last executing test programs: 58.000953861s ago: executing program 3 (id=167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000006c0), 0x56) sendmsg$kcm(r7, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)="27030200dc0f14000e0000000025c10200000012125c", 0x16}, {&(0x7f0000000040)="02db0b9ef1cafdabc0356e8eb692d5ce214549d51f0063d6", 0x18}], 0x2}, 0x4005) 52.409053062s ago: executing program 1 (id=177): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x168f, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x39b}) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x2000810, &(0x7f00000001c0)=ANY=[], 0xf, 0x6aa, &(0x7f0000000580)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x1842) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c40)={0x1, &(0x7f0000000c80)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = getpid() r5 = syz_create_resource$futex(&(0x7f0000000cc0)=0x1) futex(r5, 0xb, 0x1, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000d00)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', 0x200008, &(0x7f0000000dc0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000e00)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r7, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) syz_create_resource$binfmt(&(0x7f0000000540)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, r9, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 52.408875122s ago: executing program 3 (id=178): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 52.081302585s ago: executing program 3 (id=180): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x28d, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) fsopen(0x0, 0x0) io_submit(0x0, 0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/77) 51.635605901s ago: executing program 1 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a0000000500010007000000050004"], 0x5c}}, 0x0) 50.905989675s ago: executing program 1 (id=185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 50.590792107s ago: executing program 1 (id=186): r0 = fsopen(&(0x7f0000001980)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x0) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000001b40)='+p', 0x2) syz_mount_image$btrfs(&(0x7f0000001b80), &(0x7f0000001bc0)='./debug\x00', 0x800, &(0x7f0000001c00)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@nodatasum}, {@fragment_metadata}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@ref_verify}, {@datasum}]}, 0x0, 0x55b7, &(0x7f0000001c80)="$eJzs3X+QlHUdB/Bn7zg4ZOQuBMGBEyh/gIRCSqmk7EBBeDJdkjU2GSdikaDcMEfUKHbgYOFpXGbNlDMIHSIMR53NaJSVJzNATk5XMw4iB8pMF8b0Qyomrqixud39LrvPcncrY57p68XcPfvdz/P9Pt995vnj3rt8n40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgiqKDO2r/s3Z0ffn6TWMW33HNwbGrxk5aUdV8csyB6vN3XzZg1uLh+2Z23DViVufqI9XrW26/sCuKEql+iUz/BTM/dsPn5y+YVx4GrP1EeltZ2dMh010PpxsD857s7pf/c0sURWWxAUoz292lOe1E/ADR8sIBe1U2Z9vSwQuTtVs3P11/xdKtEwpfOt3K+3sC/SVzXXWeupaSqd8lsT2y7ZxLL5F3iab7xy+4t+RFAABvyJSa1Cb752jmT9xsuyFej7WTsXZTrB3+QmjKbZyJ9LgDe5rnuHi9n+aZTEeFQT3OM1bPnP9suybeP9aORY03MM/8XTORprynedbF6v01TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC3k9frV6yZ+NmXDpb98oIJq1eePHxd+UUPf/XfJctuffn1QzVr/tI+fN/MjrtGzOpcfaR6fcvtF3ZFUWWqXyLdPTHjxGuXTq6eN2b9k9+bvOm5icdLM+OG7YCcnaP94cFVFVG0MKfSGYY9OjSKavILqWb03cLCF1MP5oYCAAAA7yTnpX6XZNvpOFiW106k0mQi9S9Ih8WyOduWDl6YrN26+en6K5ZunXDm49X0MF7ytONl25WnfhI5wTjE3/h4p+ph1+UF4/QuPmI8z0974ZUXK0Zd99Nnq86/eeUNL4++9on22d8ceXzx/so7h6yaMP7Kgvxf2Xv+D2fu9Pk/zEr+BwAAoHfyf3yc3vWV/z99S/1tdz76lWPj7j28csg9D+3fOKL8yM23Td33x5E3XnLJ5bU3FeT/cXmHLMj/YcYh/5dEZ/b5PwAAALyd/a/zf7JgnN71lf87Rrbc+uDZhxZVtnc+s/3yFXsGLrrm4mEHHr54/uT7rh8y7oLGgvw/pbj8PyB32uHJ58OEl1RE0ZTiTyoAAACQJ3zufuqthZDX0+8cxPN624ItY1tfm/3lSeMfOdTwp6rNkz+3cdgTOzfM/sau5+95YHL7OQX5P1lc/i97a14uAAAAUITmQ+eOGv6p5M+jB44OjL7/mV2P3b/sC1dfurdrzqS1v6h+ZkdDQf6vKS7/D+qflwMAAACcxomJ1y76x84jv72+5eP3Nx/9/ZdWlf5qVvPu/e2Nzf/cPmbu6qkF+b+2uPx/VmabWfmQ7rQn/C+Eb1VEUXn3g7p0YW/UNCNbAAAAAN4kIaffPe2FkvsGzzhvy/zfnJjw5It7Prlv7pIN566Z0vzce9uWfPiixwvyf13v9/8PdzoI6//z7v9XsP4/p5C+6990NwYAAADg3ahwPX+4PX76mwt6+v79Ytf///DrG/6aqGp46v0Lfjan630tP9nbNv2hk1V/mHf8kdbk6Kcue6kg/zcUl/9Lc7dv5vf/AwAAwBn4f/v+v5sKxuldX/f/b3/20erHrvrg166eXz99x+8+dOWfXx05vXF79Oryj3QsPvDRXb/O3//srqipuPwftkNyX15bOD/3VkTRqO4HmbsJbgvTXRIrtJblFNInPtZjfuiRKbQOyimk1MV6fKAiisZ3P2iIFd4TCk2xwrGhmcLGWKE9FDLXQ7bwg1ihLVxp3xmamW688ONQyCywaA0rKIZkl0TEevy9px7dhdP26MgeHAAA4F0lhOdMli3Lb0bxKNua6GuHs/raoaSvHUr72mFAbIf4jj09H9XmF8LzP/r2ja8MuvvBDfXTtmxaWNV4zrp/PT51yh11a3fWL+sa9rd16wo+/99YXP4Pp2JgetPT+v8orP/PfK9hdv1/bShUxgqtoVATv2NATThGOuw2hmNU1mR6HBuVLQAAAMA7WnhfoLSf5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/Zu/f4qMq7QeBPQi4khCQqvl5KLWJFsRBCrGLxtYKsr64UDKuttmiFQtBIEMrFCroVUXe1ruBt620rUHWrraW0atVWhY/WW6Wtl8JWrZcq3j7Vsmwrldpd95PMPJOZMxkzCCjx/X7/yDwzv+d65pJ5zjnzHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/HzZ/7oovv7rfv/x4w+LBS9eO+Xr/o4eNnHTcdTcfv/TR70094IE//cd+64547uxdx6w/77WxS247fd93Q2juKFeSKl5y+N83NAwdO67/kjuvG7r8scF/q0jXm46HPu1/StN3Loitru8bwl0lIZQlA0NrUoHy9P2aWF//mhB2Cp2BTImW6lSJZMPhoaoQloXOQKaqe6pCqMkKHP/UA6subU9cVRXCviGEymQbz1em2qhKBgZVpALVycDMslTg7++nZAJ3l6YCsNXimyHzol/ZnJuhvutyBV5/5dusYx+v5PB6xUR94Xxvj97OncpSkXygeauetrzq2C7y3h6rvdt6wLstbztf5mnL/iKV/obyfmeoMpRObZk2eV7b3PhIaWho6FWopu30PD+78ZwpW5LuMa/D2IH6bfI6XHNx3/FLHz9m5O11I2/qN2Tx5q3tZqHNu71VhvRrrsc8j9Eonyc94O2X9y1pgC9dIYQD75h459cuevXWRVeO3/2Qp3YZ8fYX97y35Ze3nTTxxCM3rvrGn36WN/+v/+D5f3w5x9vSnNyx1fdqU3Pz+EhNTGyoTc3NAQAAoMfoCXtNX1v7f2d8cf8Jw58cvbb69lvuO/3SB750/S9bD2h7dPwuO7+4/4Kf5s3/BxR3/D8e8q/JHu3qEEZ1JM6vC2H3jsdTgVtjd75RF8LeHanm3MDoRGB1CHt0JAZnqkqU6B1LDEgEXq9NB0YlAg/HQHMicHMMXJYIXBADKxOBKTGwOhE4IgZCa+44DqhNj6PoQFUMTEptxJXxLIS/1sbWEtvquUxVAAAA20h6dlieezfrXIetzRCnlyurussQz8AumKEyUUNyBpuZVhWsoay7Gkq7qyEz7oUfPPy8mku6qznvNIyS3AxXV912+U9HTHn73lmvbDrjqM++8foT9ct/8YUN1739zMzKB/e68tG8+X/jB8//K7voSEne8f8QJnT8jblL05G2THxSc04GAAAAYCu8O/igr32/7JvzX/rTYyM+97vrn3hr9aOf2vfsO9a/eNaPv/v9mgfH5s3/RxV3/n/cJ9IrK3NYE3dDTK8LoTE3kKr20PxA6qh3n3QAAAAAeoLM8fjMsfDW9G3qFO3kfDo/f/MW5o8H/kd1mX/jd1fcuPNnH5v7SO0ds57Z9OTXV49dfPzst4dcfe5j+x9+yDOjv5g3/28u7vz/6tzbVCcejr24si6E3lmBR2Iv2wMdBsTAS4fnBtLjfzhugEtiVekTEzJVhVhiUgyk9x9cEgPLEiUygScyJXbPDaSfrEzj52fG0ZoukRUAAACAj1zcHRCPy8fz/1ctuueK/3XzX65Yc/DyuafOfPKNH1ZUvn/KyrtP7nfR/b2W7DJ6St78f9KWnf/fMQ/OO72/rU8Iw8pC6JX8YcCa6tTCgDFQU5JO3FedqqtXsqpF1SEc2j6wZFUvp9f/L0uuMfh0VaqqGNh94C0bB7UnbqoKYVh2YN3E5Qe1J+YlApnGv1IVwmfaR5ts/Oe9U42XJxu/pncIe2UFMlVN6R1Ce2MVyaoerExfxyBZ1crKEHbJCmSqGlEZwvwAQE8V/5dOzX5wzvwF0ye3tbXM3o6JuBO/KkxrbWtpmDKzbWplgT5NTfQ5Zx2j8/LHVOylb/6YXqNo7XHT64pJZ34o2JjdVnpHft6Zg+n78ctQecc4m8pz7h6YHPL+++Q3EbK+ShUacul2HnJ1diWdT2Je/TF/RegTes+b0zK74azJc+fOHp76W2z2ptTfeJwpta2GJ7dVdVd9K+LlUXC5rIQPu60GZVcybO6MWcPmzF8wtHXG5FNbTm05Y8Tnm0Y0DT+wqXFY+6DSf7sZ6aCuak6M9P3lRQ5rG450z7KsSj6KDw0JCYmelrjlyonPLfnU0sofLD3lsqcuvPDc087c9Y6rZ/yo/8yJQ67+t2XTv5U3/5/1wfP/+KkTP/jT6zMUOv5fHw/zpx7vPMw/KQaWFXv8v77Q0fzMiQEDEoGFMbDQYX4AAAA+GeLuyLg3M+6Urn3t22f+v5OOKj38zWN/3TR8yG4X3z590M1vbT7z0/suWHZ9WUX+9f8WFvf7/220/n9m6fpjCi3zPziWaCy0/n9ymf/M+v8LC63/n1zmP7P+/7KPYf3/eZlAYpP81fr/AADAJ8FHt/5/t8v7Jy8QkJeh2+X9kxcIyMvQ7TL+xV4gYIvX///Vr8p2+vRRe/Qv+/JTk/e5++DfnzLj4d1+OubaDV9oqv/OWet+tSJv/n9ZcfN/C/cDAADAjuOk/b86aNErw7513syHfjJ01q6v3HDui6Pu+80Jn9s8rv+G6g39v5A3/19W3Pz/o1//LxQ6/39AoUBzoYUBrf8HAABAD1Vo/b9/fOac79wwYOdNQwacfee7104vGbnvC6f/ru2SR8Yc+elx/3nZlOvz5v8ri5v/x9MuSnNyx968V5ta0y4k17TbUJv5yQAAAAD0DKWhoaG8yLw5C6OO/vBtPpteCvSD0tn2+Oyadefff8M/h9164aINJ55Ze8jRb5YddvfUG15ZdNpeA2teWJ83/19d3Pw/53cZay7uO37p48eMfO/2upE39RuyeHPn8X8AAABg+yl2vwQAAAAAAAAAAAAAAPDxO27Nz8/5P78Zd8LdIxZc+/iuT576v78156zWKb9uO2rDQc8vv+nz++X9/j9M6ChX6Pf/8bp/8fcF/XJyx1a7X/8vff/4sSvmdyxZuKY2hH2yA9MXTd8ppK/Nv192YNXJg3drTyxKlrj3hSNebU+ckgwcPXTnTe2Jf00EJsVFEvdIBuJVFTf1TQTi8opPJwNxe6xMBirSgYv7psZRktxWb9aktlVJcls9WxNCXVYgs63uqkm1UZIc4FWJQGaA30wG4gDHpwOlyV6t6JPqVQzUxKJL+6R6BQDADit+CywP01rbWhrjV/h4u2dZ7m2Us2TZefnVlhTZ/B/TS5OtPW56XTHpXsnvop3XGi8Ple1DGJ73dTU7S0nHKLdNLd1sun4Fhtzdam+lBcolbemmqyg8oqrUiBqmzGybWt7twA/sPktTWbdZhudNdrKzlHZs0iJqKaIvRYyoyG3zQV1uT7a1NMb7paGhoVci18gYrA85untFFPt7/ex1/gq9CrLzrBxzyKATVrxw8KQlTx8yY3r4lyveHzV56pzDrnr5meULRw+Z1Ctv/l9f3Py/Mntcm9IXA1gYr6x3aF0Ik4ocEQAAAHzynXbGC1dc9ODlr7/UPOjVmcMuX/WH+dcsKKu99YIjn733zHcmLj5la+ODRrw9/PR7fn/+5qYxj1zd99oHr9vl6Lqf/IfqPvPfXTXknZfu3Sdv/j+guPl/3IOVPhSc2tuxOl7///y6EDourV+fCtwah/uNuhD27kg1xxKpC+ofE0s0pgK3xh0mg2OJSc25VfWOgZWJwOu16cDqRODhGEjvpbglpHflXF4bwkEdqQm5JWbFEvWJwLExMCARaIiBxkSgbwyMSgTe6psONCcCj8dAaM3dVrf3TW8rAACALZGeZ5Xn3g3Jed7Ksu4ydARmd1acl6G6uxpKu8tQ2V2GQqOI938WM5QnTl4pycpUnqy1KlFLXoZ4Mfwt7ldehvBEbs5kwbym4/kHmfMNSnIzXHV2xcx3vjRwyYnDxm2c2LT03+b/Ivyn9+a9e9E7v7mw7oXrNpfkzf8bi5v/V+feplp/OM7/O6//lwo8Ert3ZTx1fEAMvHR4biC9Y+DhONm9JFNVc7pEetJ+SSwxKgYGJAKzYmBUIjBpQjqwbLfcQHqmnWn8/EzjrekSWQEAAAD4yMUdBHE3TZz/P79+4lMzJv7hkCv6z1184cpjvvbs7054/df39773BwOXPNpWsn5t3vx/VHHz/9hen+zGLoi9Wd83hLtKOnuTCQytSQXifoya+PP4/jUh7JS1gyNToqU6VaIi0XB4qCr1C/WKZFX3VKXWGIj3j3/qgVWXtieuqgph36y9L5k2nq9MtVGVDAyqSAWqk4GZZalA3POTCdxdmgrAVsvsFYwvqPSpLhn1XZcr8Pr7pFwTNDm8vH2gXeTr6jdX20tl8oH0PtWMLXva8qpju8h7e6z2buuJ77Z677bsL1Lpbyjvd4YqQ+nUlmmT57XNjY9k/5I1z3Z6nrN/pVpMehu8Dhd++N52rzLZgcbEx0dj1+W6fh2WxOrWXNx3/NLHjxl5e93Im/oNWby56G4UEH8oPHvENfXZm3d7qwzp11yP+zxp9nnSE/8NDPC0hRAm3D/+ksbDbl48ZdTAG3e9q3bklV8detvhjc9PqJm325Hj3vjKgrz5f3Nx8/+yxG2HzXFjzqkLYf+sjbsmbv4xdanPwaxA6lNyl/xA6pD7K7UFPzkBAABgW8vs7sjsL2hN36ZOCE/Ok/PzN29h/ri/YlSX+Yvt98CrTls9dtLBf+g/cZ/DDt3vnHsWHXvAPybf+Mafq0dPeeiHv117Y978f1Jy/t8+w+9st3eim47/O/7PduL4f5d29F3RvZMPLNyqXdF51bFdOP7fpR393eb4f5cc/3f8vyuO/3fD8f8u7ehPW963pFm+dIUQ/ueVX/rHe/ftMWDT8tIfTntowcATr/jRkhU/3/W5//rEf5k5c/+9f5s3/5/1wcf/43ax/l/Xi/Zl1v+bVGj9v1mF1v9baP0/AABguyqw0Fxynpe3el9ehuTqfXkZShIZtnyJQev/bfH6fy//t8sX7TN9/LdPPueJQ/s+Xj9m3bgh/zzl9b3X3fD01cMfO+mf38ub/y8sbv4fXw59slvvKev/DZhQoKrLYmCWhQEBAADYERXaQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDH65w/T7tg1KIn/9I88+sbV078fuvOTz4y7a3mo34ydsWx607b7bT7+6074rmzdx2z/rzXxi657fR93w2htaNcSap4yeF/39AwdOy4/kvuvG7o8scG/60yXW95+vZTObljq+/VhrAs65GamNhQ236nM3D82BXzy9oTa2pD2Cc7MH3R9J3aEzfXhrBfdmDVyYN3a08sSpa494UjXm1PnJIMHD10503tiX9NB0qS3f0ffVPdLUl299K+IdRlBTLdPb1vblWZNo5KB0qTbfygJtVGDNTEotfUpNqIgbZYorV3CMPKQuiVrOqxylRVvZJV/aIyVVWvZFXnVoZwaAihLFnVixWpqsqSI3+iIlVVDOw+8JaNg9oTyytCGJYdWDdx+UHhzRBCIpBp/LiKED7T/pJJNn57earx8mTj/708hL3aa0yWeKcsVaIiWeLlshB2yQp0bsSyEOYHPhnip8/U7AfnzF8wfXJbW8vs7ZioSLdVFaa1trU0TJnZNrUy0adCSrLS75/34cf+x43nTGm/XXvc9Lpi0mXpcuUdXW4qz7l74I7e+9iv6uxKOp+PvPpj/orQJ/SeN6dldsNZk+fOnT089bfY7E2pv73S0dS2Gt5TttWg7EqGzZ0xa9ic+QuGts6YfGrLqS1njPh804im4Qc2NQ5rH1T677YY6fKPfqR7lmVV8lG8/yUkJHpaojTn061xR/8cz/ui39nR8lDZ8QGdN63IzlLSMcptMejRH3LEH+ZrSrcjGp43ccjL0tR9lgPzJhOdWapSWTq+1uVNDrNrKu3YpPF+aWho6FVoO9Tn3s3evG9vxeZ9Nr3pik0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCkAAP//tALttw==") fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000019c0)='secret\x00', &(0x7f0000001a00)='AQB12=4567890123456789012345678901234567890=\x00', 0x0) 49.702597548s ago: executing program 2 (id=188): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x17, 0x1, 0x1, 0x0, 0x6, @random="e21022333144"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040)=0x8, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x2080) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1, 0x5}, 0x1c) write(r0, &(0x7f0000000000)="01000000", 0x4) 49.265614892s ago: executing program 2 (id=190): userfaultfd(0x801) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x141000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x20c3c2, 0x0) pipe2(&(0x7f0000000240), 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x5, 0x4) 49.043141665s ago: executing program 0 (id=191): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x168f, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x39b}) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x2000810, &(0x7f00000001c0)=ANY=[], 0xf, 0x6aa, &(0x7f0000000580)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x1842) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c40)={0x1, &(0x7f0000000c80)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = getpid() r5 = syz_create_resource$futex(&(0x7f0000000cc0)=0x1) futex(r5, 0xb, 0x1, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000d00)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', 0x200008, &(0x7f0000000dc0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000e00)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, r7, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) syz_create_resource$binfmt(&(0x7f0000000540)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, r9, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 48.685358262s ago: executing program 2 (id=192): r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000000c40)="600000000014334000000000000000000000000000000001000000000000000000000000000000013b01", 0x2a, 0x0, &(0x7f0000000c80)={0xa, 0x0, 0x0, @loopback}, 0x1c) 48.557586715s ago: executing program 0 (id=193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a31000000001600"], 0x5c}}, 0x0) 48.323541219s ago: executing program 2 (id=194): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) unshare(0x6060080) setns(r1, 0x24020000) r2 = syz_clone(0x90a0a011, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r0, 0x7, 0xffffffffffffffff, 0x0) 48.248033247s ago: executing program 1 (id=195): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0xb18, [0x200000000400, 0x0, 0x0, 0x200000000430, 0x200000000460], 0x0, &(0x7f0000000080), &(0x7f0000000640)=ANY=[@ANYBLOB]}, 0x78) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r0, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f00000011c0)={0x200000, [[0x9ef8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xd], [0x10000, 0x0, 0x20000], [0x7]], '\x00', [{0x5}, {0x0, 0x5}, {}, {0x4, 0x80000000}, {0x3, 0x40000000, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {0xfffffffd}, {}, {0x0, 0x200006}, {0x0, 0xfffffffe}], '\x00', 0x7ca}) r2 = syz_create_resource$futex(&(0x7f0000001440)=0x1) r3 = syz_create_resource$futex(&(0x7f0000001480)=0x1) futex(r3, 0xb, 0x1, 0x0, r2, 0x403) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001500)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001600)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000001700), 0x318, 0x0) recvmmsg(r5, &(0x7f0000001740), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000001780)=0x2) r7 = epoll_create1(0x0) r8 = syz_open_procfs(0x0, &(0x7f0000001800)='net/fib_triestat\x00') read$FUSE(r8, 0x0, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000"], 0x1, 0x6b4, &(0x7f0000000240)="$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") bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000980)='./file1\x00', 0x1000040, &(0x7f00000009c0)={[{@user_xattr}, {@commit={'commit', 0x3d, 0x5}}, {@noquota}, {@grpid}, {@user_xattr}, {@grpid}, {@bh}]}, 0x1, 0x5b6, &(0x7f0000000a40)="$eJzs3U9oG1caAPBvRlacP951FnZhd8kh7C5kIUS282c3u6fkWhoI5FDopTWyYoJlK1h2GxtDnHsozaG0JZf01h56bOmhh9JLjz0VemnpuRAa00KcQ6siaeQojpTYqWWl1u8HY703M5rvvRl9z5phBgUwsI7W/6QRf4uIi0nEaNuyocgWHm2ut762UnywtlJMola79EMSSUTcX1spttZPstdDEbEaEX+NiM/zEcfTjU3uaxWqS8szk+VyaT6rjy3MXh2rLi2fuDI7OV2aLs2d+u//zpw9fWbi5ER7cx/U2mv57fX15re33rj55Qt3bn3w4ZHV4luTSZyLkWxZez92UnOf5OPcpvmnexGsj7Jjn+t3O9ieXJbn9VT6S4xGLsv6Tmrtg8PwrjQP6KHacERtQ1sRGABJ96S/3hghgD2q9T2gfv7bmnbz+8fd880TkHrc9bWV4vVoxR9qXpuI/Y1zk4M/Jo+cmdTPNw/vZkPZk1ZvRMT40NDjn/8k+/w9u/GdaCA99dn55oF6/PinG+NPdBh/RlrXTn+j1vi3no1/6x3i57L4X7W9rz7+XdxijJ9f/u7drvFvDMffO8ZPNuInHfqfRsSrW4x/+6VPznZbVnsv4lh0jt+SPPn68NjlK+XSePNvxxifHjvy/+79jzjYJX7zmu3+RkPa+78va1O6xf5//MVH/1h9Qvx///PJx7/T/j8QEW+2b+he9/h/uv/+i92W3b2R3Kt/C9ju8U8iH3ee1vHMf84d/SYrumoIAAAAAAAAAAA7KG3cy5akhY1ymhYKzWd4/xwH03KlunD8cmVxbqp5z9vhyKetO61Gm/WkXp/I7sdt1U9uqp9qPRmaO9CoF4qV8lSf+w4AAAAAAAAAAAAAAAAAAADPi0Obnv//Kdd4/n/zz1UDe1X3n/wG9jr5D4Pr0fxP+tYOYPf5/w8Dqyb/YXDJfxhc8h8Gl/yHwSX/YXDJfxhc8h8AAAAAAAAAAAAAAAAAAAAAAAAAAHri4oUL9an2YG2lWK9PDS0tzlReOzFVqs4UZheLhWJl/mphulKZLpcKxcrs07aXVCpXx2Nu8drYQqm6MFZdWn5ltrI41/pN0VK+5z0CAAAAAAAAAAAAAAAAAACA35+RxpSkhYh8s56mhULEHyLicBLJ5Svl0nhE/DEivs7lh+v1iX43GgAAAAAAAAAAAAAAAAAAAPaY6tLyzGS5XJrvXWEoC9XDEFsvDG1n5YhY3dlm1Le47Xflsx24C/tntb9HZxcKuefjc/j8F/o4KAEAAAAAAAAAAAAAAAAAwIB6+NDvVt/xS28bBAAAAAAAAAAAAAAAAAAAAAMp/T6JiPp0bPRfI5uX7kvWc43XiHj99qW3r00uLMxP1Off25i/8E42/2Q/2g9sVStP04io5zEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwUHVpeWayXC7NP2NheAvr9LuPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM/i1wAAAP///trLrQ==") r10 = open(&(0x7f0000001000)='.\x00', 0x8000, 0x50) getdents(r10, &(0x7f0000001040)=""/172, 0xac) 48.22001413s ago: executing program 0 (id=196): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r0, @ANYBLOB="089805000750050008001300", @ANYRES32=r1, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 47.987237803s ago: executing program 0 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x24040000) 47.845596957s ago: executing program 3 (id=198): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 47.577641175s ago: executing program 2 (id=199): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'lo\x00'}, 0x18) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='0', 0x1) r2 = socket$inet(0x2, 0x1, 0x6) bind(r2, &(0x7f0000000240)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r2, 0x5) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x100000}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r3 = socket$inet(0x2, 0x1, 0x6) connect(r3, &(0x7f0000000380)=@in={0x2, 0x15, @loopback}, 0x10) 47.498170673s ago: executing program 3 (id=200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 47.400630573s ago: executing program 0 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x69) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) stat(&(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000700)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='100', 0x3) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x2a010, 0x0, 0x0, @by_dev={r2}, [@writecache={0x0, 0x80, 0x0, 0x68, 'writecache\x00', {0x73, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '1024', 0x20, '2 writeback_jobs 4'}}]}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './proc\x00'}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000640)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x2000, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dvb_demux(&(0x7f0000000600), 0x0, 0x40000) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) 42.797131093s ago: executing program 1 (id=202): sendto$inet6(0xffffffffffffffff, &(0x7f0000000c40)="600000000014334000000000000000000000000000000001000000000000000000000000000000013b01", 0x2a, 0x0, &(0x7f0000000c80)={0xa, 0x0, 0x0, @loopback}, 0x1c) 42.615236131s ago: executing program 2 (id=203): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 41.083263138s ago: executing program 3 (id=204): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x0, @broadcast}], 0x10) 37.873763575s ago: executing program 0 (id=205): mkdirat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000880)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000008c0)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x100a, &(0x7f0000000d40)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001ec0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001f00)='./debug\x00', &(0x7f0000001f40)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001f80)='./debug/failslab/times\x00', 0x2, 0x0) write(r0, &(0x7f0000001fc0)='100', 0x3) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./debug/failslab/probability\x00', 0x2, 0x0) write(r1, &(0x7f0000002040)='5', 0x1) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002080)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r2, &(0x7f00000020c0)='1', 0x1) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000002100)={0x1, &(0x7f0000002140)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$inet6(r3, &(0x7f0000002180)=[{{&(0x7f0000002200)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2044) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000980), 0x200008, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40), 0x8, &(0x7f0000000a80)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 21.092877058s ago: executing program 32 (id=202): sendto$inet6(0xffffffffffffffff, &(0x7f0000000c40)="600000000014334000000000000000000000000000000001000000000000000000000000000000013b01", 0x2a, 0x0, &(0x7f0000000c80)={0xa, 0x0, 0x0, @loopback}, 0x1c) 11.264756621s ago: executing program 33 (id=205): mkdirat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000880)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000008c0)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x100a, &(0x7f0000000d40)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001ec0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001f00)='./debug\x00', &(0x7f0000001f40)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001f80)='./debug/failslab/times\x00', 0x2, 0x0) write(r0, &(0x7f0000001fc0)='100', 0x3) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./debug/failslab/probability\x00', 0x2, 0x0) write(r1, &(0x7f0000002040)='5', 0x1) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002080)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r2, &(0x7f00000020c0)='1', 0x1) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000002100)={0x1, &(0x7f0000002140)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$inet6(r3, &(0x7f0000002180)=[{{&(0x7f0000002200)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2044) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000980), 0x200008, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40), 0x8, &(0x7f0000000a80)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 4.071161825s ago: executing program 34 (id=203): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 35 (id=204): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x0, @broadcast}], 0x10) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 50.038106][ T5446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.056511][ T5446] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. syzkaller login: [ 73.872486][ T5768] cgroup: Unknown subsys name 'net' [ 74.006055][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.424941][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.087377][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.096897][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.111443][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.119918][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.120436][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.129227][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.137290][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.151125][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.159234][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.160417][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.174969][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.176177][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.196061][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.198900][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.216807][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.219442][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.226366][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.233022][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.240041][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.248936][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.256932][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.270947][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.284629][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.296118][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.324175][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 77.360848][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 77.368055][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.371330][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.395819][ T5781] (null): rxe_set_mtu: Set mtu to 1024 [ 77.411431][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.455647][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.472446][ T5780] (null): rxe_set_mtu: Set mtu to 1024 [ 77.497393][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.499721][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.720929][ T5783] infiniband rxe0: set active [ 77.727829][ T5783] infiniband rxe0: added rxe_eth0 [ 77.763049][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.811202][ T5783] RDS/IB: rxe0: added [ 77.829944][ T5783] smc: adding ib device rxe0 with port count 1 [ 77.836762][ T5783] smc: ib device rxe0 port 1 has pnetid [ 77.869703][ T789] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.891465][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.996018][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 78.036189][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 78.324291][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.375190][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 78.402502][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.419791][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.439679][ T5781] bridge_slave_0: entered allmulticast mode [ 78.448304][ T5781] bridge_slave_0: entered promiscuous mode [ 78.466974][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.475633][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.485477][ T5782] bridge_slave_0: entered allmulticast mode [ 78.497055][ T5782] bridge_slave_0: entered promiscuous mode [ 78.514420][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.532927][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.540485][ T5782] bridge_slave_1: entered allmulticast mode [ 78.548414][ T5782] bridge_slave_1: entered promiscuous mode [ 78.557426][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.566019][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.574156][ T5781] bridge_slave_1: entered allmulticast mode [ 78.582570][ T5781] bridge_slave_1: entered promiscuous mode [ 78.623147][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.694071][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.720344][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.737425][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.750590][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.859667][ T5782] team0: Port device team_slave_0 added [ 78.871981][ T5781] team0: Port device team_slave_0 added [ 78.878139][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.917361][ T5782] team0: Port device team_slave_1 added [ 78.941843][ T5781] team0: Port device team_slave_1 added [ 78.964096][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.977036][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.985289][ T5780] bridge_slave_0: entered allmulticast mode [ 78.996993][ T5780] bridge_slave_0: entered promiscuous mode [ 79.022592][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.030074][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.056974][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.071299][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.078956][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.087437][ T5780] bridge_slave_1: entered allmulticast mode [ 79.096153][ T5780] bridge_slave_1: entered promiscuous mode [ 79.136300][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.143468][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.173937][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.195352][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.208111][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.243207][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.265113][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.273697][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.306941][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.324173][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.337392][ T5788] Bluetooth: hci2: command tx timeout [ 79.338653][ T5792] Bluetooth: hci1: command tx timeout [ 79.384819][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.410226][ T5792] Bluetooth: hci3: command tx timeout [ 79.416088][ T5792] Bluetooth: hci0: command tx timeout [ 79.435670][ T5780] team0: Port device team_slave_0 added [ 79.464476][ T5782] hsr_slave_0: entered promiscuous mode [ 79.472063][ T5782] hsr_slave_1: entered promiscuous mode [ 79.490582][ T5780] team0: Port device team_slave_1 added [ 79.523673][ T5781] hsr_slave_0: entered promiscuous mode [ 79.532348][ T5781] hsr_slave_1: entered promiscuous mode [ 79.540410][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.551620][ T5781] Cannot create hsr debugfs directory [ 79.636854][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.645694][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.673681][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.733135][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.740773][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.770137][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.937897][ T5780] hsr_slave_0: entered promiscuous mode [ 79.949005][ T5780] hsr_slave_1: entered promiscuous mode [ 79.957960][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.969345][ T5780] Cannot create hsr debugfs directory [ 80.023640][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 80.164886][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.201302][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.213994][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.225954][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.252569][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.262413][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.271816][ T5783] bridge_slave_0: entered allmulticast mode [ 80.279169][ T5783] bridge_slave_0: entered promiscuous mode [ 80.305660][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.317950][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.327025][ T5783] bridge_slave_1: entered allmulticast mode [ 80.334323][ T5783] bridge_slave_1: entered promiscuous mode [ 80.405400][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.419812][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.492775][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.507500][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.527186][ T5783] team0: Port device team_slave_0 added [ 80.537353][ T5783] team0: Port device team_slave_1 added [ 80.558080][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.573437][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.607206][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.616839][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.650607][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.687184][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.699648][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.731300][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.797236][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.832360][ T5783] hsr_slave_0: entered promiscuous mode [ 80.841154][ T5783] hsr_slave_1: entered promiscuous mode [ 80.848128][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.856828][ T5783] Cannot create hsr debugfs directory [ 80.874916][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.900345][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.911389][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.096333][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.170893][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.186222][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.205441][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.216893][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.233847][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.246428][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.274496][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.283085][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.297582][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.305425][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.347489][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.410189][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.412528][ T5792] Bluetooth: hci2: command tx timeout [ 81.417708][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.424052][ T5792] Bluetooth: hci1: command tx timeout [ 81.455097][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.466989][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.489947][ T5792] Bluetooth: hci3: command tx timeout [ 81.492927][ T5788] Bluetooth: hci0: command tx timeout [ 81.506824][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.567461][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.651904][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.667674][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.684585][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.692554][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.704268][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.713363][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.772452][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.837239][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.916618][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.924139][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.966712][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.973974][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.057565][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.232813][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.273464][ T5782] veth0_vlan: entered promiscuous mode [ 82.343668][ T5782] veth1_vlan: entered promiscuous mode [ 82.357157][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.401607][ T5781] veth0_vlan: entered promiscuous mode [ 82.454482][ T5781] veth1_vlan: entered promiscuous mode [ 82.502106][ T5782] veth0_macvtap: entered promiscuous mode [ 82.526624][ T5782] veth1_macvtap: entered promiscuous mode [ 82.566708][ T5781] veth0_macvtap: entered promiscuous mode [ 82.592945][ T5781] veth1_macvtap: entered promiscuous mode [ 82.608951][ T5780] veth0_vlan: entered promiscuous mode [ 82.630355][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.644758][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.657659][ T5780] veth1_vlan: entered promiscuous mode [ 82.668752][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.688257][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.705342][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.731675][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.744499][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.763265][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.776075][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.803237][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.815916][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.831680][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.842910][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.867591][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.880208][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.900471][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.916308][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.013690][ T5780] veth0_macvtap: entered promiscuous mode [ 83.054658][ T5780] veth1_macvtap: entered promiscuous mode [ 83.141708][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.165794][ T5783] veth0_vlan: entered promiscuous mode [ 83.174401][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.202208][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.204459][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.217245][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.231140][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.254616][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.269512][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.282430][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.296490][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.308104][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.319313][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.332429][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.343463][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.371740][ T5783] veth1_vlan: entered promiscuous mode [ 83.383048][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.383331][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.402159][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.408738][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.422323][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.431290][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.491283][ T5788] Bluetooth: hci2: command tx timeout [ 83.491941][ T5792] Bluetooth: hci1: command tx timeout [ 83.556969][ T5781] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.564675][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.578773][ T5792] Bluetooth: hci0: command tx timeout [ 83.584993][ T5788] Bluetooth: hci3: command tx timeout [ 83.608704][ T5783] veth0_macvtap: entered promiscuous mode [ 83.623805][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.665247][ T5783] veth1_macvtap: entered promiscuous mode [ 83.763233][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.794828][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.811221][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.828382][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.845131][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.857522][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.870789][ T5873] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 83.877092][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.892783][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.908268][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.921199][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.932463][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.935785][ T5873] FAULT_INJECTION: forcing a failure. [ 83.935785][ T5873] name failslab, interval 1, probability 5, space 0, times 99 [ 83.943606][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.966957][ T5873] CPU: 0 PID: 5873 Comm: syz.2.3 Not tainted syzkaller #0 [ 83.975063][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.975115][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.985201][ T5873] Call Trace: [ 83.985214][ T5873] [ 83.985223][ T5873] dump_stack_lvl+0x18c/0x250 [ 83.985262][ T5873] ? show_regs_print_info+0x20/0x20 [ 83.985284][ T5873] ? load_image+0x420/0x420 [ 83.985305][ T5873] ? __lock_acquire+0x7eb0/0x7eb0 [ 83.985330][ T5873] should_fail_ex+0x394/0x4c0 [ 83.985355][ T5873] should_failslab+0x9/0x20 [ 83.985372][ T5873] slab_pre_alloc_hook+0x59/0x300 [ 83.985392][ T5873] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 83.985412][ T5873] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 83.985432][ T5873] __kmem_cache_alloc_node+0x53/0x260 [ 84.000475][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.001644][ T5873] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 84.069239][ T5873] __kmalloc_node+0xa6/0x240 [ 84.074381][ T5873] memcg_alloc_slab_cgroups+0x85/0x120 [ 84.080314][ T5873] slab_post_alloc_hook+0xec/0x4d0 [ 84.085562][ T5873] kmem_cache_alloc+0x17e/0x2d0 [ 84.090863][ T5873] ? dup_fd+0x56/0xa20 [ 84.095486][ T5873] dup_fd+0x56/0xa20 [ 84.099401][ T5873] ? security_task_alloc+0x46/0x130 [ 84.104897][ T5873] ? rcu_is_watching+0x15/0xb0 [ 84.109766][ T5873] ? apparmor_task_alloc+0x1ef/0x2c0 [ 84.115179][ T5873] copy_files+0xaf/0x110 [ 84.120231][ T5873] copy_process+0x157d/0x3da0 [ 84.125488][ T5873] ? plist_add+0x3db/0x490 [ 84.129942][ T5873] ? copy_process+0x98e/0x3da0 [ 84.135885][ T5873] ? futex_wait+0x529/0x640 [ 84.140504][ T5873] ? __pidfd_prepare+0x140/0x140 [ 84.145459][ T5873] kernel_clone+0x24b/0x8a0 [ 84.149967][ T5873] ? create_io_thread+0x190/0x190 [ 84.155282][ T5873] ? do_futex+0x2ff/0x3e0 [ 84.159702][ T5873] __x64_sys_clone+0x1b7/0x230 [ 84.165627][ T5873] ? __ia32_sys_vfork+0x140/0x140 [ 84.170857][ T5873] ? lock_chain_count+0x20/0x20 [ 84.176111][ T5873] ? lockdep_hardirqs_on+0x98/0x150 [ 84.182031][ T5873] do_syscall_64+0x55/0xb0 [ 84.187349][ T5873] ? clear_bhb_loop+0x40/0x90 [ 84.193795][ T5873] ? clear_bhb_loop+0x40/0x90 [ 84.200608][ T5873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.209677][ T5873] RIP: 0033:0x7f11c0f9fb19 [ 84.216707][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.246328][ T5873] RSP: 002b:00007f11c1e22fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 84.254949][ T5873] RAX: ffffffffffffffda RBX: 00007f11c1225fa0 RCX: 00007f11c0f9fb19 [ 84.264476][ T5873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.273000][ T5873] RBP: 00007f11c1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 84.281629][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.290406][ T5873] R13: 00007f11c1226038 R14: 00007f11c1225fa0 R15: 00007ffedad74b58 [ 84.298691][ T5873] [ 84.323594][ T5873] FAULT_INJECTION: forcing a failure. [ 84.323594][ T5873] name failslab, interval 1, probability 5, space 0, times 98 [ 84.343771][ T5877] overlayfs: failed to resolve './file0': -2 [ 84.352580][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.382805][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.396579][ T5873] CPU: 0 PID: 5873 Comm: syz.2.3 Not tainted syzkaller #0 [ 84.405485][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.410386][ T5880] overlayfs: failed to resolve './file0/file0': -2 [ 84.416330][ T5873] Call Trace: [ 84.427032][ T5873] [ 84.430260][ T5873] dump_stack_lvl+0x18c/0x250 [ 84.435330][ T5873] ? show_regs_print_info+0x20/0x20 [ 84.442593][ T5873] ? load_image+0x420/0x420 [ 84.447245][ T5873] ? __might_sleep+0xe0/0xe0 [ 84.452139][ T5873] ? __lock_acquire+0x7eb0/0x7eb0 [ 84.457375][ T5873] should_fail_ex+0x394/0x4c0 [ 84.462463][ T5873] should_failslab+0x9/0x20 [ 84.467436][ T5873] slab_pre_alloc_hook+0x59/0x300 [ 84.473702][ T5873] ? kvmalloc_node+0x70/0x180 [ 84.479199][ T5873] ? kvmalloc_node+0x70/0x180 [ 84.484089][ T5873] __kmem_cache_alloc_node+0x53/0x260 [ 84.490535][ T5873] ? kvmalloc_node+0x70/0x180 [ 84.495224][ T5873] __kmalloc_node+0xa6/0x240 [ 84.499841][ T5873] kvmalloc_node+0x70/0x180 [ 84.504559][ T5873] alloc_fdtable+0x106/0x2c0 [ 84.509218][ T5873] dup_fd+0x747/0xa20 [ 84.513302][ T5873] ? security_task_alloc+0x46/0x130 [ 84.518558][ T5873] ? apparmor_task_alloc+0x1ef/0x2c0 [ 84.524467][ T5873] copy_files+0xaf/0x110 [ 84.528977][ T5873] copy_process+0x157d/0x3da0 [ 84.534470][ T5873] ? plist_add+0x3db/0x490 [ 84.541127][ T5873] ? copy_process+0x98e/0x3da0 [ 84.546971][ T5873] ? futex_wait+0x529/0x640 [ 84.553228][ T5873] ? __pidfd_prepare+0x140/0x140 [ 84.558399][ T5873] kernel_clone+0x24b/0x8a0 [ 84.563436][ T5873] ? create_io_thread+0x190/0x190 [ 84.568587][ T5873] ? do_futex+0x2ff/0x3e0 [ 84.574056][ T5873] __x64_sys_clone+0x1b7/0x230 [ 84.578844][ T5873] ? __ia32_sys_vfork+0x140/0x140 [ 84.584615][ T5873] ? lock_chain_count+0x20/0x20 [ 84.589591][ T5873] ? lockdep_hardirqs_on+0x98/0x150 [ 84.595510][ T5873] do_syscall_64+0x55/0xb0 [ 84.599952][ T5873] ? clear_bhb_loop+0x40/0x90 [ 84.605730][ T5873] ? clear_bhb_loop+0x40/0x90 [ 84.610453][ T5873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.616452][ T5873] RIP: 0033:0x7f11c0f9fb19 [ 84.621055][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.641830][ T5873] RSP: 002b:00007f11c1e22fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 84.650892][ T5873] RAX: ffffffffffffffda RBX: 00007f11c1225fa0 RCX: 00007f11c0f9fb19 [ 84.659056][ T5873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.668140][ T5873] RBP: 00007f11c1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 84.676727][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.685494][ T5873] R13: 00007f11c1226038 R14: 00007f11c1225fa0 R15: 00007ffedad74b58 [ 84.694746][ T5873] [ 84.763869][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.773916][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.784549][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.800274][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.907412][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.941192][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.027562][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.041783][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.133016][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.155494][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.197912][ T5886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.374510][ T27] audit: type=1326 audit(1793738400.317:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.0.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f891539fb19 code=0x0 [ 85.461772][ T5894] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10'. [ 85.480898][ T5897] syz.1.9[5897]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.569740][ T5788] Bluetooth: hci2: command tx timeout [ 85.579290][ T5788] Bluetooth: hci1: command tx timeout [ 85.650098][ T5788] Bluetooth: hci3: command tx timeout [ 85.650111][ T5792] Bluetooth: hci0: command tx timeout [ 85.869688][ T5897] loop1: detected capacity change from 0 to 32768 [ 85.890563][ T5897] (syz.1.9,5897,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "jourVĪl_async_com" or missing value [ 85.909881][ T5770] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.914563][ T5897] (syz.1.9,5897,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 85.992959][ T5897] netlink: 'syz.1.9': attribute type 10 has an invalid length. [ 86.012747][ T5897] syz_tun: entered promiscuous mode [ 86.047206][ T5897] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 86.142564][ T5770] usb 3-1: Using ep0 maxpacket: 32 [ 86.162440][ T5770] usb 3-1: config 0 has no interfaces? [ 86.189474][ T5770] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 86.210404][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.238186][ T5770] usb 3-1: Product: syz [ 86.243400][ T5770] usb 3-1: Manufacturer: syz [ 86.248154][ T5770] usb 3-1: SerialNumber: syz [ 86.264122][ T5907] v: renamed from veth0_vlan [ 86.275267][ T5770] usb 3-1: config 0 descriptor?? [ 86.305184][ T11] bond0: (slave bond_slave_0): interface is now down [ 86.351792][ T11] bond0: (slave bond_slave_1): interface is now down [ 86.358570][ T11] bond0: (slave syz_tun): interface is now down [ 86.420715][ T41] bond0: (slave bond_slave_0): interface is now down [ 86.454007][ T41] bond0: (slave bond_slave_1): interface is now down [ 86.481754][ T41] bond0: (slave syz_tun): interface is now down [ 86.531474][ T1140] bond0: (slave bond_slave_0): interface is now down [ 86.554725][ T1140] bond0: (slave bond_slave_1): interface is now down [ 86.583628][ T1140] bond0: (slave syz_tun): interface is now down [ 86.590724][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.625006][ T1140] bond0: now running without any active interface! [ 87.487565][ T5934] md/raid1:md0: active with 1 out of 1 mirrors [ 87.519575][ T5934] md0: detected capacity change from 0 to 4096 [ 87.674012][ T5939] md0: detected capacity change from 4096 to 0 [ 87.690398][ T5939] md: md0 stopped. [ 88.005421][ T5932] loop3: detected capacity change from 0 to 32768 [ 88.020957][ T5932] (syz.3.20,5932,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "da ‹=writeback" or missing value [ 88.037769][ T5932] (syz.3.20,5932,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 88.507896][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 88.577161][ T5948] Zero length message leads to an empty skb [ 88.601154][ T5944] loop0: detected capacity change from 0 to 32768 [ 88.622259][ T5944] (syz.0.25,5944,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "jourVĪl_async_com" or missing value [ 88.659341][ T5944] (syz.0.25,5944,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 88.904871][ T5952] (null): rxe_set_mtu: Set mtu to 1024 [ 88.921071][ T5952] ip_vti0 speed is unknown, defaulting to 1000 [ 88.954316][ T5952] ip_vti0 speed is unknown, defaulting to 1000 [ 88.980168][ T5952] ip_vti0 speed is unknown, defaulting to 1000 [ 89.028076][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.045723][ T5954] loop1: detected capacity change from 0 to 128 [ 89.118519][ T5954] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 89.909822][ T789] usb 3-1: USB disconnect, device number 2 [ 90.073022][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.088003][ T1140] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 90.248423][ T5952] infiniband syz0: set down [ 90.253326][ T8] ip_vti0 speed is unknown, defaulting to 1000 [ 90.263681][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.284757][ T5952] infiniband syz0: added ip_vti0 [ 90.307316][ T42] wlan1: authenticate with 08:02:11:00:00:00 [ 90.317426][ T5952] syz0: rxe_create_cq: returned err = -12 [ 90.338471][ T5952] infiniband syz0: Couldn't create ib_mad CQ [ 90.352780][ T42] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 90.370901][ T5952] infiniband syz0: Couldn't open port 1 [ 90.391189][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.460395][ T5965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.504638][ T5952] RDS/IB: syz0: added [ 90.508922][ T5952] smc: adding ib device syz0 with port count 1 [ 90.523792][ T5952] smc: ib device syz0 port 1 has pnetid [ 90.598424][ T8] ip_vti0 speed is unknown, defaulting to 1000 [ 90.613068][ T5952] ip_vti0 speed is unknown, defaulting to 1000 [ 90.968983][ T5952] ip_vti0 speed is unknown, defaulting to 1000 [ 90.999039][ T5985] loop1: detected capacity change from 0 to 2048 [ 91.065135][ T5985] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 91.091792][ T1140] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 91.105963][ T5985] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 91.144089][ T5985] UDF-fs: Scanning with blocksize 512 failed [ 91.195029][ T5985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.250580][ T1140] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 91.381485][ T3529] wlan1: authentication with 08:02:11:00:00:00 timed out [ 91.589099][ T5952] ip_vti0 speed is unknown, defaulting to 1000 [ 91.727044][ T6005] loop2: detected capacity change from 0 to 512 [ 91.890738][ T6005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.906253][ T6005] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.070934][ T5999] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.146383][ T971] cfg80211: failed to load regulatory.db [ 92.339995][ T5952] ip_vti0 speed is unknown, defaulting to 1000 [ 92.547727][ T27] audit: type=1800 audit(1793738407.487:3): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.36" name="file1" dev="loop1" ino=838 res=0 errno=0 [ 92.643447][ T27] audit: type=1800 audit(1793738407.537:4): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.36" name="control" dev="loop1" ino=868 res=0 errno=0 [ 92.826403][ T5952] ip_vti0 speed is unknown, defaulting to 1000 [ 92.910441][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 92.989276][ C0] net_ratelimit: 57 callbacks suppressed [ 93.103664][ T6015] hsr_slave_1 (unregistering): left promiscuous mode [ 93.690421][ T6018] md/raid10:md0: not clean -- starting background reconstruction [ 93.709254][ T6018] md/raid10:md0: active with 1 out of 2 devices [ 93.736391][ T6018] md0: detected capacity change from 0 to 2048 [ 93.746688][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.775065][ T6024] md: resync of RAID array md0 [ 93.803790][ T6024] md: md0: resync interrupted. [ 93.926295][ T6022] md0: detected capacity change from 2048 to 0 [ 93.954005][ T6022] md: md0 stopped. [ 94.196001][ T6031] loop2: detected capacity change from 0 to 1024 [ 94.430614][ T6036] loop3: detected capacity change from 0 to 1024 [ 94.709868][ T6036] hfsplus: bad catalog entry type [ 95.101638][ T6020] loop0: detected capacity change from 0 to 32768 [ 95.210392][ T3462] hfsplus: b-tree write err: -5, ino 25 [ 95.217153][ T3462] hfsplus: b-tree write err: -5, ino 4 [ 95.224474][ T3462] hfsplus: b-tree write err: -5, ino 2 [ 95.259210][ T6020] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 95.399485][ T6049] loop3: detected capacity change from 0 to 128 [ 95.415486][ T6049] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 95.518076][ T6020] XFS (loop0): Ending clean mount [ 95.617398][ T6020] XFS (loop0): Quotacheck needed: Please wait. [ 96.095087][ T6020] XFS (loop0): Quotacheck: Done. [ 96.392960][ T41] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 96.620538][ T6034] loop1: detected capacity change from 0 to 32768 [ 96.635787][ T6060] FAULT_INJECTION: forcing a failure. [ 96.635787][ T6060] name failslab, interval 1, probability 5, space 0, times 97 [ 96.694007][ T6060] CPU: 1 PID: 6060 Comm: syz.3.50 Not tainted syzkaller #0 [ 96.702803][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.702825][ T6060] Call Trace: [ 96.702836][ T6060] [ 96.702845][ T6060] dump_stack_lvl+0x18c/0x250 [ 96.702883][ T6060] ? show_regs_print_info+0x20/0x20 [ 96.702906][ T6060] ? load_image+0x420/0x420 [ 96.702929][ T6060] ? __might_sleep+0xe0/0xe0 [ 96.724772][ T6060] ? __lock_acquire+0x7eb0/0x7eb0 [ 96.737345][ T6060] should_fail_ex+0x394/0x4c0 [ 96.748293][ T6060] should_failslab+0x9/0x20 [ 96.760578][ T6060] slab_pre_alloc_hook+0x59/0x300 [ 96.760613][ T6060] kmem_cache_alloc+0x5a/0x2d0 [ 96.760629][ T6060] ? mempool_init_node+0x1e9/0x480 [ 96.766843][ T6060] ? mempool_free+0x320/0x320 [ 96.766883][ T6060] mempool_init_node+0x1e9/0x480 [ 96.766914][ T6060] ? mempool_alloc_slab+0x60/0x60 [ 96.779801][ T6060] ? mempool_free+0x320/0x320 [ 96.779834][ T6060] mempool_init+0x3a/0x50 [ 96.779858][ T6060] dm_io_client_create+0x78/0xf0 [ 96.792910][ T6060] writecache_ctr+0x412/0x3b80 [ 96.792946][ T6060] ? dm_split_args+0x88/0x5b0 [ 96.792962][ T6060] ? dm_table_add_target+0x51c/0xbc0 [ 96.792978][ T6060] ? table_load+0x2eb/0x7e0 [ 96.809298][ T6060] ? __se_sys_ioctl+0xfd/0x170 [ 96.809354][ T6060] ? dmz_reclaim_kcopy_end+0xb0/0xb0 [ 96.823605][ T6060] ? dm_split_args+0x92/0x5b0 [ 96.833517][ T6060] ? rcu_is_watching+0x15/0xb0 [ 96.845559][ T6060] ? skip_spaces+0x8a/0xa0 [ 96.845591][ T6060] ? dm_split_args+0x505/0x5b0 [ 96.860993][ T6060] dm_table_add_target+0x575/0xbc0 [ 96.861043][ T6060] table_load+0x2eb/0x7e0 [ 96.873030][ T6060] ? dev_wait+0x2f0/0x2f0 [ 96.873070][ T6060] ? __might_fault+0xaa/0x120 [ 96.873092][ T6060] ? __might_fault+0xc6/0x120 [ 96.873109][ T6060] ? __might_fault+0xaa/0x120 [ 96.885695][ T6060] ? dev_wait+0x2f0/0x2f0 [ 96.885732][ T6060] dm_ctl_ioctl+0x975/0xd00 [ 96.885761][ T6060] ? dev_wait+0x2f0/0x2f0 [ 96.885778][ T6060] ? dm_poll+0x120/0x120 [ 96.897475][ T6060] ? bpf_lsm_file_ioctl+0x9/0x10 [ 96.908237][ T6060] ? security_file_ioctl+0x80/0xa0 [ 96.918617][ T6060] ? dm_poll+0x120/0x120 [ 96.930724][ T6060] __se_sys_ioctl+0xfd/0x170 [ 96.930765][ T6060] do_syscall_64+0x55/0xb0 [ 96.930788][ T6060] ? clear_bhb_loop+0x40/0x90 [ 96.930811][ T6060] ? clear_bhb_loop+0x40/0x90 [ 96.930833][ T6060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.930854][ T6060] RIP: 0033:0x7fa2c999fb19 [ 96.946464][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.946489][ T6060] RSP: 002b:00007fa2ca7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.946509][ T6060] RAX: ffffffffffffffda RBX: 00007fa2c9c25fa0 RCX: 00007fa2c999fb19 [ 96.946523][ T6060] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 96.946536][ T6060] RBP: 00007fa2c9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 96.946548][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.959737][ T6060] R13: 00007fa2c9c26038 R14: 00007fa2c9c25fa0 R15: 00007ffed6dab798 [ 96.972475][ T6060] [ 97.047773][ T6060] device-mapper: table: 248:0: writecache: Unable to allocate dm-io client (-ENOMEM) [ 97.122562][ T6060] device-mapper: ioctl: error adding target to table [ 97.458543][ T5781] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 98.449217][ C1] net_ratelimit: 53 callbacks suppressed [ 99.039297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.229349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.008735][ T6073] loop1: detected capacity change from 0 to 512 [ 100.075719][ T6066] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.167786][ T6073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.231889][ T6073] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.476621][ T6081] warning: `syz.0.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.126801][ T6066] ip_vti0 speed is unknown, defaulting to 1000 [ 101.678639][ T6093] loop0: detected capacity change from 0 to 1024 [ 102.230906][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.368174][ T6095] syzkaller0: entered promiscuous mode [ 102.390926][ T6098] FAULT_INJECTION: forcing a failure. [ 102.390926][ T6098] name failslab, interval 1, probability 5, space 0, times 96 [ 102.393725][ T6095] syzkaller0: entered allmulticast mode [ 102.409430][ T6098] CPU: 0 PID: 6098 Comm: syz.1.61 Not tainted syzkaller #0 [ 102.421208][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.434723][ T6098] Call Trace: [ 102.438877][ T6098] [ 102.442657][ T6098] dump_stack_lvl+0x18c/0x250 [ 102.448361][ T6098] ? show_regs_print_info+0x20/0x20 [ 102.454060][ T6098] ? load_image+0x420/0x420 [ 102.459331][ T6098] ? __lock_acquire+0x7eb0/0x7eb0 [ 102.464376][ T6098] should_fail_ex+0x394/0x4c0 [ 102.469781][ T6098] should_failslab+0x9/0x20 [ 102.474471][ T6098] slab_pre_alloc_hook+0x59/0x300 [ 102.479714][ T6098] kmem_cache_alloc+0x5a/0x2d0 [ 102.485025][ T6098] ? mempool_init_node+0x1e9/0x480 [ 102.490853][ T6098] ? mempool_free+0x320/0x320 [ 102.498370][ T6098] mempool_init_node+0x1e9/0x480 [ 102.504288][ T6098] ? mempool_alloc_slab+0x60/0x60 [ 102.511082][ T6098] ? mempool_free+0x320/0x320 [ 102.516147][ T6098] mempool_init+0x3a/0x50 [ 102.521303][ T6098] bioset_init+0x286/0x6d0 [ 102.526313][ T6098] ? mempool_init+0x3a/0x50 [ 102.530977][ T6098] dm_io_client_create+0xb6/0xf0 [ 102.537914][ T6098] writecache_ctr+0x412/0x3b80 [ 102.543154][ T6098] ? dm_split_args+0x88/0x5b0 [ 102.549247][ T6098] ? dm_table_add_target+0x51c/0xbc0 [ 102.549269][ T6098] ? table_load+0x2eb/0x7e0 [ 102.549290][ T6098] ? __se_sys_ioctl+0xfd/0x170 [ 102.549332][ T6098] ? dmz_reclaim_kcopy_end+0xb0/0xb0 [ 102.564009][ T6098] ? dm_split_args+0x92/0x5b0 [ 102.564045][ T6098] ? rcu_is_watching+0x15/0xb0 [ 102.564069][ T6098] ? skip_spaces+0x8a/0xa0 [ 102.574323][ T6098] ? dm_split_args+0x505/0x5b0 [ 102.574368][ T6098] dm_table_add_target+0x575/0xbc0 [ 102.574400][ T6098] table_load+0x2eb/0x7e0 [ 102.584592][ T6098] ? dev_wait+0x2f0/0x2f0 [ 102.595844][ T6098] ? __might_fault+0xaa/0x120 [ 102.606675][ T6098] ? __might_fault+0xc6/0x120 [ 102.615924][ T6098] ? __might_fault+0xaa/0x120 [ 102.615962][ T6098] ? dev_wait+0x2f0/0x2f0 [ 102.631441][ T6098] dm_ctl_ioctl+0x975/0xd00 [ 102.631480][ T6098] ? dev_wait+0x2f0/0x2f0 [ 102.640793][ T6098] ? dm_poll+0x120/0x120 [ 102.640851][ T6098] ? bpf_lsm_file_ioctl+0x9/0x10 [ 102.651186][ T6098] ? security_file_ioctl+0x80/0xa0 [ 102.657267][ T6098] ? dm_poll+0x120/0x120 [ 102.661720][ T6098] __se_sys_ioctl+0xfd/0x170 [ 102.666878][ T6098] do_syscall_64+0x55/0xb0 [ 102.671533][ T6098] ? clear_bhb_loop+0x40/0x90 [ 102.677040][ T6098] ? clear_bhb_loop+0x40/0x90 [ 102.682006][ T6098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.689246][ T6098] RIP: 0033:0x7f383839fb19 [ 102.694313][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.714925][ T6098] RSP: 002b:00007f38391fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.723458][ T6098] RAX: ffffffffffffffda RBX: 00007f3838625fa0 RCX: 00007f383839fb19 [ 102.731890][ T6098] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 102.740154][ T6098] RBP: 00007f3838437b70 R08: 0000000000000000 R09: 0000000000000000 [ 102.751556][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.762535][ T6098] R13: 00007f3838626038 R14: 00007f3838625fa0 R15: 00007ffde4e99288 [ 102.772641][ T6098] [ 102.820714][ T6098] device-mapper: table: 248:1: writecache: Unable to allocate dm-io client (-ENOMEM) [ 102.857453][ T6098] device-mapper: ioctl: error adding target to table [ 103.969217][ C0] net_ratelimit: 36 callbacks suppressed [ 103.997181][ T6106] loop1: detected capacity change from 0 to 128 [ 104.019538][ T6106] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 105.030795][ T1140] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 105.106611][ T6117] loop0: detected capacity change from 0 to 2048 [ 105.176366][ T6117] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 105.227026][ T6117] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 105.266437][ T6117] UDF-fs: Scanning with blocksize 512 failed [ 105.334547][ T6117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.550373][ T6121] bond0: (slave syz_tun): Releasing backup interface [ 105.723907][ T6121] bridge_slave_0: left allmulticast mode [ 105.751890][ T6121] bridge_slave_0: left promiscuous mode [ 105.776009][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.844120][ T6121] bridge_slave_1: left allmulticast mode [ 105.875042][ T6121] bridge_slave_1: left promiscuous mode [ 105.914033][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.050047][ T6121] bond0: (slave bond_slave_0): Releasing backup interface [ 106.163523][ T6121] bond0: (slave bond_slave_1): Releasing backup interface [ 106.280774][ T6121] team0: Port device team_slave_0 removed [ 106.346168][ T6121] team0: Port device team_slave_1 removed [ 106.410662][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.499671][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.543617][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.609352][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.996924][ T6131] tipc: Started in network mode [ 107.023400][ T6131] tipc: Node identity 7f000001, cluster identity 4711 [ 107.044739][ T27] audit: type=1800 audit(1793738421.987:5): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.69" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 107.072064][ T6131] tipc: Enabled bearer , priority 10 [ 107.124469][ T6131] netlink: 52 bytes leftover after parsing attributes in process `syz.1.73'. [ 107.135229][ T27] audit: type=1800 audit(1793738422.047:6): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.69" name="control" dev="loop0" ino=876 res=0 errno=0 [ 107.703387][ T6151] loop0: detected capacity change from 0 to 128 [ 107.722677][ T6151] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 107.849349][ T5840] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.059609][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 108.077794][ T5840] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 108.317628][ T5840] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.366268][ T971] tipc: Node number set to 2130706433 [ 108.528656][ T5840] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.598502][ T5840] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.675386][ T5840] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.711212][ T3462] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 108.743659][ T5840] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.811642][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.848276][ T6162] tipc: Started in network mode [ 108.891648][ T6162] tipc: Node identity 7f000001, cluster identity 4711 [ 108.912782][ T6162] tipc: Enabled bearer , priority 10 [ 108.931952][ T6162] netlink: 52 bytes leftover after parsing attributes in process `syz.2.84'. [ 109.145490][ T6170] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.249228][ C1] net_ratelimit: 65 callbacks suppressed [ 109.305182][ T6170] ip_vti0 speed is unknown, defaulting to 1000 [ 109.581663][ T5840] usb 4-1: usb_control_msg returned -32 [ 109.609307][ T5840] usbtmc 4-1:16.0: can't read capabilities [ 109.700901][ T6175] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 110.016225][ T6160] loop1: detected capacity change from 0 to 32768 [ 110.030688][ T5841] tipc: Node number set to 2130706433 [ 110.063375][ T6160] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.83 (6160) [ 110.174119][ T6182] FAULT_INJECTION: forcing a failure. [ 110.174119][ T6182] name failslab, interval 1, probability 5, space 0, times 95 [ 110.207751][ T5841] usb 4-1: USB disconnect, device number 2 [ 110.211842][ T6182] CPU: 0 PID: 6182 Comm: syz.0.90 Not tainted syzkaller #0 [ 110.225058][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.225082][ T6182] Call Trace: [ 110.225092][ T6182] [ 110.225101][ T6182] dump_stack_lvl+0x18c/0x250 [ 110.225144][ T6182] ? show_regs_print_info+0x20/0x20 [ 110.225166][ T6182] ? load_image+0x420/0x420 [ 110.225186][ T6182] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.225213][ T6182] should_fail_ex+0x394/0x4c0 [ 110.225238][ T6182] should_failslab+0x9/0x20 [ 110.225256][ T6182] slab_pre_alloc_hook+0x59/0x300 [ 110.225282][ T6182] kmem_cache_alloc+0x5a/0x2d0 [ 110.225299][ T6182] ? mempool_init_node+0x1e9/0x480 [ 110.225323][ T6182] ? mempool_free+0x320/0x320 [ 110.225348][ T6182] mempool_init_node+0x1e9/0x480 [ 110.225378][ T6182] ? mempool_alloc_slab+0x60/0x60 [ 110.225397][ T6182] ? mempool_free+0x320/0x320 [ 110.225417][ T6182] mempool_init+0x3a/0x50 [ 110.225441][ T6182] bioset_init+0x286/0x6d0 [ 110.225462][ T6182] ? mempool_init+0x3a/0x50 [ 110.225483][ T6182] dm_io_client_create+0xb6/0xf0 [ 110.254678][ T6182] writecache_ctr+0x412/0x3b80 [ 110.371150][ T6182] ? dm_split_args+0x88/0x5b0 [ 110.376386][ T6182] ? dm_table_add_target+0x51c/0xbc0 [ 110.382699][ T6182] ? table_load+0x2eb/0x7e0 [ 110.388502][ T6182] ? __se_sys_ioctl+0xfd/0x170 [ 110.396645][ T6182] ? dmz_reclaim_kcopy_end+0xb0/0xb0 [ 110.403966][ T6182] ? dm_split_args+0x92/0x5b0 [ 110.409345][ T6182] ? rcu_is_watching+0x15/0xb0 [ 110.415568][ T6182] ? skip_spaces+0x8a/0xa0 [ 110.421287][ T6182] ? dm_split_args+0x505/0x5b0 [ 110.427758][ T6182] dm_table_add_target+0x575/0xbc0 [ 110.433634][ T6182] table_load+0x2eb/0x7e0 [ 110.439838][ T6182] ? dev_wait+0x2f0/0x2f0 [ 110.444971][ T6182] ? __might_fault+0xaa/0x120 [ 110.445010][ T6182] ? __might_fault+0xc6/0x120 [ 110.451588][ T6182] ? __might_fault+0xaa/0x120 [ 110.464520][ T6182] ? dev_wait+0x2f0/0x2f0 [ 110.464558][ T6182] dm_ctl_ioctl+0x975/0xd00 [ 110.464594][ T6182] ? dev_wait+0x2f0/0x2f0 [ 110.464616][ T6182] ? dm_poll+0x120/0x120 [ 110.488752][ T6182] ? bpf_lsm_file_ioctl+0x9/0x10 [ 110.496595][ T6182] ? security_file_ioctl+0x80/0xa0 [ 110.502829][ T6182] ? dm_poll+0x120/0x120 [ 110.509558][ T6182] __se_sys_ioctl+0xfd/0x170 [ 110.514582][ T6182] do_syscall_64+0x55/0xb0 [ 110.520036][ T6182] ? clear_bhb_loop+0x40/0x90 [ 110.525519][ T6182] ? clear_bhb_loop+0x40/0x90 [ 110.530666][ T6182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.540724][ T6182] RIP: 0033:0x7f891539fb19 [ 110.546868][ T6182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.571879][ T6182] RSP: 002b:00007f89161fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.583045][ T6182] RAX: ffffffffffffffda RBX: 00007f8915625fa0 RCX: 00007f891539fb19 [ 110.583072][ T6182] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 110.583084][ T6182] RBP: 00007f8915437b70 R08: 0000000000000000 R09: 0000000000000000 [ 110.583094][ T6182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.583104][ T6182] R13: 00007f8915626038 R14: 00007f8915625fa0 R15: 00007fff9b7d9da8 [ 110.583131][ T6182] [ 110.673089][ T6160] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.699459][ T6182] device-mapper: table: 248:2: writecache: Unable to allocate dm-io client (-ENOMEM) [ 110.716123][ T6160] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 110.732959][ T6182] device-mapper: ioctl: error adding target to table [ 110.741663][ T6160] BTRFS info (device loop1): using free space tree [ 110.919329][ T6160] BTRFS info (device loop1): enabling ssd optimizations [ 110.960711][ T6160] BTRFS info (device loop1): auto enabling async discard [ 110.982280][ T3498] BTRFS warning (device loop1): checksum verify failed on logical 5267456 mirror 1 wanted 0x335d39565c71738882e9c778b97d855737807c3b4cc2d9fb107991a100dbef3e found 0xf86c534fe40c1d82025371fec1d78ea2e6a1637981c186035d268d9705cb8640 level 0 [ 111.023757][ T6160] BTRFS warning (device loop1): failed to read fs tree: -5 [ 111.185385][ T6160] BTRFS error (device loop1): open_ctree failed: -5 [ 111.409424][ T6160] FAULT_INJECTION: forcing a failure. [ 111.409424][ T6160] name failslab, interval 1, probability 5, space 0, times 100 [ 111.476430][ T6160] CPU: 1 PID: 6160 Comm: syz.1.83 Not tainted syzkaller #0 [ 111.484305][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.495644][ T6160] Call Trace: [ 111.499158][ T6160] [ 111.502226][ T6160] dump_stack_lvl+0x18c/0x250 [ 111.507666][ T6160] ? show_regs_print_info+0x20/0x20 [ 111.514416][ T6160] ? load_image+0x420/0x420 [ 111.520762][ T6160] ? __might_sleep+0xe0/0xe0 [ 111.526547][ T6160] ? __lock_acquire+0x7eb0/0x7eb0 [ 111.532950][ T6160] should_fail_ex+0x394/0x4c0 [ 111.538988][ T6160] should_failslab+0x9/0x20 [ 111.545297][ T6160] slab_pre_alloc_hook+0x59/0x300 [ 111.552311][ T6160] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 111.559904][ T6160] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 111.567183][ T6160] __kmem_cache_alloc_node+0x53/0x260 [ 111.574001][ T6160] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 111.581939][ T6160] __kmalloc+0xa7/0x240 [ 111.586830][ T6160] tomoyo_realpath_from_path+0xe6/0x5c0 [ 111.593683][ T6160] ? tomoyo_domain+0xd6/0x120 [ 111.598852][ T6160] tomoyo_path_number_perm+0x248/0x5e0 [ 111.605354][ T6160] ? tomoyo_path_number_perm+0x217/0x5e0 [ 111.611848][ T6160] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 111.618083][ T6160] ? __fget_files+0x28/0x460 [ 111.623650][ T6160] security_file_ioctl+0x70/0xa0 [ 111.631344][ T6160] __se_sys_ioctl+0x48/0x170 [ 111.636785][ T6160] do_syscall_64+0x55/0xb0 [ 111.642242][ T6160] ? clear_bhb_loop+0x40/0x90 [ 111.647465][ T6160] ? clear_bhb_loop+0x40/0x90 [ 111.652857][ T6160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.660168][ T6160] RIP: 0033:0x7f383839fb19 [ 111.664942][ T6160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.691237][ T6160] RSP: 002b:00007f38391fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.691271][ T6160] RAX: ffffffffffffffda RBX: 00007f3838625fa0 RCX: 00007f383839fb19 [ 111.691285][ T6160] RDX: 0000200000000280 RSI: 00000000c0105872 RDI: 0000000000000006 [ 111.691297][ T6160] RBP: 00007f3838437b70 R08: 0000000000000000 R09: 0000000000000000 [ 111.691308][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.691319][ T6160] R13: 00007f3838626038 R14: 00007f3838625fa0 R15: 00007ffde4e99288 [ 111.691348][ T6160] [ 111.829061][ T6160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 111.987195][ T6160] FAULT_INJECTION: forcing a failure. [ 111.987195][ T6160] name failslab, interval 1, probability 5, space 0, times 99 [ 112.042513][ T6160] CPU: 1 PID: 6160 Comm: syz.1.83 Not tainted syzkaller #0 [ 112.053247][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.067682][ T6160] Call Trace: [ 112.071378][ T6160] [ 112.075215][ T6160] dump_stack_lvl+0x18c/0x250 [ 112.081196][ T6160] ? show_regs_print_info+0x20/0x20 [ 112.087603][ T6160] ? load_image+0x420/0x420 [ 112.092479][ T6160] ? __might_sleep+0xe0/0xe0 [ 112.099468][ T6160] ? __lock_acquire+0x7eb0/0x7eb0 [ 112.099505][ T6160] should_fail_ex+0x394/0x4c0 [ 112.099531][ T6160] should_failslab+0x9/0x20 [ 112.099548][ T6160] slab_pre_alloc_hook+0x59/0x300 [ 112.099575][ T6160] ? bpf_int_jit_compile+0x1e3/0x1240 [ 112.099595][ T6160] __kmem_cache_alloc_node+0x53/0x260 [ 112.099618][ T6160] ? bpf_int_jit_compile+0x1e3/0x1240 [ 112.099638][ T6160] kmalloc_trace+0x2a/0xe0 [ 112.099664][ T6160] bpf_int_jit_compile+0x1e3/0x1240 [ 112.099700][ T6160] ? emit_bpf_dispatcher+0x1060/0x1060 [ 112.099724][ T6160] ? rcu_is_watching+0x15/0xb0 [ 112.099751][ T6160] bpf_prog_select_runtime+0x499/0x800 [ 112.099775][ T6160] ? bpf_prog_realloc+0x175/0x210 [ 112.099797][ T6160] bpf_prepare_filter+0x117f/0x1320 [ 112.099827][ T6160] ? seccomp_notify_detach+0x220/0x220 [ 112.099854][ T6160] ? bpf_prog_create+0x1f0/0x1f0 [ 112.099875][ T6160] ? rcu_is_watching+0x15/0xb0 [ 112.099899][ T6160] ? kmemdup+0x55/0x70 [ 112.099922][ T6160] ? __asan_memcpy+0x40/0x70 [ 112.099947][ T6160] bpf_prog_create_from_user+0x2d0/0x420 [ 112.099972][ T6160] ? seccomp_notify_detach+0x220/0x220 [ 112.144900][ T6160] do_seccomp+0x794/0xdc0 [ 112.191005][ T6160] ? prctl_set_seccomp+0x60/0x60 [ 112.203719][ T6160] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 112.203766][ T6160] ? lockdep_hardirqs_on+0x98/0x150 [ 112.203786][ T6160] do_syscall_64+0x55/0xb0 [ 112.203808][ T6160] ? clear_bhb_loop+0x40/0x90 [ 112.203830][ T6160] ? clear_bhb_loop+0x40/0x90 [ 112.203851][ T6160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.203873][ T6160] RIP: 0033:0x7f383839fb19 [ 112.203892][ T6160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.274119][ T6160] RSP: 002b:00007f38391fd028 EFLAGS: 00000246 [ 112.328377][ T6160] ORIG_RAX: 000000000000013d [ 112.328397][ T6160] RAX: ffffffffffffffda RBX: 00007f3838625fa0 RCX: 00007f383839fb19 [ 112.328411][ T6160] RDX: 0000200000005980 RSI: 0000000000000000 RDI: 0000000000000001 [ 112.328430][ T6160] RBP: 00007f3838437b70 R08: 0000000000000000 R09: 0000000000000000 [ 112.328442][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.328453][ T6160] R13: 00007f3838626038 R14: 00007f3838625fa0 R15: 00007ffde4e99288 [ 112.394773][ T6160] [ 112.443931][ T6160] FAULT_INJECTION: forcing a failure. [ 112.443931][ T6160] name failslab, interval 1, probability 5, space 0, times 98 [ 112.494344][ T6160] CPU: 0 PID: 6160 Comm: syz.1.83 Not tainted syzkaller #0 [ 112.503285][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.515935][ T6160] Call Trace: [ 112.520244][ T6160] [ 112.524867][ T6160] dump_stack_lvl+0x18c/0x250 [ 112.530240][ T6160] ? show_regs_print_info+0x20/0x20 [ 112.537177][ T6160] ? load_image+0x420/0x420 [ 112.543309][ T6160] ? __might_sleep+0xe0/0xe0 [ 112.550074][ T6160] ? __lock_acquire+0x7eb0/0x7eb0 [ 112.558035][ T6160] should_fail_ex+0x394/0x4c0 [ 112.563352][ T6160] should_failslab+0x9/0x20 [ 112.568176][ T6160] slab_pre_alloc_hook+0x59/0x300 [ 112.574534][ T6160] ? mas_next_slot+0x910/0x980 [ 112.574570][ T6160] ? task_numa_work+0x921/0x1350 [ 112.574621][ T6160] __kmem_cache_alloc_node+0x53/0x260 [ 112.584493][ T6160] ? task_numa_work+0x921/0x1350 [ 112.595244][ T6160] kmalloc_trace+0x2a/0xe0 [ 112.595289][ T6160] task_numa_work+0x921/0x1350 [ 112.608184][ T6160] ? init_numa_balancing+0x400/0x400 [ 112.613593][ T6160] ? __might_sleep+0xe0/0xe0 [ 112.613626][ T6160] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.613644][ T6160] ? lockdep_hardirqs_on+0x98/0x150 [ 112.613664][ T6160] task_work_run+0x1d4/0x260 [ 112.613691][ T6160] ? task_work_cancel+0x220/0x220 [ 112.613713][ T6160] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 112.624483][ T6160] ? exit_to_user_mode_loop+0x3b/0x110 [ 112.635052][ T6160] exit_to_user_mode_loop+0xe6/0x110 [ 112.661946][ T6160] exit_to_user_mode_prepare+0xee/0x180 [ 112.668318][ T6160] syscall_exit_to_user_mode+0x1a/0x50 [ 112.674525][ T6160] do_syscall_64+0x61/0xb0 [ 112.679174][ T6160] ? clear_bhb_loop+0x40/0x90 [ 112.685469][ T6160] ? clear_bhb_loop+0x40/0x90 [ 112.690809][ T6160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.698382][ T6160] RIP: 0033:0x7f383839fb19 [ 112.704065][ T6160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.729306][ T6160] RSP: 002b:00007f38391fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 112.729338][ T6160] RAX: fffffffffffffdf4 RBX: 00007f3838625fa0 RCX: 00007f383839fb19 [ 112.729350][ T6160] RDX: 0000200000005980 RSI: 0000000000000000 RDI: 0000000000000001 [ 112.729360][ T6160] RBP: 00007f3838437b70 R08: 0000000000000000 R09: 0000000000000000 [ 112.729370][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.729380][ T6160] R13: 00007f3838626038 R14: 00007f3838625fa0 R15: 00007ffde4e99288 [ 112.729413][ T6160] [ 113.767412][ T6210] loop3: detected capacity change from 0 to 32768 [ 113.790908][ T6210] (syz.3.94,6210,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "jourVĪl_async_com" or missing value [ 113.819738][ T971] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.841549][ T6221] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.959998][ T6210] (syz.3.94,6210,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 114.159775][ T6221] ip_vti0 speed is unknown, defaulting to 1000 [ 114.573406][ C0] net_ratelimit: 44 callbacks suppressed [ 114.759638][ T6240] loop3: detected capacity change from 0 to 128 [ 114.797591][ T6240] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 115.901874][ T60] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 116.143844][ T6251] input: syz0 as /devices/virtual/input/input6 [ 116.176831][ T6254] device-mapper: table: 248:3: verity: Data device lookup failed (-ENOENT) [ 116.207501][ T6254] device-mapper: ioctl: error adding target to table [ 117.059778][ T6266] loop1: detected capacity change from 0 to 1024 [ 117.601740][ T6275] loop1: detected capacity change from 0 to 128 [ 117.623638][ T6273] loop0: detected capacity change from 0 to 1024 [ 117.709466][ T6275] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 118.567290][ T6264] loop3: detected capacity change from 0 to 32768 [ 118.645533][ T6264] (syz.3.109,6264,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "jourVĪl_async_com" or missing value [ 118.665764][ T3498] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 118.714038][ T6264] (syz.3.109,6264,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 119.649467][ C1] net_ratelimit: 34 callbacks suppressed [ 119.943194][ T6299] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.117801][ T6299] ip_vti0 speed is unknown, defaulting to 1000 [ 121.561500][ T6306] loop3: detected capacity change from 0 to 1024 [ 123.177572][ T6323] input: syz0 as /devices/virtual/input/input7 [ 123.823103][ T6324] md/raid10:md0: not clean -- starting background reconstruction [ 123.881997][ T6324] md/raid10:md0: active with 1 out of 2 devices [ 123.915101][ T6324] md0: detected capacity change from 0 to 2048 [ 123.970043][ T6331] md: resync of RAID array md0 [ 124.095667][ T6331] md/raid10:md0: resync fails [ 124.114291][ T6332] FAULT_INJECTION: forcing a failure. [ 124.114291][ T6332] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.190780][ T6331] md: md0: resync done. [ 124.239423][ T6332] CPU: 1 PID: 6332 Comm: syz.3.132 Not tainted syzkaller #0 [ 124.248478][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.260189][ T6332] Call Trace: [ 124.264292][ T6332] [ 124.268821][ T6332] dump_stack_lvl+0x18c/0x250 [ 124.277005][ T6332] ? show_regs_print_info+0x20/0x20 [ 124.284101][ T6332] ? load_image+0x420/0x420 [ 124.289695][ T6332] should_fail_ex+0x394/0x4c0 [ 124.295634][ T6332] _copy_from_user+0x2f/0xe0 [ 124.302057][ T6332] mfill_atomic_pte_copy+0xe4/0x430 [ 124.308450][ T6332] mfill_atomic_copy+0x7a7/0x1700 [ 124.314507][ T6332] ? _compound_head+0x120/0x120 [ 124.320458][ T6332] ? __might_fault+0xaa/0x120 [ 124.325886][ T6332] ? __might_fault+0xc6/0x120 [ 124.332145][ T6332] ? __might_fault+0xaa/0x120 [ 124.338818][ T6332] userfaultfd_ioctl+0x1ba1/0x4a60 [ 124.346102][ T6332] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 124.352427][ T6332] ? lock_chain_count+0x20/0x20 [ 124.357497][ T6332] ? userfaultfd_poll+0x1c0/0x1c0 [ 124.363774][ T6332] ? do_vfs_ioctl+0x156c/0x1cc0 [ 124.369227][ T6332] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 124.375947][ T6332] ? tomoyo_path_number_perm+0x217/0x5e0 [ 124.382811][ T6332] ? __lock_acquire+0x7eb0/0x7eb0 [ 124.388439][ T6332] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 124.397213][ T6332] ? __kmem_cache_free+0xba/0x1f0 [ 124.404285][ T6332] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 124.410555][ T6332] ? tomoyo_path_number_perm+0x217/0x5e0 [ 124.418548][ T6332] ? __fget_files+0x28/0x460 [ 124.425243][ T6332] ? bpf_lsm_file_ioctl+0x9/0x10 [ 124.430571][ T6332] ? security_file_ioctl+0x80/0xa0 [ 124.437275][ T6332] ? userfaultfd_poll+0x1c0/0x1c0 [ 124.443669][ T6332] __se_sys_ioctl+0xfd/0x170 [ 124.448401][ T6332] do_syscall_64+0x55/0xb0 [ 124.454535][ T6332] ? clear_bhb_loop+0x40/0x90 [ 124.459973][ T6332] ? clear_bhb_loop+0x40/0x90 [ 124.466204][ T6332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.473020][ T6332] RIP: 0033:0x7fa2c999fb19 [ 124.479240][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.504573][ T6332] RSP: 002b:00007fa2ca7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.514017][ T6332] RAX: ffffffffffffffda RBX: 00007fa2c9c25fa0 RCX: 00007fa2c999fb19 [ 124.524898][ T6332] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000004 [ 124.535165][ T6332] RBP: 00007fa2c9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 124.545176][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.555811][ T6332] R13: 00007fa2c9c26038 R14: 00007fa2c9c25fa0 R15: 00007ffed6dab798 [ 124.566268][ T6332] [ 124.689253][ C1] net_ratelimit: 54 callbacks suppressed [ 125.555206][ T6352] syz0: rxe_newlink: already configured on ip_vti0 [ 127.534943][ T6373] syz0: rxe_newlink: already configured on ip_vti0 [ 127.978689][ T5788] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 128.203271][ T6360] loop1: detected capacity change from 0 to 32768 [ 128.266400][ T6360] (syz.1.145,6360,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "jourVĪl_async_com" or missing value [ 128.429322][ T6360] (syz.1.145,6360,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 129.915283][ T6397] input: syz0 as /devices/virtual/input/input8 [ 129.969228][ C1] net_ratelimit: 46 callbacks suppressed [ 130.818630][ T42] IPVS: starting estimator thread 0... [ 130.941376][ T6411] lo: entered promiscuous mode [ 130.979568][ T6412] IPVS: using max 18 ests per chain, 43200 per kthread [ 131.092502][ T6411] tunl0: entered promiscuous mode [ 131.225609][ T6411] gre0: entered promiscuous mode [ 131.826917][ T6411] gretap0: entered promiscuous mode [ 132.095952][ T6411] erspan0: entered promiscuous mode [ 132.335540][ T6411] ip_vti0: entered promiscuous mode [ 132.431540][ T6411] ip6_vti0: entered promiscuous mode [ 132.579418][ T6411] sit0: entered promiscuous mode [ 132.786780][ T6411] ip6tnl0: entered promiscuous mode [ 132.927845][ T6411] ip6gre0: entered promiscuous mode [ 132.997507][ T6411] ip6gretap0: entered promiscuous mode [ 133.112588][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130770][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.151942][ T6411] bridge0: entered promiscuous mode [ 133.245592][ T6411] vcan0: entered promiscuous mode [ 133.303670][ T6411] bond0: entered promiscuous mode [ 133.378221][ T6411] team0: entered promiscuous mode [ 133.454583][ T6411] dummy0: entered promiscuous mode [ 133.545944][ T6411] nlmon0: entered promiscuous mode [ 133.574925][ T6411] caif0: entered promiscuous mode [ 133.605338][ T6411] batadv0: entered promiscuous mode [ 133.656235][ T6411] vxcan0: entered promiscuous mode [ 133.678906][ T6411] vxcan1: entered promiscuous mode [ 133.720600][ T6411] veth0: entered promiscuous mode [ 133.774614][ T6411] veth1: entered promiscuous mode [ 133.917893][ T6411] wg0: entered promiscuous mode [ 133.992617][ T6411] wg1: entered promiscuous mode [ 134.058295][ T6411] wg2: entered promiscuous mode [ 134.112722][ T6411] veth0_to_bridge: entered promiscuous mode [ 134.163998][ T6411] bridge_slave_0: entered promiscuous mode [ 134.204758][ T6411] veth1_to_bridge: entered promiscuous mode [ 134.253104][ T6411] bridge_slave_1: entered promiscuous mode [ 134.296871][ T6411] veth0_to_bond: entered promiscuous mode [ 134.312599][ T6411] bond_slave_0: entered promiscuous mode [ 134.348253][ T6411] veth1_to_bond: entered promiscuous mode [ 134.373244][ T6411] bond_slave_1: entered promiscuous mode [ 134.401997][ T6411] veth0_to_team: entered promiscuous mode [ 134.430474][ T6411] team_slave_0: entered promiscuous mode [ 134.453485][ T6411] veth1_to_team: entered promiscuous mode [ 134.480196][ T6411] team_slave_1: entered promiscuous mode [ 134.516638][ T6411] veth0_to_batadv: entered promiscuous mode [ 134.563442][ T6411] batadv_slave_0: entered promiscuous mode [ 134.626628][ T6411] veth1_to_batadv: entered promiscuous mode [ 134.671985][ T6411] batadv_slave_1: entered promiscuous mode [ 134.714925][ T6411] xfrm0: entered promiscuous mode [ 134.772689][ T6411] veth0_to_hsr: entered promiscuous mode [ 134.857395][ T6411] hsr0: entered promiscuous mode [ 134.911158][ T6411] veth1_virt_wifi: entered promiscuous mode [ 134.959817][ T6411] veth0_virt_wifi: entered promiscuous mode [ 134.985773][ T6411] virt_wifi0: entered promiscuous mode [ 135.157959][ T6411] vlan0: entered promiscuous mode [ 135.169194][ C1] net_ratelimit: 48 callbacks suppressed [ 135.189095][ T6411] vlan1: entered promiscuous mode [ 135.225770][ T6411] macvlan0: entered promiscuous mode [ 135.286728][ T6411] macvlan1: entered promiscuous mode [ 135.302559][ T6411] ipvlan0: entered promiscuous mode [ 135.324436][ T6411] ipvlan1: entered promiscuous mode [ 135.441598][ T6411] macvtap0: entered promiscuous mode [ 135.479868][ T6411] macsec0: entered promiscuous mode [ 135.542112][ T6411] geneve0: entered promiscuous mode [ 135.586914][ T6411] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.606825][ T6411] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.618293][ T6411] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.634619][ T6411] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.659070][ T6411] geneve1: entered promiscuous mode [ 135.706937][ T6411] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 135.750956][ T6411] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 135.806397][ T6411] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 135.852084][ T6411] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 135.927715][ T6411] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 135.990411][ T6411] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 136.695933][ T6445] loop1: detected capacity change from 0 to 1024 [ 137.027934][ T6451] loop3: detected capacity change from 0 to 512 [ 137.505606][ T6454] bridge_slave_0: left allmulticast mode [ 137.604196][ T6454] bridge_slave_0: left promiscuous mode [ 137.648728][ T6460] netlink: 48 bytes leftover after parsing attributes in process `syz.1.183'. [ 137.694832][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.860519][ T6454] bridge_slave_1: left allmulticast mode [ 137.942027][ T6454] bridge_slave_1: left promiscuous mode [ 138.039769][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.312404][ T6454] bond0: (slave bond_slave_0): Releasing backup interface [ 138.418510][ T6454] bond0: (slave bond_slave_1): Releasing backup interface [ 138.693862][ T6454] team0: Port device team_slave_0 removed [ 138.785855][ T6454] team0: Port device team_slave_1 removed [ 138.815854][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.867312][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.891297][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.917409][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.647254][ T6475] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 139.719966][ T42] IPVS: starting estimator thread 0... [ 139.849331][ T6476] IPVS: using max 24 ests per chain, 57600 per kthread [ 140.449229][ C1] net_ratelimit: 24 callbacks suppressed [ 140.483367][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 141.638813][ T6507] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 145.493953][ C0] net_ratelimit: 17 callbacks suppressed [ 151.237491][ C0] net_ratelimit: 21 callbacks suppressed [ 156.340329][ C0] net_ratelimit: 24 callbacks suppressed [ 161.734113][ C1] net_ratelimit: 23 callbacks suppressed [ 166.840582][ C0] net_ratelimit: 10 callbacks suppressed [ 171.929749][ C0] net_ratelimit: 12 callbacks suppressed [ 176.961801][ C1] net_ratelimit: 23 callbacks suppressed [ 181.983433][ C0] net_ratelimit: 10 callbacks suppressed [ 187.079353][ C0] net_ratelimit: 8 callbacks suppressed [ 192.667863][ C0] net_ratelimit: 18 callbacks suppressed [ 194.666397][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.683038][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.059274][ C1] net_ratelimit: 12 callbacks suppressed [ 203.405861][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 203.421995][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 203.429063][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 203.896851][ C1] net_ratelimit: 10 callbacks suppressed [ 209.102237][ C0] net_ratelimit: 19 callbacks suppressed [ 214.561536][ C0] net_ratelimit: 20 callbacks suppressed [ 220.133407][ C0] net_ratelimit: 2 callbacks suppressed [ 225.259340][ C0] net_ratelimit: 47 callbacks suppressed [ 231.011435][ C0] net_ratelimit: 32 callbacks suppressed [ 236.062916][ C0] net_ratelimit: 5 callbacks suppressed [ 241.106271][ C0] net_ratelimit: 11 callbacks suppressed [ 247.025565][ C0] net_ratelimit: 7 callbacks suppressed [ 252.111018][ C0] net_ratelimit: 30 callbacks suppressed [ 256.073680][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.096776][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.249276][ C0] net_ratelimit: 1 callbacks suppressed [ 262.462978][ C0] net_ratelimit: 6 callbacks suppressed [ 279.181551][ C1] net_ratelimit: 13 callbacks suppressed [ 284.536511][ C1] net_ratelimit: 19 callbacks suppressed [ 290.379226][ C0] net_ratelimit: 16 callbacks suppressed [ 296.054320][ C0] net_ratelimit: 15 callbacks suppressed [ 299.158797][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.883315][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.051276][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 301.410405][ C1] net_ratelimit: 2 callbacks suppressed [ 301.813899][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.133704][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.154055][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.190323][ T5788] Bluetooth: hci0: Opcode 0x1001 failed: -110 [ 302.309565][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.331520][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.415601][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.450838][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.487410][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.573128][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.634341][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 302.652881][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 302.679049][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.736488][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.218915][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.542474][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.127889][ T52] Bluetooth: hci1: command tx timeout [ 307.466565][ T5788] Bluetooth: hci1: command tx timeout [ 307.486132][ T5788] Bluetooth: hci0: command tx timeout [ 307.533322][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.407431][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.507119][ T52] Bluetooth: hci1: command tx timeout [ 309.672852][ T52] Bluetooth: hci0: command tx timeout [ 309.863778][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.888045][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.489312][ C1] net_ratelimit: 17 callbacks suppressed [ 311.604422][ T52] Bluetooth: hci1: command tx timeout [ 311.977826][ T52] Bluetooth: hci0: command tx timeout [ 312.570371][ T52] Bluetooth: hci2: command tx timeout [ 314.303415][ T52] Bluetooth: hci0: command tx timeout [ 314.771909][ T52] Bluetooth: hci2: command tx timeout [ 316.857885][ C1] net_ratelimit: 18 callbacks suppressed [ 316.875503][ T52] Bluetooth: hci2: command tx timeout [ 317.515909][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.532058][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.329990][ T52] Bluetooth: hci2: command tx timeout [ 322.072531][ C0] net_ratelimit: 11 callbacks suppressed [ 327.664805][ C0] net_ratelimit: 13 callbacks suppressed [ 332.923553][ C1] net_ratelimit: 3 callbacks suppressed [ 337.957067][ C1] net_ratelimit: 26 callbacks suppressed [ 343.392032][ C1] net_ratelimit: 19 callbacks suppressed [ 349.410081][ C1] net_ratelimit: 12 callbacks suppressed [ 359.517051][ C0] net_ratelimit: 40 callbacks suppressed [ 364.791473][ T9] net_ratelimit: 55 callbacks suppressed [ 369.891456][ C0] net_ratelimit: 28 callbacks suppressed [ 379.193498][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.405422][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.501539][ C1] net_ratelimit: 8 callbacks suppressed [ 392.161727][ C1] net_ratelimit: 26 callbacks suppressed [ 397.413950][ C0] net_ratelimit: 14 callbacks suppressed [ 402.440743][ C1] net_ratelimit: 2 callbacks suppressed [ 407.538127][ C0] net_ratelimit: 9 callbacks suppressed [ 412.853810][ C1] net_ratelimit: 13 callbacks suppressed [ 418.262222][ C0] net_ratelimit: 11 callbacks suppressed [ 421.739358][ T28] INFO: task kworker/u4:8:3462 blocked for more than 143 seconds. [ 421.747605][ T28] Not tainted syzkaller #0 [ 421.803496][ C1] virtqueue callback for ffff888023808400 (ffffffff85c2c4f0) [ 421.815281][ C1] No more buffers in queue [ 421.819822][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 421.825755][ C1] No more buffers in queue [ 421.829972][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.830825][ C1] Added buffer head 3053 to ffff888023808400 [ 421.845586][ C1] Added buffer head 3054 to ffff888023808400 [ 421.851768][ C1] Added buffer head 3055 to ffff888023808400 [ 421.857966][ C1] Added buffer head 3056 to ffff888023808400 [ 421.864035][ C1] Added buffer head 3057 to ffff888023808400 [ 421.870076][ C1] Added buffer head 3058 to ffff888023808400 [ 421.876087][ C1] Added buffer head 3059 to ffff888023808400 [ 421.882256][ C1] Added buffer head 3060 to ffff888023808400 [ 421.888847][ C1] Added buffer head 3061 to ffff888023808400 [ 421.894941][ C1] Added buffer head 3062 to ffff888023808400 [ 421.902395][ C1] Added buffer head 3063 to ffff888023808400 [ 421.908872][ C1] Added buffer head 3064 to ffff888023808400 [ 421.915473][ C1] Added buffer head 3065 to ffff888023808400 [ 421.921706][ C1] Added buffer head 3066 to ffff888023808400 [ 421.928517][ C1] Added buffer head 3000 to ffff888023808400 [ 421.935483][ C1] Added buffer head 3001 to ffff888023808400 [ 421.943015][ C1] Added buffer head 3002 to ffff888023808400 [ 421.949652][ C1] Added buffer head 3003 to ffff888023808400 [ 421.955661][ C1] Added buffer head 3004 to ffff888023808400 [ 421.961770][ C1] Added buffer head 3005 to ffff888023808400 [ 421.967778][ C1] Added buffer head 3006 to ffff888023808400 [ 421.973840][ C1] Added buffer head 3007 to ffff888023808400 [ 421.980055][ C1] Added buffer head 3008 to ffff888023808400 [ 421.986066][ C1] Added buffer head 3009 to ffff888023808400 [ 421.992119][ C1] Added buffer head 3010 to ffff888023808400 [ 421.998208][ C1] Added buffer head 3011 to ffff888023808400 [ 422.004259][ C1] Added buffer head 3012 to ffff888023808400 [ 422.010300][ C1] Added buffer head 3013 to ffff888023808400 [ 422.016289][ C1] virtqueue callback for ffff888023808400 (ffffffff85c2c4f0) [ 422.023773][ C1] Added buffer head 3014 to ffff888023808400 [ 422.029921][ C1] Added buffer head 3015 to ffff888023808400 [ 422.035932][ C1] Added buffer head 3016 to ffff888023808400 [ 422.041987][ C1] Added buffer head 3017 to ffff888023808400 [ 422.048535][ C1] Added buffer head 3018 to ffff888023808400 [ 422.062721][ C1] No more buffers in queue [ 422.067349][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 422.073242][ C1] No more buffers in queue [ 422.078200][ C1] No more buffers in queue [ 422.082694][ C1] eth0: xmit ffff88804b44e280 42:01:0a:80:00:01 [ 422.089835][ C1] Added buffer head 5 to ffff888023808600 [ 422.095746][ C1] virtqueue callback for ffff888023808600 (ffffffff85c2c5e0) [ 422.103442][ C1] Sent skb ffff88804b44e280 [ 422.108433][ C1] No more buffers in queue [ 422.223673][ C0] virtqueue callback for ffff88814324a000 (ffffffff849b2ec0) [ 422.231559][ C0] virtqueue interrupt with no work for ffff888143247e00 [ 422.238530][ C0] virtqueue interrupt with no work for ffff888143247c00 [ 422.256036][ T5840] Added buffer head 0 to ffff88814324a000 [ 422.294482][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 422.305678][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 422.315131][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 422.324177][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 422.532235][ C0] virtqueue callback for ffff888023808000 (ffffffff85c2c4f0) [ 422.545440][ C0] No more buffers in queue [ 422.550471][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 422.556493][ C0] No more buffers in queue [ 422.561091][ C0] No more buffers in queue [ 422.565976][ C0] eth0: xmit ffff88807dba2140 42:01:0a:80:00:01 [ 422.572658][ C0] Added buffer head 4 to ffff888023808200 [ 422.578913][ C0] virtqueue callback for ffff888023808200 (ffffffff85c2c5e0) [ 422.594922][ C0] Sent skb ffff88807dba2140 [ 422.599992][ C0] No more buffers in queue [ 422.689261][ C0] nf_nat: Already setup manip DST for ct ffff888030fd6600 (status bits 0x188) [ 422.698212][ C0] nf_nat: Already setup manip SRC for ct ffff888030fd6600 (status bits 0x188) [ 422.877863][ T28] task:kworker/u4:8 state:D stack:22680 pid:3462 ppid:2 flags:0x00004000 [ 423.223559][ C0] virtqueue callback for ffff88814324a000 (ffffffff849b2ec0) [ 423.231839][ C0] virtqueue interrupt with no work for ffff888143247e00 [ 423.238820][ C0] virtqueue interrupt with no work for ffff888143247c00 [ 423.274293][ C0] net_ratelimit: 6 callbacks suppressed [ 423.274316][ C0] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0) [ 423.304903][ T5840] Added buffer head 0 to ffff88814324a000 [ 423.320705][ T28] Workqueue: events_unbound linkwatch_event [ 423.330267][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 423.330305][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 423.330754][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 423.330779][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 423.337775][ C1] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 423.382439][ C1] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 423.630989][ T6545] kcov: kcov_task_exit: t = ffff888025e81e00, kcov->t = ffff888025e81e00 [ 423.730337][ C0] nf_nat: Already setup manip DST for ct ffff888030fd6600 (status bits 0x188) [ 423.740010][ C0] nf_nat: Already setup manip SRC for ct ffff888030fd6600 (status bits 0x188) [ 423.972492][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 424.054434][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 424.131841][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 424.162714][ T28] Call Trace: [ 424.166262][ T28] [ 424.179718][ T28] __schedule+0x156f/0x4720 [ 424.186502][ T28] ? asan.module_dtor+0x20/0x20 [ 424.223556][ C0] virtqueue callback for ffff88814324a000 (ffffffff849b2ec0) [ 424.234725][ C0] virtqueue interrupt with no work for ffff888143247e00 [ 424.243229][ C0] virtqueue interrupt with no work for ffff888143247c00 [ 424.263267][ T5840] Added buffer head 0 to ffff88814324a000 [ 424.309237][ C0] wireguard: wg0: Sending keepalive packet to peer 2 ([::1]:20003/0%0) [ 424.314947][ T5114] sd 0:0:1:0: cmd ffff88802595c7d0 CDB: 0x2a [ 424.369533][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 424.379966][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 424.391433][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 424.403178][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 424.657180][ C1] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0) [ 424.682903][ C1] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 424.705827][ C0] wireguard: wg0: Sending keepalive packet to peer 8 ([::1]:20003/0%0) [ 424.769407][ C0] nf_nat: Already setup manip DST for ct ffff888030fd6600 (status bits 0x188) [ 424.779077][ C0] nf_nat: Already setup manip SRC for ct ffff888030fd6600 (status bits 0x188) [ 425.223438][ C0] virtqueue callback for ffff88814324a000 (ffffffff849b2ec0) [ 425.233574][ C0] virtqueue interrupt with no work for ffff888143247e00 [ 425.241780][ C0] virtqueue interrupt with no work for ffff888143247c00 [ 425.255214][ T5840] Added buffer head 0 to ffff88814324a000 [ 425.272107][ T5114] Added buffer head 164 to ffff88802263f600 [ 425.289339][ T28] ? __mutex_lock+0x684/0xce0 [ 425.294339][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 425.413167][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 425.423161][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 425.433017][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 425.443131][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 425.567229][ T28] ? kthread_data+0x4f/0xc0 [ 425.580892][ T28] ? wq_worker_sleeping+0x63/0x240 [ 425.586079][ T28] schedule+0xbd/0x170 [ 425.766952][ T52] hcon ffff88807c1a0000 state BT_CONNECTED [ 425.782138][ T52] hcon ffff88807c1a0000 [ 425.795407][ T52] hci1: handle 0xc8 reason 0x13 [ 425.810090][ C0] nf_nat: Already setup manip DST for ct ffff888030fd6600 (status bits 0x188) [ 425.819831][ C0] nf_nat: Already setup manip SRC for ct ffff888030fd6600 (status bits 0x188) [ 425.853890][ T52] hci1: [ 425.857118][ T52] hci1: entry ffff888031e2ee00 [ 426.054324][ T52] hci1: Opcode 0x0406 [ 426.058997][ T52] hci1: opcode 0x0406 plen 3 [ 426.073294][ T52] hci1: skb len 6 [ 426.077023][ T52] hci1: length 1 [ 426.093659][ T5784] hci1 cmd_cnt 1 cmd queued 1 [ 426.098736][ T5784] hci1: skb ffff888026172a00 [ 426.223352][ C0] virtqueue callback for ffff88814324a000 (ffffffff849b2ec0) [ 426.230823][ C0] virtqueue interrupt with no work for ffff888143247e00 [ 426.237776][ C0] virtqueue interrupt with no work for ffff888143247c00 [ 426.254606][ T5784] hci1 type 1 len 6 [ 426.451798][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 426.460796][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 426.471243][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 426.480221][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 426.491429][ T28] schedule_preempt_disabled+0x13/0x20 [ 426.496962][ T28] __mutex_lock+0x689/0xce0 [ 426.572245][ C1] virtqueue callback for ffff88802263f600 (ffffffff857a8e40) [ 426.579699][ C1] sd 0:0:1:0: cmd ffff88802595c7d0 response 0 status 0x0 sense_len 0 [ 426.588250][ C1] No more buffers in queue [ 426.860351][ C0] nf_nat: Already setup manip DST for ct ffff888030fd6600 (status bits 0x188) [ 426.869351][ C0] nf_nat: Already setup manip SRC for ct ffff888030fd6600 (status bits 0x188) [ 426.995019][ T10] sd 0:0:1:0: cmd ffff888023e1f910 CDB: 0x35 [ 427.011457][ T10] Added buffer head 164 to ffff88802263f600 [ 427.018342][ C1] virtqueue callback for ffff88802263f600 (ffffffff857a8e40) [ 427.025788][ C1] sd 0:0:1:0: cmd ffff888023e1f910 response 0 status 0x0 sense_len 0 [ 427.031653][ T9] Added buffer head 0 to ffff88814324a000 [ 427.034218][ C1] No more buffers in queue [ 427.092444][ T97] sd 0:0:1:0: cmd ffff888025982a50 CDB: 0x2a [ 427.098782][ T97] Added buffer head 164 to ffff88802263f600 [ 427.138165][ C1] virtqueue callback for ffff88802263f600 (ffffffff857a8e40) [ 427.145613][ C1] sd 0:0:1:0: cmd ffff888025982a50 response 0 status 0x0 sense_len 0 [ 427.153719][ C1] No more buffers in queue [ 427.223245][ C0] virtqueue callback for ffff88814324a000 (ffffffff849b2ec0) [ 427.230822][ C0] virtqueue interrupt with no work for ffff888143247e00 [ 427.238317][ C0] virtqueue interrupt with no work for ffff888143247c00 [ 427.299760][ T9] Added buffer head 0 to ffff88814324a000 [ 427.437230][ T28] ? __mutex_lock+0x4d2/0xce0 [ 427.454104][ T28] ? linkwatch_event+0xe/0x60 [ 427.458863][ T28] ? mutex_lock_nested+0x20/0x20 [ 427.493518][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 427.502583][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 427.512560][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 427.521724][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 427.902642][ C0] nf_nat: Already setup manip DST for ct ffff888030fd6600 (status bits 0x188) [ 427.912152][ C0] nf_nat: Already setup manip SRC for ct ffff888030fd6600 (status bits 0x188) [ 428.077141][ T6567] sock ffff88805ea90c00 [ 428.144141][ T52] hci1: end: err -110 [ 428.148449][ T52] hci1: status 0x13 [ 428.167405][ T52] channel 3 len 14 [ 428.181802][ T52] hcon ffff88807c1a0000 bdaddr 10:aa:aa:aa:aa:aa status 19 [ 428.223149][ C0] virtqueue callback for ffff88814324a000 (ffffffff849b2ec0) [ 428.231084][ C0] virtqueue interrupt with no work for ffff888143247e00 [ 428.238042][ C0] virtqueue interrupt with no work for ffff888143247c00 [ 428.254092][ T52] hcon ffff88807c1a0000 conn ffff88805ce5d800, err 104 [ 428.271178][ T52] hci1 hcon ffff88807c1a0000 chan ffff888079173a00 [ 428.310650][ C0] net_ratelimit: 15 callbacks suppressed [ 428.310672][ C0] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 428.437346][ C1] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 428.527309][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 428.531642][ C0] virtqueue callback for ffff888023808000 (ffffffff85c2c4f0) [ 428.534057][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 428.544762][ C0] No more buffers in queue [ 428.551824][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 428.556238][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 428.565659][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 428.571227][ C0] No more buffers in queue [ 428.580749][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 428.586225][ C0] No more buffers in queue [ 428.601216][ C0] eth0: xmit ffff888054394000 42:01:0a:80:00:01 [ 428.604186][ T5784] hci1: err 0x6e [ 428.608174][ C0] Added buffer head 4 to ffff888023808200 [ 428.611855][ C0] virtqueue callback for ffff888023808200 (ffffffff85c2c5e0) [ 428.628370][ T5784] hci1 cmd_cnt 1 cmd queued 0 [ 428.641912][ C0] Sent skb ffff888054394000 [ 428.646808][ C0] No more buffers in queue [ 428.666308][ T6567] ffff888059790000 name hci0 bus 0 [ 428.676186][ T9] Added buffer head 0 to ffff88814324a000 [ 428.720208][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.725493][ T28] ? process_scheduled_works+0x975/0x1600 [ 428.769477][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 428.804884][ C0] wireguard: wg2: Receiving keepalive packet from peer 11 ([::1]:20001/0%0) [ 428.850951][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 428.860710][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 428.872066][ C0] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0) [ 428.938303][ C0] nf_nat: Already setup manip DST for ct ffff888030fd6600 (status bits 0x188) [ 428.947582][ C0] nf_nat: Already setup manip SRC for ct ffff888030fd6600 (status bits 0x188) [ 429.014160][ C1] wireguard: wg2: Receiving keepalive packet from peer 23 ([::1]:20001/0%0) [ 429.040546][ C1] wireguard: wg2: Receiving keepalive packet from peer 5 ([::1]:20001/0%0) [ 429.223106][ C0] virtqueue callback for ffff88814324a000 (ffffffff849b2ec0) [ 429.230590][ C0] virtqueue interrupt with no work for ffff888143247e00 [ 429.237644][ C0] virtqueue interrupt with no work for ffff888143247c00 [ 429.396228][ T6567] debugfs: creating file 'hci0' [ 429.412615][ T6567] device: 'hci0': device_add [ 429.521071][ T8] Added buffer head 0 to ffff88814324a000 [ 429.571057][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 429.581913][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 429.592023][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 429.601710][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 429.763392][ C1] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 429.873263][ T28] ? process_scheduled_works+0x975/0x1600 [ 429.980437][ C0] nf_nat: Already setup manip DST for ct ffff888030fd6600 (status bits 0x188) [ 429.991236][ C0] nf_nat: Already setup manip SRC for ct ffff888030fd6600 (status bits 0x188) [ 430.051143][ T6567] kobject: 'hci0' (ffff888059791520): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 430.128397][ T28] linkwatch_event+0xe/0x60 [ 430.141986][ T28] process_scheduled_works+0xa60/0x1600 [ 430.223035][ C0] virtqueue callback for ffff88814324a000 (ffffffff849b2ec0) [ 430.230770][ C0] virtqueue interrupt with no work for ffff888143247e00 [ 430.239497][ C0] virtqueue interrupt with no work for ffff888143247c00 [ 430.267120][ T5840] Added buffer head 0 to ffff88814324a000 [ 430.466977][ T6567] bluetooth hci0: No ACPI support [ 430.609265][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 430.618216][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 430.627673][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 430.636813][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 431.003193][ T6567] PM: Adding info for No Bus:hci0 [ 431.008307][ T6567] kobject: 'hci0' (ffff888059791520): kobject_uevent_env [ 431.021230][ C0] nf_nat: Already setup manip DST for ct ffff888030fd6600 (status bits 0x188) [ 431.021278][ C0] nf_nat: Already setup manip SRC for ct ffff888030fd6600 (status bits 0x188) [ 431.136941][ T28] ? worker_attach_to_pool+0x370/0x370 [ 431.222941][ C0] virtqueue callback for ffff88814324a000 (ffffffff849b2ec0) [ 431.230422][ C0] virtqueue interrupt with no work for ffff888143247e00 [ 431.237380][ C0] virtqueue interrupt with no work for ffff888143247c00 [ 431.248012][ T5840] Added buffer head 0 to ffff88814324a000 [ 431.288424][ T28] ? assign_work+0x3cc/0x5d0 [ 431.305023][ T6569] sock ffff888078601800 [ 431.622885][ T28] worker_thread+0xa5e/0xfe0 [ 431.627604][ T28] kthread+0x2fa/0x390 [ 431.653253][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 431.662235][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188) [ 431.671570][ C1] nf_nat: Already setup manip DST for ct ffff888078c90780 (status bits 0x188) [ 431.680529][ C1] nf_nat: Already setup manip SRC for ct ffff888078c90780 (status bits 0x188)