last executing test programs: 2m44.207163914s ago: executing program 2 (id=24): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000240), 0x40000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2m43.344352907s ago: executing program 2 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010003904fcffffff0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000422200042c00128008000100677265002000028008000500bb7e00000800040006"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 2m42.932365548s ago: executing program 2 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x120, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x5, 0xf, 0xe, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 2m41.360448714s ago: executing program 2 (id=34): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x45, 0x7cf, &(0x7f0000000ec0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020}, 0x2020) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x3}, 0x4) 2m39.936624158s ago: executing program 2 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYBLOB="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", @ANYRES32], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m37.497410249s ago: executing program 2 (id=43): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) dup3(r5, r6, 0x0) 2m22.052911497s ago: executing program 32 (id=43): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) dup3(r5, r6, 0x0) 39.099395747s ago: executing program 1 (id=372): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000280)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}}], 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 38.546392678s ago: executing program 1 (id=363): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 36.817469755s ago: executing program 1 (id=367): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x45, 0x7cf, &(0x7f0000000ec0)="$eJzs3U9sHFcZAPBvjJ2krghVQSWK0nSSFCkRwd3dtC5WD2W7HtvTrnet3TVKhFAbNU4Vxf2jVlVpDpRcWkAgxIlj6bXqhRsICSQOwAmJHrhwQKrUEyoIJFSEkIx2dje2Y6/tJHZT2t9vlX2zM9+8eW92Mt/OJm82AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBIatOlUjmJet5YPJsOV5tuNee3WD6o79frii22G5F0/8SBA3GoN+vQF1YX39N9Oh5Heq+OxIFucSCu3HnPXY98fnRksP4WDbpZx4YvGlv7Ion4TrdRl88vLy+9uAcN+Qh9/5f9iQM7XuXfK93n2ayRt5v5fHU2S/N2M52anCw9MDfTTmfyetY+1+5k82mtlVU7zVZ6snYqLU9NnUmziXPNxcbsdLWeDWY+/JVKqTSZPj6xkFVb7Wbjgccn2rW5vF7PG7NFTKX0SnRjHu4eiE/knbSTVefT9OKl5aUz69r14cqGpnaDyuvm7F934By5/673X37vn5eWugfksP4m/QOzUi5XKuXJh6YeerhUGq2UKutnlAYGB/K1iBiJ6EbsyUHLx9PIZjMjVj63K+duuFUj/fwf9cijEYtxNtJIY6R4Xn2MRS2moxXNmO++/tPYdcs35P8vPfC3P2y13bX5f5DlD60uPhxF/j/ae3V0WP7f0Iq9fDTe6bVm7byX4tW4EpfjfCzHcizFizdT877ra93Dx8ju1jcbWTQij3Y0I4/5qBZz0v6cNKZiMiajFE/GXMxEO9KYiTzqkUU7zkU7OpEVR1QtWpFFNTrRjFakcTJqcSrSKMfUwd5ez2IizkUzFqMRszEd1aKWi3Gp2O9nrmvXPd9+6hfP/PH9N7vT14LKW3Qk6X6Y6wb9Y4ugDel+eP4ffAzYECH/f9Ic6J+zdhq/W6duuGUrRf4fvd3NAAAAAPZQUnz7nkTEWNxbTM3k9ewbt7tZAAAAwC4q/l/zkW4x1p26N5Lu9X9pk8h3P/K2AQAAALsjKcbYJRExHvf1pgbDpTb7EgAAAAD4P1T8+//RbjEe8Voxo3v9PxLh+h8AAAA+Kb477B777+3r32O3vbA/+dXfo9UaS64unL0/ebbajas++5neev3i69dq7MwcTg72KymKydErdyYRMVrLjiSDu1/+d3+v/KB4Prx6A8Jh9/pPtmlAbN2A4lX8II71Yo5d6JUXBkt6WxmfyevZRK1Zf6Sc9L8c6bz83KVvRdH97zXmDyZx8dLy0sTTzy9fKNpytVvL1Wf7t4dPBmvtoC0r/T0Q927e47FiIEZ/u+O97ZbW9n+kt/rI1v1P1m7z9Tjeizk+3ivH1/f/QHeb5YlHylGtHhzpZGc7L6+s6X2/FeXNen4D78LrcaIXc+LkiV6xSSsq61rx3MZWVNa2Ymf7YsetePPYa2f/9dtmkp3ZrhVnbrEVALfLxeKuP6tZ6I4iC/1npaeb0K7Lu3cM1ryRs9zF1U8Zg/XX5LrR2JDd05vJ7q/HyV7Myd7nidHDm+SV0iZn9BcuvfC7/hn9wbd/8tNvHv39z24+u70dp3ox/SLu/s2QHNvt8w+vy6pvddd4a+h22/VKEmPdBcWPDxWDNs8/s/TM0nOVypnJ0oOl0kOVGCs+KvSLIS2VeQA+3bb/jZ1tI5IHt7mqvvvakIKJeDqej+W4EKeL0QYRcd/mtY6vGYZwepur1vE1v/Byeptry9XYyvWx+08kMST2zJo99sUfF8WHe/eeAMBeO75NHr6W/1/5bH+Njfn/9DbX3etz+aneD+cOro5jeC7fzFf3eH8AwKdB1vogGe+8kbRa+cKT5ampcrUzl6WtZu2JtJVPz2Zp3uhkrdpctTGbpQutZqdZG3x1PJ210/biwkKz1Ulnmq10odnOzxa//J72f/q9nc1XG5281l6oZ9V2ltaajU611kmn83YtXVh8rJ6357JWsXJ7IavlM3mt2smbjbTdXGzVsok0bWfZmsB8Omt08pk8G0vzRrrQyuerrasRUV+cz9LprF1r5QudZq/CwbbyxkyzNV9UO7Gx+3/9qPc3AHwcvPTqlcvnl5eXXry5iT/vJPh29xEAWE+WBgAAAAAAAAAAAACAj7+Nw/W6c29oIOBY3PTwwZf2x62MPvzkTXz5nd7bshsV3ko9d6x7T/f1D5bbv39ueOKpRx+9PCzmsdcOzf0li9i+ns3/pmw21PWNgxH7fv6j3pyvDQlORne5p+/GTnqxYWIl2SLmtp2SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCo/wUAAP//L/BVsw==") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020}, 0x2020) setresgid(r2, 0x0, r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x3}, 0x4) 35.157216588s ago: executing program 1 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, 0x0) 34.876089448s ago: executing program 1 (id=374): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000280)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}}], 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 34.31604225s ago: executing program 1 (id=375): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 18.195220018s ago: executing program 33 (id=375): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 15.31533693s ago: executing program 4 (id=426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x6, 0x0, 0x2, 0x8, 0xfffffffffffff1f4, 0xffffffffffffff4b}, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 14.204338492s ago: executing program 3 (id=428): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002100), 0x4e4203, 0x0) writev(r0, &(0x7f0000006280), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="19000000010000000a000000000000000000804c", @ANYRES32, @ANYBLOB='\b\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xe, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0x28) 14.09373414s ago: executing program 4 (id=429): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x0) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 12.584830222s ago: executing program 0 (id=431): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) 12.584303642s ago: executing program 3 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x120, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x5, 0xf, 0xe, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 12.48135494s ago: executing program 4 (id=434): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000000)={[{@enospc_debug}]}, 0x1, 0x50f9, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0x400c000) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000200)={0x2, 0x6, 0x4000000000000000}) 12.032061403s ago: executing program 0 (id=444): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x45, 0x7cf, &(0x7f0000000ec0)="$eJzs3U9sHFcZAPBvjJ2krghVQSWK0nSSFCkRwd3dtC5WD2W7HtvTrnet3TVKhFAbNU4Vxf2jVlVpDpRcWkAgxIlj6bXqhRsICSQOwAmJHrhwQKrUEyoIJFSEkIx2dje2Y6/tJHZT2t9vlX2zM9+8eW92Mt/OJm82AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBIatOlUjmJet5YPJsOV5tuNee3WD6o79frii22G5F0/8SBA3GoN+vQF1YX39N9Oh5Heq+OxIFucSCu3HnPXY98fnRksP4WDbpZx4YvGlv7Ion4TrdRl88vLy+9uAcN+Qh9/5f9iQM7XuXfK93n2ayRt5v5fHU2S/N2M52anCw9MDfTTmfyetY+1+5k82mtlVU7zVZ6snYqLU9NnUmziXPNxcbsdLWeDWY+/JVKqTSZPj6xkFVb7Wbjgccn2rW5vF7PG7NFTKX0SnRjHu4eiE/knbSTVefT9OKl5aUz69r14cqGpnaDyuvm7F934By5/673X37vn5eWugfksP4m/QOzUi5XKuXJh6YeerhUGq2UKutnlAYGB/K1iBiJ6EbsyUHLx9PIZjMjVj63K+duuFUj/fwf9cijEYtxNtJIY6R4Xn2MRS2moxXNmO++/tPYdcs35P8vPfC3P2y13bX5f5DlD60uPhxF/j/ae3V0WP7f0Iq9fDTe6bVm7byX4tW4EpfjfCzHcizFizdT877ra93Dx8ju1jcbWTQij3Y0I4/5qBZz0v6cNKZiMiajFE/GXMxEO9KYiTzqkUU7zkU7OpEVR1QtWpFFNTrRjFakcTJqcSrSKMfUwd5ez2IizkUzFqMRszEd1aKWi3Gp2O9nrmvXPd9+6hfP/PH9N7vT14LKW3Qk6X6Y6wb9Y4ugDel+eP4ffAzYECH/f9Ic6J+zdhq/W6duuGUrRf4fvd3NAAAAAPZQUnz7nkTEWNxbTM3k9ewbt7tZAAAAwC4q/l/zkW4x1p26N5Lu9X9pk8h3P/K2AQAAALsjKcbYJRExHvf1pgbDpTb7EgAAAAD4P1T8+//RbjEe8Voxo3v9PxLh+h8AAAA+Kb477B777+3r32O3vbA/+dXfo9UaS64unL0/ebbajas++5neev3i69dq7MwcTg72KymKydErdyYRMVrLjiSDu1/+d3+v/KB4Prx6A8Jh9/pPtmlAbN2A4lX8II71Yo5d6JUXBkt6WxmfyevZRK1Zf6Sc9L8c6bz83KVvRdH97zXmDyZx8dLy0sTTzy9fKNpytVvL1Wf7t4dPBmvtoC0r/T0Q927e47FiIEZ/u+O97ZbW9n+kt/rI1v1P1m7z9Tjeizk+3ivH1/f/QHeb5YlHylGtHhzpZGc7L6+s6X2/FeXNen4D78LrcaIXc+LkiV6xSSsq61rx3MZWVNa2Ymf7YsetePPYa2f/9dtmkp3ZrhVnbrEVALfLxeKuP6tZ6I4iC/1npaeb0K7Lu3cM1ryRs9zF1U8Zg/XX5LrR2JDd05vJ7q/HyV7Myd7nidHDm+SV0iZn9BcuvfC7/hn9wbd/8tNvHv39z24+u70dp3ox/SLu/s2QHNvt8w+vy6pvddd4a+h22/VKEmPdBcWPDxWDNs8/s/TM0nOVypnJ0oOl0kOVGCs+KvSLIS2VeQA+3bb/jZ1tI5IHt7mqvvvakIKJeDqej+W4EKeL0QYRcd/mtY6vGYZwepur1vE1v/Byeptry9XYyvWx+08kMST2zJo99sUfF8WHe/eeAMBeO75NHr6W/1/5bH+Njfn/9DbX3etz+aneD+cOro5jeC7fzFf3eH8AwKdB1vogGe+8kbRa+cKT5ampcrUzl6WtZu2JtJVPz2Zp3uhkrdpctTGbpQutZqdZG3x1PJ210/biwkKz1Ulnmq10odnOzxa//J72f/q9nc1XG5281l6oZ9V2ltaajU611kmn83YtXVh8rJ6357JWsXJ7IavlM3mt2smbjbTdXGzVsok0bWfZmsB8Omt08pk8G0vzRrrQyuerrasRUV+cz9LprF1r5QudZq/CwbbyxkyzNV9UO7Gx+3/9qPc3AHwcvPTqlcvnl5eXXry5iT/vJPh29xEAWE+WBgAAAAAAAAAAAACAj7+Nw/W6c29oIOBY3PTwwZf2x62MPvzkTXz5nd7bshsV3ko9d6x7T/f1D5bbv39ueOKpRx+9PCzmsdcOzf0li9i+ns3/pmw21PWNgxH7fv6j3pyvDQlORne5p+/GTnqxYWIl2SLmtp2SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCo/wUAAP//L/BVsw==") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020}, 0x2020) setresgid(r3, 0x0, r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x3}, 0x4) 10.626717086s ago: executing program 3 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r3, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) 9.465364342s ago: executing program 3 (id=437): openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x240100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000380)={0x2, @vbi={0x97, 0x3, 0x105, 0x30314752, [0x6, 0x3], [0x2, 0x10002], 0x1}}) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x10000, 0xff, 0x80000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000500)=ANY=[], 0x3, 0x224, &(0x7f0000001c40)="$eJzslL9rFEEUx78zt7e5FRVtUthYGDCiuUv2UNIcGkGwEiHxV6WHWUO8TU4uK5hDwWBjo52FYGPhP2CRIpWFXf4BQQsVBAuvsLARYWR2ZvdmMyZ7rmeV9ymG78y8mfdjZx8Igti1fP704+OTs9NzJwDsxRhG9PrXEsCY0tyw//D87vFnjXMvXr9/9XZ5/4ONrffJI0JkFyo7+HcAvJkpIUo9pad/SjGmJ3Pgqb4EjmNaXwFDVesb4LisdQCGa1rfNnRb2lertxbDoHqzHc5LMSmHKTn4cqhvja+3xjCv50IIwYz9ldVuqxmGQccQjt77w1YhkTprjVr1K8NFb4ajYcQnq3j18aM1OU9qM2nU75dQSF3fB8zq9WmMJLVRJTHyP+T07y9Z+esPn407cZGXZEWJxvehFMsUByeKHR+XH++MvXUAfx2GJyuQWSmjbyMrOdyUracTCyf/LZ7WH7SArwuDZvHUsx7JfxGFskjEaG9j0976kndcsHwXzHgJm/eF2MG4MmjMyY9YvGIeui3+LxXbLrB366p/iJcMR43+5Bj9oxYt3amtrHYnFpeaC8FCsOz79VMMeHjSr8WNSI1W3+v3Zy/uT3uM+8vb2Lrcxb1mFHWm1OgyFx6iqOPHc9/4bWbX29+u62MRzgM4oiayzbnpjSXLB3OVDY9tpRq3jQiCIAiCIAiCIAiCIAiCIAaDZaeHwSDy8S/G1r8DAAD//28magk=") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x702, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x802}, &(0x7f00000000c0), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 8.571859737s ago: executing program 0 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_io_uring_setup(0xd0, 0x0, &(0x7f00000002c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_complete(r3) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) setresgid(0xee00, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') 8.189573706s ago: executing program 4 (id=439): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x3f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x16708000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000100), &(0x7f0000000180)=0x10) open$dir(0x0, 0x20040, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) recvfrom(r3, &(0x7f0000000300)=""/26, 0x1a, 0x0, &(0x7f0000000340)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) 7.388948555s ago: executing program 0 (id=441): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002100), 0x4e4203, 0x0) writev(r0, &(0x7f0000006280), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="19000000010000000a000000000000000000804c", @ANYRES32, @ANYBLOB='\b\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xe, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0x28) 6.273417047s ago: executing program 0 (id=443): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x0) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 4.936158726s ago: executing program 4 (id=445): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) 4.935114866s ago: executing program 5 (id=455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x40001) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffe4) 3.834128477s ago: executing program 5 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010003904fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="00000000422200042c00128008000100677265002000028008000500bb7e00000800040006"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 3.833642177s ago: executing program 3 (id=448): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r2]) 3.822372518s ago: executing program 0 (id=449): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x45, 0x7cf, &(0x7f0000000ec0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020}, 0x2020) setresgid(r3, 0x0, r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x3}, 0x4) 3.553335417s ago: executing program 3 (id=450): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000000)={[{@enospc_debug}]}, 0x1, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0x400c000) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000200)={0x2, 0x6, 0x4000000000000000}) 3.553069638s ago: executing program 4 (id=451): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x120, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x5, 0xf, 0xe, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 3.308915545s ago: executing program 5 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_io_uring_setup(0xd0, 0x0, &(0x7f00000002c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_complete(r3) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) setresgid(0xee00, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') 2.16457431s ago: executing program 5 (id=453): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000280)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}}], 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.841359724s ago: executing program 5 (id=454): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002100), 0x4e4203, 0x0) writev(r0, &(0x7f0000006280), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="19000000010000000a000000000000000000804c", @ANYRES32, @ANYBLOB='\b\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xe, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0x28) 1.510896578s ago: executing program 6 (id=418): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) 1.381498268s ago: executing program 6 (id=456): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x3f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x16708000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000100), &(0x7f0000000180)=0x10) open$dir(0x0, 0x20040, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) recvfrom(r3, &(0x7f0000000300)=""/26, 0x1a, 0x0, &(0x7f0000000340)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) 861.058966ms ago: executing program 5 (id=457): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x40001) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffe4) 0s ago: executing program 6 (id=458): openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x240100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000380)={0x2, @vbi={0x97, 0x3, 0x105, 0x30314752, [0x6, 0x3], [0x2, 0x10002], 0x1}}) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x10000, 0xff, 0x80000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000500)=ANY=[], 0x3, 0x224, &(0x7f0000001c40)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x702, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x802}, &(0x7f00000000c0), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 54.896870][ T4157] cgroup: Unknown subsys name 'net' [ 55.013438][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.472590][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.362389][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 58.461307][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 58.531458][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.539204][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.548421][ T4176] device bridge_slave_0 entered promiscuous mode [ 58.581266][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.589117][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.598197][ T4176] device bridge_slave_1 entered promiscuous mode [ 58.659241][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.668517][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 58.679191][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.686273][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.694673][ T4167] device bridge_slave_0 entered promiscuous mode [ 58.705059][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.712228][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.720836][ T4167] device bridge_slave_1 entered promiscuous mode [ 58.728302][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 58.739963][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.814667][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.838144][ T4176] team0: Port device team_slave_0 added [ 58.848877][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.871796][ T4176] team0: Port device team_slave_1 added [ 58.928187][ T4167] team0: Port device team_slave_0 added [ 58.946750][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.953727][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.979810][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.992623][ T4167] team0: Port device team_slave_1 added [ 59.007845][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 59.029724][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.036928][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.063164][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.118752][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.125731][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.151816][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.174462][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.181827][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.189924][ T4177] device bridge_slave_0 entered promiscuous mode [ 59.207691][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.214671][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.240829][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.259317][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.266653][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.274529][ T4172] device bridge_slave_0 entered promiscuous mode [ 59.282570][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.290397][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.298828][ T4177] device bridge_slave_1 entered promiscuous mode [ 59.309651][ T4176] device hsr_slave_0 entered promiscuous mode [ 59.316826][ T4176] device hsr_slave_1 entered promiscuous mode [ 59.330336][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.337461][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.345273][ T4172] device bridge_slave_1 entered promiscuous mode [ 59.385390][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.422705][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.433691][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.445782][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.536935][ T4172] team0: Port device team_slave_0 added [ 59.544933][ T4177] team0: Port device team_slave_0 added [ 59.554382][ T4167] device hsr_slave_0 entered promiscuous mode [ 59.561558][ T4167] device hsr_slave_1 entered promiscuous mode [ 59.568260][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.576024][ T4167] Cannot create hsr debugfs directory [ 59.584938][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.595963][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.604011][ T4168] device bridge_slave_0 entered promiscuous mode [ 59.613020][ T4177] team0: Port device team_slave_1 added [ 59.620152][ T4172] team0: Port device team_slave_1 added [ 59.645962][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.653224][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.662023][ T4168] device bridge_slave_1 entered promiscuous mode [ 59.677243][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.684223][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.710341][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.748208][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.755181][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.781286][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.814909][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.822086][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.848174][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.892878][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.902599][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.909980][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.936210][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.962290][ T4177] device hsr_slave_0 entered promiscuous mode [ 59.969550][ T4177] device hsr_slave_1 entered promiscuous mode [ 59.976165][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.984725][ T4177] Cannot create hsr debugfs directory [ 60.001924][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.087867][ T2353] Bluetooth: hci1: command 0x0409 tx timeout [ 60.094818][ T2353] Bluetooth: hci0: command 0x0409 tx timeout [ 60.096986][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 60.107270][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 60.110769][ T4168] team0: Port device team_slave_0 added [ 60.113329][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 60.154481][ T4168] team0: Port device team_slave_1 added [ 60.178325][ T4172] device hsr_slave_0 entered promiscuous mode [ 60.185128][ T4172] device hsr_slave_1 entered promiscuous mode [ 60.192191][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.199960][ T4172] Cannot create hsr debugfs directory [ 60.248771][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.255751][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.281749][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.322987][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.330179][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.356918][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.435927][ T4168] device hsr_slave_0 entered promiscuous mode [ 60.448103][ T4168] device hsr_slave_1 entered promiscuous mode [ 60.454720][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.462501][ T4168] Cannot create hsr debugfs directory [ 60.483274][ T4176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.524449][ T4176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.534110][ T4176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.548042][ T4176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.661432][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.679701][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.689672][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.701070][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.741397][ T4172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.755206][ T4172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.774242][ T4172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.790758][ T4172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.862172][ T4177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.871250][ T4177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.889240][ T4177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.905230][ T4177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.933628][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.962740][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.998823][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.014354][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.025135][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.033570][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.044865][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.054394][ T4168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.070869][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.081011][ T4168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.093521][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.103441][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.113777][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.121146][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.130157][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.148341][ T4168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.160730][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.171358][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.180052][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.187157][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.213799][ T4168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.224346][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.235091][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.244099][ T894] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.251273][ T894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.261248][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.282448][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.292152][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.303031][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.310169][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.331015][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.353957][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.361695][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.373335][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.382962][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.391021][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.410284][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.424128][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.434519][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.462411][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.471668][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.481200][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.490793][ T894] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.497920][ T894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.505957][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.515113][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.524492][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.535074][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.547714][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.557263][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.568875][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.581441][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.590340][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.599525][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.608617][ T894] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.615685][ T894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.651623][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.660520][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.669983][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.679056][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.689942][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.698513][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.711815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.720912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.730659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.739573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.751579][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.762874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.771478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.782380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.791164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.804247][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.822247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.831888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.842250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.855626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.865176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.876497][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.900942][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.913847][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.930569][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.943046][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.951957][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.959188][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.973641][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.982041][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.990880][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.000133][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.007282][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.032316][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.050409][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.067936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.078583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.097411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.135973][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.148083][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.167324][ T4212] Bluetooth: hci3: command 0x041b tx timeout [ 62.167734][ T4215] Bluetooth: hci1: command 0x041b tx timeout [ 62.174721][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.188666][ T4212] Bluetooth: hci2: command 0x041b tx timeout [ 62.205955][ T4212] Bluetooth: hci4: command 0x041b tx timeout [ 62.212655][ T4212] Bluetooth: hci0: command 0x041b tx timeout [ 62.219922][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.233249][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.253272][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.271873][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.282162][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.292117][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.328894][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.336337][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.347318][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.355724][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.364826][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.375272][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.382968][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.405311][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.420160][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.428485][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.445095][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.460960][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.468985][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.477142][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.484675][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.494314][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.503689][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.513162][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.520329][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.530508][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.579183][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.589451][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.599607][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.606775][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.615291][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.625202][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.635257][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.645566][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.661991][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.670940][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.680052][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.735129][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.745105][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.754632][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.763758][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.772608][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.783020][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.792559][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.801231][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.809465][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.819039][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.828092][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.835970][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.844007][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.852171][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.865351][ T4172] device veth0_vlan entered promiscuous mode [ 62.877716][ T4176] device veth0_vlan entered promiscuous mode [ 62.900236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.909529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.919619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.929810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.939063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.948159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.961753][ T4172] device veth1_vlan entered promiscuous mode [ 62.981293][ T4176] device veth1_vlan entered promiscuous mode [ 62.990489][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.018498][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.034101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.042611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.051542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.060011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.069331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.079005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.087692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.098722][ T4167] device veth0_vlan entered promiscuous mode [ 63.159266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.168572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.178658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.194454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.203517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.220547][ T4177] device veth0_vlan entered promiscuous mode [ 63.233956][ T4177] device veth1_vlan entered promiscuous mode [ 63.251796][ T4167] device veth1_vlan entered promiscuous mode [ 63.260781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.270625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.280099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.290397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.302264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.312576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.329949][ T4172] device veth0_macvtap entered promiscuous mode [ 63.338554][ T4176] device veth0_macvtap entered promiscuous mode [ 63.359789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.370001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.379232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.388585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.396420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.405334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.419047][ T4176] device veth1_macvtap entered promiscuous mode [ 63.453776][ T4167] device veth0_macvtap entered promiscuous mode [ 63.464544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.473098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.483195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.492987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.501115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.509146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.523380][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.531693][ T4172] device veth1_macvtap entered promiscuous mode [ 63.553216][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.574289][ T4167] device veth1_macvtap entered promiscuous mode [ 63.584294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.594176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.610842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.623920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.638774][ T4177] device veth0_macvtap entered promiscuous mode [ 63.660759][ T4177] device veth1_macvtap entered promiscuous mode [ 63.670519][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.688355][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.701565][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.714657][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.730153][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.738888][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.747723][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.756343][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.765724][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.776401][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.792978][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.803899][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.813944][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.824506][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.836018][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.846029][ T4176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.856092][ T4176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.865803][ T4176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.874949][ T4176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.893514][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.904781][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.921727][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.932660][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.944796][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.955382][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.965989][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.975963][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.986941][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.998146][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.006134][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.016100][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.025264][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.037217][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.046057][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.055195][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.071649][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.082770][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.092987][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.106784][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.118225][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.130822][ T4172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.142273][ T4172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.151320][ T4172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.160159][ T4172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.178080][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.189161][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.199586][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.210431][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.220632][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.231386][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.243094][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.247650][ T2353] Bluetooth: hci0: command 0x040f tx timeout [ 64.256706][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.265368][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.273948][ T2353] Bluetooth: hci4: command 0x040f tx timeout [ 64.274937][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.280194][ T2353] Bluetooth: hci2: command 0x040f tx timeout [ 64.294341][ T2353] Bluetooth: hci1: command 0x040f tx timeout [ 64.296933][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.300817][ T2353] Bluetooth: hci3: command 0x040f tx timeout [ 64.320661][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.329940][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.340563][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.349523][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.378252][ T4177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.387286][ T4177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.396109][ T4177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.406357][ T4177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.441599][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.450944][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.581282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.593121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.601790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.610299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.660537][ T4168] device veth0_vlan entered promiscuous mode [ 64.687756][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.696740][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.715068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.743948][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.760925][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.762062][ T4168] device veth1_vlan entered promiscuous mode [ 64.799142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.807902][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.815974][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.842395][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.850739][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.851234][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.861351][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.874707][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.894016][ T4168] device veth0_macvtap entered promiscuous mode [ 64.916218][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.931504][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.941360][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.950472][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.960103][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.998506][ T4168] device veth1_macvtap entered promiscuous mode [ 65.007447][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.008660][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.015442][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.045372][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.065703][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.076248][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.103241][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.118030][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.137157][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.145107][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.145208][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.173239][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.182754][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.193329][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.203932][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.215306][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.226270][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.239100][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.251974][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.263689][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.273949][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.285030][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.296478][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.308519][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.318593][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.329092][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.341629][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.357060][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.365081][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.374348][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.385980][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.395955][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.414054][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.435214][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.466054][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.474961][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.053067][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.069112][ T4254] loop1: detected capacity change from 0 to 764 [ 66.092545][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.129535][ T4254] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 66.146699][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.188656][ T4256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.436406][ T4251] Bluetooth: hci3: command 0x0419 tx timeout [ 66.443217][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.492157][ T4264] binder: 4257:4264 ioctl c018620c 400000000000 returned -22 [ 66.502082][ T4251] Bluetooth: hci1: command 0x0419 tx timeout [ 66.525343][ T4265] Symlink component flag not implemented [ 66.531125][ T4265] Symlink component flag not implemented [ 66.537536][ T4265] Symlink component flag not implemented (128) [ 66.543799][ T4265] Symlink component flag not implemented (97) [ 66.662127][ T4251] Bluetooth: hci2: command 0x0419 tx timeout [ 66.680556][ T4251] Bluetooth: hci4: command 0x0419 tx timeout [ 66.699716][ T4251] Bluetooth: hci0: command 0x0419 tx timeout [ 66.785358][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.154420][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.204397][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.392948][ T4287] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.551693][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.608057][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.646877][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.727353][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.875696][ T4301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6'. [ 70.202662][ T4308] loop4: detected capacity change from 0 to 16 [ 71.874189][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.883070][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.925542][ T4301] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 72.229243][ T4183] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 72.384275][ T4326] loop2: detected capacity change from 0 to 764 [ 72.534790][ T4326] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 72.838508][ T4328] loop0: detected capacity change from 0 to 4096 [ 72.866282][ T4331] Symlink component flag not implemented [ 72.872090][ T4331] Symlink component flag not implemented [ 72.878277][ T4331] Symlink component flag not implemented (128) [ 72.884516][ T4331] Symlink component flag not implemented (97) [ 73.113586][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 73.830494][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 73.830521][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 73.840268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.939707][ T4328] ntfs: volume version 3.1. [ 74.892955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.902014][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.910958][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 76.309849][ T4362] Bluetooth: hci5: Frame reassembly failed (-84) [ 76.363079][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 77.774135][ T4374] loop2: detected capacity change from 0 to 764 [ 77.838582][ T4376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.32'. [ 77.897697][ T4374] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 77.918194][ T4376] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 78.069541][ T4376] loop3: detected capacity change from 0 to 16 [ 78.232179][ T4380] Symlink component flag not implemented [ 78.238527][ T4380] Symlink component flag not implemented [ 78.244597][ T4380] Symlink component flag not implemented (128) [ 78.251526][ T4380] Symlink component flag not implemented (97) [ 78.327287][ T4183] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 79.091890][ T4376] erofs: (device loop3): mounted with root inode @ nid 36. [ 80.432698][ T4396] loop2: detected capacity change from 0 to 8 [ 81.478763][ T26] audit: type=1800 audit(1739344879.692:2): pid=4395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.38" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 81.496780][ T7] cfg80211: failed to load regulatory.db [ 83.803473][ T4414] loop1: detected capacity change from 0 to 764 [ 84.227446][ T4418] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.288297][ T894] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.362849][ T894] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.404426][ T4414] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.651054][ T4425] Symlink component flag not implemented [ 85.656919][ T4425] Symlink component flag not implemented [ 85.662982][ T4425] Symlink component flag not implemented (128) [ 85.669309][ T4425] Symlink component flag not implemented (97) [ 86.326738][ T2353] Bluetooth: hci5: command 0xfc11 tx timeout [ 86.326812][ T4183] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 86.456529][ C0] sched: RT throttling activated [ 86.890155][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 87.586046][ T4198] libceph: connect (1)[c::]:6789 error -101 [ 87.601274][ T4198] libceph: mon0 (1)[c::]:6789 connect error [ 87.770317][ T4440] ceph: No mds server is up or the cluster is laggy [ 87.813649][ T4198] libceph: connect (1)[c::]:6789 error -101 [ 87.826751][ T4198] libceph: mon0 (1)[c::]:6789 connect error [ 88.334967][ T4451] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.799222][ T4459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'. [ 88.913367][ T4459] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 89.177627][ T4461] loop4: detected capacity change from 0 to 1024 [ 89.391145][ T4461] ======================================================= [ 89.391145][ T4461] WARNING: The mand mount option has been deprecated and [ 89.391145][ T4461] and is ignored by this kernel. Remove the mand [ 89.391145][ T4461] option from the mount to silence this warning. [ 89.391145][ T4461] ======================================================= [ 89.670999][ T4461] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.61: Invalid block bitmap block 0 in block_group 0 [ 89.687315][ T4461] Quota error (device loop4): write_blk: dquota write failed [ 89.694973][ T4461] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 89.705681][ T4461] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.61: Failed to acquire dquot type 0 [ 89.719652][ T4461] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.61: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.736834][ T4461] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.61: Invalid inode bitmap blk 0 in block_group 0 [ 89.757189][ T4461] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 89.758467][ T4278] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 89.779438][ T4461] EXT4-fs (loop4): 1 orphan inode deleted [ 89.785221][ T4461] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 89.830190][ T4278] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:10: Failed to release dquot type 0 [ 89.908286][ T4449] loop3: detected capacity change from 0 to 32768 [ 90.023746][ T4461] syz.4.61 (4461) used greatest stack depth: 19392 bytes left [ 90.088799][ T4449] XFS (loop3): Mounting V5 Filesystem [ 90.805479][ T4449] XFS (loop3): Ending clean mount [ 91.063970][ T4478] loop4: detected capacity change from 0 to 764 [ 91.081355][ T4449] XFS (loop3): Quotacheck needed: Please wait. [ 91.161508][ T4478] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 91.316456][ T4449] XFS (loop3): Quotacheck: Done. [ 91.472231][ T4484] Symlink component flag not implemented [ 91.478158][ T4484] Symlink component flag not implemented [ 91.484286][ T4484] Symlink component flag not implemented (128) [ 91.490543][ T4484] Symlink component flag not implemented (97) [ 91.626467][ T4176] XFS (loop3): Unmounting Filesystem [ 92.789494][ T1347] libceph: connect (1)[c::]:6789 error -101 [ 92.795560][ T1347] libceph: mon0 (1)[c::]:6789 connect error [ 92.834671][ T4490] ceph: No mds server is up or the cluster is laggy [ 93.271670][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 94.422173][ T4513] loop3: detected capacity change from 0 to 1024 [ 94.790641][ T4513] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.73: Invalid block bitmap block 0 in block_group 0 [ 94.810589][ T4513] Quota error (device loop3): write_blk: dquota write failed [ 94.818291][ T4513] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 94.829209][ T4513] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.73: Failed to acquire dquot type 0 [ 94.852779][ T4513] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.73: Freeing blocks not in datazone - block = 0, count = 4096 [ 94.875261][ T4513] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.73: Invalid inode bitmap blk 0 in block_group 0 [ 94.891477][ T4278] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 94.901706][ T4513] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 94.912505][ T4513] EXT4-fs (loop3): 1 orphan inode deleted [ 94.918601][ T4513] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 95.005896][ T4278] EXT4-fs error (device loop3): ext4_release_dquot:6220: comm kworker/u4:10: Failed to release dquot type 0 [ 95.660029][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.267227][ T1108] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.316708][ T1108] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.355009][ T1108] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.400285][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.780211][ T4517] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.997524][ T4533] loop0: detected capacity change from 0 to 764 [ 97.081146][ T4533] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 97.450916][ T4541] Symlink component flag not implemented [ 97.456727][ T4541] Symlink component flag not implemented [ 97.462949][ T4541] Symlink component flag not implemented (128) [ 97.469234][ T4541] Symlink component flag not implemented (97) [ 98.150211][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 98.176130][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 98.182390][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 98.264427][ T4549] ceph: No mds server is up or the cluster is laggy [ 98.480107][ T4559] netlink: 'syz.4.84': attribute type 10 has an invalid length. [ 98.525065][ T4559] bond0: (slave bond_slave_0): Releasing backup interface [ 98.778821][ T1347] usb 2-1: USB disconnect, device number 2 [ 99.598650][ T4539] chnl_net:caif_netlink_parms(): no params data found [ 99.691071][ T4198] Bluetooth: hci5: command 0x0409 tx timeout [ 99.980520][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.016694][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.025109][ T4539] device bridge_slave_0 entered promiscuous mode [ 100.115672][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.122929][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.131580][ T4539] device bridge_slave_1 entered promiscuous mode [ 100.240913][ T4539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.273976][ T4539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.729510][ T4584] loop0: detected capacity change from 0 to 1024 [ 101.302129][ T4584] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.87: Invalid block bitmap block 0 in block_group 0 [ 101.317338][ T4584] Quota error (device loop0): write_blk: dquota write failed [ 101.326253][ T4584] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 101.336713][ T4584] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.87: Failed to acquire dquot type 0 [ 101.357101][ T4584] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.87: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.370955][ T4584] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.87: Invalid inode bitmap blk 0 in block_group 0 [ 101.383688][ T4268] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 101.383731][ T4268] EXT4-fs error (device loop0): ext4_release_dquot:6220: comm kworker/u4:7: Failed to release dquot type 0 [ 101.406570][ T4584] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 101.426171][ T4584] EXT4-fs (loop0): 1 orphan inode deleted [ 101.432036][ T4584] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 101.752679][ T4539] team0: Port device team_slave_0 added [ 101.770588][ T4539] team0: Port device team_slave_1 added [ 101.810657][ T1347] Bluetooth: hci5: command 0x041b tx timeout [ 102.091882][ T4539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.181188][ T4539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.295898][ T4597] loop4: detected capacity change from 0 to 764 [ 102.369305][ T4539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.464426][ T4597] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 102.513827][ T4539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.596972][ T4539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.716436][ T4539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.787104][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 102.836720][ T4600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'. [ 102.927293][ T4604] Symlink component flag not implemented [ 102.933083][ T4604] Symlink component flag not implemented [ 102.939258][ T4604] Symlink component flag not implemented (128) [ 102.945484][ T4604] Symlink component flag not implemented (97) [ 103.461450][ T4539] device hsr_slave_0 entered promiscuous mode [ 103.499204][ T4539] device hsr_slave_1 entered promiscuous mode [ 103.511269][ T4539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.523650][ T4539] Cannot create hsr debugfs directory [ 103.643198][ T4539] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.658777][ T4539] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.669114][ T4539] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.685986][ T4539] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.861401][ T1347] Bluetooth: hci5: command 0x040f tx timeout [ 104.416825][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.442035][ T4611] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.506471][ T1347] libceph: connect (1)[c::]:6789 error -101 [ 104.512838][ T1347] libceph: mon0 (1)[c::]:6789 connect error [ 104.617021][ T4613] ceph: No mds server is up or the cluster is laggy [ 104.826025][ T1347] libceph: connect (1)[c::]:6789 error -101 [ 104.937141][ T1347] libceph: mon0 (1)[c::]:6789 connect error [ 105.197141][ T1108] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.224776][ T1108] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.276740][ T1108] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.286354][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.432796][ T4610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.471004][ T4539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.483937][ T4628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.100'. [ 105.520175][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.541958][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.587978][ T4627] capability: warning: `syz.1.101' uses deprecated v2 capabilities in a way that may be insecure [ 105.657659][ T4628] bond0: (slave bond_slave_1): Slave does not support ipsec offload [ 105.679793][ T4630] program syz.1.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.781256][ T4539] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.901781][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.920771][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.940621][ T894] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.947816][ T894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.969427][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.122876][ T4539] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.143064][ T4539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.158424][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.178056][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.191666][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.198881][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.213519][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.255481][ T4635] loop1: detected capacity change from 0 to 1024 [ 106.298230][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.328138][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.361472][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.396249][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.435366][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.470588][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.522436][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.558274][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.590995][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.623335][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.653112][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.438343][ T1347] Bluetooth: hci5: command 0x0419 tx timeout [ 107.524292][ T1347] usb 4-1: USB disconnect, device number 2 [ 107.580641][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.637353][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.676643][ T4539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.775549][ T4635] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.102: Invalid block bitmap block 0 in block_group 0 [ 107.789971][ T4635] Quota error (device loop1): write_blk: dquota write failed [ 107.797458][ T4635] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 107.807470][ T4635] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.102: Failed to acquire dquot type 0 [ 107.819046][ T4635] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.102: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.835150][ T4635] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.102: Invalid inode bitmap blk 0 in block_group 0 [ 107.856121][ T4250] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 107.867139][ T4635] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 107.876003][ T4635] EXT4-fs (loop1): 1 orphan inode deleted [ 107.881867][ T4635] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 107.983627][ T4250] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:6: Failed to release dquot type 0 [ 108.268248][ T4658] loop4: detected capacity change from 0 to 764 [ 108.270162][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 108.315842][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 108.381914][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.395816][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.512685][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.531699][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.555772][ T4539] device veth0_vlan entered promiscuous mode [ 108.572269][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.583991][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.619213][ T4658] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 108.678094][ T4539] device veth1_vlan entered promiscuous mode [ 108.975179][ T4668] Symlink component flag not implemented [ 108.981283][ T4668] Symlink component flag not implemented [ 108.988617][ T4668] Symlink component flag not implemented (128) [ 108.994955][ T4668] Symlink component flag not implemented (97) [ 110.855032][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.901626][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.991628][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.011591][ T4675] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 111.024199][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.072425][ T4539] device veth0_macvtap entered promiscuous mode [ 111.094557][ T4539] device veth1_macvtap entered promiscuous mode [ 111.140559][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.151671][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.162078][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.186721][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.217331][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.228288][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.238904][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.249874][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.260163][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.271176][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.284091][ T4539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.303154][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.313607][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.322058][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.331045][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.342507][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.360641][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.373628][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.389518][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.403440][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.417964][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.429094][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.440068][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.450293][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.461468][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.473349][ T4539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.491654][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.503261][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.524369][ T4539] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.535519][ T4539] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.544815][ T4539] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.554044][ T4539] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.643306][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.655807][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.664688][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.675264][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.689985][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.706027][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.966892][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 111.977170][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 113.179105][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 113.226874][ T4689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 113.290445][ T4275] libceph: connect (1)[c::]:6789 error -101 [ 113.296734][ T4275] libceph: mon0 (1)[c::]:6789 connect error [ 113.302983][ T4691] ceph: No mds server is up or the cluster is laggy [ 113.575120][ T4275] libceph: connect (1)[c::]:6789 error -101 [ 113.582140][ T4275] libceph: mon0 (1)[c::]:6789 connect error [ 113.704468][ T4698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'. [ 114.145361][ T2353] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.180990][ T4698] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 114.652333][ T4705] loop5: detected capacity change from 0 to 128 [ 115.383881][ T2353] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.442296][ T4708] loop3: detected capacity change from 0 to 764 [ 115.452134][ T2353] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.547856][ T2353] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.632163][ T2353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.801925][ T4688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.071218][ T4708] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 116.104627][ T2353] usb 5-1: USB disconnect, device number 2 [ 116.709611][ T4718] Symlink component flag not implemented [ 116.715358][ T4718] Symlink component flag not implemented [ 116.721554][ T4718] Symlink component flag not implemented (128) [ 116.727816][ T4718] Symlink component flag not implemented (97) [ 118.204727][ T4716] loop5: detected capacity change from 0 to 1024 [ 118.350592][ T4716] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.119: Invalid block bitmap block 0 in block_group 0 [ 118.365164][ T4716] Quota error (device loop5): write_blk: dquota write failed [ 118.372951][ T4716] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 118.383741][ T4716] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.119: Failed to acquire dquot type 0 [ 118.412261][ T4716] EXT4-fs error (device loop5): ext4_free_blocks:6223: comm syz.5.119: Freeing blocks not in datazone - block = 0, count = 4096 [ 118.426328][ T4716] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.119: Invalid inode bitmap blk 0 in block_group 0 [ 118.439591][ T4419] Quota error (device loop5): remove_tree: Getting block too big (0 >= 9) [ 118.443608][ T4716] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 118.449108][ T4545] udevd[4545]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.487216][ T4419] EXT4-fs error (device loop5): ext4_release_dquot:6220: comm kworker/u4:13: Failed to release dquot type 0 [ 118.499024][ T4716] EXT4-fs (loop5): 1 orphan inode deleted [ 118.504787][ T4716] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 118.845056][ T4728] loop3: detected capacity change from 0 to 764 [ 119.009422][ T4728] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 119.456296][ T4739] Symlink component flag not implemented [ 119.462305][ T4739] Symlink component flag not implemented [ 119.468449][ T4739] Symlink component flag not implemented (128) [ 119.474715][ T4739] Symlink component flag not implemented (97) [ 120.596156][ T4738] syz.5.123 (4738) used greatest stack depth: 19000 bytes left [ 120.927515][ T4750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 120.967861][ T4750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 121.573221][ T4762] loop3: detected capacity change from 0 to 128 [ 122.903152][ T4767] netlink: 16 bytes leftover after parsing attributes in process `syz.5.134'. [ 123.036790][ T4767] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 123.089092][ T4768] loop5: detected capacity change from 0 to 16 [ 123.272530][ T4768] erofs: (device loop5): mounted with root inode @ nid 36. [ 123.827801][ T4767] netlink: 132 bytes leftover after parsing attributes in process `syz.5.134'. [ 123.859290][ T4778] loop3: detected capacity change from 0 to 764 [ 124.098914][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.131631][ T4778] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 124.560075][ T4785] Symlink component flag not implemented [ 124.565810][ T4785] Symlink component flag not implemented [ 124.573332][ T4785] Symlink component flag not implemented (128) [ 124.579610][ T4785] Symlink component flag not implemented (97) [ 125.767291][ T13] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.806649][ T13] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.828442][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 125.835358][ T13] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.856202][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.889314][ T4792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 125.899028][ T4775] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.746965][ T4251] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.851290][ T2353] usb 1-1: USB disconnect, device number 2 [ 127.062603][ T4251] usb 4-1: Using ep0 maxpacket: 8 [ 127.135138][ T4802] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.386964][ T4251] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 127.776613][ T4805] loop1: detected capacity change from 0 to 128 [ 128.373491][ T4251] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 128.419490][ T4251] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 128.584540][ T4251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.894320][ T4275] usb 4-1: USB disconnect, device number 3 [ 129.371809][ T4815] loop3: detected capacity change from 0 to 764 [ 129.619203][ T4815] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 130.859396][ T4824] Symlink component flag not implemented [ 130.865134][ T4824] Symlink component flag not implemented [ 130.871782][ T4824] Symlink component flag not implemented (128) [ 130.878313][ T4824] Symlink component flag not implemented (97) [ 132.651891][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.658581][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.078056][ T4853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 136.174384][ T4853] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 136.433787][ T4853] loop0: detected capacity change from 0 to 16 [ 139.274694][ T4853] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.398413][ T4875] loop5: detected capacity change from 0 to 764 [ 139.797690][ T4875] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 140.113682][ T4883] Symlink component flag not implemented [ 140.119489][ T4883] Symlink component flag not implemented [ 140.125598][ T4883] Symlink component flag not implemented (128) [ 140.131915][ T4883] Symlink component flag not implemented (97) [ 140.481687][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.532428][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.586949][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.629014][ T4885] device bridge_slave_0 left promiscuous mode [ 140.680512][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.868258][ T4885] device bridge_slave_1 left promiscuous mode [ 140.874664][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.913662][ T4885] bond0: (slave bond_slave_1): Releasing backup interface [ 141.871690][ T4885] team0: Port device team_slave_0 removed [ 142.050352][ T4885] team0: Port device team_slave_1 removed [ 142.073712][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.137140][ T4885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.179766][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.206703][ T4885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.274429][ T4885] syz.4.175 (4885) used greatest stack depth: 18520 bytes left [ 149.393484][ T4212] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 150.315960][ T4945] loop0: detected capacity change from 0 to 764 [ 150.380996][ T4945] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 150.585871][ T4947] Symlink component flag not implemented [ 150.591691][ T4947] Symlink component flag not implemented [ 150.597510][ T4947] Symlink component flag not implemented (128) [ 150.604207][ T4947] Symlink component flag not implemented (97) [ 151.242880][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.269207][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.333203][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.370844][ T4952] device bridge_slave_0 left promiscuous mode [ 151.416993][ T4952] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.497944][ T4952] device bridge_slave_1 left promiscuous mode [ 151.504409][ T4952] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.619832][ T4952] bond0: (slave bond_slave_0): Releasing backup interface [ 152.227334][ T4952] bond0: (slave bond_slave_1): Releasing backup interface [ 152.338887][ T4952] team0: Port device team_slave_0 removed [ 152.428088][ T4952] team0: Port device team_slave_1 removed [ 152.445038][ T4952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.455767][ T4952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.469885][ T4952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.487334][ T4952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.802220][ T4981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.199'. [ 154.922725][ T4981] loop3: detected capacity change from 0 to 16 [ 154.952240][ T4985] loop4: detected capacity change from 0 to 764 [ 155.297277][ T4981] erofs: (device loop3): mounted with root inode @ nid 36. [ 156.114685][ T4981] netlink: 132 bytes leftover after parsing attributes in process `syz.3.199'. [ 156.149945][ T4985] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 156.450944][ T4998] Symlink component flag not implemented [ 156.456840][ T4998] Symlink component flag not implemented [ 156.462557][ T4998] Symlink component flag not implemented (128) [ 156.469670][ T4998] Symlink component flag not implemented (97) [ 156.552916][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.625518][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.656264][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.717367][ T5000] device bridge_slave_0 left promiscuous mode [ 156.756089][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.832321][ T5000] device bridge_slave_1 left promiscuous mode [ 156.875562][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.938861][ T5000] bond0: (slave bond_slave_0): Releasing backup interface [ 157.059993][ T5000] bond0: (slave bond_slave_1): Releasing backup interface [ 157.124143][ T5000] team0: Port device team_slave_0 removed [ 157.151636][ T5000] team0: Port device team_slave_1 removed [ 157.165085][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.173586][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.201477][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.216274][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.614150][ T5037] loop1: detected capacity change from 0 to 4096 [ 159.808300][ T5045] loop5: detected capacity change from 0 to 764 [ 159.889588][ T5045] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 160.111842][ T5049] Symlink component flag not implemented [ 160.117684][ T5049] Symlink component flag not implemented [ 160.123403][ T5049] Symlink component flag not implemented (128) [ 160.129617][ T5049] Symlink component flag not implemented (97) [ 160.854067][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.893202][ T5060] loop4: detected capacity change from 0 to 8192 [ 160.895038][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.961778][ T5060] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 161.004731][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.019523][ T5062] device bridge_slave_0 left promiscuous mode [ 161.025902][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.043344][ T5060] REISERFS (device loop4): using ordered data mode [ 161.047108][ T5062] device bridge_slave_1 left promiscuous mode [ 161.056545][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.073272][ T5062] bond0: (slave bond_slave_0): Releasing backup interface [ 161.087157][ T5060] reiserfs: using flush barriers [ 161.124496][ T5060] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.151678][ T5062] bond0: (slave bond_slave_1): Releasing backup interface [ 161.165854][ T5060] REISERFS (device loop4): checking transaction log (loop4) [ 161.378901][ T1347] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 161.450002][ T5062] team0: Port device team_slave_0 removed [ 161.457214][ T1347] Bluetooth: hci1: Injecting HCI hardware error event [ 161.469603][ T4181] Bluetooth: hci1: hardware error 0x00 [ 162.490455][ T5062] team0: Port device team_slave_1 removed [ 162.505112][ T5060] REISERFS (device loop4): Using tea hash to sort names [ 162.522153][ T5060] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 162.537579][ T5062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.543684][ T5060] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 162.570676][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.610247][ T5062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.627259][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.672649][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 162.987638][ T5091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.237'. [ 163.015074][ T5090] loop1: detected capacity change from 0 to 764 [ 163.067615][ T5091] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 163.159225][ T5090] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 163.441149][ T5099] Symlink component flag not implemented [ 163.447008][ T5099] Symlink component flag not implemented [ 163.452742][ T5099] Symlink component flag not implemented (128) [ 163.458999][ T5099] Symlink component flag not implemented (97) [ 165.109159][ T5109] loop5: detected capacity change from 0 to 8192 [ 165.123197][ T5104] loop4: detected capacity change from 0 to 4096 [ 165.208982][ T5109] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 165.237325][ T5104] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 165.246888][ T5109] REISERFS (device loop5): using ordered data mode [ 165.255597][ T5109] reiserfs: using flush barriers [ 165.329974][ T5109] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.346740][ T5109] REISERFS (device loop5): checking transaction log (loop5) [ 165.366830][ T5109] REISERFS (device loop5): Using rupasov hash to sort names [ 165.374181][ T5109] REISERFS (device loop5): using 3.5.x disk format [ 165.383043][ T5109] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 165.408360][ T5109] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 165.423133][ T5104] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 165.471555][ T5109] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 165.579323][ T5109] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 165.671230][ T5109] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 165.731635][ T5117] Zero length message leads to an empty skb [ 165.779125][ T5109] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 165.779337][ T5109] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 165.779579][ T5109] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 166.199801][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.251'. [ 166.245087][ T5133] loop1: detected capacity change from 0 to 764 [ 166.496247][ T5133] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 167.397714][ T5147] Symlink component flag not implemented [ 167.403545][ T5147] Symlink component flag not implemented [ 167.409448][ T5147] Symlink component flag not implemented (128) [ 167.415630][ T5147] Symlink component flag not implemented (97) [ 167.429837][ T5146] loop0: detected capacity change from 0 to 4096 [ 167.464625][ T5146] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 167.686828][ T5146] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 168.026096][ T5152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.260'. [ 168.754174][ T5158] loop0: detected capacity change from 0 to 8192 [ 168.861277][ T5158] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 168.915926][ T5158] REISERFS (device loop0): using ordered data mode [ 168.976617][ T5158] reiserfs: using flush barriers [ 168.996573][ T5158] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.107276][ T5158] REISERFS (device loop0): checking transaction log (loop0) [ 169.145786][ T5158] REISERFS (device loop0): Using rupasov hash to sort names [ 169.194304][ T5158] REISERFS (device loop0): using 3.5.x disk format [ 169.227643][ T5158] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.280424][ T5158] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.306249][ T5158] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 169.330980][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 169.350117][ T5158] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 169.527266][ T5158] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 170.446263][ T5158] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 170.459189][ T5181] loop3: detected capacity change from 0 to 764 [ 170.498390][ T5158] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 170.527374][ T5158] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 170.590997][ T5181] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 170.865912][ T5188] Symlink component flag not implemented [ 170.871656][ T5188] Symlink component flag not implemented [ 170.877454][ T5188] Symlink component flag not implemented (128) [ 170.883624][ T5188] Symlink component flag not implemented (97) [ 171.043179][ T5186] loop1: detected capacity change from 0 to 4096 [ 171.120097][ T5186] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 171.845084][ T5186] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 172.224799][ T5202] loop3: detected capacity change from 0 to 512 [ 172.471401][ T5206] Error parsing options; rc = [-22] [ 173.135625][ T5202] EXT4-fs (loop3): Unrecognized mount option "=" or missing value [ 173.497824][ T5216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 173.767152][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 173.798966][ T5220] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 175.864280][ T5230] loop1: detected capacity change from 0 to 764 [ 175.935281][ T5230] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 176.435689][ T5235] Symlink component flag not implemented [ 176.441951][ T5235] Symlink component flag not implemented [ 176.448462][ T5235] Symlink component flag not implemented (128) [ 176.454709][ T5235] Symlink component flag not implemented (97) [ 177.946285][ T5246] loop3: detected capacity change from 0 to 4096 [ 178.019944][ T5239] loop4: detected capacity change from 0 to 8192 [ 178.041250][ T5246] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 178.111335][ T5239] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 178.193633][ T5239] REISERFS (device loop4): using ordered data mode [ 178.216034][ T5246] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 178.243584][ T5239] reiserfs: using flush barriers [ 178.281258][ T5255] loop5: detected capacity change from 0 to 1024 [ 178.298067][ T5239] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.347095][ T5239] REISERFS (device loop4): checking transaction log (loop4) [ 178.378051][ T5239] REISERFS (device loop4): Using rupasov hash to sort names [ 178.431202][ T5239] REISERFS (device loop4): using 3.5.x disk format [ 178.475213][ T5255] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.551953][ T5239] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 178.808831][ T5239] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 178.908103][ T26] audit: type=1800 audit(1739344977.192:3): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.292" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 179.105482][ T5239] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 179.141748][ T5239] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 179.280913][ T5239] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 179.379916][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 179.444375][ T5239] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 179.494879][ T5239] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 179.626915][ T5239] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 180.687054][ T5284] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 180.687054][ T5284] The task syz.3.303 (5284) triggered the difference, watch for misbehavior. [ 180.806729][ T4198] Bluetooth: hci3: command 0x0406 tx timeout [ 180.841728][ T4198] Bluetooth: hci2: command 0x0406 tx timeout [ 180.886216][ T4198] Bluetooth: hci0: command 0x0406 tx timeout [ 180.921655][ T5287] loop4: detected capacity change from 0 to 764 [ 180.923257][ T4198] Bluetooth: hci4: command 0x0406 tx timeout [ 181.034593][ T5287] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 181.405076][ T5298] Symlink component flag not implemented [ 181.410964][ T5298] Symlink component flag not implemented [ 181.416761][ T5298] Symlink component flag not implemented (128) [ 181.422936][ T5298] Symlink component flag not implemented (97) [ 182.680249][ T5310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 186.953121][ T5343] loop1: detected capacity change from 0 to 8192 [ 187.116865][ T5343] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 187.126211][ T5343] REISERFS (device loop1): using ordered data mode [ 187.133936][ T5343] reiserfs: using flush barriers [ 187.156231][ T5352] loop4: detected capacity change from 0 to 764 [ 187.170877][ T5343] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.188996][ T5343] REISERFS (device loop1): checking transaction log (loop1) [ 187.260660][ T5352] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 187.275702][ T5343] REISERFS (device loop1): Using rupasov hash to sort names [ 187.418026][ T5343] REISERFS (device loop1): using 3.5.x disk format [ 187.508535][ T5343] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 187.519723][ T5343] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 187.532987][ T5343] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 187.594752][ T5358] Symlink component flag not implemented [ 187.602318][ T5358] Symlink component flag not implemented [ 187.608125][ T5358] Symlink component flag not implemented (128) [ 187.614315][ T5358] Symlink component flag not implemented (97) [ 187.841340][ T5343] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 187.866642][ T5343] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 188.046061][ T5343] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 188.066636][ T5343] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 188.094101][ T5343] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 188.194755][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 188.574368][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 191.113456][ T5391] loop1: detected capacity change from 0 to 764 [ 193.531982][ T5391] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 193.731483][ T5391] Symlink component flag not implemented [ 193.737582][ T5391] Symlink component flag not implemented [ 193.744077][ T5391] Symlink component flag not implemented (128) [ 193.750402][ T5391] Symlink component flag not implemented (97) [ 194.114944][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.132679][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.292171][ T5407] loop3: detected capacity change from 0 to 8192 [ 194.352605][ T5411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.351'. [ 194.376243][ T5412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.347'. [ 194.393789][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.340'. [ 194.408809][ T5407] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 194.457346][ T5407] REISERFS (device loop3): using ordered data mode [ 194.466209][ T5407] reiserfs: using flush barriers [ 194.470569][ T5412] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 194.498643][ T5407] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.547137][ T5407] REISERFS (device loop3): checking transaction log (loop3) [ 194.563139][ T5407] REISERFS (device loop3): Using rupasov hash to sort names [ 194.572662][ T5407] REISERFS (device loop3): using 3.5.x disk format [ 194.579955][ T5407] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 194.595063][ T5407] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 194.607031][ T5407] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 194.639432][ T5407] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 194.664313][ T5407] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 194.702142][ T5407] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 194.721000][ T5407] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 194.736104][ T5407] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 196.807897][ T5436] loop4: detected capacity change from 0 to 764 [ 197.079971][ T5436] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 197.770579][ T5436] Symlink component flag not implemented [ 197.776251][ T5436] Symlink component flag not implemented [ 197.782129][ T5436] Symlink component flag not implemented (128) [ 197.788355][ T5436] Symlink component flag not implemented (97) [ 198.082961][ T5448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 199.242094][ T5458] loop0: detected capacity change from 0 to 2048 [ 200.680771][ T5458] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.397586][ T5491] loop1: detected capacity change from 0 to 764 [ 202.715921][ T5502] loop5: detected capacity change from 0 to 16 [ 202.723075][ T5491] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 203.549742][ T5502] erofs: (device loop5): mounted with root inode @ nid 36. [ 203.745478][ T5491] Symlink component flag not implemented [ 203.751276][ T5491] Symlink component flag not implemented [ 203.757086][ T5491] Symlink component flag not implemented (128) [ 203.763253][ T5491] Symlink component flag not implemented (97) [ 203.866702][ T5502] netlink: 132 bytes leftover after parsing attributes in process `syz.5.366'. [ 203.918179][ T5507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 206.366558][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 206.726826][ T7] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 206.748396][ T7] usb 4-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 206.897084][ T7] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 206.909727][ T7] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 206.929695][ T7] usb 4-1: Manufacturer: syz [ 206.943063][ T7] usb 4-1: SerialNumber: syz [ 207.188134][ T5539] loop5: detected capacity change from 0 to 764 [ 207.272610][ T7] usb 4-1: USB disconnect, device number 4 [ 207.309973][ T5539] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 207.403494][ T5539] Symlink component flag not implemented [ 207.409385][ T5539] Symlink component flag not implemented [ 207.415199][ T5539] Symlink component flag not implemented (128) [ 207.421445][ T5539] Symlink component flag not implemented (97) [ 207.674081][ T5546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.385'. [ 207.866617][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 213.243107][ T5590] loop4: detected capacity change from 0 to 764 [ 213.291241][ T5590] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 213.338432][ T5590] Symlink component flag not implemented [ 213.344142][ T5590] Symlink component flag not implemented [ 213.349976][ T5590] Symlink component flag not implemented (128) [ 213.351354][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 213.356152][ T5590] Symlink component flag not implemented (97) [ 213.416129][ T5595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 215.609050][ T5604] syz.0.400 uses obsolete (PF_INET,SOCK_PACKET) [ 215.634429][ T5604] device syzkaller1 entered promiscuous mode [ 218.496655][ T5629] loop0: detected capacity change from 0 to 764 [ 218.690273][ T5629] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 218.709483][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.412'. [ 218.744771][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.412'. [ 218.755378][ T5629] Symlink component flag not implemented [ 218.761217][ T5629] Symlink component flag not implemented [ 218.767520][ T5629] Symlink component flag not implemented (128) [ 218.774204][ T5629] Symlink component flag not implemented (97) [ 220.819561][ T5649] loop5: detected capacity change from 0 to 16 [ 220.966730][ T5649] erofs: (device loop5): mounted with root inode @ nid 36. [ 221.071655][ T5649] netlink: 132 bytes leftover after parsing attributes in process `syz.5.417'. [ 222.227830][ T5667] loop0: detected capacity change from 0 to 764 [ 222.327455][ T5667] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 222.768836][ T5662] chnl_net:caif_netlink_parms(): no params data found [ 222.882086][ T5674] Symlink component flag not implemented [ 222.904287][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.911740][ T5674] Symlink component flag not implemented [ 222.917778][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.918458][ T5674] Symlink component flag not implemented (128) [ 222.933087][ T5674] Symlink component flag not implemented (97) [ 222.981612][ T5662] device bridge_slave_0 entered promiscuous mode [ 223.032388][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.069175][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.086567][ T5662] device bridge_slave_1 entered promiscuous mode [ 223.125520][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.139893][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.219373][ T5662] team0: Port device team_slave_0 added [ 223.241950][ T5662] team0: Port device team_slave_1 added [ 223.303784][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.339580][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.382710][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.404171][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 223.457408][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.464391][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.535059][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.564904][ T5677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 223.951513][ T5662] device hsr_slave_0 entered promiscuous mode [ 223.958656][ T5662] device hsr_slave_1 entered promiscuous mode [ 223.972906][ T5662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.984583][ T5662] Cannot create hsr debugfs directory [ 224.006649][ T1111] Bluetooth: hci6: command 0x0409 tx timeout [ 226.133574][ T4198] Bluetooth: hci6: command 0x041b tx timeout [ 226.369427][ T5662] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.424961][ T5662] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.477733][ T5662] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.511843][ T5662] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.922197][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.947027][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.955077][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.025690][ T5716] loop0: detected capacity change from 0 to 764 [ 227.049275][ T5662] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.063878][ T5716] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 227.078743][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.175616][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.274717][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.281938][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.387321][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.409813][ T5722] Symlink component flag not implemented [ 227.421297][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.435691][ T5722] Symlink component flag not implemented [ 227.459292][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.466396][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.469487][ T5722] Symlink component flag not implemented (128) [ 227.528613][ T5718] netlink: 32 bytes leftover after parsing attributes in process `syz.5.435'. [ 227.546871][ T5722] Symlink component flag not implemented (97) [ 227.549621][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.435'. [ 227.615472][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.655058][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.707664][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.757844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.770653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.797979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.807141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.829281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.870522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.889677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.923540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.952301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.987414][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.166621][ T4198] Bluetooth: hci6: command 0x040f tx timeout [ 228.233451][ T5714] loop4: detected capacity change from 0 to 32768 [ 228.329886][ T5714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.434 (5714) [ 228.363721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.387300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.450887][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.515936][ T5714] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 228.540509][ T5714] BTRFS info (device loop4): using free space tree [ 228.567220][ T5714] BTRFS info (device loop4): has skinny extents [ 229.757099][ T5714] BTRFS info (device loop4): enabling ssd optimizations [ 230.022756][ T5763] loop3: detected capacity change from 0 to 16 [ 230.168200][ T5763] erofs: (device loop3): mounted with root inode @ nid 36. [ 230.226144][ T5763] netlink: 132 bytes leftover after parsing attributes in process `syz.3.437'. [ 230.239995][ T5714] BTRFS info (device loop4): balance: start -s [ 230.254853][ T1111] Bluetooth: hci6: command 0x0419 tx timeout [ 230.278853][ T5714] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 230.307130][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.316712][ T5714] BTRFS info (device loop4): space_info 2 has 0 free, is not full [ 230.325184][ T5714] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 230.330919][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.339074][ T5714] BTRFS info (device loop4): global_block_rsv: size 851968 reserved 851968 [ 230.356168][ T5714] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 230.363957][ T5714] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 230.371869][ T5714] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 230.379980][ T5714] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 230.457655][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.473148][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.517882][ T5714] BTRFS info (device loop4): relocating block group 1048576 flags system [ 230.571499][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.623848][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.705384][ T5714] BTRFS info (device loop4): balance: ended with status: 0 [ 231.331180][ T4419] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.643435][ T5662] device veth0_vlan entered promiscuous mode [ 231.683781][ T5662] device veth1_vlan entered promiscuous mode [ 232.055784][ T4419] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.173986][ T4419] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.298591][ T4419] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.371304][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.395157][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.419223][ T5662] device veth0_macvtap entered promiscuous mode [ 232.546603][ T5662] device veth1_macvtap entered promiscuous mode [ 232.967474][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.128280][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.388031][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.398762][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.953538][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.126506][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.333200][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.175230][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.223812][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.269626][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.307263][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.333705][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.340427][ T5799] program syz.3.448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.354557][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.407860][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.443318][ T5662] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.461025][ T5662] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.473799][ T5662] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.500921][ T5662] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.533556][ T5796] netlink: 32 bytes leftover after parsing attributes in process `syz.5.447'. [ 235.596292][ T5806] loop0: detected capacity change from 0 to 764 [ 235.610210][ T5797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.447'. [ 235.628850][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.647434][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.668475][ T5806] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 236.923608][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.955441][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.969620][ T5814] Symlink component flag not implemented [ 236.975285][ T5814] Symlink component flag not implemented [ 237.045398][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.082043][ T5814] Symlink component flag not implemented (128) [ 237.125305][ T5814] Symlink component flag not implemented (97) [ 237.141724][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.181491][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.401809][ T5803] loop3: detected capacity change from 0 to 32768 [ 237.420023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.541240][ T5803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.450 (5803) [ 237.651452][ T5803] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 237.686332][ T5803] BTRFS info (device loop3): using free space tree [ 237.711553][ T5803] BTRFS info (device loop3): has skinny extents [ 240.197257][ T27] INFO: task syz-executor:4177 blocked for more than 144 seconds. [ 240.205116][ T27] Not tainted 5.15.178-syzkaller #0 [ 240.270719][ T5869] loop6: detected capacity change from 0 to 16 [ 240.295411][ T5803] BTRFS error (device loop3): open_ctree failed [ 240.305232][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 240.376651][ T27] task:syz-executor state:D stack:19928 pid: 4177 ppid: 1 flags:0x00004004 [ 240.430944][ T27] Call Trace: [ 240.451737][ T27] [ 240.476685][ T27] __schedule+0x12c4/0x45b0 [ 240.504905][ T27] ? release_firmware_map_entry+0x190/0x190 [ 240.539894][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 240.563915][ T27] ? print_irqtrace_events+0x210/0x210 [ 240.590153][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 240.613706][ T27] schedule+0x11b/0x1f0 [ 240.634595][ T27] io_schedule+0x88/0x100 [ 240.655211][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 240.677805][ T27] ? xas_find+0x979/0xaa0 [ 240.696577][ T27] ? wait_on_page_bit+0x50/0x50 [ 240.719660][ T27] ? rcu_lock_release+0x20/0x20 [ 240.741334][ T27] truncate_inode_pages_range+0xc17/0x1290 [ 240.773140][ T27] ? invalidate_inode_page+0x370/0x370 [ 240.801360][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 240.829460][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 240.854500][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 240.883501][ T27] evict+0x53c/0x930 [ 240.901283][ T27] ? mode_strip_sgid+0x210/0x210 [ 240.923374][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 240.953863][ T27] evict_inodes+0x668/0x700 [ 240.974848][ T27] ? clear_inode+0x150/0x150 [ 240.996577][ T27] ? sync_filesystem+0x103/0x220 [ 241.016274][ T27] generic_shutdown_super+0x94/0x310 [ 241.040142][ T27] kill_block_super+0x7a/0xe0 [ 241.065588][ T27] deactivate_locked_super+0xa0/0x110 [ 241.090971][ T27] cleanup_mnt+0x44e/0x500 [ 241.110343][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 241.139405][ T27] task_work_run+0x129/0x1a0 [ 241.160438][ T27] exit_to_user_mode_loop+0x106/0x130 [ 241.187893][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 241.213646][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 241.237486][ T27] do_syscall_64+0x47/0xb0 [ 241.260634][ T27] ? clear_bhb_loop+0x15/0x70 [ 241.280753][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.308792][ T27] RIP: 0033:0x7f0507455117 [ 241.330352][ T27] RSP: 002b:00007fffe4beaa88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 241.368195][ T27] RAX: 0000000000000000 RBX: 00007f05074d508c RCX: 00007f0507455117 [ 241.404776][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe4beab40 [ 241.439418][ T27] RBP: 00007fffe4beab40 R08: 0000000000000000 R09: 0000000000000000 [ 241.449160][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffe4bebbd0 [ 241.457319][ T27] R13: 00007f05074d508c R14: 0000000000013dc9 R15: 00007fffe4bebc10 [ 241.466273][ T27] [ 241.469792][ T27] [ 241.469792][ T27] Showing all locks held in the system: [ 241.524602][ T5869] erofs: (device loop6): mounted with root inode @ nid 36. [ 241.589094][ T5869] netlink: 132 bytes leftover after parsing attributes in process `syz.6.458'. [ 241.735841][ T27] 1 lock held by khungtaskd/27: [ 241.768023][ T27] #0: ffffffff8cb1fce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 241.803610][ T27] 2 locks held by getty/3933: [ 241.818822][ T27] #0: ffff88814ca3e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 241.851665][ T27] #1: ffffc900025ae2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 241.888229][ T27] 2 locks held by syz-executor/4172: [ 241.905326][ T27] #0: ffff888020c3b518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 241.936352][ T27] #1: ffff888020dcc468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xbe0 [ 241.968995][ T27] 1 lock held by syz-executor/4176: [ 241.986993][ T27] #0: ffff888147625468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xbe0 [ 241.996677][ T27] 1 lock held by syz-executor/4177: [ 242.001931][ T27] #0: ffff888074a5e0e0 (&type->s_umount_key#56){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 242.012410][ T27] 2 locks held by kworker/u4:5/4224: [ 242.017896][ T27] 4 locks held by kworker/u4:13/4419: [ 242.023381][ T27] #0: ffff8880175cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 242.033830][ T27] #1: ffffc9000130fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 242.044104][ T27] #2: ffffffff8dc36b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xc90 [ 242.053902][ T27] #3: ffffffff8cb241b0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 242.075308][ T27] 1 lock held by syz-executor/5662: [ 242.083477][ T27] #0: ffffffff8cb242a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 242.104783][ T27] 3 locks held by kworker/0:10/5773: [ 242.110256][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 242.134063][ T27] #1: ffffc90003b8fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 242.155088][ T27] #2: ffffffff8cb242a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 242.166399][ T27] 2 locks held by kworker/0:13/5776: [ 242.171829][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 242.184041][ T27] #1: ffffc90003befd20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 242.198487][ T27] 3 locks held by sed/5893: [ 242.203121][ T27] [ 242.205467][ T27] ============================================= [ 242.205467][ T27] [ 242.226662][ T27] NMI backtrace for cpu 1 [ 242.231038][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.178-syzkaller #0 [ 242.239039][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 242.249121][ T27] Call Trace: [ 242.252425][ T27] [ 242.255381][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 242.260093][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 242.265769][ T27] ? panic+0x860/0x860 [ 242.269885][ T27] ? preempt_schedule_irq+0x136/0x1c0 [ 242.275303][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 242.280458][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 242.285433][ T27] ? print_irqtrace_events+0x210/0x210 [ 242.290933][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 242.297129][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 242.302801][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 242.308047][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 242.313720][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 242.319818][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 242.325852][ T27] watchdog+0xe72/0xeb0 [ 242.330066][ T27] kthread+0x3f6/0x4f0 [ 242.334223][ T27] ? hungtask_pm_notify+0x50/0x50 [ 242.339287][ T27] ? kthread_blkcg+0xd0/0xd0 [ 242.343918][ T27] ret_from_fork+0x1f/0x30 [ 242.348386][ T27] [ 242.352336][ T27] Sending NMI from CPU 1 to CPUs 0: [ 242.357768][ C0] NMI backtrace for cpu 0 [ 242.357781][ C0] CPU: 0 PID: 4176 Comm: syz-executor Not tainted 5.15.178-syzkaller #0 [ 242.357800][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 242.357810][ C0] RIP: 0010:xas_store+0x2a2/0x19e0 [ 242.357836][ C0] Code: 4c 8b 74 24 18 0f 85 a3 15 00 00 c6 03 00 4c 3b 74 24 28 75 0e eb 24 e8 dc ab 45 fd 4c 3b 74 24 28 74 18 e8 d0 ab 45 fd eb 45 c9 ab 45 fd 4c 8b 74 24 18 4c 3b 74 24 28 75 e8 48 8b 04 24 48 [ 242.357851][ C0] RSP: 0018:ffffc90002f4f5b0 EFLAGS: 00000046 [ 242.357867][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888028ce9dc0 [ 242.357879][ C0] RDX: ffff888028ce9dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.357890][ C0] RBP: dffffc0000000000 R08: ffffffff843ad979 R09: fffff94000283521 [ 242.357904][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005e9ee3 [ 242.357917][ C0] R13: 1ffff1100c117a10 R14: 0000000000000000 R15: ffffc90002f4f718 [ 242.357929][ C0] FS: 000055558d094500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 242.357945][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.357958][ C0] CR2: 00007f26a16cfab8 CR3: 00000000633ae000 CR4: 00000000003506f0 [ 242.357973][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.357984][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.357994][ C0] Call Trace: [ 242.357999][ C0] [ 242.358005][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 242.358023][ C0] ? read_lock_is_recursive+0x10/0x10 [ 242.358042][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 242.358060][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 242.358086][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 242.358104][ C0] ? nmi_handle+0xf7/0x370 [ 242.358123][ C0] ? xas_store+0x2a2/0x19e0 [ 242.358141][ C0] ? default_do_nmi+0x62/0x150 [ 242.358174][ C0] ? exc_nmi+0xa8/0x100 [ 242.358190][ C0] ? end_repeat_nmi+0x16/0x31 [ 242.358209][ C0] ? xas_store+0x259/0x19e0 [ 242.358229][ C0] ? xas_store+0x2a2/0x19e0 [ 242.358249][ C0] ? xas_store+0x2a2/0x19e0 [ 242.358268][ C0] ? xas_store+0x2a2/0x19e0 [ 242.358287][ C0] [ 242.358292][ C0] [ 242.358304][ C0] __delete_from_page_cache+0x672/0x860 [ 242.358329][ C0] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 242.358351][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 242.358373][ C0] ? page_mapping+0x312/0x440 [ 242.358393][ C0] delete_from_page_cache+0x126/0x190 [ 242.358413][ C0] truncate_inode_page+0x8d/0xb0 [ 242.358433][ C0] shmem_undo_range+0x535/0x1b50 [ 242.358457][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 242.358488][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 242.358503][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 242.358527][ C0] shmem_evict_inode+0x21b/0xa00 [ 242.358546][ C0] ? _raw_spin_unlock+0x24/0x40 [ 242.358564][ C0] ? inode_wait_for_writeback+0x21f/0x280 [ 242.358585][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 242.358604][ C0] ? bit_waitqueue+0x30/0x30 [ 242.358620][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 242.358639][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 242.358657][ C0] evict+0x529/0x930 [ 242.358678][ C0] ? mode_strip_sgid+0x210/0x210 [ 242.358697][ C0] ? _raw_spin_unlock+0x24/0x40 [ 242.358715][ C0] ? iput+0x6f5/0x8b0 [ 242.358733][ C0] __dentry_kill+0x436/0x650 [ 242.358754][ C0] dentry_kill+0xbb/0x290 [ 242.358774][ C0] dput+0xd8/0x1a0 [ 242.358790][ C0] __fput+0x636/0x8e0 [ 242.358814][ C0] task_work_run+0x129/0x1a0 [ 242.358836][ C0] exit_to_user_mode_loop+0x106/0x130 [ 242.358854][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 242.358871][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 242.358891][ C0] do_syscall_64+0x47/0xb0 [ 242.358908][ C0] ? clear_bhb_loop+0x15/0x70 [ 242.358923][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.358943][ C0] RIP: 0033:0x7fc81785c9eb [ 242.358958][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 242.358972][ C0] RSP: 002b:00007ffd6e145f80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.358989][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007fc81785c9eb [ 242.359000][ C0] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 242.359010][ C0] RBP: 00007ffd6e14601c R08: 0000000000000000 R09: 00007ffd6e145d27 [ 242.359022][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000059 [ 242.359032][ C0] R13: 000055558d0a7590 R14: 00000000000397a5 R15: 00007ffd6e146070 [ 242.359052][ C0] [ 242.513401][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 242.821288][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.178-syzkaller #0 [ 242.829299][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 242.839431][ T27] Call Trace: [ 242.842739][ T27] [ 242.845696][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 242.850413][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 242.856083][ T27] ? panic+0x860/0x860 [ 242.860199][ T27] panic+0x318/0x860 [ 242.864123][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 242.869779][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 242.875976][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 242.881218][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 242.887329][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 242.893521][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 242.899716][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 242.905912][ T27] watchdog+0xeb0/0xeb0 [ 242.910127][ T27] kthread+0x3f6/0x4f0 [ 242.914223][ T27] ? hungtask_pm_notify+0x50/0x50 [ 242.919270][ T27] ? kthread_blkcg+0xd0/0xd0 [ 242.923894][ T27] ret_from_fork+0x1f/0x30 [ 242.928368][ T27] [ 242.931679][ T27] Kernel Offset: disabled [ 242.936024][ T27] Rebooting in 86400 seconds..