last executing test programs: 3m39.032930984s ago: executing program 0 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40281, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3m38.045425925s ago: executing program 0 (id=9): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r6, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) 3m37.049557317s ago: executing program 0 (id=13): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @empty, 0x4}, 0x1c) getsockopt$inet_int(r2, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/fscaps', 0x0, 0x1c) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xe, 0x8, 0xff, 0x5, 0x1daf, 0x10}, {0x4, 0x1717, 0xe6f, 0x6, 0x65, 0x1000}], ['\x00']}) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) read$char_usb(r4, &(0x7f0000000340)=""/170, 0xaa) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}, {0xa}}}, 0x24}}, 0x20040000) accept4(r0, &(0x7f0000000200)=@ethernet={0x0, @local}, &(0x7f00000002c0)=0x80, 0x80800) 3m31.378563055s ago: executing program 0 (id=37): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a3332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87516e405eff30", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000000500)='\x00', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) setresuid(0x0, 0xee00, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) 3m27.119698758s ago: executing program 0 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) 3m26.016735423s ago: executing program 0 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x3, 0x2, {0x4, 0x8, 0xfffffffc, 0x0, 0x7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e105000000", 0x16}, {0x0}], 0x2}, 0x0) 3m10.958043496s ago: executing program 32 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x3, 0x2, {0x4, 0x8, 0xfffffffc, 0x0, 0x7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e105000000", 0x16}, {0x0}], 0x2}, 0x0) 9.369152425s ago: executing program 2 (id=668): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x1) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x1}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 7.611968291s ago: executing program 5 (id=674): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.555413005s ago: executing program 2 (id=676): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000008c0)="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", 0x8d5) 5.553275395s ago: executing program 3 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0), 0x0, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) mount$tmpfs(0x0, 0x0, 0x0, 0x802, 0x0) 5.501638857s ago: executing program 5 (id=682): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 4.612323365s ago: executing program 1 (id=683): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x800) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 4.610782265s ago: executing program 3 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f00000005c0)={[{@uni_xlateno}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp860'}}]}, 0x25, 0x368, &(0x7f0000000d40)="$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") getdents64(0xffffffffffffffff, &(0x7f0000006400)=""/4109, 0x100d) 4.555384627s ago: executing program 1 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x9, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) 4.555110057s ago: executing program 5 (id=686): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 4.554778607s ago: executing program 2 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r4, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) 4.475216289s ago: executing program 4 (id=688): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0xb0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd6, 0xd, 0x3, {0x7, 0x25, 0x1, 0xc, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xac, 0x7, 0x5, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7}}}}}}}}]}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 3.728465512s ago: executing program 3 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x4000c01, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) 3.664052115s ago: executing program 1 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 3.632630405s ago: executing program 5 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) fcntl$addseals(r3, 0x409, 0xa) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x34ffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.995689017s ago: executing program 5 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.995463827s ago: executing program 1 (id=693): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0xfffffffc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 1.995249457s ago: executing program 2 (id=694): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x7ff, 0x0, 0x0, 0xb, 0x400, 0x3, 0x7fffffff}, 0x0, 0x0) 1.995069327s ago: executing program 3 (id=695): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.994909827s ago: executing program 4 (id=696): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000001000200000004"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000008700)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000100)="f38e34c50425202d978059b582948c0fa608c22328dfc29eabd11d69e05888d826cad08f2db2ccf101d414ea79a98b2d0409bcadba67e00f29fa1fc4eb7bb1575152f44e26a56e5a913837fc7489b898be6f86442eabc1625fbbbd393634333f06bda48336362918d0557c31af62192c41b1cb066e980a420d8d4d4647bb0caacdf01fb0510d530b08fea5052c5035413a7a43b34153cfed14fd4cc6db8c9b5a6e460b9518676d242dd42a1a97615e847dd2ea84d6e9d6de672fd2aa707f65fdb1bdd1ef1bc821a7", 0xc8}], 0x1}}], 0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.959990188s ago: executing program 3 (id=697): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(0xffffffffffffffff, &(0x7f0000001080), 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.813791602s ago: executing program 4 (id=698): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x800) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.58572042s ago: executing program 4 (id=699): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2a040, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x0, 0x18}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) 1.140723434s ago: executing program 2 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f00000005c0)={[{@uni_xlateno}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp860'}}]}, 0x25, 0x368, &(0x7f0000000d40)="$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") getdents64(0xffffffffffffffff, &(0x7f0000006400)=""/4109, 0x100d) 1.140509334s ago: executing program 4 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x9, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) 1.048506067s ago: executing program 5 (id=702): socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x7d) r0 = socket$key(0xf, 0x3, 0x2) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x161) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x101) socket$packet(0x11, 0x2, 0x300) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.047886077s ago: executing program 1 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000f00), 0x0, 0x20000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f088a84ce0003000002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 985.780079ms ago: executing program 3 (id=704): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x22d1024, 0x0) 123.859326ms ago: executing program 4 (id=705): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chroot(&(0x7f0000000040)='./file0\x00') geteuid() r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 119.324226ms ago: executing program 1 (id=706): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x9a77d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) r3 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x14}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=707): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 28.658330][ T4313] cgroup: Unknown subsys name 'net' [ 28.966234][ T4313] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.262686][ T4313] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.969600][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.971471][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.973630][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.976205][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.977727][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.979118][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.981061][ T4338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.982495][ T4338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.983882][ T4338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.983948][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.985703][ T4338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.986392][ T4341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.987272][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.988697][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.990689][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.991097][ T4341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.993128][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.993550][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.994726][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.997245][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.998257][ T4341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.999835][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.001444][ T4327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.003124][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.004816][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.008866][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.010298][ T4327] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.011533][ T4327] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.012696][ T4334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.014175][ T4341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.157839][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.165370][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.210077][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 30.215848][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.217015][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.218465][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.221815][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.222933][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.225283][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.226822][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.238718][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.260179][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.267482][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 30.282641][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.284554][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.286030][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.288943][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.290113][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.291531][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.301582][ T4330] team0: Port device team_slave_0 added [ 30.304071][ T4330] team0: Port device team_slave_1 added [ 30.309969][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.311273][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.312789][ T4325] device bridge_slave_0 entered promiscuous mode [ 30.314692][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.315800][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.317271][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.328397][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.329551][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.330961][ T4325] device bridge_slave_1 entered promiscuous mode [ 30.332426][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.334254][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.338429][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.340564][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.341602][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.343107][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.350161][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.352612][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.355644][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.365501][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.366706][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.370736][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.375655][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.380155][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.382568][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.391072][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.392360][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.394233][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.397595][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.398744][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.400183][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.402829][ T4326] team0: Port device team_slave_0 added [ 30.404891][ T4326] team0: Port device team_slave_1 added [ 30.410393][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.411478][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.415794][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.474853][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.523363][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.563933][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.565058][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.568850][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.571681][ T4337] team0: Port device team_slave_0 added [ 30.576730][ T4325] team0: Port device team_slave_0 added [ 30.581038][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.582938][ T4337] team0: Port device team_slave_1 added [ 30.587257][ T4325] team0: Port device team_slave_1 added [ 30.588997][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.592948][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.594405][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.598601][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.606907][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.607917][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.612013][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.654291][ T4326] device hsr_slave_0 entered promiscuous mode [ 30.703422][ T4326] device hsr_slave_1 entered promiscuous mode [ 30.743306][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.744738][ T4326] Cannot create hsr debugfs directory [ 30.752348][ T4335] team0: Port device team_slave_0 added [ 30.814322][ T4337] device hsr_slave_0 entered promiscuous mode [ 30.853471][ T4337] device hsr_slave_1 entered promiscuous mode [ 30.893276][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.894487][ T4337] Cannot create hsr debugfs directory [ 30.904651][ T4335] team0: Port device team_slave_1 added [ 30.909657][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.910773][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.916989][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.924639][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.925786][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.929473][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.940354][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.941487][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.945906][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.952704][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.954138][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.957878][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.024698][ T4325] device hsr_slave_0 entered promiscuous mode [ 31.063421][ T4325] device hsr_slave_1 entered promiscuous mode [ 31.103209][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.104489][ T4325] Cannot create hsr debugfs directory [ 31.164403][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.203452][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.243268][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.244587][ T4335] Cannot create hsr debugfs directory [ 31.329700][ T4330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.394342][ T4330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.435716][ T4337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.474289][ T4337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.514906][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.562234][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.614983][ T4330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.654542][ T4337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.694368][ T4337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.736051][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.775402][ T4330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.815275][ T4325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.866189][ T4325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.905392][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.947810][ T4325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.985080][ T4325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.057367][ T4335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.073681][ T4341] Bluetooth: hci4: command 0x0409 tx timeout [ 32.074185][ T4329] Bluetooth: hci2: command 0x0409 tx timeout [ 32.074787][ T4341] Bluetooth: hci3: command 0x0409 tx timeout [ 32.075770][ T4329] Bluetooth: hci1: command 0x0409 tx timeout [ 32.076667][ T4341] Bluetooth: hci0: command 0x0409 tx timeout [ 32.094711][ T4335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.137654][ T4335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.175062][ T4335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.265696][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.284973][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.286938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.290690][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.297829][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.305548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.307107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.308712][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.309857][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.320169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.328337][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.329978][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.331639][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.332723][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.338801][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.341449][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.346242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.348168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.349657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.351846][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.359317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.361053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.362372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.366967][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.369528][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.372755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.375619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.377093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.378940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.380465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.387712][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.390429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.392331][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.394923][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.396116][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.397869][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.399613][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.401086][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.402306][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.404071][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.405697][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.407361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.408983][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.410445][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.411877][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.412967][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.415330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.416799][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.418220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.419569][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.429862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.431437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.433326][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.434922][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.436287][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.437332][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.438655][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.440209][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.441816][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.445673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.447170][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.448751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.450168][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.451292][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.456790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.458280][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.460231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.461799][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.463696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.465255][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.466816][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.468332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.469796][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.474234][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.480568][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.482131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.484364][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.485922][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.487454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.488892][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.490112][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.491463][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.492972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.497190][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.498372][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.499721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.501260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.502747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.505611][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.506747][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.508023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.510237][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.517320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.519074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.520630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.522306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.525083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.530595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.532537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.534635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.536534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.548948][ T4325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.550597][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.554208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.555780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.557253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.558826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.560279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.561726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.567032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.568668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.570159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.571601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.576279][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.578169][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.589201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.590648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.592297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.594192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.596511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.598072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.599659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.601156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.602579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.610513][ T4335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.612410][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.616356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.618268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.619799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.647530][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.648886][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.651907][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.666913][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.668541][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.687863][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.689481][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.692804][ T4337] device veth0_vlan entered promiscuous mode [ 32.695600][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.697115][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.705385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.706742][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.716728][ T4337] device veth1_vlan entered promiscuous mode [ 32.718402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.719767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.721055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.726899][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.736705][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.747152][ T4337] device veth0_macvtap entered promiscuous mode [ 32.749134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.750609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.752131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.754145][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.766758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.768596][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.775560][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.776833][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.779803][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.791295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.792774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.795538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.796924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.800067][ T4337] device veth1_macvtap entered promiscuous mode [ 32.809485][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.811119][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.812639][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.814541][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.815849][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.820380][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.832806][ T4330] device veth0_vlan entered promiscuous mode [ 32.836053][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.839575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.841151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.842635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.846670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.848571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.850033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.854775][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.859224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.860873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.864270][ T4326] device veth0_vlan entered promiscuous mode [ 32.867468][ T4330] device veth1_vlan entered promiscuous mode [ 32.873050][ T4326] device veth1_vlan entered promiscuous mode [ 32.878384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.880059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.881687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.883125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.885279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.888230][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.889629][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.890895][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.892245][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.909060][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.910683][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.912269][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.914318][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.916037][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.927288][ T4330] device veth0_macvtap entered promiscuous mode [ 32.933008][ T4326] device veth0_macvtap entered promiscuous mode [ 32.940039][ T4330] device veth1_macvtap entered promiscuous mode [ 32.941395][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.942811][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.945409][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.946848][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.948441][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.950292][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.951689][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.968287][ T4326] device veth1_macvtap entered promiscuous mode [ 32.970716][ T4335] device veth0_vlan entered promiscuous mode [ 32.972279][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.973758][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.975323][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.980318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.981827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.991004][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.992649][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.996073][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.997560][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.999113][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.000570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.002162][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.012455][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.014476][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.016755][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.019994][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.021375][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.028202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.029810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.031360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.036876][ T4335] device veth1_vlan entered promiscuous mode [ 33.038572][ T4325] device veth0_vlan entered promiscuous mode [ 33.041768][ T4325] device veth1_vlan entered promiscuous mode [ 33.045996][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.047649][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.049137][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.050694][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.052698][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.056392][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.057771][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.059075][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.060398][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.067396][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.069018][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.070480][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.071900][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.074326][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.076482][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.078071][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.079614][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.081136][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.083993][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.085333][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.086903][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.097482][ T510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.098685][ T510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.098779][ T4325] device veth0_macvtap entered promiscuous mode [ 33.102229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.103786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.105087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.106586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.108078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.109443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.123680][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.126393][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.127836][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.129154][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.130420][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.134904][ T4325] device veth1_macvtap entered promiscuous mode [ 33.140482][ T4335] device veth0_macvtap entered promiscuous mode [ 33.157107][ T4335] device veth1_macvtap entered promiscuous mode [ 33.161224][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.163126][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.166441][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.167991][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.169565][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.171337][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.175030][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.178348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.179818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.181251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.182700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.188071][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.196469][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.197737][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.213718][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.219076][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.220563][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.222361][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.224269][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.226304][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.227861][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.229828][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.232251][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.234660][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.236490][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.238044][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.239677][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.241384][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.243941][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.246151][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.248447][ T4325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.249853][ T4325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.251081][ T4325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.252539][ T4325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.263368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.264829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.266345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.267905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.269392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.305120][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.306395][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.308334][ T510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.309567][ T510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.316021][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.317226][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.318047][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.320201][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.321652][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.324331][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.325828][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.327454][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.328856][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.330533][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.332836][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.339227][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.340718][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.342122][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.345250][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.350821][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.641694][ T4335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.643207][ T4335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.644508][ T4335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.645778][ T4335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.680456][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.683688][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.686956][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.711553][ T4341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 33.714470][ T4341] CPU: 1 PID: 4341 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 33.715768][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 33.717410][ T4341] Workqueue: hci2 hci_rx_work [ 33.718154][ T4341] Call trace: [ 33.718645][ T4341] dump_backtrace+0x1c0/0x1ec [ 33.719341][ T4341] show_stack+0x2c/0x3c [ 33.719974][ T4341] __dump_stack+0x30/0x40 [ 33.720649][ T4341] dump_stack_lvl+0xf4/0x15c [ 33.721402][ T4341] dump_stack+0x1c/0x5c [ 33.722079][ T4341] sysfs_create_dir_ns+0x244/0x264 [ 33.722925][ T4341] kobject_add_internal+0x598/0xb08 [ 33.723774][ T4341] kobject_add+0x140/0x20c [ 33.724460][ T4341] device_add+0x3f8/0xefc [ 33.725124][ T4341] hci_conn_add_sysfs+0xbc/0x1c8 [ 33.725835][ T4341] le_conn_complete_evt+0xcc8/0x1244 [ 33.726644][ T4341] hci_le_conn_complete_evt+0x114/0x3f4 [ 33.727541][ T4341] hci_le_meta_evt+0x2c0/0x4a0 [ 33.728255][ T4341] hci_event_packet+0x6b8/0xf18 [ 33.728974][ T4341] hci_rx_work+0x328/0xa84 [ 33.729652][ T4341] process_one_work+0x7f8/0x13a4 [ 33.730442][ T4341] worker_thread+0x8c4/0xfec [ 33.731092][ T4341] kthread+0x250/0x2d8 [ 33.731670][ T4341] ret_from_fork+0x10/0x20 [ 33.732599][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.732903][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.734905][ T4341] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 33.735107][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.737228][ T4341] Bluetooth: hci2: failed to register connection device [ 33.738386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.740086][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.767199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.778159][ T4415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.779797][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.780988][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.782231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.785725][ T4415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.867541][ T4420] loop1: detected capacity change from 0 to 1024 [ 33.878813][ T4420] hfsplus: invalid length 32517 has been corrected to 255 [ 33.881809][ T4422] device syzkaller0 entered promiscuous mode [ 33.888959][ T4422] tipc: Started in network mode [ 33.889777][ T4422] tipc: Node identity 32454649e5ce, cluster identity 4711 [ 33.890965][ T4422] tipc: Enabled bearer , priority 0 [ 33.900055][ T4418] tipc: Resetting bearer [ 33.964213][ T4423] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4325] was attempted by " [ 34.153708][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 34.153795][ T4341] Bluetooth: hci0: command 0x041b tx timeout [ 34.158315][ T4329] Bluetooth: hci3: command 0x041b tx timeout [ 34.167209][ T4327] Bluetooth: hci2: command 0x041b tx timeout [ 34.170545][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 34.236784][ T4418] tipc: Disabling bearer [ 34.240441][ T4420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1'. [ 34.242088][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1'. [ 34.306618][ T4427] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 34.307969][ T4427] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 34.309178][ T4427] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 34.310402][ T4427] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 34.311758][ T4427] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 34.313088][ T4427] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 34.314378][ T4427] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 34.315578][ T4427] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 34.316859][ T4427] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 34.318083][ T4427] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 34.769736][ T4429] netlink: 'syz.1.1': attribute type 4 has an invalid length. [ 34.771008][ T4429] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1'. [ 34.776338][ T4429] .`: renamed from bond0 [ 34.847816][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 34.872185][ T4433] bond1 (unregistering): Released all slaves [ 34.910934][ T4437] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 34.979496][ T4439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7'. [ 35.794137][ T4450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 36.233792][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 36.233812][ T4341] Bluetooth: hci0: command 0x040f tx timeout [ 36.236252][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 36.236331][ T4327] Bluetooth: hci2: command 0x040f tx timeout [ 36.236349][ T4334] Bluetooth: hci1: command 0x040f tx timeout [ 36.441192][ T4458] device macsec0 entered promiscuous mode [ 36.450773][ T4456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11'. [ 36.459071][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 36.461294][ T4458] device veth1_macvtap left promiscuous mode [ 36.600662][ T4458] device macsec0 left promiscuous mode [ 36.626812][ T4468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 36.686213][ T4329] block nbd0: Receive control failed (result -1) [ 37.119114][ T4475] device syzkaller0 entered promiscuous mode [ 37.137725][ T4475] tipc: Started in network mode [ 37.138627][ T4475] tipc: Node identity be22e7655aac, cluster identity 4711 [ 37.140022][ T4475] tipc: Enabled bearer , priority 0 [ 37.142597][ T4477] loop4: detected capacity change from 0 to 8192 [ 37.154873][ T4477] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value [ 37.157241][ T4474] tipc: Resetting bearer [ 37.278632][ T4474] tipc: Disabling bearer [ 37.355624][ T4481] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4337] was attempted by " [ 37.583608][ T4483] lo speed is unknown, defaulting to 1000 [ 37.601743][ T4483] lo speed is unknown, defaulting to 1000 [ 37.611652][ T4483] lo speed is unknown, defaulting to 1000 [ 37.635527][ T4483] infiniband sz1: set active [ 37.637046][ T4483] infiniband sz1: added lo [ 37.641176][ T4487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.642879][ T4376] lo speed is unknown, defaulting to 1000 [ 37.661927][ T4487] device bond_slave_0 entered promiscuous mode [ 37.663045][ T4487] device bond_slave_1 entered promiscuous mode [ 37.666721][ T4487] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 37.668318][ T4483] RDS/IB: sz1: added [ 37.670417][ T4483] smc: adding ib device sz1 with port count 1 [ 37.671569][ T4483] smc: ib device sz1 port 1 has pnetid [ 37.671672][ T4487] bond1: (slave macvlan2): making interface the new active one [ 37.675294][ T4487] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 37.676977][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 37.680740][ T4376] lo speed is unknown, defaulting to 1000 [ 37.690888][ T4483] lo speed is unknown, defaulting to 1000 [ 37.714934][ T4483] lo speed is unknown, defaulting to 1000 [ 37.733318][ T4483] lo speed is unknown, defaulting to 1000 [ 37.751493][ T4483] lo speed is unknown, defaulting to 1000 [ 37.762324][ T4486] loop3: detected capacity change from 0 to 40427 [ 37.771696][ T4483] lo speed is unknown, defaulting to 1000 [ 37.776956][ T4486] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 37.780722][ T4486] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.810190][ T4486] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.828514][ T4486] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.829772][ T4486] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.111430][ T4486] syz.3.22: attempt to access beyond end of device [ 38.111430][ T4486] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 38.410401][ T4501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'. [ 38.473971][ T4329] Bluetooth: hci2: command 0x0419 tx timeout [ 38.473999][ T4341] Bluetooth: hci0: command 0x0419 tx timeout [ 38.476470][ T4341] Bluetooth: hci4: command 0x0419 tx timeout [ 38.478321][ T4341] Bluetooth: hci1: command 0x0419 tx timeout [ 38.479634][ T4329] Bluetooth: hci3: command 0x0419 tx timeout [ 39.197674][ T4512] loop2: detected capacity change from 0 to 128 [ 39.236689][ T4512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.252671][ T4512] EXT4-fs (loop2): shut down requested (2) [ 39.267224][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 40.048448][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 40.077887][ T4327] block nbd1: Receive control failed (result -1) [ 40.741022][ T4327] Bluetooth: hci2: command 0x0406 tx timeout [ 41.495076][ T4548] loop2: detected capacity change from 0 to 256 [ 41.501277][ T4548] FAT-fs (loop2): Unrecognized mount option "shortname=winÅÙ4„“Bpxla‹e=1" or missing value [ 41.585309][ T4318] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.670925][ T4555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.38'. [ 42.028485][ T4550] loop0: detected capacity change from 0 to 40427 [ 42.086509][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 42.316002][ T4550] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 42.317636][ T4550] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.369984][ T4550] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.381780][ T4550] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.382929][ T4550] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.393117][ T4563] tipc: Enabled bearer , priority 10 [ 42.490869][ T4571] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 42.519178][ T4571] tipc: Enabled bearer , priority 10 [ 43.861482][ T4377] tipc: Node number set to 3834570597 [ 44.706213][ T4598] net_ratelimit: 5266 callbacks suppressed [ 44.706225][ T4598] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 44.708450][ T4598] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 44.709700][ T4598] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 44.710958][ T4598] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 44.712135][ T4598] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 44.713337][ T4598] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 44.714497][ T4598] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 44.715729][ T4598] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 44.717062][ T4598] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 44.718237][ T4598] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 45.237979][ T4572] syz.0.37: attempt to access beyond end of device [ 45.237979][ T4572] loop0: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 45.688025][ T4572] syz.0.37: attempt to access beyond end of device [ 45.688025][ T4572] loop0: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 45.690508][ T4609] device macsec0 entered promiscuous mode [ 45.694619][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 45.701166][ T4609] device veth1_macvtap left promiscuous mode [ 45.703492][ T4572] syz.0.37: attempt to access beyond end of device [ 45.703492][ T4572] loop0: rw=2049, sector=57344, nr_sectors = 560 limit=40427 [ 45.806784][ T4609] device macsec0 left promiscuous mode [ 45.890437][ T4591] capability: warning: `syz.2.54' uses deprecated v2 capabilities in a way that may be insecure [ 45.946948][ T4615] loop3: detected capacity change from 0 to 256 [ 46.279436][ T4615] ======================================================= [ 46.279436][ T4615] WARNING: The mand mount option has been deprecated and [ 46.279436][ T4615] and is ignored by this kernel. Remove the mand [ 46.279436][ T4615] option from the mount to silence this warning. [ 46.279436][ T4615] ======================================================= [ 46.300708][ T4615] FAT-fs (loop3): Directory bread(block 64) failed [ 46.301816][ T4615] FAT-fs (loop3): Directory bread(block 65) failed [ 46.302900][ T4615] FAT-fs (loop3): Directory bread(block 66) failed [ 46.308347][ T4615] FAT-fs (loop3): Directory bread(block 67) failed [ 46.310014][ T4615] FAT-fs (loop3): Directory bread(block 68) failed [ 46.311085][ T4615] FAT-fs (loop3): Directory bread(block 69) failed [ 46.312177][ T4615] FAT-fs (loop3): Directory bread(block 70) failed [ 46.313835][ T4615] FAT-fs (loop3): Directory bread(block 71) failed [ 46.314932][ T4615] FAT-fs (loop3): Directory bread(block 72) failed [ 46.315960][ T4615] FAT-fs (loop3): Directory bread(block 73) failed [ 46.866315][ T4630] device syzkaller0 entered promiscuous mode [ 46.870871][ T4630] tipc: Started in network mode [ 46.871851][ T4630] tipc: Node identity dad7c59b2ceb, cluster identity 4711 [ 46.875649][ T4630] tipc: Enabled bearer , priority 0 [ 46.878646][ T4629] tipc: Resetting bearer [ 46.979748][ T4629] tipc: Disabling bearer [ 47.255797][ T4638] process 'syz.1.68' launched '/dev/fd/3' with NULL argv: empty string added [ 47.267311][ T4642] loop4: detected capacity change from 0 to 256 [ 47.268983][ T4642] FAT-fs (loop4): Unrecognized mount option "shortname=winÅÙ4„“Bpxla‹e=1" or missing value [ 47.281268][ T4627] device syzkaller0 entered promiscuous mode [ 47.298431][ T4318] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.666744][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 49.223144][ C0] sched: RT throttling activated [ 62.486903][ T4327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.488749][ T4327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.490363][ T4327] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.492015][ T4327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.506308][ T4327] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 62.508063][ T4327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.936898][ T4715] tipc: Enabling of bearer rejected, failed to enable media [ 62.994423][ T4700] lo speed is unknown, defaulting to 1000 [ 63.695788][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.716587][ T4700] chnl_net:caif_netlink_parms(): no params data found [ 63.732659][ T4700] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.734027][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.735463][ T4700] device bridge_slave_0 entered promiscuous mode [ 63.774814][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.777391][ T4700] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.778554][ T4700] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.779988][ T4700] device bridge_slave_1 entered promiscuous mode [ 63.787436][ T4700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.789952][ T4700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.798954][ T4700] team0: Port device team_slave_0 added [ 63.801266][ T4700] team0: Port device team_slave_1 added [ 63.806921][ T4700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.808142][ T4700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.811884][ T4700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.815233][ T4700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.816273][ T4700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.823387][ T4700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.850586][ T4727] loop3: detected capacity change from 0 to 256 [ 63.852156][ T4727] FAT-fs (loop3): Unrecognized mount option "shortname=winÅÙ4„“Bpxla‹e=1" or missing value [ 63.868019][ T4700] device hsr_slave_0 entered promiscuous mode [ 63.954770][ T4700] device hsr_slave_1 entered promiscuous mode [ 64.068012][ T4700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.069400][ T4700] Cannot create hsr debugfs directory [ 64.104885][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.308791][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.476485][ T4700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.487553][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.488667][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.506155][ T4700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.544378][ T4700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.553360][ T4329] Bluetooth: hci5: command 0x0409 tx timeout [ 64.574677][ T4700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.704833][ T39] tipc: Left network mode [ 64.743290][ T4700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.903496][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.905297][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.922684][ T4700] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.928896][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.932723][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.938003][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.939164][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.940668][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.942224][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.947024][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.948222][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.038976][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.040664][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.042344][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.044672][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.046660][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.048433][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.490397][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 66.634539][ T4329] Bluetooth: hci5: command 0x041b tx timeout [ 66.671232][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.672995][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.677594][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.682615][ T4700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.685255][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.688783][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.690493][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.692394][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.714116][ T4327] Bluetooth: hci5: command 0x040f tx timeout [ 68.751385][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 68.753042][ T4803] Zero length message leads to an empty skb [ 69.619423][ T2476] cfg80211: failed to load regulatory.db [ 70.437025][ T4858] loop1: detected capacity change from 0 to 2048 [ 70.444308][ T4858] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 70.445751][ T4858] UDF-fs: Scanning with blocksize 512 failed [ 70.451473][ T4858] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 70.452802][ T4858] UDF-fs: Scanning with blocksize 1024 failed [ 70.793627][ T4327] Bluetooth: hci5: command 0x0419 tx timeout [ 71.309792][ T4858] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=515, location=515 [ 71.316908][ T4858] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 71.318176][ T4858] UDF-fs: Scanning with blocksize 2048 failed [ 71.319934][ T4858] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=259, location=259 [ 71.373398][ T4858] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=515, location=515 [ 71.386444][ T4858] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 71.387622][ T4858] UDF-fs: Scanning with blocksize 4096 failed [ 71.388591][ T4858] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 71.529280][ T4700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.608228][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.618949][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.187160][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 72.193884][ T4888] device bridge_slave_1 left promiscuous mode [ 72.298738][ T4892] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 72.557421][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.637150][ T4888] device bridge_slave_0 left promiscuous mode [ 72.638407][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.855653][ T4895] netlink: 72 bytes leftover after parsing attributes in process `syz.3.103'. [ 75.082227][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.086229][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.087819][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.284267][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.469258][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.589052][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.874186][ T4700] device veth0_vlan entered promiscuous mode [ 75.877917][ T4700] device veth1_vlan entered promiscuous mode [ 75.949074][ T4700] device veth0_macvtap entered promiscuous mode [ 75.961584][ T4700] device veth1_macvtap entered promiscuous mode [ 76.169575][ T4953] Soft offlining pfn 0x14d622 at process virtual address 0x20000000 [ 76.172537][ T4953] Soft offlining pfn 0x14d623 at process virtual address 0x20001000 [ 76.174043][ T4953] Soft offlining pfn 0x14d624 at process virtual address 0x20002000 [ 76.175522][ T4953] Soft offlining pfn 0x14d625 at process virtual address 0x20003000 [ 76.176910][ T4953] Soft offlining pfn 0x14d626 at process virtual address 0x20004000 [ 76.178274][ T4953] Soft offlining pfn 0x14d627 at process virtual address 0x20005000 [ 76.179621][ T4953] Soft offlining pfn 0x14d628 at process virtual address 0x20006000 [ 76.181169][ T4953] Soft offlining pfn 0x14d629 at process virtual address 0x20007000 [ 76.182564][ T4953] Soft offlining pfn 0x14d62a at process virtual address 0x20008000 [ 76.184001][ T4953] Soft offlining pfn 0x14d62b at process virtual address 0x20009000 [ 76.185284][ T4953] Soft offlining pfn 0x14d62c at process virtual address 0x2000a000 [ 76.186703][ T4953] Soft offlining pfn 0x14d62d at process virtual address 0x2000b000 [ 76.188063][ T4953] Soft offlining pfn 0x14d62e at process virtual address 0x2000c000 [ 76.189657][ T4953] Soft offlining pfn 0x14d62f at process virtual address 0x2000d000 [ 76.191061][ T4953] Soft offlining pfn 0x14d630 at process virtual address 0x2000e000 [ 76.192505][ T4953] Soft offlining pfn 0x14d631 at process virtual address 0x2000f000 [ 76.193944][ T4953] Soft offlining pfn 0x14d632 at process virtual address 0x20010000 [ 76.195185][ T4953] Soft offlining pfn 0x14d633 at process virtual address 0x20011000 [ 76.474067][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.475816][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.477438][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.479144][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.482851][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.489880][ T4945] lo speed is unknown, defaulting to 1000 [ 76.491363][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.499681][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.501494][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.505511][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.515513][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.520352][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.525149][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.530191][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.533402][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.534988][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.538146][ T4700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.539638][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.541388][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.543119][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.594383][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.596430][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.598278][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.600731][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.607996][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.610746][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.613467][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.617385][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.620124][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.622829][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.642874][ T4700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.652996][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.658193][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.668746][ T4700] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.670277][ T4700] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.671620][ T4700] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.672918][ T4700] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.817095][ T4973] fuse: Bad value for 'fd' [ 77.048774][ T4982] device syzkaller0 entered promiscuous mode [ 77.149889][ T4806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.151276][ T4806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.160790][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.174413][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.175946][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.177452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.302120][ T39] device hsr_slave_0 left promiscuous mode [ 78.363971][ T39] device hsr_slave_1 left promiscuous mode [ 78.611502][ T5040] xt_CONNSECMARK: invalid mode: 0 [ 78.883437][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.884774][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.896941][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.899334][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.920949][ T39] device bridge_slave_1 left promiscuous mode [ 78.925574][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.954692][ T39] device bridge_slave_0 left promiscuous mode [ 78.957455][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.073610][ T39] device veth0_macvtap left promiscuous mode [ 79.074750][ T39] device veth1_vlan left promiscuous mode [ 79.075795][ T39] device veth0_vlan left promiscuous mode [ 79.390012][ T5061] Soft offlining pfn 0x149bee at process virtual address 0x20000000 [ 79.392703][ T5061] Soft offlining pfn 0x149bef at process virtual address 0x20001000 [ 79.394191][ T5061] Soft offlining pfn 0x149bf0 at process virtual address 0x20002000 [ 79.395623][ T5061] Soft offlining pfn 0x149bf1 at process virtual address 0x20003000 [ 79.396926][ T5061] Soft offlining pfn 0x149bf2 at process virtual address 0x20004000 [ 79.398268][ T5061] Soft offlining pfn 0x149bf3 at process virtual address 0x20005000 [ 79.399540][ T5061] Soft offlining pfn 0x149bf4 at process virtual address 0x20006000 [ 79.400867][ T5061] Soft offlining pfn 0x149bf5 at process virtual address 0x20007000 [ 79.402174][ T5061] Soft offlining pfn 0x149bd8 at process virtual address 0x20008000 [ 79.403849][ T5061] Soft offlining pfn 0x149bd9 at process virtual address 0x20009000 [ 79.405165][ T5061] Soft offlining pfn 0x149bda at process virtual address 0x2000a000 [ 79.406604][ T5061] Soft offlining pfn 0x149bdb at process virtual address 0x2000b000 [ 79.407920][ T5061] Soft offlining pfn 0x149bdc at process virtual address 0x2000c000 [ 79.409273][ T5061] Soft offlining pfn 0x149bdd at process virtual address 0x2000d000 [ 79.410616][ T5061] Soft offlining pfn 0x149bde at process virtual address 0x2000e000 [ 79.411975][ T5061] Soft offlining pfn 0x149bdf at process virtual address 0x2000f000 [ 79.413305][ T5061] Soft offlining pfn 0x149be0 at process virtual address 0x20010000 [ 79.414631][ T5061] Soft offlining pfn 0x149be1 at process virtual address 0x20011000 [ 81.725610][ T39] team0 (unregistering): Port device team_slave_1 removed [ 81.885836][ T39] team0 (unregistering): Port device team_slave_0 removed [ 82.046112][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.243787][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.754463][ T39] bond0 (unregistering): Released all slaves [ 84.042738][ T5069] tipc: Enabling of bearer rejected, failed to enable media [ 84.145984][ T5089] tipc: Started in network mode [ 84.147056][ T5089] tipc: Node identity ac1414aa, cluster identity 4711 [ 84.150700][ T5089] tipc: Enabled bearer , priority 10 [ 84.169937][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 84.526572][ T5102] usb usb8: usbfs: process 5102 (syz.5.138) did not claim interface 0 before use [ 85.263879][ T4411] tipc: Node number set to 2886997162 [ 86.389585][ T5133] Soft offlining pfn 0x14deb6 at process virtual address 0x20000000 [ 86.392165][ T5133] Soft offlining pfn 0x14deb7 at process virtual address 0x20001000 [ 86.393523][ T5133] Soft offlining pfn 0x14dea9 at process virtual address 0x20002000 [ 86.394815][ T5133] Soft offlining pfn 0x14deaf at process virtual address 0x20003000 [ 86.396119][ T5133] Soft offlining pfn 0x14c3bb at process virtual address 0x20004000 [ 86.397393][ T5133] Soft offlining pfn 0x14c3bc at process virtual address 0x20005000 [ 86.398708][ T5133] Soft offlining pfn 0x14c3bd at process virtual address 0x20006000 [ 86.400040][ T5133] Soft offlining pfn 0x14c3be at process virtual address 0x20007000 [ 86.401312][ T5133] Soft offlining pfn 0x14c3bf at process virtual address 0x20008000 [ 86.402659][ T5133] Soft offlining pfn 0x14c3c0 at process virtual address 0x20009000 [ 86.403968][ T5133] Soft offlining pfn 0x14c3c1 at process virtual address 0x2000a000 [ 86.405270][ T5133] Soft offlining pfn 0x14c3c2 at process virtual address 0x2000b000 [ 86.406678][ T5133] Soft offlining pfn 0x14c3c3 at process virtual address 0x2000c000 [ 86.408103][ T5133] Soft offlining pfn 0x14c3c4 at process virtual address 0x2000d000 [ 86.409471][ T5133] Soft offlining pfn 0x14c3c5 at process virtual address 0x2000e000 [ 86.410766][ T5133] Soft offlining pfn 0x14c3c6 at process virtual address 0x2000f000 [ 86.412043][ T5133] Soft offlining pfn 0x14c3c7 at process virtual address 0x20010000 [ 86.413413][ T5133] Soft offlining pfn 0x14c3c8 at process virtual address 0x20011000 [ 88.170117][ T5155] netlink: 20 bytes leftover after parsing attributes in process `syz.5.146'. [ 89.240432][ T5195] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 89.241850][ T5195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.160'. [ 89.381061][ T5210] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 89.381523][ T5202] loop1: detected capacity change from 0 to 512 [ 89.409794][ T5210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.799674][ T5210] bond1: (slave geneve2): making interface the new active one [ 89.801785][ T5221] binder: 5218:5221 tried to acquire reference to desc 0, got 1 instead [ 89.806626][ T5221] binder: 5218:5221 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 89.809627][ T5210] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 89.812455][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 89.822416][ T5221] binder: 5221 RLIMIT_NICE not set [ 89.838073][ T5221] binder: 5221 RLIMIT_NICE not set [ 89.872898][ T4374] binder: release 5218:5221 transaction 5 out, still active [ 90.194991][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 90.217226][ T4374] binder: send failed reply for transaction 12 to 5218:5221 [ 90.218956][ T4374] binder: release 5218:5221 transaction 5 in, still active [ 90.220082][ T4374] binder: send failed reply for transaction 5, target dead [ 90.221236][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 90.222124][ T4374] binder: undelivered TRANSACTION_ERROR: 29189 [ 92.406020][ T5268] loop1: detected capacity change from 0 to 32768 [ 92.417439][ T5268] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 92.418783][ T5268] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 92.432656][ T5268] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 92.437056][ T4411] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 92.438168][ T4411] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 92.466393][ T4411] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 28ms [ 92.471666][ T4411] gfs2: fsid=syz:syz.0: jid=0: Done [ 92.473643][ T5268] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 92.550723][ T5268] gfs2: fsid=syz:syz.0: found 1 quota changes [ 92.942832][ T5280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.175'. [ 93.835447][ T5283] overlayfs: failed to clone upperpath [ 94.355122][ T4335] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 94.355122][ T4335] inode = 11 2339 [ 94.355122][ T4335] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 94.358123][ T4335] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 94.359758][ T4335] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4335 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 94.361773][ T4335] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 94.363626][ T4335] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 94.368984][ T4335] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 94.370456][ T4335] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 94.374196][ T4335] gfs2: fsid=syz:syz.0: File system withdrawn [ 94.375560][ T4335] CPU: 0 PID: 4335 Comm: syz-executor Not tainted syzkaller #0 [ 94.376706][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 94.378208][ T4335] Call trace: [ 94.378675][ T4335] dump_backtrace+0x1c0/0x1ec [ 94.379341][ T4335] show_stack+0x2c/0x3c [ 94.379944][ T4335] __dump_stack+0x30/0x40 [ 94.380570][ T4335] dump_stack_lvl+0xf4/0x15c [ 94.381211][ T4335] dump_stack+0x1c/0x5c [ 94.381816][ T4335] gfs2_withdraw+0x9ec/0x127c [ 94.382505][ T4335] gfs2_consist_inode_i+0xf0/0x10c [ 94.383272][ T4335] gfs2_inode_refresh+0x988/0xe50 [ 94.384046][ T4335] inode_go_instantiate+0x4c/0x68 [ 94.384863][ T4335] gfs2_instantiate+0x178/0x2b4 [ 94.385609][ T4335] gfs2_glock_wait+0x1b4/0x298 [ 94.386359][ T4335] gfs2_glock_nq+0x8bc/0x11c4 [ 94.387074][ T4335] do_sync+0x41c/0xaec [ 94.387752][ T4335] gfs2_quota_sync+0x2cc/0x500 [ 94.388572][ T4335] gfs2_sync_fs+0x4c/0xc4 [ 94.389234][ T4335] sync_filesystem+0xe8/0x218 [ 94.389962][ T4335] generic_shutdown_super+0x70/0x324 [ 94.390812][ T4335] kill_block_super+0x70/0xdc [ 94.391578][ T4335] gfs2_kill_sb+0xc0/0xd4 [ 94.392274][ T4335] deactivate_locked_super+0xac/0x120 [ 94.393116][ T4335] deactivate_super+0xe4/0x104 [ 94.393909][ T4335] cleanup_mnt+0x390/0x418 [ 94.394618][ T4335] __cleanup_mnt+0x20/0x30 [ 94.395342][ T4335] task_work_run+0x1ec/0x278 [ 94.396073][ T4335] do_notify_resume+0x1fa0/0x2aa4 [ 94.396857][ T4335] el0_svc+0x98/0x128 [ 94.397494][ T4335] el0t_64_sync_handler+0x84/0xf0 [ 94.398299][ T4335] el0t_64_sync+0x18c/0x190 [ 94.442802][ T4335] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 94.445548][ T4335] CPU: 0 PID: 4335 Comm: syz-executor Not tainted syzkaller #0 [ 94.446691][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 94.448298][ T4335] Call trace: [ 94.448798][ T4335] dump_backtrace+0x1c0/0x1ec [ 94.449552][ T4335] show_stack+0x2c/0x3c [ 94.450238][ T4335] __dump_stack+0x30/0x40 [ 94.450925][ T4335] dump_stack_lvl+0xf4/0x15c [ 94.451610][ T4335] dump_stack+0x1c/0x5c [ 94.452250][ T4335] gfs2_assert_warn_i+0x16c/0x26c [ 94.453046][ T4335] gfs2_quota_cleanup+0x464/0x668 [ 94.453831][ T4335] gfs2_put_super+0x1f0/0x760 [ 94.454607][ T4335] generic_shutdown_super+0x130/0x324 [ 94.455489][ T4335] kill_block_super+0x70/0xdc [ 94.456220][ T4335] gfs2_kill_sb+0xc0/0xd4 [ 94.456891][ T4335] deactivate_locked_super+0xac/0x120 [ 94.457756][ T4335] deactivate_super+0xe4/0x104 [ 94.458448][ T4335] cleanup_mnt+0x390/0x418 [ 94.459141][ T4335] __cleanup_mnt+0x20/0x30 [ 94.459825][ T4335] task_work_run+0x1ec/0x278 [ 94.460546][ T4335] do_notify_resume+0x1fa0/0x2aa4 [ 94.461381][ T4335] el0_svc+0x98/0x128 [ 94.462035][ T4335] el0t_64_sync_handler+0x84/0xf0 [ 94.462906][ T4335] el0t_64_sync+0x18c/0x190 [ 95.749820][ T5326] syz.5.192 uses obsolete (PF_INET,SOCK_PACKET) [ 95.765743][ T5323] lo speed is unknown, defaulting to 1000 [ 95.898527][ T27] audit: type=1326 audit(95.890:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5322 comm="syz.2.189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae377b68 code=0x0 [ 97.579865][ T5365] Bluetooth: MGMT ver 1.22 [ 97.664719][ T5372] loop1: detected capacity change from 0 to 2048 [ 97.972884][ T5372] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.075859][ T4335] EXT4-fs (loop1): unmounting filesystem. [ 102.524048][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 102.545977][ T5494] loop5: detected capacity change from 0 to 512 [ 102.951522][ T5494] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 103.051547][ T4700] EXT4-fs (loop5): unmounting filesystem. [ 104.639318][ T5557] netlink: 'syz.2.236': attribute type 1 has an invalid length. [ 104.703930][ T5557] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.705395][ T5557] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.706723][ T5557] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.708090][ T5557] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.710610][ T5557] bond2: (slave geneve3): making interface the new active one [ 104.712309][ T5557] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 104.723734][ T5557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 104.726709][ T5557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.758261][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 106.046660][ T5598] loop5: detected capacity change from 0 to 2048 [ 106.131696][ T5598] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.061648][ T5637] loop5: detected capacity change from 0 to 256 [ 110.593308][ T5697] device syzkaller0 entered promiscuous mode [ 110.877634][ T5699] loop1: detected capacity change from 0 to 131072 [ 110.949943][ T5699] F2FS-fs (loop1): Test dummy encryption mode enabled [ 110.952493][ T5699] F2FS-fs (loop1): invalid crc value [ 110.974554][ T5699] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.996132][ T5699] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.044937][ T5699] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 111.090389][ T5699] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 111.127729][ T5699] overlayfs: filesystem on './file0' not supported as upperdir [ 111.760202][ T5742] loop1: detected capacity change from 0 to 40427 [ 111.766591][ T5742] F2FS-fs (loop1): invalid crc value [ 111.768760][ T5742] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.777094][ T5742] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.875571][ T4335] syz-executor: attempt to access beyond end of device [ 111.875571][ T4335] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.124237][ T5753] loop1: detected capacity change from 0 to 512 [ 112.340395][ T5753] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.275: inode #2214592512: comm syz.1.275: iget: illegal inode # [ 112.344496][ T5753] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.275: error while reading EA inode 2214592512 err=-117 [ 112.352802][ T5753] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.354913][ T5753] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.275: inode #2214592512: comm syz.1.275: iget: illegal inode # [ 112.364394][ T5753] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.275: error while reading EA inode 2214592512 err=-117 [ 112.366694][ T5753] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.275: inode #1: comm syz.1.275: iget: illegal inode # [ 112.368923][ T5753] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.275: error while reading EA inode 1 err=-117 [ 112.373344][ T5753] EXT4-fs (loop1): 1 orphan inode deleted [ 112.374355][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.323702][ T4335] EXT4-fs (loop1): unmounting filesystem. [ 113.954106][ T4329] Bluetooth: hci5: command 0x0411 tx timeout [ 114.536380][ T5769] loop1: detected capacity change from 0 to 256 [ 114.552360][ T5769] FAT-fs (loop1): Directory bread(block 64) failed [ 114.558074][ T5769] FAT-fs (loop1): Directory bread(block 65) failed [ 114.559193][ T5769] FAT-fs (loop1): Directory bread(block 66) failed [ 114.560228][ T5769] FAT-fs (loop1): Directory bread(block 67) failed [ 114.561613][ T5769] FAT-fs (loop1): Directory bread(block 68) failed [ 114.563037][ T5769] FAT-fs (loop1): Directory bread(block 69) failed [ 114.564859][ T5769] FAT-fs (loop1): Directory bread(block 70) failed [ 114.565892][ T5769] FAT-fs (loop1): Directory bread(block 71) failed [ 114.566919][ T5769] FAT-fs (loop1): Directory bread(block 72) failed [ 114.567991][ T5769] FAT-fs (loop1): Directory bread(block 73) failed [ 124.862909][ T27] audit: type=1326 audit(124.700:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.2.298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae377b68 code=0x0 [ 124.969124][ T5829] loop5: detected capacity change from 0 to 40427 [ 124.983299][ T5829] F2FS-fs (loop5): Unrecognized mount option "whint_mode=fs-based" or missing value [ 125.230630][ T5834] loop1: detected capacity change from 0 to 256 [ 125.559003][ T5836] MPTCP: addr_signal error, rm_addr=5 [ 125.685749][ T5847] loop5: detected capacity change from 0 to 512 [ 125.690870][ T5847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.915571][ T5847] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.292: iget: bad i_size value: 38620345925642 [ 125.919070][ T5847] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.292: couldn't read orphan inode 15 (err -117) [ 125.921415][ T5847] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 125.923818][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.925085][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.053028][ T4327] Bluetooth: hci5: Invalid handle: 0xff00 > 0x0eff [ 126.055133][ T4327] Bluetooth: hci5: hcon 00000000c69606e3 sent 1 < count 511 [ 126.084996][ T5847] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.292: bg 0: block 5: invalid block bitmap [ 126.088960][ T5847] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 126.094779][ T5855] device syzkaller0 entered promiscuous mode [ 126.096940][ T5847] EXT4-fs (loop5): This should not happen!! Data will be lost [ 126.096940][ T5847] [ 126.101350][ T5847] EXT4-fs (loop5): Total free blocks count 0 [ 126.105852][ T5847] EXT4-fs (loop5): Free/Dirty block details [ 126.107401][ T5847] EXT4-fs (loop5): free_blocks=0 [ 126.108402][ T5847] EXT4-fs (loop5): dirty_blocks=2440 [ 126.109454][ T5847] EXT4-fs (loop5): Block reservation details [ 126.110512][ T5847] EXT4-fs (loop5): i_reserved_data_blocks=2440 [ 126.141311][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 384 with error 28 [ 126.194111][ T5857] net_ratelimit: 5266 callbacks suppressed [ 126.194122][ T5857] Set syz0 is full, maxelem 0 reached [ 126.727947][ T5876] loop5: detected capacity change from 0 to 4096 [ 126.740918][ T5876] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 127.272247][ T5885] tipc: Enabling of bearer rejected, failed to enable media [ 128.157357][ T5896] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 128.227911][ T4700] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 128.249037][ T4700] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 128.250098][ T4700] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 128.294787][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.312'. [ 128.426674][ T5910] infiniband sz1: set active [ 128.431815][ T111] lo speed is unknown, defaulting to 1000 [ 128.830724][ T5916] tipc: Enabling of bearer rejected, failed to enable media [ 130.986750][ T5939] lo speed is unknown, defaulting to 1000 [ 132.538792][ T5951] overlayfs: './file0' not a directory [ 132.810578][ T5957] binder: 5956:5957 tried to acquire reference to desc 0, got 1 instead [ 132.829768][ T5957] binder: 5956:5957 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 132.831803][ T5957] binder: 5957 RLIMIT_NICE not set [ 132.832646][ T5957] binder: 5957 RLIMIT_NICE not set [ 132.859077][ T5957] binder: 5957 RLIMIT_NICE not set [ 132.913450][ T111] binder: undelivered TRANSACTION_COMPLETE [ 133.127781][ T5959] loop1: detected capacity change from 0 to 40427 [ 133.130932][ T5959] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 133.132216][ T5959] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 133.136307][ T5959] F2FS-fs (loop1): invalid crc value [ 133.153882][ T5959] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.160949][ T5959] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 133.162131][ T5959] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.702068][ T6001] netlink: 84 bytes leftover after parsing attributes in process `syz.1.334'. [ 135.757824][ T5999] loop5: detected capacity change from 0 to 131072 [ 135.924696][ T5999] F2FS-fs (loop5): Test dummy encryption mode enabled [ 135.927477][ T5999] F2FS-fs (loop5): invalid crc value [ 136.298102][ T5999] F2FS-fs (loop5): Found nat_bits in checkpoint [ 136.315891][ T5999] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 139.344122][ T6061] loop5: detected capacity change from 0 to 164 [ 140.051111][ T6075] lo speed is unknown, defaulting to 1000 [ 140.378857][ T6061] loop5: detected capacity change from 0 to 32768 [ 140.470094][ T6061] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.345 (6061) [ 140.912410][ T6061] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.078284][ T6061] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 141.092276][ T6061] BTRFS info (device loop5): enabling auto defrag [ 141.100513][ T6061] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.115459][ T6061] BTRFS info (device loop5): use zstd compression, level 3 [ 141.119054][ T6061] BTRFS info (device loop5): turning on async discard [ 141.147682][ T6061] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 141.169998][ T6061] BTRFS info (device loop5): trying to use backup root at mount time [ 141.189474][ T6061] BTRFS info (device loop5): enabling ssd optimizations [ 141.200851][ T6061] BTRFS info (device loop5): using spread ssd allocation scheme [ 141.247300][ T6061] BTRFS info (device loop5): force zlib compression, level 3 [ 141.270330][ T6061] BTRFS info (device loop5): using free space tree [ 141.353050][ T6092] binder: 6089:6092 tried to acquire reference to desc 0, got 1 instead [ 141.364060][ T6092] binder: 6089:6092 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 141.366153][ T6092] binder: 6092 RLIMIT_NICE not set [ 141.366985][ T6092] binder: 6092 RLIMIT_NICE not set [ 141.368161][ T6092] binder: release 6089:6092 transaction 30 out, still active [ 141.369508][ T6092] binder: release 6089:6092 transaction 23 in, still active [ 141.370935][ T6092] binder: undelivered TRANSACTION_COMPLETE [ 141.372053][ T6092] binder: release 6089:6092 transaction 23 out, still active [ 141.378046][ T6092] binder: undelivered TRANSACTION_COMPLETE [ 141.379418][ T6092] binder: send failed reply for transaction 30, target dead [ 141.380652][ T6092] binder: send failed reply for transaction 23, target dead [ 141.681395][ T4390] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 141.692858][ T6061] BTRFS error (device loop5): failed to load root extent [ 141.759262][ T6061] BTRFS warning (device loop5): try to load backup roots slot 1 [ 142.318306][ T4791] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 142.333273][ T6061] BTRFS warning (device loop5): couldn't read tree root [ 142.334520][ T6061] BTRFS warning (device loop5): try to load backup roots slot 2 [ 142.402561][ T6061] BTRFS error (device loop5): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 142.408256][ T6061] BTRFS warning (device loop5): couldn't read tree root [ 142.411734][ T6061] BTRFS warning (device loop5): try to load backup roots slot 3 [ 142.827342][ T6061] BTRFS error (device loop5): open_ctree failed: -22 [ 146.089660][ T6161] lo speed is unknown, defaulting to 1000 [ 147.646331][ T6164] tipc: Enabling of bearer rejected, failed to enable media [ 150.880503][ T6209] tipc: Started in network mode [ 150.881396][ T6209] tipc: Node identity 029c5b02ab9, cluster identity 4711 [ 150.882527][ T6209] tipc: Enabled bearer , priority 0 [ 150.886669][ T6209] device syzkaller0 entered promiscuous mode [ 152.419141][ T6057] tipc: Node number set to 2836159234 [ 152.442158][ T6222] tipc: Resetting bearer [ 152.446571][ T6207] tipc: Resetting bearer [ 153.875047][ T4327] Bluetooth: hci0: command 0x0406 tx timeout [ 153.877290][ T4327] Bluetooth: hci3: command 0x0406 tx timeout [ 153.878349][ T4327] Bluetooth: hci2: command 0x0406 tx timeout [ 153.879302][ T4327] Bluetooth: hci4: command 0x0406 tx timeout [ 153.904175][ T6207] tipc: Disabling bearer [ 156.806828][ T6272] loop1: detected capacity change from 0 to 512 [ 156.831689][ T6272] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.841513][ T6272] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.926672][ T6272] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.948931][ T6272] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.396: Invalid block bitmap block 0 in block_group 0 [ 156.952433][ T6272] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 156.965443][ T6272] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.396: attempt to clear invalid blocks 983261 len 1 [ 156.969786][ T6272] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.396: Invalid inode table block 0 in block_group 0 [ 156.979903][ T6272] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 156.982719][ T6272] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 156.985367][ T6272] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.396: Invalid inode table block 0 in block_group 0 [ 156.988462][ T6272] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 156.990296][ T6272] EXT4-fs error (device loop1): ext4_truncate:4325: inode #11: comm syz.1.396: mark_inode_dirty error [ 156.992475][ T6272] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 156.997891][ T6272] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.396: Invalid inode table block 0 in block_group 0 [ 157.002125][ T6272] EXT4-fs (loop1): 1 truncate cleaned up [ 157.003858][ T6272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 157.464245][ T4335] EXT4-fs (loop1): unmounting filesystem. [ 161.024950][ T6351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.418'. [ 161.702271][ T6355] device syzkaller0 entered promiscuous mode [ 163.918684][ T6383] 8021q: VLANs not supported on ip6gre0 [ 171.951222][ T6471] loop1: detected capacity change from 0 to 256 [ 174.096246][ T6508] loop5: detected capacity change from 0 to 512 [ 174.171940][ T6508] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.456: inode has both inline data and extents flags [ 174.174702][ T6508] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.456: couldn't read orphan inode 15 (err -117) [ 174.177009][ T6508] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 174.235449][ T6505] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 174.236805][ T6505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.239456][ T6505] vhci_hcd vhci_hcd.0: Device attached [ 174.850532][ T6506] vhci_hcd: connection closed [ 174.857884][ T4373] vhci_hcd: stop threads [ 174.860082][ T4373] vhci_hcd: release socket [ 174.860915][ T4373] vhci_hcd: disconnect device [ 175.471569][ T4700] EXT4-fs (loop5): unmounting filesystem. [ 175.573544][ T6522] loop1: detected capacity change from 0 to 512 [ 175.600027][ T6522] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 175.727605][ T6522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 175.730395][ T6522] EXT4-fs (loop1): orphan cleanup on readonly fs [ 175.742636][ T6522] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.457: bg 0: block 361: padding at end of block bitmap is not set [ 175.746992][ T6522] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 175.748743][ T6522] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.457: attempt to clear invalid blocks 33619980 len 1 [ 175.752247][ T6522] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.457: invalid indirect mapped block 1811939328 (level 0) [ 175.765333][ T6522] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.457: invalid indirect mapped block 2185560079 (level 1) [ 175.769382][ T6522] EXT4-fs (loop1): 1 truncate cleaned up [ 175.770510][ T6522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 177.166258][ T4335] EXT4-fs (loop1): unmounting filesystem. [ 178.242017][ T6540] loop1: detected capacity change from 0 to 1024 [ 178.459053][ T6549] loop5: detected capacity change from 0 to 256 [ 180.106715][ T6540] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 180.109093][ T6540] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 180.111082][ T6540] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.463: Failed to acquire dquot type 0 [ 180.145166][ T6540] EXT4-fs (loop1): 1 truncate cleaned up [ 180.149693][ T6554] device syzkaller0 entered promiscuous mode [ 180.151393][ T6540] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 180.696943][ T4335] EXT4-fs (loop1): unmounting filesystem. [ 183.253128][ T6604] binder: 6603:6604 tried to acquire reference to desc 0, got 1 instead [ 183.257162][ T6604] binder: 6603:6604 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 183.259186][ T6604] binder: 6604 RLIMIT_NICE not set [ 183.260004][ T6604] binder: 6604 RLIMIT_NICE not set [ 183.261444][ T6604] binder: 6604 RLIMIT_NICE not set [ 183.262464][ T6604] binder: 6603:6604 got transaction with unaligned buffers size, 252 [ 183.265178][ T6604] binder: 6603:6604 transaction reply to 6603:6604 failed 36/29201/-22, size 0-0 line 3286 [ 183.266936][ T6604] binder: send failed reply for transaction 35 to 6603:6604 [ 183.657775][ T6604] syz.1.480 (6604): drop_caches: 2 [ 183.704220][ T4411] binder: undelivered TRANSACTION_COMPLETE [ 183.705192][ T4411] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.706276][ T4411] binder: undelivered TRANSACTION_ERROR: 29190 [ 184.124069][ T6616] binder: 6613:6616 tried to acquire reference to desc 0, got 1 instead [ 184.126054][ T6616] binder: 6613:6616 got reply transaction with bad transaction stack, transaction 41 has target 6613:0 [ 184.128067][ T6616] binder: 6613:6616 transaction reply to 0:0 failed 48/29201/-71, size 0-0 line 2961 [ 184.130334][ T6616] binder: 6613:6616 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 184.132655][ T6616] binder: 6616 RLIMIT_NICE not set [ 184.144016][ T6616] binder: 6613:6616 transaction call to 6613:0 failed 50/29201/-71, size 0-0 line 3086 [ 184.165576][ T6123] binder: release 6613:6616 transaction 41 out, still active [ 184.166859][ T6123] binder: send failed reply for transaction 49 to 6613:6616 [ 184.168161][ T6123] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.109523][ T6658] device syzkaller0 entered promiscuous mode [ 187.148159][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 187.322453][ T6659] bridge1: port 1(veth3) entered blocking state [ 187.329015][ T6659] bridge1: port 1(veth3) entered disabled state [ 187.340666][ T6659] device veth3 entered promiscuous mode [ 187.374529][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.375678][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.422583][ T6660] bridge1: port 2(veth0_to_bond) entered blocking state [ 187.435341][ T6660] bridge1: port 2(veth0_to_bond) entered disabled state [ 187.442348][ T6660] device veth0_to_bond entered promiscuous mode [ 187.489157][ T6661] bridge1: port 3(veth5) entered blocking state [ 187.490410][ T6661] bridge1: port 3(veth5) entered disabled state [ 187.491855][ T6661] device veth5 entered promiscuous mode [ 189.926577][ T6705] PKCS7: Unknown OID: [4] 0.0 [ 189.927709][ T6705] PKCS7: Only support pkcs7_signedData type [ 190.831911][ T6711] loop5: detected capacity change from 0 to 512 [ 190.856046][ T6711] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.857853][ T6711] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.794985][ T6711] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.520: Invalid block bitmap block 0 in block_group 0 [ 192.827567][ T6711] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 192.831127][ T6711] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.520: attempt to clear invalid blocks 983261 len 1 [ 192.838881][ T6711] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.520: Invalid inode table block 0 in block_group 0 [ 192.845815][ T6711] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 192.854666][ T6711] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 192.862426][ T6711] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.520: Invalid inode table block 0 in block_group 0 [ 192.950643][ T6711] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 192.957515][ T6711] EXT4-fs error (device loop5): ext4_truncate:4325: inode #11: comm syz.5.520: mark_inode_dirty error [ 192.967588][ T6711] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 192.969489][ T6711] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.520: Invalid inode table block 0 in block_group 0 [ 192.971632][ T6711] EXT4-fs (loop5): 1 truncate cleaned up [ 192.972574][ T6711] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 193.706041][ T6747] xt_CONNSECMARK: invalid mode: 0 [ 194.036842][ T4700] EXT4-fs (loop5): unmounting filesystem. [ 194.082479][ T6752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.521'. [ 194.676229][ T6760] loop5: detected capacity change from 0 to 8 [ 194.702901][ T6760] SQUASHFS error: lzo decompression failed, data probably corrupt [ 194.704440][ T6760] SQUASHFS error: Failed to read block 0x91: -5 [ 194.705438][ T6760] SQUASHFS error: Unable to read metadata cache entry [8f] [ 194.706574][ T6760] SQUASHFS error: Unable to read inode 0x11f [ 194.782022][ T6438] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.453940][ T6807] tipc: Enabled bearer , priority 10 [ 197.456689][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 199.832538][ T6811] lo speed is unknown, defaulting to 1000 [ 199.835749][ T6831] loop5: detected capacity change from 0 to 512 [ 199.838161][ T2476] tipc: Node number set to 4131177883 [ 199.853998][ T6831] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 199.865284][ T6831] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.551: inode has both inline data and extents flags [ 199.867781][ T6831] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.551: couldn't read orphan inode 15 (err -117) [ 199.870097][ T6831] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 199.930539][ T4700] EXT4-fs (loop5): unmounting filesystem. [ 200.025299][ T6848] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 200.026888][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'. [ 200.435145][ T6858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.549'. [ 201.199093][ T6863] infiniband sz1: set active [ 201.212826][ T6120] lo speed is unknown, defaulting to 1000 [ 201.278342][ T6868] tipc: Enabling of bearer rejected, failed to enable media [ 203.610994][ T6919] loop5: detected capacity change from 0 to 512 [ 203.774078][ T6919] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.558: inode has both inline data and extents flags [ 203.809367][ T6919] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.558: couldn't read orphan inode 15 (err -117) [ 203.812006][ T6919] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 206.790012][ T4700] EXT4-fs (loop5): unmounting filesystem. [ 207.312352][ T6943] binder_user_error: 2 callbacks suppressed [ 207.312364][ T6943] binder: 6942:6943 tried to acquire reference to desc 0, got 1 instead [ 207.325882][ T6943] binder: 6942:6943 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 207.332347][ T6943] binder: 6943 RLIMIT_NICE not set [ 207.335516][ T6943] binder: 6943 RLIMIT_NICE not set [ 207.366716][ T6120] binder_debug: 4 callbacks suppressed [ 207.366727][ T6120] binder: release 6942:6943 transaction 55 out, still active [ 207.481806][ T6948] binder: BINDER_SET_CONTEXT_MGR already set [ 207.490385][ T6948] binder: 6946:6948 ioctl 4018620d 20000100 returned -16 [ 207.495668][ T6948] binder: BINDER_SET_CONTEXT_MGR already set [ 207.497803][ T6948] binder: 6946:6948 ioctl 4018620d 20004a80 returned -16 [ 207.501508][ T6948] binder: 6946:6948 got transaction to invalid handle, 1 [ 207.801631][ T6948] binder: 6948:6946 cannot find target node [ 207.802787][ T6948] binder: 6946:6948 transaction call to 0:0 failed 64/29201/-22, size 72-24 line 3045 [ 207.803456][ T6120] binder: undelivered TRANSACTION_COMPLETE [ 207.805298][ T6120] binder: send failed reply for transaction 62 to 6942:6943 [ 207.806570][ T6120] binder: release 6942:6943 transaction 55 in, still active [ 207.807720][ T6120] binder: send failed reply for transaction 55, target dead [ 207.808837][ T6120] binder: undelivered TRANSACTION_COMPLETE [ 207.809733][ T6120] binder: undelivered TRANSACTION_ERROR: 29189 [ 208.070282][ T6948] binder: 6946:6948 got transaction to invalid handle, 3 [ 208.073893][ T6948] binder: 6948:6946 cannot find target node [ 208.106348][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.107723][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.115951][ T6955] lo speed is unknown, defaulting to 1000 [ 208.180034][ T27] audit: type=1326 audit(208.160:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.5.574" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9377b68 code=0x0 [ 214.825689][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 214.850415][ T7029] bridge1: port 1(veth3) entered blocking state [ 214.851514][ T7029] bridge1: port 1(veth3) entered disabled state [ 214.949203][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.5.598'. [ 215.359769][ T7029] device veth3 entered promiscuous mode [ 215.707771][ T7029] bridge1: port 2(veth5) entered blocking state [ 215.711322][ T7029] bridge1: port 2(veth5) entered disabled state [ 215.712767][ T7029] device veth5 entered promiscuous mode [ 218.406305][ T7064] loop5: detected capacity change from 0 to 256 [ 220.288941][ T7085] overlayfs: failed to clone lowerpath [ 222.567958][ T7095] loop5: detected capacity change from 0 to 32768 [ 222.574834][ T7097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.604'. [ 222.654158][ T7095] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 222.655585][ T7095] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 222.673523][ T7095] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 222.677809][ T6120] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 222.766141][ T6120] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 222.797275][ T6120] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms [ 222.798735][ T6120] gfs2: fsid=syz:syz.0: jid=0: Done [ 222.799583][ T7095] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 222.835052][ T7095] gfs2: fsid=syz:syz.0: found 1 quota changes [ 222.884922][ T7102] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 222.884922][ T7102] inode = 11 2339 [ 222.884922][ T7102] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 222.887864][ T7102] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 222.889399][ T7102] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7102 [gfs2_quotad] gfs2_quota_sync+0x2cc/0x500 [ 222.890984][ T7102] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 223.239328][ T7102] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 223.647875][ T7102] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 223.651841][ T7102] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 223.654074][ T4700] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 223.661030][ T7102] gfs2: fsid=syz:syz.0: File system withdrawn [ 223.662221][ T4700] CPU: 1 PID: 4700 Comm: syz-executor Not tainted syzkaller #0 [ 223.663391][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 223.664911][ T4700] Call trace: [ 223.665439][ T4700] dump_backtrace+0x1c0/0x1ec [ 223.666209][ T4700] show_stack+0x2c/0x3c [ 223.666772][ T4700] __dump_stack+0x30/0x40 [ 223.667478][ T4700] dump_stack_lvl+0xf4/0x15c [ 223.668161][ T4700] dump_stack+0x1c/0x5c [ 223.668842][ T4700] gfs2_assert_warn_i+0x16c/0x26c [ 223.669681][ T4700] gfs2_quota_cleanup+0x464/0x668 [ 223.670606][ T4700] gfs2_put_super+0x1f0/0x760 [ 223.671441][ T4700] generic_shutdown_super+0x130/0x324 [ 223.672405][ T4700] kill_block_super+0x70/0xdc [ 223.673214][ T4700] gfs2_kill_sb+0xc0/0xd4 [ 223.673859][ T4700] deactivate_locked_super+0xac/0x120 [ 223.674686][ T4700] deactivate_super+0xe4/0x104 [ 223.675393][ T4700] cleanup_mnt+0x390/0x418 [ 223.676048][ T4700] __cleanup_mnt+0x20/0x30 [ 223.676727][ T4700] task_work_run+0x1ec/0x278 [ 223.677446][ T4700] do_notify_resume+0x1fa0/0x2aa4 [ 223.678211][ T4700] el0_svc+0x98/0x128 [ 223.678840][ T4700] el0t_64_sync_handler+0x84/0xf0 [ 223.679645][ T4700] el0t_64_sync+0x18c/0x190 [ 223.682271][ T7102] CPU: 1 PID: 7102 Comm: gfs2_quotad Not tainted syzkaller #0 [ 223.683422][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 223.684850][ T7102] Call trace: [ 223.685406][ T7102] dump_backtrace+0x1c0/0x1ec [ 223.686152][ T7102] show_stack+0x2c/0x3c [ 223.686847][ T7102] __dump_stack+0x30/0x40 [ 223.687499][ T7102] dump_stack_lvl+0xf4/0x15c [ 223.688271][ T7102] dump_stack+0x1c/0x5c [ 223.688896][ T7102] gfs2_withdraw+0x9ec/0x127c [ 223.689674][ T7102] gfs2_consist_inode_i+0xf0/0x10c [ 223.690483][ T7102] gfs2_inode_refresh+0x988/0xe50 [ 223.691267][ T7102] inode_go_instantiate+0x4c/0x68 [ 223.692022][ T7102] gfs2_instantiate+0x178/0x2b4 [ 223.692718][ T7102] gfs2_glock_wait+0x1b4/0x298 [ 223.693426][ T7102] gfs2_glock_nq+0x8bc/0x11c4 [ 223.694123][ T7102] do_sync+0x41c/0xaec [ 223.694770][ T7102] gfs2_quota_sync+0x2cc/0x500 [ 223.695566][ T7102] gfs2_quotad+0x2d8/0x500 [ 223.696274][ T7102] kthread+0x250/0x2d8 [ 223.696905][ T7102] ret_from_fork+0x10/0x20 [ 227.423726][ T7166] lo speed is unknown, defaulting to 1000 [ 229.014469][ T7192] overlayfs: './file0' not a directory [ 230.177010][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 230.178639][ T7211] device bridge_slave_1 left promiscuous mode [ 230.180673][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.835175][ T7211] device bridge_slave_0 left promiscuous mode [ 230.840266][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.700699][ T7216] netlink: 72 bytes leftover after parsing attributes in process `syz.4.635'. [ 233.319632][ T7246] lo speed is unknown, defaulting to 1000 [ 235.552309][ T4327] Bluetooth: hci5: command 0x0406 tx timeout [ 237.308586][ T7285] lo speed is unknown, defaulting to 1000 [ 237.430316][ T27] audit: type=1326 audit(237.420:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.1.653" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b77b68 code=0x0 [ 243.117683][ T7347] loop5: detected capacity change from 0 to 8 [ 243.498054][ T7355] tipc: Started in network mode [ 243.498996][ T7355] tipc: Node identity ac1414aa, cluster identity 4711 [ 243.500426][ T7355] tipc: Enabled bearer , priority 10 [ 243.502613][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 244.613438][ T4372] tipc: Node number set to 2886997162 [ 248.872032][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.873688][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.963775][ T7455] netlink: 'syz.3.697': attribute type 1 has an invalid length. [ 250.987834][ T7455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.008035][ T7455] bond1: (slave geneve2): making interface the new active one [ 251.257670][ T7455] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 251.259794][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 253.964867][ T7102] ================================================================== [ 253.966145][ T7102] BUG: KASAN: use-after-free in __lock_acquire+0x104/0x6800 [ 253.967345][ T7102] Read of size 8 at addr ffff00011083cbb0 by task gfs2_quotad/7102 [ 253.968464][ T7102] [ 253.968795][ T7102] CPU: 1 PID: 7102 Comm: gfs2_quotad Not tainted syzkaller #0 [ 253.969895][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 253.971459][ T7102] Call trace: [ 253.971972][ T7102] dump_backtrace+0x1c0/0x1ec [ 253.972674][ T7102] show_stack+0x2c/0x3c [ 253.973298][ T7102] __dump_stack+0x30/0x40 [ 253.974016][ T7102] dump_stack_lvl+0xf4/0x15c [ 253.974811][ T7102] print_address_description+0x88/0x218 [ 253.975647][ T7102] print_report+0x50/0x68 [ 253.976315][ T7102] kasan_report+0xa8/0xfc [ 253.977110][ T7102] __asan_report_load8_noabort+0x2c/0x38 [ 253.978105][ T7102] __lock_acquire+0x104/0x6800 [ 253.978848][ T7102] lock_acquire+0x20c/0x63c [ 253.979577][ T7102] _raw_spin_lock_irqsave+0x6c/0xb0 [ 253.980386][ T7102] finish_wait+0xc8/0x1ac [ 253.981038][ T7102] gfs2_quotad+0x390/0x500 [ 253.981731][ T7102] kthread+0x250/0x2d8 [ 253.982367][ T7102] ret_from_fork+0x10/0x20 [ 253.983090][ T7102] [ 253.983460][ T7102] Allocated by task 7485: [ 253.984145][ T7102] kasan_set_track+0x4c/0x80 [ 253.984816][ T7102] kasan_save_alloc_info+0x24/0x30 [ 253.985863][ T7102] __kasan_kmalloc+0xa0/0xb8 [ 253.986600][ T7102] kmalloc_trace+0x7c/0x94 [ 253.987298][ T7102] cryptomgr_notify+0x164/0x8d4 [ 253.988095][ T7102] blocking_notifier_call_chain+0xf0/0x198 [ 253.988996][ T7102] crypto_alg_mod_lookup+0x194/0x4fc [ 253.989841][ T7102] crypto_find_alg+0xa0/0x114 [ 253.990524][ T7102] crypto_grab_spawn+0x84/0x2e0 [ 253.991252][ T7102] skcipher_alloc_instance_simple+0x12c/0x538 [ 253.992206][ T7102] crypto_cbc_create+0x2c/0x190 [ 253.992968][ T7102] cryptomgr_probe+0x70/0x168 [ 253.993645][ T7102] kthread+0x250/0x2d8 [ 253.994257][ T7102] ret_from_fork+0x10/0x20 [ 253.994953][ T7102] [ 253.995319][ T7102] Freed by task 7485: [ 253.995897][ T7102] kasan_set_track+0x4c/0x80 [ 253.996597][ T7102] kasan_save_free_info+0x38/0x5c [ 253.997387][ T7102] ____kasan_slab_free+0x148/0x1b0 [ 253.998275][ T7102] __kasan_slab_free+0x18/0x28 [ 253.999054][ T7102] slab_free_freelist_hook+0x16c/0x1e8 [ 253.999957][ T7102] __kmem_cache_free+0xbc/0x218 [ 254.000703][ T7102] kfree+0xd0/0x1a8 [ 254.001284][ T7102] cryptomgr_notify+0x5a4/0x8d4 [ 254.002076][ T7102] blocking_notifier_call_chain+0xf0/0x198 [ 254.003096][ T7102] crypto_alg_mod_lookup+0x194/0x4fc [ 254.004011][ T7102] crypto_find_alg+0xa0/0x114 [ 254.004747][ T7102] crypto_grab_spawn+0x84/0x2e0 [ 254.005464][ T7102] skcipher_alloc_instance_simple+0x12c/0x538 [ 254.006436][ T7102] crypto_cbc_create+0x2c/0x190 [ 254.007213][ T7102] cryptomgr_probe+0x70/0x168 [ 254.007977][ T7102] kthread+0x250/0x2d8 [ 254.008621][ T7102] ret_from_fork+0x10/0x20 [ 254.009330][ T7102] [ 254.009722][ T7102] The buggy address belongs to the object at ffff00011083c000 [ 254.009722][ T7102] which belongs to the cache kmalloc-8k of size 8192 [ 254.012092][ T7102] The buggy address is located 2992 bytes inside of [ 254.012092][ T7102] 8192-byte region [ffff00011083c000, ffff00011083e000) [ 254.014170][ T7102] [ 254.014512][ T7102] The buggy address belongs to the physical page: [ 254.015494][ T7102] page:000000001d95f50a refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x150838 [ 254.017030][ T7102] head:000000001d95f50a order:3 compound_mapcount:0 compound_pincount:0 [ 254.018466][ T7102] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 254.019611][ T7102] raw: 05ffc00000010200 fffffc000442ec00 dead000000000002 ffff0000c0002c00 [ 254.020878][ T7102] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 254.022240][ T7102] page dumped because: kasan: bad access detected [ 254.023377][ T7102] [ 254.023733][ T7102] Memory state around the buggy address: [ 254.024618][ T7102] ffff00011083ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.025800][ T7102] ffff00011083cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.027067][ T7102] >ffff00011083cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.028318][ T7102] ^ [ 254.029159][ T7102] ffff00011083cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.030300][ T7102] ffff00011083cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.031572][ T7102] ================================================================== [ 254.033013][ T7102] Disabling lock debugging due to kernel taint [ 254.033952][ T7102] INFO: trying to register non-static key. [ 254.034913][ T7102] The code is fine but needs lockdep annotation, or maybe [ 254.036154][ T7102] you didn't initialize this object before use? [ 254.037154][ T7102] turning off the locking correctness validator. [ 254.038253][ T7102] CPU: 1 PID: 7102 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 254.039705][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 254.041194][ T7102] Call trace: [ 254.041650][ T7102] dump_backtrace+0x1c0/0x1ec [ 254.042349][ T7102] show_stack+0x2c/0x3c [ 254.042936][ T7102] __dump_stack+0x30/0x40 [ 254.043729][ T7102] dump_stack_lvl+0xf4/0x15c [ 254.044476][ T7102] dump_stack+0x1c/0x5c [ 254.045177][ T7102] assign_lock_key+0x230/0x264 [ 254.045948][ T7102] register_lock_class+0x1ac/0x694 [ 254.046704][ T7102] __lock_acquire+0x164/0x6800 [ 254.047490][ T7102] lock_acquire+0x20c/0x63c [ 254.048352][ T7102] _raw_spin_lock_irqsave+0x6c/0xb0 [ 254.049170][ T7102] finish_wait+0xc8/0x1ac [ 254.049824][ T7102] gfs2_quotad+0x390/0x500 [ 254.050501][ T7102] kthread+0x250/0x2d8 [ 254.051104][ T7102] ret_from_fork+0x10/0x20 [ 254.051844][ T7102] list_del corruption. prev->next should be ffff800021eb7d98, but was 0000000000000000. (prev=ffff00011083cbd8) [ 254.053950][ T7102] ------------[ cut here ]------------ [ 254.054842][ T7102] kernel BUG at lib/list_debug.c:61! [ 254.055695][ T7102] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 254.056948][ T7102] Modules linked in: [ 254.057533][ T7102] CPU: 1 PID: 7102 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 254.058910][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 254.060272][ T7102] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 254.061371][ T7102] pc : __list_del_entry_valid+0x13c/0x158 [ 254.062300][ T7102] lr : __list_del_entry_valid+0x13c/0x158 [ 254.063188][ T7102] sp : ffff800021eb7c70 [ 254.063770][ T7102] x29: ffff800021eb7c70 x28: 0000000000000000 x27: 0000000000000bb8 [ 254.065011][ T7102] x26: 0000000000001770 x25: dfff800000000000 x24: dfff800000000000 [ 254.066404][ T7102] x23: ffff00011083c7c0 x22: dfff800000000000 x21: ffff00011083cbd8 [ 254.067715][ T7102] x20: ffff00011083cbd8 x19: ffff800021eb7d98 x18: ffff800011babf60 [ 254.068987][ T7102] x17: 20747562202c3839 x16: ffff800011a529a8 x15: 0000000000000000 [ 254.070233][ T7102] x14: 0000000000000001 x13: 1fffe00033ea39a3 x12: 0000000000ff0100 [ 254.071489][ T7102] x11: ff008000083121f4 x10: 0000000000000000 x9 : c6b8628107e17d00 [ 254.072780][ T7102] x8 : c6b8628107e17d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 254.073971][ T7102] x5 : ffff800021eb7738 x4 : ffff800015324ea0 x3 : ffff80000853974c [ 254.075227][ T7102] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 000000000000006d [ 254.076466][ T7102] Call trace: [ 254.076979][ T7102] __list_del_entry_valid+0x13c/0x158 [ 254.077772][ T7102] finish_wait+0xd4/0x1ac [ 254.078436][ T7102] gfs2_quotad+0x390/0x500 [ 254.079090][ T7102] kthread+0x250/0x2d8 [ 254.079738][ T7102] ret_from_fork+0x10/0x20 [ 254.080400][ T7102] Code: 911b0000 aa1303e1 aa1503e3 95c246f3 (d4210000) [ 254.081378][ T7102] ---[ end trace 0000000000000000 ]--- [ 254.329974][ T7102] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 254.331121][ T7102] SMP: stopping secondary CPUs [ 254.331866][ T7102] Kernel Offset: disabled [ 254.332532][ T7102] CPU features: 0x080000,000f0097,a65bfea7 [ 254.333357][ T7102] Memory Limit: none [ 254.563888][ T7102] Rebooting in 86400 seconds..