, {@usrjquota}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@abort}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4d5, &(0x7f0000000680)="$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") socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf943", 0x44, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.686280998s ago: executing program 4 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=") r2 = dup(r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@test_dummy_encryption}, {@minixdf}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x461, &(0x7f00000001c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.78648653s ago: executing program 5 (id=279): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 9.74786183s ago: executing program 1 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x4500, 0x0) 8.505258076s ago: executing program 5 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setrlimit(0x0, &(0x7f0000000180)={0xddf, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, &(0x7f0000000000)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 8.498532045s ago: executing program 1 (id=284): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 7.446672519s ago: executing program 1 (id=285): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)) 7.086690773s ago: executing program 6 (id=286): mkdir(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") open(0x0, 0x10b942, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r4, 0x0, 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)) 7.049218394s ago: executing program 5 (id=287): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x67}, 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 7.048036884s ago: executing program 4 (id=288): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 6.694865827s ago: executing program 4 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0xb, 0xffffffe1, 0xf1c2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='xen_mmu_pmd_clear\x00', r0, 0x0, 0xffff}, 0x18) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x50) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000140)='./bus\x00', 0xa18814, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@rodir}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0x505}}, {@rodir}, {@shortname_mixed}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@rodir}, {@shortname_mixed}, {@rodir}, {@shortname_winnt}]}, 0x84, 0x2c4, &(0x7f0000000dc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 6.178620134s ago: executing program 1 (id=290): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$eJzs3M1uG0UcAPD/br5I+uEgcUCFQwQIgoCkDgQoQqJw5eMCPICVpKXCbarGSLTkUBAnThwQNw59AQ48QFUhJCRegRdAlSqU5gC3oLV3HTe2Qyw7der8ftLIM+txZv7ezWpmvTsBHFtzEXE+IsYiYikiSvn2NE9xs5Gyeve3Nle2tzZXktjZ+fjvJJJ8W/G3kvz1RF6YTyPSbyOeutne7sb1G59XqtW1a3l5sXb56uLG9RuvXLpcubh2ce1K+Y1z5fLy0pvl1wYW64/PvXhu7L3zZ376s3RneXJyOuvvyfy91jgGZS7mmt/JXsuDbmzIJofdAQAADiTNx/7j9fF/KcbquYZSLG4OtXMAAADAQOy8k78CAAAAIywx9wcAAIARV9wHcH9rc6VIB7pxoHRotyQ8VPfejYjZ3Webt5vxj8djeZ2JQ3y+dS4irj6flLIUh/QcMgBAqzvZ+Odsp/FfGk+21JuKqI+Hpgfc/tyecvv4J7074CYfkI3/3o6I7bbxX1pUmR3LS6fqQ8WJ5MKl6trZiDgdEfMxMZWVy/u08f4/P3/U7b0s/t+SU6eLlLWfve7WSO+OTz34mdVKrdJPzK3ufR1xZrxT/Elz/JtExEwfbYx9deutbu/9f/yHa+dWxAsd9//uyj3J/usTLdaPh8XiqGj37ze/fNit/WHHn+3/mf3jn01a12va6L2N25/98XQ90yGq1vlPL8f/ZPJJPV/My76s1GrXyhGTyQft25d2P1uUi/pZ/PPPdv7/L85/Sb6m1cn8HNCr777/9eX9azTiz1LWfjEXfBiy+Fd72v+9Z16//fun3dpv3f+d48/2f2MNsPl8y0HOfwftYD/fHQAAADwq0vp1jSRdaObTdGGhcb3jiZhJq+sbtZcurH9xZbVx/WM2JtLiSlep5XpoufEzerO8tKf8akQ8HhE/lKbr5YWV9erqsIMHAACAY+JEl/l/5q8RuccfAAAAyH+oBwAAAEab+T8AAACMtH7W9Tu+meybOwLdOPKZZ45GN4aQmYgj0Y0+MsM+MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADza/gsAAP//Bdqy/A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140), 0x0, 0xe7c) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 6.018684476s ago: executing program 2 (id=291): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYRES64=r3]) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 5.66689305s ago: executing program 2 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 5.581635411s ago: executing program 2 (id=293): openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x30}}, 0x24008880) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32=r7, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, @void, @value}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10) close(r6) 5.493691832s ago: executing program 5 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x4500, 0x0) 5.138721657s ago: executing program 6 (id=295): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r0, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000170000000000ffff000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 3.742150714s ago: executing program 5 (id=296): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="6400000000010104000000000000000302000007240001801400018008000100e0000001080002007f0000010c0002800500010000000000240002801400018008000100e0000001080002007f0000010c0002800500010000020000080007400000000075a57e6039c83c4a114b7b8fea9a1746b60d8b63d55633bd507469b968fbb8dcb1d48ed2b0e36be58b0cc1e961aa989a345e675cba3a104c3eb5c8ee5b9342be7b42081e366b0042ba1406f488ad824a522c8920cbd793f73a809481551c6fe6df982dcb274b2fcaae852c5074134097befb6117692b55e5825496f0e3a0ab13de2a487334b60293ad770068ced550852ef47f393387670965ce93928edfff091b9f"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.640640986s ago: executing program 2 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setrlimit(0x0, &(0x7f0000000180)={0xddf, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, &(0x7f0000000000)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 3.491836117s ago: executing program 6 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@jqfmt_vfsv1}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@dioread_nolock}]}, 0x1, 0x55c, &(0x7f0000000600)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 3.491074037s ago: executing program 4 (id=299): read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000000000000000007000000440c07"], 0x38}, 0x0) 2.098868934s ago: executing program 2 (id=300): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.427952073s ago: executing program 1 (id=302): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "20020000000000000000000080000000"}}}}}}, 0x0) 347.998586ms ago: executing program 5 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) 219.845917ms ago: executing program 6 (id=304): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x4, 0x10000, 0x101, 0x7, 0x1b, "c57f21f7fefcd478fde3eb1917a90e71a89842"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 385.64µs ago: executing program 1 (id=305): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x87, 0x53, 0x1, 0x2a, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x8, 0x9, 0x5}}) dup3(r2, r4, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) unshare(0x64000600) 0s ago: executing program 2 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x4500, 0x0) kernel console output (not intermixed with test programs): U to 1560 would solve the problem. [ 53.975876][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.999275][ T4176] team0: Port device team_slave_0 added [ 54.009173][ T4176] team0: Port device team_slave_1 added [ 54.031956][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.041726][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.079965][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.108699][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.118989][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.161927][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.193647][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.202191][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.232958][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.255318][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.262663][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.295957][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.312545][ T4168] device hsr_slave_0 entered promiscuous mode [ 54.320574][ T4168] device hsr_slave_1 entered promiscuous mode [ 54.337000][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.344769][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.383061][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.395821][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.405246][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.444964][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.484877][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.494593][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.532310][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 54.534968][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.558151][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 54.565375][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 54.585506][ T4174] device hsr_slave_0 entered promiscuous mode [ 54.595688][ T4174] device hsr_slave_1 entered promiscuous mode [ 54.605968][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 54.616079][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.616077][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 54.636902][ T4174] Cannot create hsr debugfs directory [ 54.660374][ T4169] device hsr_slave_0 entered promiscuous mode [ 54.668844][ T4169] device hsr_slave_1 entered promiscuous mode [ 54.677490][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.689347][ T4169] Cannot create hsr debugfs directory [ 54.763180][ T4173] device hsr_slave_0 entered promiscuous mode [ 54.773920][ T4173] device hsr_slave_1 entered promiscuous mode [ 54.782462][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.793089][ T4173] Cannot create hsr debugfs directory [ 54.843027][ T4176] device hsr_slave_0 entered promiscuous mode [ 54.852122][ T4176] device hsr_slave_1 entered promiscuous mode [ 54.861790][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.870294][ T4176] Cannot create hsr debugfs directory [ 55.126112][ T4174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.138661][ T4174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.152907][ T4174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.164448][ T4174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.243588][ T4168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.264824][ T4168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.276055][ T4168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.297070][ T4168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.335012][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.353210][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.366408][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.386759][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.405035][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.436525][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.453134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.465445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.477758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.489453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.501802][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.510772][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.533541][ T4176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.559478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.570907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.585960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.596350][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.607163][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.650395][ T4176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.671507][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.684360][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.700032][ T4173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.710937][ T4173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.738200][ T4176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.750398][ T4176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.764133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.779928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.792219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.805702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.817588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.828627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.847249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.864185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.880968][ T4173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.892018][ T4173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.904043][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.919305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.943282][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.001748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.015825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.049751][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.064566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.075279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.091365][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.101264][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.141688][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.150091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.160006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.174527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.185710][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.195082][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.204473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.215903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.256456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.266141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.280253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.293520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.315950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.328017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.344948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.358819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.370530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.384585][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.406780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.416578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.432607][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.450291][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.478605][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.488575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.499775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.516075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.527387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.558862][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.571881][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.584687][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.593803][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.603579][ T4219] Bluetooth: hci0: command 0x041b tx timeout [ 56.612586][ T4219] Bluetooth: hci1: command 0x041b tx timeout [ 56.620693][ T4219] Bluetooth: hci2: command 0x041b tx timeout [ 56.629166][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.653202][ T4174] device veth0_vlan entered promiscuous mode [ 56.671311][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.680188][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 56.685825][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.686548][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 56.702320][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.712384][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.724701][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.736520][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.749329][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.760049][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.774965][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.795296][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.818134][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.832611][ T4174] device veth1_vlan entered promiscuous mode [ 56.845306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.864021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.873796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.886380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.923773][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.933867][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.952746][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.965910][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.979286][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.991232][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.004541][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.013712][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.030113][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.041660][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.054028][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.073295][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.097560][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.117449][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.134487][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.148025][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.162905][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.176642][ T4174] device veth0_macvtap entered promiscuous mode [ 57.195544][ T4174] device veth1_macvtap entered promiscuous mode [ 57.216954][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.228415][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.238297][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.250693][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.261869][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.273092][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.284620][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.291897][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.301586][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.312878][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.323364][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.340563][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.365774][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.378926][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.388746][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.399776][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.410119][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.421691][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.439790][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.452974][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.465320][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.474030][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.490204][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.504507][ T4168] device veth0_vlan entered promiscuous mode [ 57.528079][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.545968][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.555885][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.565017][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.575479][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.586750][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.599614][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.619336][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.631140][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.642693][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.651518][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.663065][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.675186][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.686050][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.697689][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.712650][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.726944][ T4174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.739816][ T4174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.751437][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.763741][ T4174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.791499][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.804324][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.815785][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.827685][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.839057][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.851050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.861786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.874672][ T4168] device veth1_vlan entered promiscuous mode [ 57.889649][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.903566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.914910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.929142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.940039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.973670][ T4176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.989328][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.021037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.033877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.046267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.058404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.069213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.079737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.092076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.103413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.114193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.125329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.138135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.147404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.211887][ T4168] device veth0_macvtap entered promiscuous mode [ 58.240819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.252832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.291571][ T4168] device veth1_macvtap entered promiscuous mode [ 58.309609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.326324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.340760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.353926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.369209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.384497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.403035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.413680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.440714][ T4169] device veth0_vlan entered promiscuous mode [ 58.480411][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.505058][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.522137][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.541689][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.552550][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.563895][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.563895][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.578863][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.592476][ T4169] device veth1_vlan entered promiscuous mode [ 58.615398][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.628888][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.640265][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.651021][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.659765][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.672281][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.685695][ T4213] Bluetooth: hci2: command 0x040f tx timeout [ 58.692134][ T4213] Bluetooth: hci1: command 0x040f tx timeout [ 58.699893][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 58.707345][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.726188][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.740289][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.751544][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.757337][ T4213] Bluetooth: hci4: command 0x040f tx timeout [ 58.772460][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.772518][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.785232][ T4213] Bluetooth: hci3: command 0x040f tx timeout [ 58.811938][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.821056][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.855474][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.868558][ T4169] device veth0_macvtap entered promiscuous mode [ 58.878186][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.887491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.899692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.910842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.936470][ T4169] device veth1_macvtap entered promiscuous mode [ 58.964524][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.985380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.997271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.014277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.025107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.054163][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.070094][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.082741][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.100917][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.120206][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.168508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.183239][ T4249] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.202706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.215546][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.239246][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.258104][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.258947][ T4249] loop2: detected capacity change from 0 to 2048 [ 59.273377][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.292761][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.328401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.339127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.351233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.354732][ T4249] loop2: p1 < > p3 [ 59.364835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.375859][ T4249] loop2: p3 size 134217728 extends beyond EOD, truncated [ 59.381931][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.397226][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.409087][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.421121][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.457886][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.467339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.475968][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.523278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.533495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.544069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.590495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.602789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.611636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.627026][ T4176] device veth0_vlan entered promiscuous mode [ 59.683116][ T4176] device veth1_vlan entered promiscuous mode [ 59.710085][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 59.725161][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 59.738124][ T4252] kvm: emulating exchange as write [ 59.767604][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 59.784836][ T4173] device veth0_vlan entered promiscuous mode [ 59.789229][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 59.848905][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.861974][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.871778][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.882250][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.891244][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.899530][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.911437][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.921207][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.946017][ T4173] device veth1_vlan entered promiscuous mode [ 59.955722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.969253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.000164][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.034899][ T4176] device veth0_macvtap entered promiscuous mode [ 60.048071][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.066173][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.077965][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.098075][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.108507][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.119036][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.134832][ T4176] device veth1_macvtap entered promiscuous mode [ 60.158601][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.187837][ T4173] device veth0_macvtap entered promiscuous mode [ 60.200940][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.225908][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.244399][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.261969][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.287722][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.304429][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.322201][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.344645][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.367558][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.380989][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.391990][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.404429][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.415266][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.426584][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.468597][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.992373][ T4210] Bluetooth: hci0: command 0x0419 tx timeout [ 60.999092][ T4210] Bluetooth: hci1: command 0x0419 tx timeout [ 61.005375][ T4210] Bluetooth: hci2: command 0x0419 tx timeout [ 61.011632][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 61.018090][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 61.055562][ T4173] device veth1_macvtap entered promiscuous mode [ 61.076426][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.089985][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.101568][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.113670][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.124427][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.135923][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.148499][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.185825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.198736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.241341][ T4176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.255936][ T4176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.265213][ T4176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.277262][ T4176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.324642][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.341273][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.352623][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.369736][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.384289][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.403285][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.414403][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.442294][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.454141][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.499812][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.511883][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.523188][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.537177][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.551403][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.566411][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.674023][ T4268] loop2: detected capacity change from 0 to 512 [ 61.763493][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.873876][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.998525][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.025771][ T4268] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.039512][ T4268] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.209604][ T4268] EXT4-fs (loop2): 1 truncate cleaned up [ 62.215611][ T4268] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: none. [ 63.156616][ C0] sched: RT throttling activated [ 63.184827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.194555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.217464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.272873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.168756][ T4173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.190208][ T4173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.546921][ T4173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.563341][ T4173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.836160][ T4284] loop3: detected capacity change from 0 to 256 [ 66.862367][ T4284] ======================================================= [ 66.862367][ T4284] WARNING: The mand mount option has been deprecated and [ 66.862367][ T4284] and is ignored by this kernel. Remove the mand [ 66.862367][ T4284] option from the mount to silence this warning. [ 66.862367][ T4284] ======================================================= [ 66.942968][ T4284] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.956212][ T4284] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 66.970136][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.980072][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.037519][ T4284] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 68.184169][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.403150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.411382][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.154062][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.164066][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.177381][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.212248][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.227129][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.440328][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.469801][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.596409][ T4298] loop2: detected capacity change from 0 to 512 [ 70.657067][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.017687][ T7] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 71.032550][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 71.045364][ T7] usb 4-1: config 1 has no interface number 0 [ 71.054284][ T7] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.188873][ T4298] EXT4-fs (loop2): Ignoring removed oldalloc option [ 71.237439][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.247353][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.255761][ T7] usb 4-1: Product: syz [ 71.262921][ T7] usb 4-1: Manufacturer: syz [ 71.304036][ T7] usb 4-1: SerialNumber: syz [ 71.323808][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333402][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.627676][ T7] usb 4-1: selecting invalid altsetting 1 [ 71.708749][ T4298] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.719472][ T4298] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 71.730435][ T4298] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 71.741068][ T4298] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.11: Failed to acquire dquot type 1 [ 71.759807][ T4298] EXT4-fs (loop2): 1 truncate cleaned up [ 71.786446][ T4298] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue. Quota mode: writeback. [ 72.217133][ T4307] loop1: detected capacity change from 0 to 512 [ 72.286827][ T4307] EXT4-fs (loop1): Test dummy encryption mode enabled [ 72.294253][ T4307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.577530][ T4307] EXT4-fs (loop1): 1 truncate cleaned up [ 72.583984][ T4307] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 73.176872][ T7] cdc_ncm 4-1:1.1: SET_CRC_MODE failed [ 73.204555][ T7] usb 4-1: selecting invalid altsetting 1 [ 73.246834][ T7] cdc_ncm 4-1:1.1: bind() failure [ 73.322079][ T7] usb 4-1: USB disconnect, device number 2 [ 74.632811][ T4323] loop3: detected capacity change from 0 to 512 [ 74.676038][ T4323] EXT4-fs (loop3): Ignoring removed bh option [ 74.756544][ T4323] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 74.772938][ T4323] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.315062][ T4323] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 76.373959][ T4323] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.379845][ T4338] loop2: detected capacity change from 0 to 256 [ 76.450933][ T1106] cfg80211: failed to load regulatory.db [ 76.521094][ T4341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19'. [ 77.236303][ T4344] loop4: detected capacity change from 0 to 128 [ 77.426257][ T4344] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.454087][ T4331] loop2: detected capacity change from 0 to 512 [ 77.488684][ T4344] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.439603][ T4352] loop1: detected capacity change from 0 to 1024 [ 78.585872][ T4352] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.299083][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 79.321268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.332349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.342405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.352763][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.364063][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.377971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 79.388817][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.399556][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.409404][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.422486][ T4361] loop2: detected capacity change from 0 to 128 [ 80.332923][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 80.350235][ T4365] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 80.360445][ T4365] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 80.370274][ T4365] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 80.386840][ T25] audit: type=1800 audit(1748187465.839:2): pid=4365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.23" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 80.504001][ T4361] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 80.517196][ T4361] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 80.526287][ T4361] FAT-fs (loop2): Filesystem has been set read-only [ 81.355209][ T4349] chnl_net:caif_netlink_parms(): no params data found [ 81.551441][ T4375] loop1: detected capacity change from 0 to 8192 [ 81.745877][ T4377] loop3: detected capacity change from 0 to 512 [ 81.942123][ T4377] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.26: inode #0: comm syz.3.26: iget: illegal inode # [ 81.978148][ T4377] EXT4-fs (loop3): get orphan inode failed [ 82.027393][ T4377] EXT4-fs (loop3): mount failed [ 82.155682][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.157065][ T4311] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.173566][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.218048][ T4349] device bridge_slave_0 entered promiscuous mode [ 82.287319][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.336668][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.357555][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 82.405265][ T4349] device bridge_slave_1 entered promiscuous mode [ 82.610995][ T4349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.653154][ T4349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.766408][ T4385] loop4: detected capacity change from 0 to 512 [ 82.852518][ T4385] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.081595][ T4385] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.100196][ T4385] EXT4-fs (loop4): 1 truncate cleaned up [ 83.107571][ T4385] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 84.376666][ T4213] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.387019][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 85.456537][ T4349] team0: Port device team_slave_0 added [ 85.479230][ T4349] team0: Port device team_slave_1 added [ 85.803833][ T4406] loop4: detected capacity change from 0 to 256 [ 85.897878][ T4406] FAT-fs (loop4): Unrecognized mount option "utf<=0" or missing value [ 86.336642][ T4406] loop4: detected capacity change from 0 to 512 [ 86.377065][ T4406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.394407][ T4406] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 86.405470][ T4406] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 86.466166][ T4349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.675289][ T4349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.388026][ T4349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.402056][ T4349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.406679][ T26] Bluetooth: hci0: command 0x0419 tx timeout [ 88.075243][ T4349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.132389][ T4349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.149235][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 88.257405][ T4419] loop4: detected capacity change from 0 to 1024 [ 88.300674][ T4419] EXT4-fs (loop4): Ignoring removed bh option [ 88.321484][ T4419] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.321549][ T4349] device hsr_slave_0 entered promiscuous mode [ 88.362168][ T4349] device hsr_slave_1 entered promiscuous mode [ 88.393398][ T4349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.414601][ T4349] Cannot create hsr debugfs directory [ 88.454099][ T4428] loop3: detected capacity change from 0 to 16 [ 88.461540][ T4419] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 88.543014][ T4428] erofs: (device loop3): mounted with root inode @ nid 36. [ 88.579215][ T4428] attempt to access beyond end of device [ 88.579215][ T4428] loop3: rw=524288, want=34359740336, limit=16 [ 88.603821][ T4429] loop2: detected capacity change from 0 to 256 [ 89.452488][ T4269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.645255][ T4212] Bluetooth: hci0: command 0x0405 tx timeout [ 89.695203][ T4438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'. [ 89.756425][ T4269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.789686][ T4442] loop4: detected capacity change from 0 to 128 [ 89.805534][ T4440] loop2: detected capacity change from 0 to 2048 [ 89.907375][ T4269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.009032][ T4440] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none. [ 90.013859][ T4269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.113888][ T4450] loop1: detected capacity change from 0 to 256 [ 90.504098][ T4454] loop3: detected capacity change from 0 to 128 [ 90.705465][ T4454] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 90.718278][ T4349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.780563][ T4349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.789909][ T4454] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.825339][ T4349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.876453][ T4349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.486743][ T4349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.578413][ T4349] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.604445][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.617140][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.647100][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.672301][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.687210][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.694365][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.745725][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.791108][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.837155][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.844562][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.917858][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.031029][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.062737][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.738788][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.909679][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.028051][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.110593][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.314148][ T4506] loop3: detected capacity change from 0 to 128 [ 93.485805][ T4506] FAT-fs (loop3): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 93.505352][ T4506] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 93.515812][ T4506] FAT-fs (loop3): Filesystem has been set read-only [ 93.755247][ T4500] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 93.765000][ T4500] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 93.774776][ T4500] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 93.777553][ T25] audit: type=1800 audit(1748187479.239:3): pid=4500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.52" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 93.806737][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.835494][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.930207][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.965152][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.021975][ T4509] loop3: detected capacity change from 0 to 128 [ 94.037905][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.060737][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.094784][ T4509] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.110946][ T4510] loop4: detected capacity change from 0 to 1024 [ 94.208639][ T4509] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.248046][ T4510] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.297326][ T4169] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 95.335904][ T4169] FAT-fs (loop3): Filesystem has been set read-only [ 95.345248][ T4169] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 95.515237][ T4529] loop4: detected capacity change from 0 to 128 [ 95.656160][ T4529] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 95.720667][ T25] audit: type=1326 audit(1748187481.209:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44655d1969 code=0x7ffc0000 [ 95.786244][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.803680][ T4539] loop2: detected capacity change from 0 to 128 [ 95.807457][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.810736][ T4529] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.846668][ T25] audit: type=1326 audit(1748187481.209:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f44655d1969 code=0x7ffc0000 [ 95.882513][ T4349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.920146][ T4519] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.952046][ T25] audit: type=1326 audit(1748187481.209:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44655d1969 code=0x7ffc0000 [ 96.107220][ T25] audit: type=1326 audit(1748187481.209:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44655d1969 code=0x7ffc0000 [ 96.216904][ T25] audit: type=1326 audit(1748187481.209:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44655d1969 code=0x7ffc0000 [ 96.256558][ T4269] device hsr_slave_0 left promiscuous mode [ 96.263329][ T25] audit: type=1326 audit(1748187481.209:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f44655d1969 code=0x7ffc0000 [ 96.352289][ T4269] device hsr_slave_1 left promiscuous mode [ 96.395236][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.409480][ T25] audit: type=1326 audit(1748187481.209:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44655d19a3 code=0x7ffc0000 [ 96.450798][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.488755][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.539225][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.544505][ T25] audit: type=1326 audit(1748187481.329:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f44655d041f code=0x7ffc0000 [ 96.578361][ T4269] device bridge_slave_1 left promiscuous mode [ 96.617838][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.701760][ T4269] device bridge_slave_0 left promiscuous mode [ 96.723806][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.779927][ T25] audit: type=1326 audit(1748187482.269:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f44655d19f7 code=0x7ffc0000 [ 96.910872][ T4538] loop1: detected capacity change from 0 to 40427 [ 97.036285][ T4538] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 97.135876][ T4565] loop4: detected capacity change from 0 to 128 [ 97.188963][ T4565] FAT-fs (loop4): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 97.201017][ T4565] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 97.209861][ T4565] FAT-fs (loop4): Filesystem has been set read-only [ 97.411069][ T4269] device veth1_macvtap left promiscuous mode [ 97.598867][ T4269] device veth0_macvtap left promiscuous mode [ 97.618621][ T4538] F2FS-fs (loop1): invalid crc value [ 97.647263][ T4269] device veth1_vlan left promiscuous mode [ 97.685522][ T4538] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.695924][ T4269] device veth0_vlan left promiscuous mode [ 97.777264][ T4538] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.920119][ T4173] attempt to access beyond end of device [ 97.920119][ T4173] loop1: rw=2049, want=45104, limit=40427 [ 98.300834][ T4573] loop4: detected capacity change from 0 to 256 [ 98.410409][ T4269] team0 (unregistering): Port device team_slave_1 removed [ 98.479766][ T4574] loop2: detected capacity change from 0 to 1024 [ 98.581824][ T4269] team0 (unregistering): Port device team_slave_0 removed [ 98.627473][ T4574] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.691031][ T4269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.755066][ T4269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.821785][ T4579] loop1: detected capacity change from 0 to 128 [ 98.945897][ T4269] bond0 (unregistering): Released all slaves [ 99.086726][ T4456] Bluetooth: hci1: command 0x0409 tx timeout [ 99.335096][ T4594] loop2: detected capacity change from 0 to 128 [ 99.411116][ T4594] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.488284][ T4594] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.532659][ T4562] chnl_net:caif_netlink_parms(): no params data found [ 99.647629][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.674176][ T4562] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.683235][ T4562] device bridge_slave_0 entered promiscuous mode [ 99.720342][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.759499][ T4562] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.876790][ T4562] device bridge_slave_1 entered promiscuous mode [ 100.438406][ T4288] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.514338][ T4562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.559600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.592784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.650099][ T4562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.672777][ T4616] loop2: detected capacity change from 0 to 128 [ 100.747182][ T4562] team0: Port device team_slave_0 added [ 100.820231][ T4616] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 100.878122][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.897028][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.905704][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.914194][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.935389][ T4562] team0: Port device team_slave_1 added [ 100.986875][ T4616] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.024062][ T4349] device veth0_vlan entered promiscuous mode [ 101.088371][ T4562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.126711][ T4562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.156934][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 101.232423][ T4562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.280247][ T4349] device veth1_vlan entered promiscuous mode [ 101.321719][ T4562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.362530][ T4562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.453259][ T4562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.546730][ T4562] device hsr_slave_0 entered promiscuous mode [ 101.576890][ T4562] device hsr_slave_1 entered promiscuous mode [ 101.615833][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.660341][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.932360][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.951106][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.994341][ T4349] device veth0_macvtap entered promiscuous mode [ 102.166948][ T4639] loop4: detected capacity change from 0 to 256 [ 102.843659][ T4641] loop1: detected capacity change from 0 to 512 [ 103.335900][ T4641] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 103.466016][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 103.779581][ T4349] device veth1_macvtap entered promiscuous mode [ 103.826479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.851779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.316251][ T4653] loop4: detected capacity change from 0 to 256 [ 104.568326][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.646679][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.686816][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.715042][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.741519][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.781283][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.805902][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.835950][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.865940][ T4349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.886091][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.900021][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.003441][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.042777][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.078154][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.137925][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.157281][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.173217][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.183334][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.198184][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.241485][ T4349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.252019][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.273969][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.283808][ T4672] loop2: detected capacity change from 0 to 128 [ 105.307249][ T4349] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.316067][ T4349] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.337638][ T4349] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.352450][ T4349] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.577546][ T4676] loop1: detected capacity change from 0 to 128 [ 105.647024][ T4212] Bluetooth: hci1: command 0x0419 tx timeout [ 105.656368][ T4562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 105.695049][ T4676] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 105.739075][ T4676] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.768906][ T4562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 105.812934][ T4562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 105.959359][ T4562] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.013374][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.043004][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.101750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.175557][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.228848][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.251355][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.618886][ T4701] loop1: detected capacity change from 0 to 256 [ 106.743493][ T4562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.217605][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.236095][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.243975][ T4235] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.307813][ T4562] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.396164][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.447055][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.492202][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.499513][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.537725][ T4235] usb 6-1: Using ep0 maxpacket: 32 [ 107.566107][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.595694][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.627014][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.657203][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.665289][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.706901][ T4235] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.718695][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.746764][ T4235] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.773486][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.795955][ T4713] loop1: detected capacity change from 0 to 256 [ 107.810861][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.841365][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.862220][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.883305][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.928451][ T4235] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 107.954951][ T4562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.976258][ T4235] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 107.988197][ T4235] usb 6-1: Product: syz [ 107.992575][ T4235] usb 6-1: Manufacturer: syz [ 107.998493][ T4562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.048073][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.079282][ T4235] hub 6-1:4.0: USB hub found [ 108.085435][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.115247][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.138647][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.157315][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.192311][ T4269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.430015][ T4235] hub 6-1:4.0: 2 ports detected [ 108.440186][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.605742][ T4730] loop1: detected capacity change from 0 to 256 [ 108.752911][ T4730] FAT-fs (loop1): Unrecognized mount option "utf<=0" or missing value [ 108.867430][ T4235] hub 6-1:4.0: set hub depth failed [ 109.748747][ T4235] usb 6-1: USB disconnect, device number 2 [ 110.529069][ T4736] loop2: detected capacity change from 0 to 512 [ 110.727756][ T4736] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.925482][ T4736] EXT4-fs (loop2): 1 truncate cleaned up [ 110.931575][ T4736] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 111.465751][ T4269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.688697][ T4269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.061345][ T4751] loop4: detected capacity change from 0 to 128 [ 112.123568][ T4751] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 112.155414][ T4751] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.265286][ T4269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.472480][ T4761] loop2: detected capacity change from 0 to 512 [ 112.605743][ T4762] loop1: detected capacity change from 0 to 256 [ 114.679364][ T4761] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.98: corrupted inode contents [ 114.698832][ T4761] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #3: comm syz.2.98: mark_inode_dirty error [ 114.728498][ T4761] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.98: corrupted inode contents [ 114.742357][ T4761] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.98: mark_inode_dirty error [ 114.764709][ T4761] __quota_error: 38 callbacks suppressed [ 114.764728][ T4761] Quota error (device loop2): write_blk: dquota write failed [ 114.778844][ T4761] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 114.789726][ T4761] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.98: Failed to acquire dquot type 0 [ 114.833531][ T4761] EXT4-fs (loop2): 1 orphan inode deleted [ 114.840579][ T4761] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.852906][ T4761] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.214938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.283694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.386684][ T4562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.579972][ T4769] loop5: detected capacity change from 0 to 1024 [ 115.671497][ T4775] loop1: detected capacity change from 0 to 128 [ 115.772867][ T4769] EXT4-fs (loop5): Ignoring removed bh option [ 115.822143][ T4769] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.167713][ T4769] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 116.442546][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.468455][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.535061][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.563298][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.029177][ T4562] device veth0_vlan entered promiscuous mode [ 117.101160][ T4802] loop4: detected capacity change from 0 to 256 [ 117.282273][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.291665][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.430588][ T4808] loop2: detected capacity change from 0 to 512 [ 117.885450][ T4562] device veth1_vlan entered promiscuous mode [ 118.339856][ T4562] device veth0_macvtap entered promiscuous mode [ 118.420035][ T4562] device veth1_macvtap entered promiscuous mode [ 118.510618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.580821][ T4808] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.588485][ T4808] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.683091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.748971][ T4808] EXT4-fs (loop2): 1 truncate cleaned up [ 118.754967][ T4808] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 119.425384][ T4812] loop4: detected capacity change from 0 to 512 [ 119.452645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.462417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.471828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.481502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.532856][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.621817][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.689270][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.701077][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.711725][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.723553][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.734728][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.746951][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.758373][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.771498][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.794484][ T4562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.917163][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.938315][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.977150][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.017586][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.087015][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.129249][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.147859][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.160105][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.172723][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.185730][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.255891][ T4820] loop4: detected capacity change from 0 to 512 [ 120.336428][ T4562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.521357][ T4562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.713960][ T4562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.103668][ T4820] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.436908][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.484384][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.496412][ T4820] EXT4-fs: error -4 creating inode table initialization thread [ 123.505230][ T4820] EXT4-fs (loop4): mount failed [ 123.591293][ T4831] loop1: detected capacity change from 0 to 512 [ 124.028506][ T4562] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.180029][ T4562] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.324735][ T4562] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.461820][ T4562] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.505796][ T4831] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.607330][ T4831] EXT4-fs (loop1): 1 truncate cleaned up [ 124.613714][ T4831] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: none. [ 125.931221][ T4845] loop2: detected capacity change from 0 to 128 [ 126.010952][ T4841] loop4: detected capacity change from 0 to 2048 [ 126.047523][ T4845] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 126.113589][ T4282] loop4: p1 < > p3 [ 126.123023][ T4282] loop4: p3 size 134217728 extends beyond EOD, truncated [ 126.131902][ T4845] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.167174][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.175850][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.216123][ T4841] loop4: p1 < > p3 [ 126.253255][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.278363][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.285317][ T4841] loop4: p3 size 134217728 extends beyond EOD, truncated [ 126.355509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.369561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.408147][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 126.409442][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 126.513838][ T4269] device hsr_slave_0 left promiscuous mode [ 126.544241][ T4861] loop5: detected capacity change from 0 to 1024 [ 126.566314][ T4269] device hsr_slave_1 left promiscuous mode [ 126.583968][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.593508][ T4861] EXT4-fs (loop5): Ignoring removed bh option [ 126.622987][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.666940][ T4861] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.696238][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 126.711846][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.713725][ T4465] udevd[4465]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 126.741270][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.762914][ T4269] device bridge_slave_1 left promiscuous mode [ 126.770288][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.780578][ T4861] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 126.827802][ T4269] device bridge_slave_0 left promiscuous mode [ 126.834078][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.884511][ T4870] loop2: detected capacity change from 0 to 256 [ 126.963902][ T4269] device veth1_macvtap left promiscuous mode [ 126.974909][ T4269] device veth0_macvtap left promiscuous mode [ 127.043444][ T4269] device veth1_vlan left promiscuous mode [ 127.108451][ T4875] loop4: detected capacity change from 0 to 512 [ 127.668111][ T4870] exfat: Deprecated parameter 'utf8' [ 128.549452][ T4269] device veth0_vlan left promiscuous mode [ 128.557349][ T4870] exfat: Deprecated parameter 'namecase' [ 128.566663][ T4870] exfat: Deprecated parameter 'utf8' [ 129.704231][ T4875] EXT4-fs (loop4): Ignoring removed oldalloc option [ 129.728481][ T4870] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 129.807210][ T4875] EXT4-fs (loop4): orphan cleanup on readonly fs [ 129.823634][ T4875] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 129.833970][ T4875] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 129.843555][ T4875] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.116: Failed to acquire dquot type 1 [ 129.864853][ T4875] EXT4-fs (loop4): 1 truncate cleaned up [ 129.892703][ T4875] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue. Quota mode: writeback. [ 130.367067][ T4269] team0 (unregistering): Port device team_slave_1 removed [ 130.388229][ T4269] team0 (unregistering): Port device team_slave_0 removed [ 130.423933][ T4269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.438631][ T4269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.463495][ T4879] loop2: detected capacity change from 0 to 128 [ 130.577452][ T4881] loop4: detected capacity change from 0 to 1024 [ 130.770904][ T4881] EXT4-fs (loop4): Ignoring removed bh option [ 130.777310][ T4881] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.945377][ T4885] loop5: detected capacity change from 0 to 512 [ 131.046248][ T4885] EXT4-fs (loop5): Test dummy encryption mode enabled [ 131.053609][ T4885] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.207143][ T4885] EXT4-fs (loop5): 1 truncate cleaned up [ 131.213107][ T4885] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 131.378782][ T4881] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 132.063858][ T4269] bond0 (unregistering): Released all slaves [ 132.973958][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980452][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.525437][ T4904] loop4: detected capacity change from 0 to 1024 [ 133.622584][ T4906] loop6: detected capacity change from 0 to 512 [ 133.801022][ T4906] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 133.838263][ T4904] EXT4-fs (loop4): Ignoring removed bh option [ 133.959159][ T4906] EXT4-fs (loop6): 1 truncate cleaned up [ 133.965507][ T4906] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 134.486044][ T4912] loop5: detected capacity change from 0 to 256 [ 135.026864][ T4904] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.275764][ T4904] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 136.502440][ T4912] loop5: detected capacity change from 0 to 512 [ 136.609646][ T4937] loop6: detected capacity change from 0 to 512 [ 136.749446][ T4937] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 136.958865][ T4937] EXT4-fs (loop6): 1 truncate cleaned up [ 136.965372][ T4937] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: none. [ 138.781222][ T4950] loop2: detected capacity change from 0 to 256 [ 138.797374][ T4947] loop4: detected capacity change from 0 to 512 [ 138.930931][ T4950] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.983051][ T4950] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 139.058896][ T4947] EXT4-fs (loop4): 1 orphan inode deleted [ 139.132719][ T4947] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.153959][ T4950] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 139.185875][ T4958] loop6: detected capacity change from 0 to 2048 [ 139.208764][ T4947] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.294022][ T4958] loop6: p1 < > p3 [ 139.328772][ T4958] loop6: p3 size 134217728 extends beyond EOD, truncated [ 139.458588][ T4947] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 139.491685][ T3546] loop6: p1 < > p3 [ 139.509269][ T3546] loop6: p3 size 134217728 extends beyond EOD, truncated [ 139.609858][ T4968] capability: warning: `syz.2.139' uses deprecated v2 capabilities in a way that may be insecure [ 139.965453][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 139.979490][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 140.196770][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 140.211595][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 140.622896][ T4987] loop5: detected capacity change from 0 to 1024 [ 140.861184][ T4987] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.875935][ T4987] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.134: bg 0: block 376: padding at end of block bitmap is not set [ 140.978807][ T5000] loop2: detected capacity change from 0 to 512 [ 141.210073][ T5000] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.495022][ T5000] EXT4-fs (loop2): 1 truncate cleaned up [ 141.500837][ T5000] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 143.054380][ T5024] loop4: detected capacity change from 0 to 512 [ 143.149938][ T25] audit: type=1326 audit(1748187528.639:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.5.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64335969 code=0x7ffc0000 [ 143.194743][ T5024] EXT4-fs (loop4): Ignoring removed bh option [ 143.224915][ T5024] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 143.260700][ T5024] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.315917][ T25] audit: type=1326 audit(1748187528.699:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.5.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f1e64335969 code=0x7ffc0000 [ 143.393051][ T5024] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 143.432557][ T25] audit: type=1326 audit(1748187528.699:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.5.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64335969 code=0x7ffc0000 [ 143.512473][ T5024] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.539009][ T25] audit: type=1326 audit(1748187529.029:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fb3f0eb39 code=0x7ffc0000 [ 143.572012][ T25] audit: type=1326 audit(1748187529.049:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fb3f0eb39 code=0x7ffc0000 [ 143.628577][ T5041] loop5: detected capacity change from 0 to 1024 [ 143.641797][ T25] audit: type=1326 audit(1748187529.049:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fb3f0eb39 code=0x7ffc0000 [ 143.705495][ T5041] EXT4-fs (loop5): Ignoring removed bh option [ 143.776713][ T5041] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.398739][ T5041] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 144.686047][ T25] audit: type=1326 audit(1748187529.049:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fb3f0eb39 code=0x7ffc0000 [ 145.102532][ T25] audit: type=1326 audit(1748187529.049:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fb3f0eb39 code=0x7ffc0000 [ 145.836648][ T25] audit: type=1326 audit(1748187529.049:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fb3f0eb39 code=0x7ffc0000 [ 145.996061][ T25] audit: type=1326 audit(1748187529.049:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fb3f0eb39 code=0x7ffc0000 [ 146.319013][ T5076] loop5: detected capacity change from 0 to 128 [ 146.527891][ T5076] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 146.602779][ T5079] loop1: detected capacity change from 0 to 2048 [ 146.626987][ T5076] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.782228][ T5079] loop1: p1 < > p3 [ 146.841075][ T5079] loop1: p3 size 134217728 extends beyond EOD, truncated [ 147.112402][ T5071] loop4: detected capacity change from 0 to 128 [ 147.163168][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 147.197605][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 147.258403][ T5071] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.279989][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 147.285000][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 147.420509][ T5107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'. [ 147.429535][ T5071] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.432245][ T5071] xt_hashlimit: size too large, truncated to 1048576 [ 148.716465][ T5112] loop1: detected capacity change from 0 to 40427 [ 148.760607][ T5112] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 148.837098][ T5112] F2FS-fs (loop1): invalid crc value [ 148.899958][ T5115] loop5: detected capacity change from 0 to 40427 [ 148.930799][ T5112] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.140976][ T5112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 149.571395][ T5148] loop5: detected capacity change from 0 to 1024 [ 149.655943][ T4173] attempt to access beyond end of device [ 149.655943][ T4173] loop1: rw=2049, want=45104, limit=40427 [ 149.681010][ T5148] EXT4-fs (loop5): Ignoring removed bh option [ 149.743172][ T5148] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.847076][ T5148] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 151.031838][ T25] kauditd_printk_skb: 61 callbacks suppressed [ 151.031851][ T25] audit: type=1326 audit(1748187536.519:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64335969 code=0x7ffc0000 [ 151.162458][ T25] audit: type=1326 audit(1748187536.559:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64335969 code=0x7ffc0000 [ 151.210928][ T5176] loop5: detected capacity change from 0 to 128 [ 151.261747][ T25] audit: type=1326 audit(1748187536.559:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f1e64335969 code=0x7ffc0000 [ 151.338929][ T5176] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 151.346695][ T25] audit: type=1326 audit(1748187536.559:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64335969 code=0x7ffc0000 [ 151.379155][ T25] audit: type=1326 audit(1748187536.559:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.5.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64335969 code=0x7ffc0000 [ 151.403664][ T5176] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.922495][ T5191] loop5: detected capacity change from 0 to 512 [ 152.034371][ T5191] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.172: casefold flag without casefold feature [ 152.223390][ T5191] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.172: couldn't read orphan inode 15 (err -117) [ 152.330311][ T5203] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 152.376811][ T5191] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.951680][ T5219] loop2: detected capacity change from 0 to 1024 [ 153.020573][ T5219] EXT4-fs (loop2): Ignoring removed bh option [ 153.142933][ T5219] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.297121][ T5219] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 153.346636][ T4455] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 153.689944][ T4455] usb 6-1: Using ep0 maxpacket: 8 [ 154.075109][ T5243] loop4: detected capacity change from 0 to 128 [ 154.116996][ T4455] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 154.128797][ T5243] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 154.148467][ T4455] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 154.157991][ T5243] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.256076][ T4455] usb 6-1: Product: syz [ 154.291290][ T4455] usb 6-1: Manufacturer: syz [ 154.320621][ T4455] usb 6-1: SerialNumber: syz [ 154.345644][ T4455] usb 6-1: config 0 descriptor?? [ 154.544411][ T4455] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 154.674526][ T5265] loop6: detected capacity change from 0 to 256 [ 154.717515][ T4455] gspca_zc3xx: reg_w_i err -71 [ 154.755881][ T4455] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 155.078848][ T4455] usb 6-1: USB disconnect, device number 3 [ 155.253859][ T5268] loop2: detected capacity change from 0 to 2048 [ 155.384499][ T5272] loop4: detected capacity change from 0 to 256 [ 155.494917][ T4303] loop2: p1 < > p3 [ 155.523981][ T5272] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 155.555841][ T4303] loop2: p3 size 134217728 extends beyond EOD, truncated [ 155.621896][ T5272] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.100627][ T5268] loop2: p1 < > p3 [ 156.237436][ T5268] loop2: p3 size 134217728 extends beyond EOD, truncated [ 156.390709][ T5292] loop6: detected capacity change from 0 to 256 [ 156.971832][ T5289] loop1: detected capacity change from 0 to 1024 [ 157.339561][ T5289] EXT4-fs (loop1): Ignoring removed bh option [ 157.595772][ T5289] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.752270][ T25] audit: type=1326 audit(1748187543.179:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765b992969 code=0x7ffc0000 [ 157.864032][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 157.879952][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 157.966994][ T5289] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 158.032102][ T25] audit: type=1326 audit(1748187543.179:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f765b992969 code=0x7ffc0000 [ 158.130439][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 158.143216][ T5304] loop2: detected capacity change from 0 to 256 [ 158.204923][ T25] audit: type=1326 audit(1748187543.179:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765b992969 code=0x7ffc0000 [ 158.247699][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 159.108460][ T4308] attempt to access beyond end of device [ 159.108460][ T4308] loop2: rw=1, want=544, limit=256 [ 159.178842][ T4308] attempt to access beyond end of device [ 159.178842][ T4308] loop2: rw=1, want=1024, limit=256 [ 159.195952][ T25] audit: type=1326 audit(1748187544.679:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.6.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 159.244547][ T4308] attempt to access beyond end of device [ 159.244547][ T4308] loop2: rw=1, want=2088, limit=256 [ 159.272123][ T25] audit: type=1326 audit(1748187544.679:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.6.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 159.484780][ T5326] loop1: detected capacity change from 0 to 256 [ 159.584501][ T25] audit: type=1326 audit(1748187544.679:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.6.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 159.984987][ T25] audit: type=1326 audit(1748187544.679:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.6.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 160.259298][ T5330] loop2: detected capacity change from 0 to 512 [ 160.423389][ T25] audit: type=1326 audit(1748187544.679:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.6.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 160.536337][ T25] audit: type=1326 audit(1748187544.739:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.6.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 160.932730][ T5351] loop6: detected capacity change from 0 to 512 [ 160.964764][ T5330] EXT4-fs (loop2): Test dummy encryption mode enabled [ 161.037243][ T5330] EXT4-fs error (device loop2): __ext4_iget:4893: inode #11: block 1: comm syz.2.199: invalid block [ 161.049407][ T5330] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.199: couldn't read orphan inode 11 (err -117) [ 161.061994][ T5330] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none. [ 161.117938][ T5358] loop4: detected capacity change from 0 to 2048 [ 161.152784][ T5363] loop1: detected capacity change from 0 to 1024 [ 161.174965][ T5358] loop4: p1 < > p3 [ 161.175095][ T5351] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 161.190762][ T5358] loop4: p3 size 134217728 extends beyond EOD, truncated [ 161.204988][ T5363] EXT4-fs (loop1): Ignoring removed bh option [ 161.242431][ T5351] EXT4-fs (loop6): 1 truncate cleaned up [ 161.286744][ T5351] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 161.375601][ T5363] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.416483][ T5363] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 161.444306][ T25] audit: type=1326 audit(1748187546.929:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.5.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64335969 code=0x7fc00000 [ 161.566727][ T5353] loop4: detected capacity change from 0 to 512 [ 162.030617][ T5353] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 162.187271][ T5353] EXT4-fs (loop4): Test dummy encryption mode enabled [ 162.523417][ T5353] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 162.562993][ T5382] loop6: detected capacity change from 0 to 128 [ 162.591812][ T5353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.703721][ T5353] EXT4-fs (loop4): 1 truncate cleaned up [ 162.711773][ T5382] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 162.714916][ T5353] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,test_dummy_encryption,minixdf,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 162.729359][ T5382] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.786825][ T5389] tmpfs: Unknown parameter '‰n' [ 162.962049][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 163.068162][ T5398] loop1: detected capacity change from 0 to 256 [ 163.718742][ T4465] udevd[4465]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 163.755753][ T5402] loop6: detected capacity change from 0 to 512 [ 163.785113][ T5410] loop2: detected capacity change from 0 to 16 [ 163.920521][ T5410] erofs: (device loop2): mounted with root inode @ nid 36. [ 164.741424][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 164.806898][ T4213] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 165.656697][ T4213] usb 7-1: Using ep0 maxpacket: 16 [ 165.776916][ T4213] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 165.806644][ T4213] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.836644][ T4213] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 165.867059][ T4213] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 165.919674][ T4213] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 165.972015][ T4213] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 166.030863][ T5400] loop5: detected capacity change from 0 to 40427 [ 166.086879][ T4213] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.117294][ T4213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.141433][ T4213] usb 7-1: SerialNumber: syz [ 166.219755][ T5402] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 166.261709][ T4213] cdc_acm: probe of 7-1:1.0 failed with error -12 [ 166.368338][ T5400] F2FS-fs (loop5): Found nat_bits in checkpoint [ 166.475157][ T4213] usb 7-1: USB disconnect, device number 2 [ 166.557493][ T5400] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 166.567647][ T5456] loop2: detected capacity change from 0 to 128 [ 166.839497][ T5456] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 166.925731][ T5456] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.953070][ T5462] loop4: detected capacity change from 0 to 1024 [ 167.074252][ T5462] EXT4-fs (loop4): Ignoring removed bh option [ 167.093362][ T5462] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.170449][ T5462] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 167.361096][ T5469] loop6: detected capacity change from 0 to 1024 [ 167.450121][ T5469] EXT4-fs (loop6): Test dummy encryption mode enabled [ 167.457680][ T5469] EXT4-fs (loop6): inline encryption not supported [ 167.638411][ T5469] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,data_err=ignore,max_batch_time=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: writeback. [ 168.106375][ T5469] fscrypt (loop6): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 169.428776][ T5484] loop2: detected capacity change from 0 to 1024 [ 169.553753][ T5484] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 169.621783][ T5484] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 169.685758][ T5494] loop1: detected capacity change from 0 to 2048 [ 169.696935][ T5484] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 169.746698][ T5484] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 169.995786][ T5484] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 170.032029][ T5494] loop1: p1 < > p3 [ 170.038674][ T5494] loop1: p3 size 134217728 extends beyond EOD, truncated [ 171.256508][ T5505] loop4: detected capacity change from 0 to 1024 [ 171.420989][ T5505] EXT4-fs (loop4): Ignoring removed orlov option [ 171.512706][ T5492] loop1: detected capacity change from 0 to 512 [ 171.564662][ T5492] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 171.612730][ T5505] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 171.639990][ T5492] EXT4-fs (loop1): Test dummy encryption mode enabled [ 171.657739][ T5531] loop2: detected capacity change from 0 to 128 [ 171.681250][ T5492] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 171.699776][ T5492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.726517][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 171.741723][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 171.764384][ T5531] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 171.764760][ T5492] EXT4-fs (loop1): 1 truncate cleaned up [ 171.816889][ T5531] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.836631][ T5492] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,test_dummy_encryption,minixdf,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 171.994064][ T5544] loop4: detected capacity change from 0 to 1024 [ 172.096735][ T5544] EXT4-fs (loop4): Ignoring removed bh option [ 172.124293][ T5544] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.234568][ T5549] loop5: detected capacity change from 0 to 256 [ 172.623004][ T5544] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 174.664839][ T5574] loop5: detected capacity change from 0 to 4096 [ 174.735901][ T5584] loop2: detected capacity change from 0 to 16 [ 174.736312][ T5574] EXT4-fs (loop5): Unrecognized mount option "subj_user=syz2" or missing value [ 174.874418][ T5584] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.927595][ T5589] binfmt_misc: register: failed to install interpreter file ./file2 [ 174.986799][ T5584] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 175.816420][ T25] kauditd_printk_skb: 37 callbacks suppressed [ 175.816434][ T25] audit: type=1326 audit(1748187562.292:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.6.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 175.857991][ T5606] loop2: detected capacity change from 0 to 128 [ 175.896924][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 175.921972][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 175.945961][ T5608] loop5: detected capacity change from 0 to 1024 [ 175.971611][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 175.987473][ T25] audit: type=1326 audit(1748187562.332:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.6.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 176.033087][ T5608] EXT4-fs (loop5): Ignoring removed bh option [ 176.089813][ T25] audit: type=1326 audit(1748187562.332:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.6.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 176.200067][ T25] audit: type=1326 audit(1748187562.332:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.6.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 176.234910][ T25] audit: type=1326 audit(1748187562.332:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.6.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c4aea969 code=0x7ffc0000 [ 176.335732][ T5621] overlayfs: failed to resolve './file1': -2 [ 176.577627][ T5606] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 176.638896][ T5619] loop1: detected capacity change from 0 to 2048 [ 176.666786][ T5606] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.678549][ T5608] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.796994][ T4281] loop1: p1 < > p3 [ 176.802146][ T4281] loop1: p3 size 134217728 extends beyond EOD, truncated [ 176.828156][ T5608] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 176.913357][ T5619] loop1: p1 < > p3 [ 176.973216][ T5619] loop1: p3 size 134217728 extends beyond EOD, truncated [ 177.108642][ T5639] loop6: detected capacity change from 0 to 512 [ 177.582504][ T5639] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 177.663629][ T5639] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 177.839140][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 177.886864][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 177.936260][ T5639] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #16: comm syz.6.262: corrupted inode contents [ 177.958149][ T5639] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #16: comm syz.6.262: mark_inode_dirty error [ 177.980202][ T5639] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #16: comm syz.6.262: corrupted inode contents [ 178.590424][ T5639] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.262: mark_inode_dirty error [ 178.664580][ T5639] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #16: comm syz.6.262: corrupted inode contents [ 178.753542][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 178.777023][ T5639] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 178.794226][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 178.891727][ T5639] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #16: comm syz.6.262: corrupted inode contents [ 179.018293][ T5639] EXT4-fs error (device loop6): ext4_truncate:4273: inode #16: comm syz.6.262: mark_inode_dirty error [ 179.471016][ T5672] overlayfs: failed to resolve './file1': -2 [ 179.487638][ T5681] loop4: detected capacity change from 0 to 512 [ 179.556593][ T5681] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 179.743341][ T5681] EXT4-fs (loop4): 1 truncate cleaned up [ 179.749241][ T5681] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 179.808975][ T5639] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 180.197016][ T5639] EXT4-fs (loop6): 1 truncate cleaned up [ 180.214196][ T5678] tipc: Enabling of bearer rejected, failed to enable media [ 180.337798][ T5639] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nomblk_io_submit,jqfmt=vfsold,noblock_validity,grpid,,errors=continue. Quota mode: writeback. [ 180.478240][ T5639] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.658564][ T5689] loop1: detected capacity change from 0 to 256 [ 180.755161][ T5689] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.825924][ T5689] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 180.861692][ T5689] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 181.938522][ T5709] loop6: detected capacity change from 0 to 1024 [ 182.042673][ T5709] EXT4-fs (loop6): Ignoring removed bh option [ 182.122171][ T5710] loop4: detected capacity change from 0 to 2048 [ 182.245169][ T4465] loop4: p1 < > p3 [ 182.285277][ T4465] loop4: p3 size 134217728 extends beyond EOD, truncated [ 182.386890][ T4219] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 182.435567][ T5709] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.441242][ T5710] loop4: p1 < > p3 [ 182.482227][ T5710] loop4: p3 size 134217728 extends beyond EOD, truncated [ 182.490497][ T5709] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,. Quota mode: none. [ 183.477044][ T4219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.128046][ T5742] overlayfs: failed to resolve './file1': -2 [ 184.409390][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 184.445055][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 184.557932][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 184.561584][ T4219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 184.569382][ T5746] loop1: detected capacity change from 0 to 4096 [ 184.609911][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 184.725389][ T4219] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 184.751870][ T4219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 184.761255][ T4219] usb 3-1: SerialNumber: syz [ 184.822585][ T4219] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 184.835278][ T5746] EXT4-fs (loop1): Test dummy encryption mode enabled [ 184.845683][ T4219] usb-storage 3-1:1.0: USB Mass Storage device detected [ 184.890493][ T4219] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 184.914115][ T4219] scsi host1: usb-storage 3-1:1.0 [ 185.015075][ T5746] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 185.054315][ T4275] usb 3-1: USB disconnect, device number 2 [ 185.168641][ T5758] loop6: detected capacity change from 0 to 512 [ 185.249743][ T5758] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.262605][ T5758] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.389977][ T5746] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 187.107881][ T5796] loop4: detected capacity change from 0 to 256 [ 187.826400][ T5799] loop1: detected capacity change from 0 to 512 [ 188.082681][ T5810] loop5: detected capacity change from 0 to 1024 [ 188.107081][ T5799] EXT4-fs (loop1): Ignoring removed nobh option [ 188.166524][ T5799] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue. Quota mode: writeback. [ 188.330614][ T5810] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.559269][ T5833] loop6: detected capacity change from 0 to 1024 [ 189.636861][ T25] audit: type=1800 audit(1748187576.062:179): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.290" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 190.383079][ T5833] EXT4-fs (loop6): Ignoring removed nobh option [ 190.390495][ T5833] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.533906][ T5833] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,jqfmt=vfsv1,dioread_lock,jqfmt=vfsold,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,nobarrier,jqfmt=vfsold,max_batch_time=0x000000000000000b,dioread_nolock,,errors=continue. Quota mode: none. [ 190.722182][ T5833] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3876: comm syz.6.298: Allocating blocks 497-513 which overlap fs metadata [ 190.743756][ T5833] EXT4-fs (loop6): pa ffff88805d9d08c0: logic 128, phys. 385, len 8 [ 190.752641][ T5833] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 190.870670][ T5841] loop7: detected capacity change from 0 to 16384 [ 190.935679][ T5844] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 191.159824][ T5841] loop2: detected capacity change from 0 to 512 [ 191.319988][ T5841] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.545496][ T5844] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.577003][ T5841] EXT4-fs (loop2): 1 truncate cleaned up [ 191.583471][ T5841] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 191.603797][ T5844] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.646469][ T5841] mmap: syz.2.300 (5841) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 191.966263][ T5856] [ 191.968923][ T5856] ====================================================== [ 191.976721][ T5856] WARNING: possible circular locking dependency detected [ 191.984627][ T5856] 5.15.184-syzkaller #0 Not tainted [ 191.989963][ T5856] ------------------------------------------------------ [ 191.998050][ T5856] rm/5856 is trying to acquire lock: [ 192.005331][ T5856] ffff8880b9027e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x186/0x7c0 [ 192.017103][ T5856] [ 192.017103][ T5856] but task is already holding lock: [ 192.024740][ T5856] ffff8880633e31b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 192.034306][ T5856] [ 192.034306][ T5856] which lock already depends on the new lock. [ 192.034306][ T5856] [ 192.045353][ T5856] [ 192.045353][ T5856] the existing dependency chain (in reverse order) is: [ 192.054879][ T5856] [ 192.054879][ T5856] -> #2 (&trie->lock){..-.}-{2:2}: [ 192.063432][ T5856] _raw_spin_lock_irqsave+0xa4/0xf0 [ 192.070098][ T5856] trie_delete_elem+0x90/0x710 [ 192.077677][ T5856] 0xffffffffa0018f05 [ 192.083112][ T5856] bpf_trace_run3+0x17e/0x320 [ 192.089764][ T5856] enqueue_timer+0x394/0x520 [ 192.095119][ T5856] __mod_timer+0x8e1/0xd20 [ 192.102061][ T5856] call_timer_fn+0x16c/0x530 [ 192.108961][ T5856] __run_timers+0x525/0x7c0 [ 192.114622][ T5856] run_timer_softirq+0x63/0xf0 [ 192.120462][ T5856] handle_softirqs+0x328/0x820 [ 192.126780][ T5856] __irq_exit_rcu+0x12f/0x220 [ 192.132820][ T5856] irq_exit_rcu+0x5/0x20 [ 192.140266][ T5856] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 192.146799][ T5856] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.154795][ T5856] __sanitizer_cov_trace_const_cmp8+0xc/0x80 [ 192.162057][ T5856] unlock_page+0xdc/0x1f0 [ 192.167801][ T5856] handle_mm_fault+0x2981/0x43c0 [ 192.174373][ T5856] __get_user_pages+0x93e/0x11c0 [ 192.180722][ T5856] populate_vma_page_range+0x213/0x290 [ 192.187202][ T5856] __mm_populate+0x26f/0x3a0 [ 192.193165][ T5856] vm_mmap_pgoff+0x203/0x2b0 [ 192.200615][ T5856] ksys_mmap_pgoff+0x140/0x780 [ 192.207371][ T5856] do_syscall_64+0x4c/0xa0 [ 192.212914][ T5856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.221402][ T5856] [ 192.221402][ T5856] -> #1 (&base->lock){-.-.}-{2:2}: [ 192.230443][ T5856] _raw_spin_lock_irqsave+0xa4/0xf0 [ 192.237715][ T5856] lock_timer_base+0x123/0x270 [ 192.243980][ T5856] __mod_timer+0x117/0xd20 [ 192.249533][ T5856] queue_delayed_work_on+0x126/0x1e0 [ 192.256397][ T5856] kvfree_call_rcu+0x4a9/0x7c0 [ 192.261775][ T5856] rtnl_register_internal+0x44e/0x540 [ 192.268279][ T5856] rtnl_register+0x2e/0x70 [ 192.274770][ T5856] ip_rt_init+0x2e0/0x3a0 [ 192.279849][ T5856] ip_init+0xa/0x20 [ 192.284870][ T5856] inet_init+0x28b/0x3a0 [ 192.289667][ T5856] do_one_initcall+0x1ee/0x680 [ 192.295500][ T5856] do_initcall_level+0x137/0x1f0 [ 192.301206][ T5856] do_initcalls+0x4b/0x90 [ 192.307135][ T5856] kernel_init_freeable+0x3ce/0x560 [ 192.314298][ T5856] kernel_init+0x19/0x1b0 [ 192.319691][ T5856] ret_from_fork+0x1f/0x30 [ 192.325470][ T5856] [ 192.325470][ T5856] -> #0 (krc.lock){..-.}-{2:2}: [ 192.333558][ T5856] __lock_acquire+0x2c33/0x7c60 [ 192.339727][ T5856] lock_acquire+0x197/0x3f0 [ 192.345543][ T5856] _raw_spin_lock+0x2a/0x40 [ 192.352062][ T5856] kvfree_call_rcu+0x186/0x7c0 [ 192.358145][ T5856] trie_delete_elem+0x58c/0x710 [ 192.364701][ T5856] bpf_prog_8c8ab8634bca3061+0x3a/0xcc [ 192.371936][ T5856] bpf_trace_run3+0x17e/0x320 [ 192.379199][ T5856] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 192.385361][ T5856] kmem_cache_free+0x1e7/0x210 [ 192.390710][ T5856] do_sys_openat2+0x207/0x4a0 [ 192.396760][ T5856] __x64_sys_openat+0x135/0x160 [ 192.402824][ T5856] do_syscall_64+0x4c/0xa0 [ 192.408054][ T5856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.415106][ T5856] [ 192.415106][ T5856] other info that might help us debug this: [ 192.415106][ T5856] [ 192.426982][ T5856] Chain exists of: [ 192.426982][ T5856] krc.lock --> &base->lock --> &trie->lock [ 192.426982][ T5856] [ 192.440149][ T5856] Possible unsafe locking scenario: [ 192.440149][ T5856] [ 192.449235][ T5856] CPU0 CPU1 [ 192.455171][ T5856] ---- ---- [ 192.460711][ T5856] lock(&trie->lock); [ 192.465592][ T5856] lock(&base->lock); [ 192.473558][ T5856] lock(&trie->lock); [ 192.481646][ T5856] lock(krc.lock); [ 192.485846][ T5856] [ 192.485846][ T5856] *** DEADLOCK *** [ 192.485846][ T5856] [ 192.497706][ T5856] 2 locks held by rm/5856: [ 192.502813][ T5856] #0: ffffffff8c11c060 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 192.515174][ T5856] #1: ffff8880633e31b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 192.526125][ T5856] [ 192.526125][ T5856] stack backtrace: [ 192.533032][ T5856] CPU: 0 PID: 5856 Comm: rm Not tainted 5.15.184-syzkaller #0 [ 192.541160][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.552212][ T5856] Call Trace: [ 192.556369][ T5856] [ 192.560013][ T5856] dump_stack_lvl+0x168/0x230 [ 192.565801][ T5856] ? load_image+0x3b0/0x3b0 [ 192.571230][ T5856] ? show_regs_print_info+0x20/0x20 [ 192.576980][ T5856] ? print_circular_bug+0x12b/0x1a0 [ 192.583434][ T5856] check_noncircular+0x274/0x310 [ 192.588754][ T5856] ? add_chain_block+0x940/0x940 [ 192.594923][ T5856] ? lockdep_lock+0xdc/0x1e0 [ 192.600531][ T5856] ? mark_lock+0x94/0x320 [ 192.606433][ T5856] ? _find_first_zero_bit+0xce/0xf0 [ 192.612866][ T5856] __lock_acquire+0x2c33/0x7c60 [ 192.617797][ T5856] ? verify_lock_unused+0x140/0x140 [ 192.623939][ T5856] lock_acquire+0x197/0x3f0 [ 192.628747][ T5856] ? kvfree_call_rcu+0x186/0x7c0 [ 192.635767][ T5856] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 192.644034][ T5856] ? read_lock_is_recursive+0x10/0x10 [ 192.649979][ T5856] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 192.656981][ T5856] ? _raw_spin_unlock+0x40/0x40 [ 192.662488][ T5856] ? debug_object_active_state+0x6b/0x340 [ 192.669673][ T5856] _raw_spin_lock+0x2a/0x40 [ 192.675904][ T5856] ? kvfree_call_rcu+0x186/0x7c0 [ 192.683835][ T5856] kvfree_call_rcu+0x186/0x7c0 [ 192.689642][ T5856] ? call_rcu+0x920/0x920 [ 192.694957][ T5856] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 192.701534][ T5856] ? _raw_spin_lock+0x40/0x40 [ 192.706211][ T5856] ? longest_prefix_match+0x4c6/0x660 [ 192.713467][ T5856] trie_delete_elem+0x58c/0x710 [ 192.719477][ T5856] bpf_prog_8c8ab8634bca3061+0x3a/0xcc [ 192.725213][ T5856] bpf_trace_run3+0x17e/0x320 [ 192.730194][ T5856] ? bpf_trace_run2+0x2d0/0x2d0 [ 192.736179][ T5856] ? do_sys_openat2+0x207/0x4a0 [ 192.743076][ T5856] ? lockdep_hardirqs_on+0x94/0x140 [ 192.749250][ T5856] ? do_sys_openat2+0x207/0x4a0 [ 192.755804][ T5856] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 192.762576][ T5856] ? do_sys_openat2+0x207/0x4a0 [ 192.769091][ T5856] kmem_cache_free+0x1e7/0x210 [ 192.775871][ T5856] ? fd_install+0x2b1/0x4c0 [ 192.782664][ T5856] do_sys_openat2+0x207/0x4a0 [ 192.787553][ T5856] ? do_sys_open+0xe0/0xe0 [ 192.794357][ T5856] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 192.800863][ T5856] ? lock_chain_count+0x20/0x20 [ 192.806056][ T5856] ? vtime_user_exit+0x2dc/0x400 [ 192.811861][ T5856] __x64_sys_openat+0x135/0x160 [ 192.818361][ T5856] do_syscall_64+0x4c/0xa0 [ 192.823393][ T5856] ? clear_bhb_loop+0x30/0x80 [ 192.833377][ T5856] ? clear_bhb_loop+0x30/0x80 [ 192.840949][ T5856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.847857][ T5856] RIP: 0033:0x7f71c23af0ba [ 192.854845][ T5856] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 192.879872][ T5856] RSP: 002b:00007fff42d44b78 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 192.888549][ T5856] RAX: ffffffffffffffda RBX: 00007fff42d44bf0 RCX: 00007f71c23af0ba [ 192.897607][ T5856] RDX: 0000000000080000 RSI: 00007fff42d44bf0 RDI: 00000000ffffff9c [ 192.906448][ T5856] RBP: 00007fff42d44be0 R08: 00007fff42d44de7 R09: 0000000000000000 [ 192.915656][ T5856] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000011 [ 192.926708][ T5856] R13: 00007f71c238b000 R14: 00007fff42d44e00 R15: 0000000000000000 [ 192.936443][ T5856] [ 194.202525][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.209578][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.815931][ T5860] loop5: detected capacity change from 0 to 40427 [ 194.844373][ T5860] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 194.865872][ T5860] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 194.883817][ T5860] F2FS-fs (loop5): invalid crc value [ 194.902908][ T5860] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 201.396869][ T4289] Bluetooth: hci0: command 0x0406 tx timeout