last executing test programs: 4m7.974719204s ago: executing program 0 (id=188): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r4, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 4m5.914520217s ago: executing program 0 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 4m4.444320767s ago: executing program 0 (id=192): syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m2.98581487s ago: executing program 0 (id=196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2bc, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x100, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, 0x0) io_uring_enter(r2, 0x777e, 0xef92, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x4, 0x1, 0xe}}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/197, 0xc5, 0x8000) 4m1.507078888s ago: executing program 0 (id=201): syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TCXONC(r3, 0x540a, 0x2) io_submit(0x0, 0x0, 0x0) r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000100)=0x9) 3m58.224315507s ago: executing program 0 (id=207): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000010c0), 0x10) r2 = dup2(r1, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffff) sendmsg$SOCK_DESTROY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000200)=ANY=[@ANYBLOB="480022c291b5d331c7ed58ea81af69180000150000022cbd7000fcdbdf2510fa3100080089d3a352aee9c609254f3641b4a75f2a20c65c714eb5b75fa1f92d3690b100"/81], 0x48}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) syz_io_uring_setup(0x5574, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000)) 3m42.231942185s ago: executing program 32 (id=207): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000010c0), 0x10) r2 = dup2(r1, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffff) sendmsg$SOCK_DESTROY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000200)=ANY=[@ANYBLOB="480022c291b5d331c7ed58ea81af69180000150000022cbd7000fcdbdf2510fa3100080089d3a352aee9c609254f3641b4a75f2a20c65c714eb5b75fa1f92d3690b100"/81], 0x48}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) syz_io_uring_setup(0x5574, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000)) 2m42.811996614s ago: executing program 1 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000140)={0x8, 0x3ff, 0x1, 'queue1\x00', 0x6}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xf, 0x4, 0x8, 0x4000000b}, 0x50) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x406, r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x20000001}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x512, 0x1, 0x7fff}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r9, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @empty}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) 2m41.362794398s ago: executing program 1 (id=333): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000010c0), 0x10) r2 = dup2(r1, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r6, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffff) sendmsg$SOCK_DESTROY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000200)=ANY=[@ANYBLOB="480022c291b5d331c7ed58ea81af69180000150000022cbd7000fcdbdf2510fa3100080089d3a352aee9c609254f3641b4a75f2a20c65c714eb5b75fa1f92d3690b100"/81], 0x48}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) syz_io_uring_setup(0x5574, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) 2m36.897870289s ago: executing program 1 (id=339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000000)="360f7883b81e2626660fc7350ff4650666b95c030010dada32f4656df30f09e3650f01ef66b9720500000f32f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m36.554999277s ago: executing program 1 (id=343): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)="37cb0d24d3b0fb", &(0x7f00000001c0), 0x75, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r5}, 0xc) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r7, &(0x7f0000001a00)={0x2020}, 0x2020) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 2m35.055095502s ago: executing program 1 (id=345): r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r1}, 0x18) unshare(0x22020600) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "e55fc591543217b2", "54e903a9e07110c7cecdf4568b05e8f1", "f2b35c07", "e7f1ebd4ddde66dc"}, 0x28) sendto$inet6(r5, 0x0, 0x0, 0x8000, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0x654, 0x100, 0x2, 0x1, 0x6, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x3, 0xf23, 0x6, 0xb, 0x8, 0x3, 0x8, 0x4, 0x10000, 0xfffffff8]}) syz_emit_ethernet(0x288, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/344, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) 2m33.335791157s ago: executing program 1 (id=349): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000010c0), 0x10) r2 = dup2(r1, r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r6, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffff) sendmsg$SOCK_DESTROY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000200)=ANY=[@ANYBLOB="480022c291b5d331c7ed58ea81af69180000150000022cbd7000fcdbdf2510fa3100080089d3a352aee9c609254f3641b4a75f2a20c65c714eb5b75fa1f92d3690b100"/81], 0x48}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) syz_io_uring_setup(0x5574, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) 2m17.018738165s ago: executing program 33 (id=349): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000010c0), 0x10) r2 = dup2(r1, r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r6, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffff) sendmsg$SOCK_DESTROY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000200)=ANY=[@ANYBLOB="480022c291b5d331c7ed58ea81af69180000150000022cbd7000fcdbdf2510fa3100080089d3a352aee9c609254f3641b4a75f2a20c65c714eb5b75fa1f92d3690b100"/81], 0x48}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) syz_io_uring_setup(0x5574, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) 1m40.686216336s ago: executing program 6 (id=367): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) pwritev2(r2, &(0x7f0000001b00)=[{&(0x7f00000000c0)="05", 0x1}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0xa, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket(0x840000000002, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) getpid() socket$pptp(0x18, 0x1, 0x2) ioctl$sock_FIOSETOWN(r3, 0x8901, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x28000, 0x0) ioctl$TIOCEXCL(r4, 0x540c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) unshare(0x8040480) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1m23.846894159s ago: executing program 34 (id=367): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) pwritev2(r2, &(0x7f0000001b00)=[{&(0x7f00000000c0)="05", 0x1}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0xa, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket(0x840000000002, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) getpid() socket$pptp(0x18, 0x1, 0x2) ioctl$sock_FIOSETOWN(r3, 0x8901, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x28000, 0x0) ioctl$TIOCEXCL(r4, 0x540c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) unshare(0x8040480) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 31.817663562s ago: executing program 5 (id=544): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'batadv0\x00'}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x50}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="16", 0x1}], 0x1}, 0x80) 29.355466191s ago: executing program 5 (id=548): eventfd2(0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) eventfd(0x7) io_setup(0x4, &(0x7f0000000700)=0x0) io_submit(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) 26.212203835s ago: executing program 5 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x203) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r6, 0xda90) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 24.445949141s ago: executing program 5 (id=555): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d0007", 0x7) syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5, 0x7}, &(0x7f0000000140)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 23.393614958s ago: executing program 5 (id=559): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x80000001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket(0x2, 0x805, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0xc00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19.96871622s ago: executing program 5 (id=565): openat$loop_ctrl(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 19.786295297s ago: executing program 7 (id=566): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x6, {0x4, 0x5, 0x3}}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats}) 18.863708847s ago: executing program 7 (id=571): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x22f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) 15.728264553s ago: executing program 4 (id=573): socket$inet_udp(0x2, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0x2000000, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 12.792414994s ago: executing program 7 (id=574): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) 12.612418592s ago: executing program 3 (id=575): userfaultfd(0x801) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0100000000fff4001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100003040000ae85d95c000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 11.56748136s ago: executing program 4 (id=578): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x80000001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket(0x2, 0x805, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0xc00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.436002402s ago: executing program 2 (id=579): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.609512271s ago: executing program 4 (id=580): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x0) 9.527173296s ago: executing program 7 (id=581): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x22f, &(0x7f0000000b00)="$eJzsmb9rFEEUx7+zu/crhICNhY2FB0Y0e7t7KkFIEcFeiD+7HGYNMZtc2Fv1LiAm2NhYWgi2/gMWFqks7OxstdCAYGE67QIjM/eyO9ncHa4xWPg+kMl33s6bfTOz+z24A8Mw/y3bX35+fnZ5+to5AOOoo0Lxb3Y2xjLGf3px/+zzmSsvX3989W514tFWfr5KwfuPA3g7ayNBTfellNK8XtetcFQVdYpdh4UzSkxQgDLmYeEGhUII3CZ9z9DtGokodO+0o4W7S1HoqcZXTaCapnl/B8DOpsACgCrVJ4zrnd76ciuKwngDgBYUKcm9+8TpmD8Uo/ZP1zdrYYb6NTqvW0+fbKq+S3HP2D8fFnzSTQjMkZ5GBa7rZltirP+Eg/R87EHrzwlVxyGXTcLOR7q5MfPbw9KPTe2PlPEX6tl3MGLkJvyWKB0u/V8JgWX1SMSdXnXU4JsPotpRLbBED2LRdJGPqFNMI8d3tt4fzPpqROTjQTMLYCPu9H6s9YsatGOjX5kjE9q4cvakxYexLLJn3EVmLlPOwDGZPyn3Po3MPxw4qX80kpW1Rqe3PrW00loMF8PVIGhe9M573oWgoY2o3x7wvd3U/6ran8aM+UtDvLIsyui2kiT2u0AS+2k/6LfGiz33pv1d51ja/yxMnurPoQ5RL3vIB52gP0v/F7sSk/aQchiGYRiGYRiGYRiGYRiGYQpyEkJ/C0o/VMkcgLz0UEoZXNWjfwUAAP//bpBKqw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) 9.44021878s ago: executing program 2 (id=582): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x22f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) 9.200766106s ago: executing program 3 (id=583): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x162, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 7.441166714s ago: executing program 3 (id=584): r0 = epoll_create(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000001fa80)={0x80002000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$eJzs3b2PHGcdB/Dfvt6LiXNKEQULoYsTXkKIX4MxBEhSQEGTArmhQLYul8jCAWQb5EQWvugaCipqChASJUKUiII/IAUtHRUVlmwkkCsGzd3z+OY2u95zzrezd8/nI51nf/vM7D5z353bWc/MPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHe/872znYi4/LN0x0rEp6IX0Y1YquvViFhaXcnz9yPiudhqjmcjYrAQUS+/9c/TEa9GxEfHI+7dv71W331uj/349h///rsfHHvrb38YnP7vn272Xps0361bv/zPn+/sb50BAACgNFVVVZ30Mf9E+nzfbbtTAMBM5Pf/Ksn3H/n6V/986y/z1B+1Wq1Wq2dQN1Xj3WkWEbHRXKbeZ3A4HgAOmY140HYXaJH8i9aPiGNtdwKYa522O8CBuHf/9lon5dtpvh+sbrfnc0F25b/ReXh9x6TpNKPnmMzq9bUZvXhmQn+WZtSHeZLz747mf3m7fZjmO+j8Z2VS/sPtS5+Kk/PvjeY/4ujk3x2bf6ly/v3Hyr8nfwAAAAAAmGP5//9XWj7+u7D/VdmTRx3/XZ1RHwAAAAAAAADgSdvv+H8PGf8PAAAA5lb9Wb32m+M79036Lrb6/kudiKdG5gcKky6WWW67HwAAAAAAAAAAAABQkv72ObyXOhGDiHhqebmqqvqnabR+XPtd/rArff2hZG3/kQcAgG0fHR+5lr8TsRgRl9J3/Q2Wl5eranFpuVqulhby/uxwYbFaanyuzdP6voXhHnaI+8OqfrDFxnJN0z4vT2sffbz6uYZVbw8de0IG6bc5obmlsAEg2X43uucd6Yipqqcn7XzALrb/o8f2z160/ToFAAAADl5VVVUnfZ33iXTMv9t2pwCAmcjv/6PHBQ6kjjjYx5/3emHn9z4X/VGr1Wp1cXVTNd6dZhERG81l6n0Gw/EDwCGzEQ/a7gItkn/R+hHxXNudAOZap+0OcCDu3b+91kn5dprvB2l893wuyK78Nzpby+Xlx02nGT3HZFavr83oxTMT+vPsjPowT3L+3dH8L2+3D9N8B53/rEzKv17PlRb607acf280/xFHJ//u2PxLlfPvP1b+PfkDAAAAAMAcy///v+L4b15lAAAAAAAAADh07t2/vZave83H/z8zZj7Xfx5NOf+O/IuU8++O5P/Fkfl6jdt339zJ/9/3b6/9/ua/Pp2ne81/IT9kJ72yOukV0UnP1Omn6T5XcMTmoDesn2nQ6fb66ZyfavBOXI1rsR5nds3bTb+Pnfazu9rrng52tZ/b1d7/WPv5Xe2D9L0D1VJuPxVr8eO4Fm9vtddtC1PWf3FKezWlPeffs/0XKeffb/zU+S+n9s7ItHb3w+7HtvvmdNzzvHH1s784c/CrM9Vm9B6uW1O9fidb6M+ZiF8/iIif3li/furWlZs3r5+NNDk2bNx7LtLkCcv5D7Z+Fnb+/r+w3Z7/7je317sfDh87/3mxGf2J+b/QuF2v70sz7lsbcv7D9JPzfzu1j9/+D3P+k7f/l1voDwAAAAAAAAAAAAAAADxKVVVbl4i+EREX0vU/bV2bCQDMxvE0ze//9f7A9xvtVaJWq9Vqtfro1E3VeK83i4j4a3OZep/h5+MeDACYZ/+LiH+03QlaI/+C5e/7q6cvtt0ZYKZuvP/BD69cu7Z+/UbbPQEAAAAAAAAAPqk8/udqY/znFyNiZWS+XeO/vhmr+x3/s59vPBxg9AkP9D3BZnfY6zaGG38+tsbnPjVp/O+T8ejxv/tTnm8wpX04pX1hSvvi2Ht30hp7oUdDzv/5xnjndf4nRoZfL2H819Ex70uQ8z/ZeD3X+X9hZL5m/tVv5y7/jb3OuBndXfmfvvneT07feP+DV66+d+Xd9XfXf3T+7Nkz5y9cuHjx4ul3rl5bP7P978H0eg7k/PPY184DLUvOP2cu/7Lk/D+XavmXJef/+VTLvyw5/7y/J/+y5PzzZx/5lyXn/1Kq5V+WnP+XUi3/suT8X061/MuS8/9yquVflpz/K6mWf1ly/qdSLf+y5PxPp3oP+ft6+CMk55+PcNn+y5Lzz2c2yL8sOf9zqZZ/WXL+51Mt/7Lk/F9NtfzLkvP/SqrlX5ac/4VUy78sOf+vplr+Zcn5X0y1/MuS8/9aquVflpz/11Mt/7Lk/F9LtfzLkvP/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/3qq5V+Wne//d8MNN9zIN9r+ywQAAAAAAAAAAAAAjJrF6cRtryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvbuLkeus7wd+Zl/stUOIgRCc/A1sEhNCsmTXduIX/k0xAQINUAokFPqC7XrXZsFveO0SKJJNDSUSRkUVVdMLWkCojVpVWBUXtKI0F1Vfrkp7QW8qqkpIjaqAAhJSXyBbzZzneTwzOztn7R2vZ8/z+Uj2b3fmzJwzZ87M7nft7x4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa3f7Guc80iqJo/mn9taUoXtD8eNPkltZlr7veWwgAAACs1k9bfz93U7pg/wpu1LbM373iH7++uLi4WLxv9HfHv7C4mK6YLIrxjUXRui669O/vb7QvE1woJhojbZ+PVKx+tOL6sYrrxyuu31Bx/caK6ycqrl+yA5bYVP48pnVn21sfbil3aXFzMd66bnuPW11obBwZiT/LaWm0brM4fqSYL44Vc8VMx/Llso3W8t+8vbmutxZxXSNt69rWPEJ++InDcRsaYR9v71jX5fuMvv+GYvJHP/zE4T868+ytvWblbui4v3I7776juZ2fCpeU29ooNqZ9ErdzpG07t/V4TkY7trPRul3z4+7tfG6F2zl6eTPXVPdzPlGMtD7+dms/jbX/WC/tp23hsv+6syiK85c3u3uZJesqRorNHZeMXH5+JsojsnkfzUPpxcXYFR2nt6/gOG3O2e2dx2n3ayI+/7eH240tsw3tT9P3P7lhyfN+pcdp1HzUy71Wuo/BQb9WhuUYjMfFt1sP+omex+D28Pg/cdfyx2DPY6fHMZged9sxeEfVMTiyYbS1zelJaLRuc/kY3NGx/GhrTY3WfOau/sfg9Jnjp6YXPvbx184fP3R07ujciV07dszs2r17796900fmj83NlH9f5d4efpuLkfQauCPsu/gaeHXXsu2H6uKXB/c6nOjzOtzSteygX4dj3Q+usTYvyKXHdPnaeLS50ycujhTLvMZaz889q38dpsfd9joca3sd9vya0uN1OLaC12FzmVP3rOx7lrG2P7224Vp9LdjSdgx2fz/SfQwO+vuRYTkGJ8Jx8a/3LP+1YFvY3iemrvT7kdElx2B6uOG9p3lJ+n5/Ym9r9Doub2teccOG4uzC3On7Hj905szpHUUYa+IlbcdK9/G6ue0xFUuO15ErPl73z7/iidt6XL4l7KuJ1zb/mlj2uWouc/99/Z+r1le33vuz49KdRRgDttb7s9dX8+b+TFmyz/5sLvOp6dV/L55yadv77/gy778x9z9fri/d1YXR8bHy9Tua9s54x/tx51M11nrvarTW/dz0yt6Px8OftX4/vrnP+/HWrmUH/X483v3g4vtxo+qnHavT/XxOhOPk2Ez/9+PmMlt3XukxOdb3/fjOMBth/78mJIWUi9qOneWO27SusbHx8LjG4ho6j9NdHcuPh2zWXNdTO6/uOL37zvK+RtOju2ytjtPJrmUHfZym96vljtNG1U/frk738zkRjoubd/U/TpvLPH3/6t87N8UP2947N1Qdg+OjG5rbPJ4OwvL9fnFTPAbvKw4XJ4tjxWzr2g2t46nRWtfUAys7BjeEP2v9Xrm1zzF4d9eygz4G09ex5Y69xtjSBz8A3c/nRDgunnyg/zHYXOZNewb7vevd4ZK0TNv3rt0/X1vuZ163de2ma/kzr+Z2/s2e/j+bbS5zbO+V5sz+++necMkNPfZT9+t3udfUbLE2+2lr2M5n9y6/n5rb01zmC/tWeDztL4ri3Eceav28N/z7yp+f/c7XO/7dpde/6Zz7yEM/uPHI317J9gOw/j1fjs3l17q2f5layb//AwAAAOtCzP0jYSbyPwAAANRGzP3xf4Un8j8AAADURsz9Y2EmmeT/rW96dv75c0Vq5i8G8fq0Gx4pl4sd15nw+eTiZc3LH/rq3I//8tzK1j1SFMVPHvmNnstvfSRuV2kybOelN3devvSG51a0/oOPXV6uvb/+pXD/8fGs9DDoVcGdKYrimzd9rrWeyfdfbM2nHznYmu8+/8SF5jLP7Ss/j7d/5iXl8l8M5d/9Rw513P6ZsB++F+bM23rvj3i7r118zbY97728vni7xh0vbD3sJz9Q3m/8PTmfv1AuH/fzctv/V5996mvN5R9/Ve/tPzfSe/ufCvf71TD/++Xl8u3PQfPzeLtPh+2P64u3u+8r3+q5/Zc+Uy5/6uFyuYNhxvXfHT7f/vCz8+376/HGoY7HVbylXC6uf+Y7v926Pt5fvP/u7Z84cLFjf3QfH0//c3k/013Lx8vjeqK/6Fp/837aj8+4/qd+62DHfq5a/6V3P/Py5v12r//eruVGu27f/Rub/uDTn+u5vrg9+//sVMfj2f+u8DoO63/yA+F4DNf/z6XPdaw3OviuzvefuPyXtpzreDzRW39Urv/S64+25n9M/vj3b3jBjS88/8rmviuKb7+nvL+q9R/9w5Md2//lW+5pPR/x+tjR717/cuL6T3906sTJhbPzs217tfW7c95ebs/GiU2bm9t7U3hv7f78wMkzH5w7PTkzOVMUk/X9FXpX7Sth/qAc56/09vc8Fp7P237vm5vv+qfPxsv/5dHy8otvK79uvTos9/lw+Zby+VtsrHL9T95+S+v13Xi6/Lyjxz4A27b/594VLRgef/f3BfF4P/XSD7b2Q/O61teN+Lpe5fZ/d7a8n2+E/boYfjPzHbdcXl/78vF3I1x8T/l6X/X+C29z8Xn94/B8v+N75f3H7YqP97vh+5hvbe18v4vHxzfOjXTff+u3eJwP7yfF+fL6uFTc3xefu6Xn5sXfQ1Kcv7X1+e+k+7n1ih7mchY+tjB9bP7E2cenz8wtnJle+NjHDxw/efbEmQOt3+V54ENVt7/8/rS59f40O7f7/mJmU1EUJ4uZNXjDujbb3/xoZdt/6rHDs3tm7pqdO3Lo7JEzj52aO3308MLC4bnZhbsOHTky99Gq28/PPrhj575de3ZOHZ2ffXDvvn279k3NnzjZ3Ixyoyrsnvnw1InTB1o3WXjw/n07Hnjg/pmp4ydn5x7cMzMzdbbq9q2vTVPNW//61Om5Y4fOzB+fm1qY//jcgzv27d69s/K3AR4/dWRhcvr02RPTZxfmTk+Xj2XyTOvi5te+qttTTwv/Vn4/261R/iK+4p337k6/n7Xpq59c9q7KRbp+geiz4XfR/MOLTu1dyecx94+HmWSS/wEAACAHMfdvCDOR/wEAAKA2Yu7fGGYi/wMAAEBtxNw/EWaSSf7X/9f/X1n/v7xe/z+v/v+pj5S90vXe/4/9ef3/PFzn/v+q16//r/9fv/7/yvvz63379f/1/1lq2Pr/MfdvKoos8z8AAADkIOb+zWEm8j8AAADURsz9N4SZyP8AAABQGzH3vyDMJJP8r/+/ov7/zqrCVf37/87/r/9frM/+f3xy9P+zccX9+/c+2vGp/n+g/6//r/+v/6//z6qNL3vN9er/x9x/Y5hJJvkfAAAAchBz/wvDTOR/AAAAqI2Y+28KM5H/AQAAoDZi7t8SZpJJ/tf/d/5//X/9/3XU/+8o0q7J+f/bNkb/f32o3/n/f6r/vy76/xP6/+ux/z8+2O0f7v5/5ebr/3NNDNv5/2Puf1GYSSb5HwAAAHIQc/+Lw0zkfwAAAKiNmPtfEmYi/wMAAEBtxNx/c5hJJvlf/1//f4X9/y/p/+v/D0H/v+PxrEn/v+/5/8uP9P+HS/36/87/X6yL/r/z/xfrsf8/4O0f7v7/oM//P/7m7tvr/9PLsPX/Y+5/aZhJJvkfAAAAchBz/y1hJvI/AAAA1EbM/S8LM5H/AQAAoDZi7t8aZpJJ/tf/1/93/n/9f/3/3uuv7v+X9P+Hi/5/f/r/FfT/9f/1/1fW/+/xza/+P70MW/8/5v5bw0wyyf8AAACQg5j7bwszkf8BAACgNmLu/39hJvI/AAAA1EbM/dvCTDLJ//r/+v/6/3n1/+/doP+v/19v+v/96f9X0P/X/9f/X+H5/5e6kv7/xqo7ozaGrf8fc//Lw0wyyf8AAACQg5j7XxFmIv8DAABAbcTc/8owE/kfAAAAaiPm/skwk0zyv/5/vfr/f/rXT76y0P/X/69Yf037//Ew0P/PnP5/f/r/FfT/9f/1/9ek/08+hq3/H3P/7WEmmeR/AAAAyEHM/XeEmcj/AAAAUBsx998ZZiL/AwAAQG3E3L89zCST/K//X6/+f6T/v4b9/y8+nO5H/7/k/P+96f+vDf3/HtpepPr/FfT/9f+z7//H7371/xmMYev/x9z/qjCTTPI/AAAA5CDm/rvCTOR/AAAAqI2Y+18dZiL/AwAAQG3E3H93mEkm+V//X/9f/9/5//X/e69f/3990v/vT/+/gv6//n/2/X/n/2ewhq3/H3P/a8JMMsn/AAAAkIOY++8JM5H/AQAAoDbi/98s/9+r/A8AAAB1FHP/VJhJJvlf/1//P6f+f0P/X/9f/7/29P/70/+voP+v/6//r//PQA1b/z/m/teGmWSS/wEAACAHMfffF2Yi/wMAAEBtxNw/HWYi/wMAAEBtxNw/E2aSSf7X/9f/z6n/7/z/+v/rof/f0P9fFf3//vT/K+j/6//Xrf9fFPr/XFfD1v+PuX9HmEkm+R8AAAByEHP/zjAT+R8AAABqI+b+XWEm8j8AAADURsz994eZZJL/9f/1//X/9f/1/3uv3/n/1yf9//70/yvo/+v/163/7/z/XGfD1v+Puf+BMJNM8j8AAADkIOb+3WEm8j8AAADURsz9e8JM5H8AAACojZj794aZZJL/9f9r0v//zb/vWLf+v/5/v/UPpv+/Sf8/TP3/4VLT/n/3y+Kq6f9X0P/X/9f/1/9noIat/x9z/74wk0zyPwAAAOQg5v7XhZl05P8Lf7LGmwUAAAAMUMz9/z/MxL//AwAAQG3E3P8zYSaZ5H/9/5r0/7vo/+v/91u/8//r/9dZTfv/A6P/XyHX/n94Q7ve/fnVut7br/+v/89S177/Hz9aWf8/5v4Hw0wyyf8AAACQg5j7fzbMRP4HAACA2oi5//VhJvI/AAAA1EbM/fvDTDLJ//r/+v/6//r/16b///qi2zD2/5sHj/5/vej/96f/XyHX/n9wvfvz63379f/1/1lq2M7/H3P/G8JMMsn/AAAAkIOY+x8KM5H/AQAAoDZi7n9jmIn8DwAAALURc/+bwkwyyf/6//r/+v/6/87/33v9+v/rk/5/f/r/FfT/9f/1//X/Gahh6//H3P/mMJNM8j8AAADkIOb+h8NM5H8AAACojZj73xJmIv8DAABAbcTc/9Ywk0zyv/6//r/+v/6//n/v9ev/r0/6//3p/1fQ/9f/797+1pu9/r/+P1dr2Pr/Mff/XJhJJvkfAAAAchBz/yNhJvI/AAAA1EbM/W8LM5H/AQAAoDZi7n97mEkm+V//X/9f/1//X/+/9/r1/9cn/f/+9P8r6P/r/zv/v/4/AzVs/f+Y+98RZpJJ/gcAAIAcxNz/82Em8j8AAADURsz97wwzkf8BAACgNmLu/4Uwk0zyv/6//r/+v/5/Fv3/5o30/7Og/9+f/n+FHv3/jfr/A+vPbxrIVl6/7a+i/6//z1LD1v+Puf9dYSaZ5H8AAADIQcz97w4zkf8BAACgNmLuf0+YifwPAAAAtRFz/6NhJpnkf/3/LPv/6SHr/5f0/zPo/zv/fzb0//vT/6/g/P/O/6//r//PQA1b/z/m/sfCTDLJ/wAAAJCDmPvfG2Yi/wMAAEBtxNz/i2Em8j8AAADURsz97wszyST/6/9n2f93/v816/+PdRwfOfX/J9qez3Rc6v/r/68B/f/+9P8r6P/r/w9z/z8czZuWub3+P8No2Pr/Mfe/P8wkk/wPAAAAOYi5/5fCTOR/AAAAqI2Y+385zET+BwAAgNqIuf9Xwkwyyf/6//r/+v/O/+/8/73Xr/+/Pun/96f/X0H/X/9/mPv/FfT/GUbD1v+Puf9Xw0wyyf8AAACQg5j7PxBmIv8DAABAbcTcfyDMRP4HAACA2oi5/2CYSSb5X/+/u/8fz6iq/6//r/+v/6//vx4Nrv//shuLQv9f/1//X/9f/1//n9UYtv5/zP2Hwkwyyf8AAACQg5j7fy3MRP4HAACA2oi5/3CYifwPAAAAtRFz/2yYSSb5X///Wp3/P16ST///J/r/+v+B/n9v+v9rw/n/+9P/r6D/r/+v/6//z0ANW/8/5v65MJNM8j8AAADUWPpxcMz9R8JM5H8AAACojZj7j4aZyP8AAABQGzH3fzDMJJP8r/9/rfr/zv/fa/v1/2P/f6xjef3/kv6//v8g6P/3p/9fQf9f/1//X/+fgRq2/n/M/fNhJpnkfwAAAMhBzP0fCjOR/wEAAKA2Yu7/cJiJ/A8AAAC1EXP/sTCTTPJ/ffr//1tus/5/x+30/6v7/42iOO/8//r/vdav/78+6f/3p/9fQf9f/1//X/+fgRq2/n/M/cfDTDLJ/wAAAJCDmPtPhJnI/wAAwP+xdx9Nct1VH8f78WNb0gpeAlXsWLGEFW+BLTuq2LChSCYHY3IwweRkggkm5xxNzjlnk3M0yYaqoTw650gz07otadoz9/7P57PgoEHjblmD4Oepb11gGLn77xu32P8AAAAwjNz994tbmuz/cfr//ET9/0r/v4Dn/+/9+fr/0/T/+v9tONDfX3phn3/O/v/Od7ninvp//b/+f5L+X/+v/2e/ufX/ufvvH7c02f8AAADQQe7+B8Qt9j8AAAAMI3f/A+MW+x8AAACGkbv/irilyf7X/+v/9f/6/z39/w36//Ps/++YH9f/z4vn/0/T/2+wnf7//1f6f/2//l//z6659f+5+x8UtzTZ/wAAANBB7v4Hxy32PwAAAAwjd/9D4hb7HwAAAIaRu/+hcUuT/a//1//r//X/nv+//vU9/3+Z9P/T9P8beP6//l//r/9nq+bW/+fuf1jc0mT/AwAAQAe5+x8et9j/AAAAMIzc/Y+IW+x/AAAAGEbu/kfGLU32v/5f/6//1//r/9e/vv5/ma5bnfkzQf9/kP5/gw39/2ql/59y3v38+l/ect7/Oej/9f8cNLf+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuvzJusf8BAABgGLn7HxO3NNn/+n/9v/5f/6//X//6+v9l8vz/aYfv/+90+/vcq2//7/n/0zz/X/+v/2e/ufX/ufuvilua7H8AAADoIHf/Y+MW+x8AAACGkbv/cXGL/Q8AAADDyN3/+Lilyf7X/7fp/3drF/2//l//r/8fnf5/muf/b7D7x9yp+qH+X/+v/9f/czhz6/9z9z8hbmmy/wEAAKCD3P1PjFvsfwAAABhG7v4nxS32PwAAAAwjd/+T45Ym+1//36b/9/x//b/+X//fgv5/mv5/g1Ge/3+RXzXH3c8f1nG/f/2//p+D5tb/5+5/StzSZP8DAABAB7n7nxq32P8AAAAwjNz9T4tb7H8AAAAYRu7+q+OWJvtf/7+l/v+ygx/T/2+z/89X0P/r//X/+v9p+v9p+v8NRun/L9Jx9/NLf//6f/0/B82t/8/d//S4pcn+BwAAgA5y9z8jbrH/AQAAYBi5+58Zt9j/AAAAMIzc/c+KW5rsf/2/5/9fTP9/b8//1//r//X/M6X/n6b/30D/r//X/+v/2aq59f+5+6+JW5rsfwAAAOggd/+z4xb7HwAAAIaRu/85cYv9DwAAAMPI3f/cuKXJ/tf/6/+X8fx//b/+X/+v/z8/+v9p+v8N9P/6f/2//p+tmlH/f9ZnnVw9L25psv8BAACgg9z9z49b7H8AAAAYRu7+F8Qt9j8AAAAMI3f/C+OWJvtf/z+b/n835xur/z+1Wq30/6um/f+ps34/6+tS/6//PwL6/2n6/w30//p//b/+n62aUf+/++Pc/S+KW5rsfwAAAOggd/+L4xb7HwAAAIaRu/8lcYv9DwAAAMPI3f/SuGWo/X/inP+J/n82/f+usfp/z//f//Ux5/7/1p/k+f/6/xHo/6fp/zfQ/+v/9f/6f7Zqbv1/7v5rb/0z9Oozf53LL7v4XyMAAAAwL9fu/uvJ1cvilqG+/w8AAAC95e5/edxi/wMAAMBCXXPgI7n7XxG3NNn/+v/t9v+Xn/Ux/b/+f//Xx5z7/20//1//f5D+/2jo/6fp/zfQ/+v/9f/6f7Zqbv1/7v5Xxi1N9j8AAAB0kLv/urjF/gcAAIBh5O5/Vdxi/wMAAMAwcve/Om5psv/1/57/r//X/+v/17++/n+Z9P/T9P8b6P/1/8fb/58482/1/4zhAvr/nZ2dK2/z/j93/2vilib7HwAAADrI3f/auGXP/r9+/7ejAAAAgAXJ3X993OL7/wAAADCM3P2vi1ua7H/9f9P+P7/U9f+79P/6/3Wvr/9fJv3/NP3/Bvp//b/n/+v/2aq5Pf8/d//r45Ym+x8AAAA6yN3/hrjF/gcAAIBh5O5/Y9xi/wMAAMAwcve/KW5psv/1/037f8//1//r/4+6/79lpf8/Eovo/0+d+/Xn3v9fpf/X/09o1//f/a57fqj/1/9z0Nz6/9z9b45bmux/AAAA6CB3/1viFvsfAAAAhpG7/61xi/0PAAAAw8jd/7a46dIm+1//r//X/+v/9f/rX/+In/9/+Wq10v9vwSL6/wlz7/89/1//P6Vd/7+P/l//z0Fz6/9z9789bmmy/wEAAKCD3P3viFvsfwAAABhG7v53xi32PwAAAAwjd/+74pYm+1//r//X/194/3/zzs6O/n9B/f9Vi+j/Pf9/S/T/0/T/G+j/9f/6f/0/R+K4+v/c/e+OW5rsfwAAAOggd/974hb7HwAAAIaRu/+9cYv9DwAAAMPI3f++uKXJ/tf/6//1/57/f2J2/f/JPX+9Js//1/9vif5/2hz7/7P/DNH/6/+X/P4H6f+v0f+zTXN7/n/u/vfHLU32PwAAAHSQu/8Dcesf3dr/AAAAMIzc/R+MW+x/AAAAGEbu/g/FLU32v/5f/6//1/8P//x//X8r+v9pc+z/z6b/1/8v+f0P0v97/j9bNbf+P3f/h+OWJvsfAAAAOsjd/5G4xf4HAACAYeTu/2jcYv8DAADAMHL33xC3NNn/+n/9v/5f/6//P/17qP8fg/5/2tH0/6f0//r/6uf/L/5boP/X/2/6fMY0t/4/d//H4pYm+x8AAAA6yN3/8bjF/gcAAIBh5O7/RNxi/wMAAMAiXbrmY7n7Pxm3NNn/+n/9v/5f/6//X//6+v9l0v9P8/z/DfT/F9jP32HPj5b2/P/9//ul/9f/s31z6/9z938qbmmy/wEAAKCD3P2fjlvsfwAAABhG7v7PxC32PwAAAAwjd/9n45Ym+1//r//X/+v/9f/rX1//v0z6/2n6/w30/8f6/Pylv3/9v/6fg+bW/+fu/1zc0mT/AwAAQAe5+z8ft9j/AAAAMIzc/V+IW+x/AAAAGMbu7s+4rOH+1//r//X/+n/9//rX1/8vk/5/mv5/A/2//l//r/9nq+bW/39x97NOrr4UtzTZ/wAAANBB7v4vxy32PwAAAAwjd/9X4hb7HwAAAIaRu/+rcUuT/a//1/8vo//f2dm5Uv+v/9/76znT/9+o/6fo/6fp/zfQ/+v/9f/6f7Zqbv1/7v6vxS1N9j8AAAB0kLv/63GL/Q8AAADDyN3/jbjF/gcAAIBh5O7/ZtzSZP/r/2fQ/5/U/3v+v/5/5fn/+v8t0f9P0/9vMGL/f/L8f/nH3c8f1nG/f/2//p+D5tb/5+7/VtzSZP8DAABAB7n7vx232P8AAAAwjNz934lb7H8AAAAYRu7+78YtTfa//v/o+v9b/951ef7/qdX696//1//r//X/tzX9/zT9/wYj9v8X4Lj7+aW/f/2//p+D5tb/5+7/XtzSZP8DAABAB7n7vx+32P8AAAAwjNz9P4hb7H8AAAAYRu7+H8YtTfa//n8Gz/8fsP/3/P/1Xx/6/1n3/5fo/8eg/5+m/99A/6//1/9vqf/Pr2b9f3dz6/9z9/8obmmy/wEAAKCD3P0/jlvsfwAAABhG7v6fxC32PwAAAAwjd/+NcctZ+39d2z0K/b/+X/+v/9f/r399/f8y6f+nnW//f2J1uP4/6f/1//r/rv2/5/9z2tz6/9z9P41bfP8fAAAAFueyc3w8d//P4hb7HwAAAIaRu//ncYv9DwAAAMPI3f+LuOWmS47rLR0p/b/+X/+v/9f/r399/f8y6f+nef7/Bovv/3d2ds7z/4ets6V+/m76/zH6/9VK/8/hza3/z93/y7jF9/8BAABgGLn7fxW32P8AAAAwjNz9v45b7H8AAAAYRu7+38QtTfa//l//f8j+fzfN1P+fpv8/Tf+/nv7/aOj/p+n/N1h8/384x93PL/39j9b/e/4/2zC3/j93/2/jlib7HwAAADrI3f+7uMX+BwAAgGHk7v993GL/AwAAwDBy9/8hbmmy/4+t/4+/1fr/xff/nv+v/9f/6/9nRf8/Tf+/gf5f/6//1/+zVXPr/3P3/zFuabL/AQAAoIPc/X+KW+x/AAAAGEbu/j/HLfY/AAAADCN3/1/ilib73/P/9f/6f/2//n/96+v/l0n/P03/v179Run/9f/6f/0/WzW3/j93/1/jlib7HwAAADrI3f+3uMX+BwAAgGHk7r8pbrH/AQAAYBi5+/8etzTZ//p//b/+X/+v/1//+vr/ZdL/TzvO/v8et9v8sp7/f+z9f74F/b/+X//PVsyt/8/d/4+4pcn+BwAAgA5y9/8zbrH/AQAAYBi5+/8Vt9j/AAAAMIzc/f+OW5rs/w39/4n6ifr/Sfr/ve9f/7/+60P/r//X/9/29P/TPP9/A/2/5//r//X/bNXc+v/c/TfHLU32PwAAAHSQu/+WuMX+BwAAgGHk7v9P3GL/AwAAwDBy9/83bmmy/z3/X/+v/9f/6//Xv77+f5n0/9P0/xvo//X/+n/9P1s1t/4/d///AgAA//+XbGLE") open(&(0x7f00000001c0)='./file1\x00', 0x16167e, 0x70) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.499299188s ago: executing program 3 (id=585): r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x1400}, 0x50) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1fc, 0x7d, 0x0, 0x8000, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x7, 0x8000, 0x4, 0x2, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 5.498125198s ago: executing program 2 (id=586): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d0007", 0x7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5, 0x7}, &(0x7f0000000140)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 3.618659243s ago: executing program 35 (id=565): openat$loop_ctrl(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 3.078726844s ago: executing program 3 (id=588): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.077799124s ago: executing program 2 (id=597): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d0007", 0x7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5, 0x7}, &(0x7f0000000140)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 2.953896751s ago: executing program 4 (id=589): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) 1.336393125s ago: executing program 4 (id=590): pipe(&(0x7f0000000600)) syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, &(0x7f0000000140)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 1.133429348s ago: executing program 2 (id=591): socket$inet_udp(0x2, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0x2000000, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 924.388139ms ago: executing program 3 (id=592): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) 922.679029ms ago: executing program 7 (id=593): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 836.030523ms ago: executing program 7 (id=594): getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x7, &(0x7f0000000000)={0x14, "1401003d876ff44271f19ca6e4482707dab729631eae010000004d70b41d4008e3"}}) 13.793622ms ago: executing program 4 (id=595): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x162, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 0s ago: executing program 2 (id=605): pipe(&(0x7f0000000600)) syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, &(0x7f0000000140)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 52.443242][ T4170] cgroup: Unknown subsys name 'net' [ 52.575127][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.062773][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.898000][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 55.942987][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 55.988658][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 56.035045][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 56.084453][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 56.111412][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.118498][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.127066][ T4186] device bridge_slave_0 entered promiscuous mode [ 56.141440][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.148513][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.156994][ T4186] device bridge_slave_1 entered promiscuous mode [ 56.204634][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.211970][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.219955][ T4191] device bridge_slave_0 entered promiscuous mode [ 56.237282][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.255206][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.262420][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.270367][ T4191] device bridge_slave_1 entered promiscuous mode [ 56.287667][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.297043][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.304368][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.312920][ T4195] device bridge_slave_0 entered promiscuous mode [ 56.340956][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.348040][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.356726][ T4195] device bridge_slave_1 entered promiscuous mode [ 56.398013][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.407328][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.414618][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.423102][ T4192] device bridge_slave_0 entered promiscuous mode [ 56.437041][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.444819][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.452697][ T4192] device bridge_slave_1 entered promiscuous mode [ 56.462530][ T4186] team0: Port device team_slave_0 added [ 56.481546][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.498334][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.505556][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.514677][ T4185] device bridge_slave_0 entered promiscuous mode [ 56.523151][ T4186] team0: Port device team_slave_1 added [ 56.528960][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.536085][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.544269][ T4185] device bridge_slave_1 entered promiscuous mode [ 56.558138][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.575556][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.599516][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.611462][ T4191] team0: Port device team_slave_0 added [ 56.641425][ T4195] team0: Port device team_slave_0 added [ 56.648917][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.659186][ T4191] team0: Port device team_slave_1 added [ 56.665687][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.673387][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.699734][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.714013][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.724575][ T4195] team0: Port device team_slave_1 added [ 56.742828][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.750034][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.776295][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.788976][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.843171][ T4185] team0: Port device team_slave_0 added [ 56.850003][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.856964][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.883228][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.896512][ T4192] team0: Port device team_slave_0 added [ 56.904763][ T4192] team0: Port device team_slave_1 added [ 56.917439][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.924834][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.950943][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.963470][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.970497][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.997174][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.017374][ T4185] team0: Port device team_slave_1 added [ 57.024878][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.031970][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.058112][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.114439][ T4186] device hsr_slave_0 entered promiscuous mode [ 57.121409][ T4186] device hsr_slave_1 entered promiscuous mode [ 57.128864][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.136226][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.162576][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.195366][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.202917][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.229059][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.246238][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.253334][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.279526][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.299069][ T4195] device hsr_slave_0 entered promiscuous mode [ 57.306520][ T4195] device hsr_slave_1 entered promiscuous mode [ 57.313550][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.321421][ T4195] Cannot create hsr debugfs directory [ 57.338486][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.345726][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.372087][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.423886][ T4191] device hsr_slave_0 entered promiscuous mode [ 57.430922][ T4191] device hsr_slave_1 entered promiscuous mode [ 57.437719][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.445405][ T4191] Cannot create hsr debugfs directory [ 57.458394][ T4192] device hsr_slave_0 entered promiscuous mode [ 57.465543][ T4192] device hsr_slave_1 entered promiscuous mode [ 57.472696][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.480770][ T4192] Cannot create hsr debugfs directory [ 57.570567][ T4185] device hsr_slave_0 entered promiscuous mode [ 57.577274][ T4185] device hsr_slave_1 entered promiscuous mode [ 57.586884][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.594542][ T4185] Cannot create hsr debugfs directory [ 57.640683][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 57.647303][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 57.653813][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 57.660715][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 57.666814][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 57.853721][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.865511][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.875575][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.894270][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.924785][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.948427][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.960576][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.969137][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.031141][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.053706][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.066486][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.076330][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.141897][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.158721][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.176062][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.187832][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.218094][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.243594][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.251821][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.262166][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.297759][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.326865][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.336756][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.346912][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.354209][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.372517][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.391128][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.399243][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.407928][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.416431][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.423657][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.431941][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.451217][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.464698][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.477180][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.486124][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.494222][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.505342][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.514002][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.525683][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.541454][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.548661][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.559374][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.568171][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.577182][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.587953][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.609789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.618481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.627568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.636426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.647047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.655588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.666092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.674941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.683603][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.690698][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.698739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.711158][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.722538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.732197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.741454][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.748515][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.758605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.770673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.779273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.788322][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.795467][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.835047][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.844684][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.855635][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.864763][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.871899][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.880449][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.889259][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.904923][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.915363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.925176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.958315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.968718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.984587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.995581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.005120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.014256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.049208][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.060254][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.081236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.089220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.097438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.105727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.116078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.123844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.132641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.141277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.151631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.160220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.168463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.177458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.186737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.195082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.207276][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.220151][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.233369][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.247576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.257315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.274241][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.335141][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.350679][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.359241][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.366374][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.381323][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.448602][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.457194][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.475208][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.488539][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.499554][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.507939][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.518274][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.527303][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.534381][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.543434][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.552918][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.561858][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.570704][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.579042][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.590453][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.598154][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.608652][ T4186] device veth0_vlan entered promiscuous mode [ 59.634525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.646792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.655961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.665852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.674296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.681807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.689204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.698223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.710311][ T1107] Bluetooth: hci2: command 0x041b tx timeout [ 59.715437][ T4186] device veth1_vlan entered promiscuous mode [ 59.716404][ T1107] Bluetooth: hci4: command 0x041b tx timeout [ 59.723370][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 59.735173][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 59.741484][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 59.745875][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.761195][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.769046][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.796792][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.813559][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.827921][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.836544][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.844229][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.855037][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.864021][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.873727][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.880847][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.889268][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.906539][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.954081][ T4186] device veth0_macvtap entered promiscuous mode [ 59.964464][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.975310][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.984618][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.994020][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.001230][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.014005][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.029105][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.045317][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.054083][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.064490][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.090281][ T4186] device veth1_macvtap entered promiscuous mode [ 60.126978][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.136436][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.162323][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.172040][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.186762][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.198253][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.208367][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.218064][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.227082][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.235880][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.261992][ T4191] device veth0_vlan entered promiscuous mode [ 60.282614][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.295793][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.304461][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.313244][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.322850][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.330945][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.338352][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.346964][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.365486][ T4191] device veth1_vlan entered promiscuous mode [ 60.378305][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.394082][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.402947][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.412350][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.421653][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.431318][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.466827][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.488508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.504392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.517192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.535610][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.545252][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.566336][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.586183][ T4185] device veth0_vlan entered promiscuous mode [ 60.602955][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.611657][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.620559][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.629331][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.638946][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.648034][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.657557][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.665788][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.678916][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.688380][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.698095][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.706841][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.717844][ T4191] device veth0_macvtap entered promiscuous mode [ 60.728738][ T4191] device veth1_macvtap entered promiscuous mode [ 60.744866][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.753913][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.762731][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.771042][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.785606][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.793901][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.833351][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.860078][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.873498][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.883406][ T4185] device veth1_vlan entered promiscuous mode [ 60.892425][ T4195] device veth0_vlan entered promiscuous mode [ 60.906840][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.915303][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.924455][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.935570][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.947053][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.958965][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.988877][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.011635][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.026847][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.035645][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.045071][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.053491][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.064160][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.075095][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.085039][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.094739][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.122241][ T4195] device veth1_vlan entered promiscuous mode [ 61.160187][ T4185] device veth0_macvtap entered promiscuous mode [ 61.167939][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.176769][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.186936][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.195815][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.205207][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.242520][ T4185] device veth1_macvtap entered promiscuous mode [ 61.257861][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.267055][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.277537][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.286859][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.295300][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.305486][ T4192] device veth0_vlan entered promiscuous mode [ 61.312345][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.341450][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.352889][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.365590][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.376061][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.386835][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.399058][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.411111][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.421971][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.432090][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.442832][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.454417][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.462263][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.472515][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.481259][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.490257][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.498696][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.507735][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.516885][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.537025][ T4192] device veth1_vlan entered promiscuous mode [ 61.547678][ T4195] device veth0_macvtap entered promiscuous mode [ 61.566653][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.571338][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.583555][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.591420][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.601409][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.610172][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.639122][ T4195] device veth1_macvtap entered promiscuous mode [ 61.652451][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.669315][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.677686][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.687153][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.695641][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.737634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.747422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.758403][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.769888][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.780315][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.791541][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.801954][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 61.808080][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 61.808188][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.815097][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 61.831001][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 61.831832][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.837047][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 61.854444][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.871830][ T4192] device veth0_macvtap entered promiscuous mode [ 61.881136][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.889260][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.896179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.906178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.915454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.924328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.935406][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.946164][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.957336][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.967816][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.977674][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.988286][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.999173][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.013849][ T4192] device veth1_macvtap entered promiscuous mode [ 62.053791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.068954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.080369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.092166][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.102181][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.114235][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.124007][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.147371][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.161020][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.243008][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.252470][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.266272][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.277224][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.287971][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.298146][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.308652][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.319074][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.329790][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.370098][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.389543][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.397943][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.426406][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.445395][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.470403][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.481152][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.494647][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.505525][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.521173][ T3520] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.529474][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.539378][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.551256][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.562320][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.573002][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.585320][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.593692][ T4266] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.625127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.635264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.646848][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.648428][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.664438][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.665057][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.674381][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.690282][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.723969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.798149][ T4268] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.814781][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.837299][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.870906][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.896450][ T3520] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 62.915946][ T3520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.942149][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.953797][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.954499][ T3520] usb 2-1: config 0 descriptor?? [ 62.965189][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.979318][ T4273] loop4: detected capacity change from 0 to 64 [ 62.992931][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.012311][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.024918][ T4273] hfs: unable to parse mount options [ 63.036400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.047248][ T3520] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 63.141766][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.150200][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.208222][ T4278] process 'syz.0.1' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.209310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.298103][ T4280] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 63.699367][ T4295] loop0: detected capacity change from 0 to 256 [ 63.810235][ T4295] FAT-fs (loop0): Directory bread(block 64) failed [ 63.831850][ T4295] FAT-fs (loop0): Directory bread(block 65) failed [ 63.838595][ T4295] FAT-fs (loop0): Directory bread(block 66) failed [ 63.858972][ T4295] FAT-fs (loop0): Directory bread(block 67) failed [ 63.870134][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 63.880272][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 63.886438][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 63.919645][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 63.936753][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 63.959199][ T4295] FAT-fs (loop0): Directory bread(block 68) failed [ 63.983839][ T4295] FAT-fs (loop0): Directory bread(block 69) failed [ 64.013981][ T4295] FAT-fs (loop0): Directory bread(block 70) failed [ 64.092679][ T4295] FAT-fs (loop0): Directory bread(block 71) failed [ 64.118586][ T4295] FAT-fs (loop0): Directory bread(block 72) failed [ 64.125360][ T4295] FAT-fs (loop0): Directory bread(block 73) failed [ 64.540263][ T3520] gspca_stv06xx: I2C: Read error writing address: -71 [ 64.558633][ T4295] attempt to access beyond end of device [ 64.558633][ T4295] loop0: rw=524288, want=1164, limit=256 [ 64.599396][ T3520] usb 2-1: USB disconnect, device number 2 [ 64.620780][ T4295] attempt to access beyond end of device [ 64.620780][ T4295] loop0: rw=0, want=1164, limit=256 [ 64.633447][ T26] audit: type=1800 audit(1773169818.269:2): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10" name="file0" dev="loop0" ino=1048591 res=0 errno=0 [ 66.589935][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.598994][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.607937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 66.613285][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.719263][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 66.821641][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 66.859439][ C0] sched: RT throttling activated [ 66.875291][ T4320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.041858][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.423575][ T4345] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 67.493066][ T4345] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 67.741257][ T1109] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.972031][ T4364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24'. [ 68.150079][ T1109] usb 3-1: config 0 has no interfaces? [ 68.339662][ T1109] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 68.348757][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.394951][ T1109] usb 3-1: Product: syz [ 68.399262][ T1109] usb 3-1: Manufacturer: syz [ 68.457240][ T1109] usb 3-1: SerialNumber: syz [ 68.482807][ T1109] usb 3-1: config 0 descriptor?? [ 69.078824][ T4391] Zero length message leads to an empty skb [ 69.132223][ T3520] usb 3-1: USB disconnect, device number 2 [ 69.287516][ T4416] device syzkaller0 entered promiscuous mode [ 69.305344][ T4379] loop4: detected capacity change from 0 to 40427 [ 69.329153][ T4379] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 69.337904][ T4379] F2FS-fs (loop4): inline encryption not supported [ 69.360488][ T4379] F2FS-fs (loop4): invalid crc value [ 69.372104][ T4379] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.484517][ T4379] F2FS-fs (loop4): Start checkpoint disabled! [ 69.505075][ T4379] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 69.611005][ T4276] attempt to access beyond end of device [ 69.611005][ T4276] loop4: rw=2049, want=45104, limit=40427 [ 69.647939][ T4348] syz.2.21 (4348) used greatest stack depth: 20856 bytes left [ 70.098615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.508110][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.659493][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.953966][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.969868][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.596325][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 73.946879][ T4451] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 74.152067][ T4451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'. [ 76.009557][ T3520] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.582463][ T4477] loop2: detected capacity change from 0 to 512 [ 76.606761][ T26] audit: type=1326 audit(1773169830.239:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.4.50" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06ad666799 code=0x0 [ 76.782522][ T4477] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.829560][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.834969][ T4477] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.879666][ T3520] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.896689][ T3520] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.907204][ T3520] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.916978][ T3520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.939939][ T4469] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.209682][ T4232] usb 1-1: config 0 has no interfaces? [ 77.215439][ T4232] usb 1-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 77.244866][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.276600][ T4232] usb 1-1: config 0 descriptor?? [ 77.565915][ T4496] ======================================================= [ 77.565915][ T4496] WARNING: The mand mount option has been deprecated and [ 77.565915][ T4496] and is ignored by this kernel. Remove the mand [ 77.565915][ T4496] option from the mount to silence this warning. [ 77.565915][ T4496] ======================================================= [ 78.675233][ T4502] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.736860][ T1109] usb 4-1: USB disconnect, device number 2 [ 78.747744][ T3520] usb 1-1: USB disconnect, device number 2 [ 78.852445][ T4508] netlink: 64 bytes leftover after parsing attributes in process `syz.1.56'. [ 78.984349][ T4508] device syzkaller1 entered promiscuous mode [ 79.282398][ T4514] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.359513][ T1109] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.821727][ T1109] usb 4-1: Using ep0 maxpacket: 16 [ 80.839817][ T1109] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 81.619876][ T1109] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 82.401269][ T7] cfg80211: failed to load regulatory.db [ 82.525467][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.574548][ T1109] usb 4-1: Product: syz [ 82.594763][ T1109] usb 4-1: Manufacturer: syz [ 82.597467][ T4541] loop2: detected capacity change from 0 to 1024 [ 82.609689][ T1109] usb 4-1: SerialNumber: syz [ 82.835772][ T1109] usb 4-1: config 0 descriptor?? [ 82.908257][ T4541] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 83.016533][ T1109] usb 4-1: can't set config #0, error -71 [ 83.283791][ T1109] usb 4-1: USB disconnect, device number 3 [ 83.520530][ T4541] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 83.937329][ T4552] sctp: [Deprecated]: syz.0.69 (pid 4552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.937329][ T4552] Use struct sctp_sack_info instead [ 89.600533][ T4576] sctp: [Deprecated]: syz.3.72 (pid 4576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.600533][ T4576] Use struct sctp_sack_info instead [ 89.628034][ T4573] loop4: detected capacity change from 0 to 256 [ 89.671586][ T4573] FAT-fs (loop4): Unrecognized mount option "nonq˜r")ûyô [ 89.671586][ T4573] ÓWÛ¥umtail=0" or missing value [ 89.809016][ T4578] loop2: detected capacity change from 0 to 164 [ 89.927155][ T4578] rock: directory entry would overflow storage [ 89.980503][ T4578] rock: sig=0x66, size=4, remaining=3 [ 91.865807][ T4592] netlink: 'syz.0.77': attribute type 1 has an invalid length. [ 92.308353][ T4595] loop3: detected capacity change from 0 to 32768 [ 93.966387][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 96.802129][ T4640] device syzkaller0 entered promiscuous mode [ 99.457561][ T4669] device syzkaller0 entered promiscuous mode [ 99.465319][ T4679] sctp: [Deprecated]: syz.3.105 (pid 4679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.465319][ T4679] Use struct sctp_sack_info instead [ 100.544071][ T4690] device syzkaller1 entered promiscuous mode [ 105.992817][ T4751] device syzkaller0 entered promiscuous mode [ 106.922359][ T4768] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 107.123356][ T4772] bond1: (slave veth3): Enslaving as an active interface with a down link [ 107.144666][ T4775] bond1: (slave dummy0): making interface the new active one [ 108.300774][ T4775] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 108.349595][ T4768] netlink: 14 bytes leftover after parsing attributes in process `syz.0.128'. [ 108.552141][ T4775] syz.0.128 (4775) used greatest stack depth: 18744 bytes left [ 108.648558][ T4768] bond1: (slave dummy0): Releasing active interface [ 108.715412][ T4789] overlayfs: failed to clone lowerpath [ 111.547919][ T4810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.135'. [ 111.669970][ T4812] device syzkaller0 entered promiscuous mode [ 111.821648][ T4815] loop1: detected capacity change from 0 to 32768 [ 111.890094][ T4815] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 111.904107][ T4815] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 113.586429][ T4835] loop1: detected capacity change from 0 to 1024 [ 113.988785][ T4835] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,errors=remount-ro,resgid=0x0000000000000000,barrier,auto_da_alloc,nodelalloc,. Quota mode: none. [ 114.234245][ T4835] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.282216][ T4851] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.142: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.036573][ T4851] EXT4-fs (loop1): Remounting filesystem read-only [ 116.037014][ T4851] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.142: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.053489][ T4851] EXT4-fs (loop1): Remounting filesystem read-only [ 116.053884][ T4851] EXT4-fs error (device loop1): ext4_ext_remove_space:2929: inode #15: comm syz.1.142: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 116.206133][ T4851] EXT4-fs (loop1): Remounting filesystem read-only [ 117.118080][ T4859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.149'. [ 117.674564][ T4874] loop1: detected capacity change from 0 to 512 [ 117.711363][ T4874] EXT4-fs (loop1): Ignoring removed orlov option [ 117.712244][ T4875] tipc: Started in network mode [ 117.741251][ T4875] tipc: Node identity 2292cf1912a5, cluster identity 4711 [ 117.749351][ T4875] tipc: Enabled bearer , priority 0 [ 117.836244][ T4884] device syzkaller0 entered promiscuous mode [ 118.077917][ T4874] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,orlov,i_version,,errors=continue. Quota mode: writeback. [ 118.378504][ T4874] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.641264][ T4875] tipc: Resetting bearer [ 118.874187][ T4871] tipc: Resetting bearer [ 118.910336][ T4871] tipc: Disabling bearer [ 118.970697][ T4901] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.151: iget: bad i_size value: 2533274857506816 [ 119.159950][ T1107] tipc: Node number set to 808963865 [ 121.209598][ T4229] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 121.253486][ T4922] loop2: detected capacity change from 0 to 7 [ 121.286474][ T4177] Dev loop2: unable to read RDB block 7 [ 121.297155][ T4177] loop2: AHDI p1 p2 p3 [ 121.365461][ T4177] loop2: partition table partially beyond EOD, truncated [ 121.378187][ T4177] loop2: p1 start 1601398130 is beyond EOD, truncated [ 121.385322][ T4177] loop2: p2 start 1702059890 is beyond EOD, truncated [ 121.703371][ T4922] Dev loop2: unable to read RDB block 7 [ 121.719649][ T4922] loop2: AHDI p1 p2 p3 [ 121.744617][ T4922] loop2: partition table partially beyond EOD, truncated [ 121.787834][ T4922] loop2: p1 start 1601398130 is beyond EOD, truncated [ 122.012210][ T4922] loop2: p2 start 1702059890 is beyond EOD, truncated [ 123.084743][ T4229] usb 4-1: device not accepting address 4, error -71 [ 124.545364][ T4948] loop1: detected capacity change from 0 to 32768 [ 124.651323][ T4948] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.173 (4948) [ 124.828841][ T4948] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 124.837963][ T4948] BTRFS info (device loop1): enabling disk space caching [ 124.845148][ T4948] BTRFS info (device loop1): force clearing of disk cache [ 124.852536][ T4948] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 124.862323][ T4948] BTRFS info (device loop1): use zstd compression, level 3 [ 124.869605][ T4948] BTRFS info (device loop1): disk space caching is enabled [ 124.876905][ T4948] BTRFS info (device loop1): has skinny extents [ 124.888704][ T4946] device syzkaller0 entered promiscuous mode [ 125.092067][ T4957] device syzkaller0 entered promiscuous mode [ 125.201620][ T4948] BTRFS info (device loop1): enabling ssd optimizations [ 125.228476][ T4948] BTRFS info (device loop1): clearing free space tree [ 125.236397][ T4948] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.246360][ T4948] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.422201][ T4983] device syzkaller0 entered promiscuous mode [ 125.487684][ T4983] TC_ACT_REPEAT abuse ? [ 126.186185][ T4988] loop3: detected capacity change from 0 to 40427 [ 126.407239][ T4988] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 126.415145][ T4988] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 126.445428][ T4988] F2FS-fs (loop3): invalid crc value [ 126.534034][ T4988] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.554281][ T4992] overlayfs: missing 'lowerdir' [ 126.609848][ T4988] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 126.616938][ T4988] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 128.000015][ T5015] device syzkaller0 entered promiscuous mode [ 132.490679][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 134.145323][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.159032][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.858209][ T5085] loop1: detected capacity change from 0 to 128 [ 135.924708][ T5085] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 136.944127][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 137.003680][ T5099] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.060654][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 138.113173][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 140.096201][ T26] audit: type=1400 audit(1773169893.249:4): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=5114 comm="syz.3.204" [ 140.332603][ T5118] device syzkaller0 entered promiscuous mode [ 143.853260][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.862900][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.870617][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.343421][ T5139] device syzkaller0 entered promiscuous mode [ 145.940564][ T5156] loop2: detected capacity change from 0 to 32768 [ 146.328604][ T5156] [ 146.328604][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.328604][ T5156] [ 146.390537][ T5156] jfs_rename: dtInsert returned -EIO [ 146.767460][ T5156] [ 146.767460][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.767460][ T5156] [ 146.778365][ T5156] [ 146.778365][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.778365][ T5156] [ 146.788860][ T5156] [ 146.788860][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.788860][ T5156] [ 146.800028][ T5156] [ 146.800028][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.800028][ T5156] [ 146.810624][ T5156] [ 146.810624][ T5156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.810624][ T5156] [ 146.822032][ T26] audit: type=1800 audit(1773169900.399:5): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.214" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 146.887582][ T276] [ 146.887582][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.887582][ T276] [ 147.194843][ T4329] [ 147.194843][ T4329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.194843][ T4329] [ 147.229634][ T4329] [ 147.229634][ T4329] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.229634][ T4329] [ 147.279878][ T4191] [ 147.279878][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.279878][ T4191] [ 147.321044][ T275] [ 147.321044][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.321044][ T275] [ 147.351614][ T4191] [ 147.351614][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 147.351614][ T4191] [ 157.086919][ T4229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.329549][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 157.996742][ T4329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.111494][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 158.267056][ T4329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.278042][ T4229] usb 3-1: string descriptor 0 read error: -71 [ 158.293631][ T4229] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 158.339767][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.489483][ T1107] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 158.499773][ T4329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.522492][ T4229] usb 3-1: config 0 descriptor?? [ 158.539592][ T4229] usb 3-1: can't set config #0, error -71 [ 158.569562][ T4229] usb 3-1: USB disconnect, device number 3 [ 159.139935][ T1107] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.185753][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.298081][ T1107] usb 2-1: Product: syz [ 159.350732][ T1107] usb 2-1: Manufacturer: syz [ 159.355594][ T1107] usb 2-1: SerialNumber: syz [ 159.540579][ T5005] Bluetooth: hci5: command 0x0409 tx timeout [ 159.546875][ T1107] usb 2-1: config 0 descriptor?? [ 159.846332][ T4329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.250007][ T1107] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.376093][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.398029][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.407095][ T5217] device bridge_slave_0 entered promiscuous mode [ 160.420144][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.427309][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.437407][ T5217] device bridge_slave_1 entered promiscuous mode [ 160.462471][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.483010][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.564354][ T5240] loop2: detected capacity change from 0 to 4096 [ 160.586897][ T5217] team0: Port device team_slave_0 added [ 160.618552][ T5217] team0: Port device team_slave_1 added [ 160.732901][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.777691][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.874876][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.989870][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.027751][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.241498][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.479918][ T1107] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 161.593708][ T5217] device hsr_slave_0 entered promiscuous mode [ 161.626316][ T5217] device hsr_slave_1 entered promiscuous mode [ 161.633223][ T5005] Bluetooth: hci5: command 0x041b tx timeout [ 161.705499][ T5217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.772657][ T5217] Cannot create hsr debugfs directory [ 161.905300][ T5257] tipc: Enabling of bearer rejected, failed to enable media [ 162.332211][ T5005] usb 2-1: USB disconnect, device number 3 [ 163.609467][ T5286] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 163.710213][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 163.728457][ T5217] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.254403][ T5217] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.295249][ T5217] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.344007][ T5217] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.389562][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.455711][ T5305] loop2: detected capacity change from 0 to 8 [ 165.520954][ T4329] device hsr_slave_0 left promiscuous mode [ 165.548844][ T4329] device hsr_slave_1 left promiscuous mode [ 165.556829][ T5305] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 165.609646][ T5305] unable to read xattr id index table [ 165.638911][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.668193][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.737302][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.767995][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.806542][ T5004] Bluetooth: hci5: command 0x0419 tx timeout [ 165.834464][ T4329] device bridge_slave_1 left promiscuous mode [ 165.851379][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.426327][ T5314] sctp: [Deprecated]: syz.3.247 (pid 5314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.426327][ T5314] Use struct sctp_sack_info instead [ 166.475902][ T4329] device bridge_slave_0 left promiscuous mode [ 166.541935][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.841098][ T4329] device veth1_macvtap left promiscuous mode [ 167.858987][ T4329] device veth0_macvtap left promiscuous mode [ 167.912977][ T4329] device veth1_vlan left promiscuous mode [ 167.959337][ T4329] device veth0_vlan left promiscuous mode [ 168.254911][ T4329] bond1 (unregistering): (slave veth3): Releasing active interface [ 168.278215][ T4329] bond1 (unregistering): Released all slaves [ 170.268054][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 170.308674][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 170.338743][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.383018][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.530716][ T4329] bond0 (unregistering): Released all slaves [ 171.757436][ T5344] sctp: [Deprecated]: syz.3.253 (pid 5344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.757436][ T5344] Use struct sctp_sack_info instead [ 172.119259][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.149913][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.163473][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.483087][ T5352] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 173.105867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.458732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.904397][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.911604][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.976654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.986028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.994770][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.002136][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.020747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.263620][ T5217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.508913][ T5217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.510922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.511533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.512364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.513770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.514968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.516043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.516811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.517401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.518146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.519037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.520419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.522993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.928320][ T5394] sctp: [Deprecated]: syz.4.261 (pid 5394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.928320][ T5394] Use struct sctp_sack_info instead [ 177.326561][ T5403] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 178.226234][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.240309][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.272955][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.909727][ T5419] device hsr0 entered promiscuous mode [ 178.916169][ T5419] device macvtap1 entered promiscuous mode [ 179.060517][ T5429] sctp: [Deprecated]: syz.2.265 (pid 5429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.060517][ T5429] Use struct sctp_sack_info instead [ 179.257341][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.282558][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.353754][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.385639][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.423065][ T5217] device veth0_vlan entered promiscuous mode [ 179.439714][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.488595][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.523522][ T5217] device veth1_vlan entered promiscuous mode [ 179.618316][ T5217] device veth0_macvtap entered promiscuous mode [ 179.641247][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.670857][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.730223][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.796448][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.819421][ T5436] loop1: detected capacity change from 0 to 40427 [ 179.831608][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.869062][ T5217] device veth1_macvtap entered promiscuous mode [ 179.885771][ T5436] F2FS-fs (loop1): invalid crc value [ 179.916520][ T5436] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.956458][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.968333][ T5436] F2FS-fs (loop1): Start checkpoint disabled! [ 179.998928][ T5436] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 180.029670][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.066490][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.099596][ T26] audit: type=1800 audit(1773169933.729:6): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.267" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 180.178581][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.210234][ T26] audit: type=1800 audit(1773169933.829:7): pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.267" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 180.365308][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.426004][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.487572][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.591070][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.738226][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.871778][ T5456] 9pnet_virtio: no channels available for device syz [ 181.854006][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 182.633506][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.651478][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 182.689490][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 182.698544][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.712867][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 182.733078][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.761745][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.779941][ T4890] attempt to access beyond end of device [ 182.779941][ T4890] loop1: rw=2049, want=40976, limit=40427 [ 182.781824][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.841834][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.899463][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.940605][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.003209][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.044126][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.064725][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.092617][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.180708][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.201058][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.241240][ T5217] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.266529][ T5217] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.289543][ T5217] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.369665][ T5217] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.235122][ T4890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.278421][ T4890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.782825][ T4890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.971196][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.994381][ T4890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.030312][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.446554][ T5511] loop2: detected capacity change from 0 to 256 [ 188.555549][ T5511] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.571410][ T5516] sctp: [Deprecated]: syz.3.277 (pid 5516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.571410][ T5516] Use struct sctp_sack_info instead [ 189.235077][ T5526] loop5: detected capacity change from 0 to 64 [ 189.340523][ T5526] hfs: unable to parse mount options [ 189.677152][ T5531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.282'. [ 190.375535][ T5540] sctp: [Deprecated]: syz.4.283 (pid 5540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.375535][ T5540] Use struct sctp_sack_info instead [ 192.634032][ T5559] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.682630][ T5559] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.980270][ T5559] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 192.988612][ T5559] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 192.999670][ T5559] overlayfs: d_ino too big (56, ino=9223372036854776113, xinobits=3) [ 193.010088][ T5559] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 193.019712][ T5559] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 193.029632][ T5559] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 193.038753][ T5559] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 193.048253][ T5559] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 193.057457][ T5559] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3) [ 193.074664][ T5559] overlayfs: d_ino too big (kernel, ino=4611686018427389040, xinobits=3) [ 193.697418][ T5563] device syzkaller0 entered promiscuous mode [ 193.967281][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 194.434137][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.441093][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.852537][ T5579] loop2: detected capacity change from 0 to 512 [ 194.913431][ T5579] EXT4-fs (loop2): Test dummy encryption mode enabled [ 194.920441][ T5579] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 194.934106][ T5579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.150414][ T5579] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.293: bad orphan inode 131083 [ 195.163993][ T5579] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 197.244970][ T5579] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 197.324091][ T5599] netlink: 'syz.1.294': attribute type 11 has an invalid length. [ 197.332382][ T5599] netlink: 5256 bytes leftover after parsing attributes in process `syz.1.294'. [ 197.914385][ T5589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.996387][ T5610] wlan0 speed is unknown, defaulting to 1000 [ 199.002996][ T5610] wlan0 speed is unknown, defaulting to 1000 [ 199.022723][ T5610] wlan0 speed is unknown, defaulting to 1000 [ 199.049699][ T5610] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 199.082664][ T5610] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 199.187604][ T5610] wlan0 speed is unknown, defaulting to 1000 [ 199.201276][ T5610] wlan0 speed is unknown, defaulting to 1000 [ 199.212709][ T5610] wlan0 speed is unknown, defaulting to 1000 [ 199.223861][ T5610] wlan0 speed is unknown, defaulting to 1000 [ 199.236258][ T5610] wlan0 speed is unknown, defaulting to 1000 [ 202.067962][ T5617] sctp: [Deprecated]: syz.2.298 (pid 5617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.067962][ T5617] Use struct sctp_sack_info instead [ 203.157793][ T5647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.199631][ T5647] device batadv_slave_0 entered promiscuous mode [ 203.386343][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.489872][ T5653] bond0: (slave rose0): Enslaving as an active interface with an up link [ 203.544324][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 204.414869][ T5661] overlayfs: failed to clone lowerpath [ 204.791753][ T5668] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 204.828881][ T5668] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 209.933074][ T5723] netlink: 16 bytes leftover after parsing attributes in process `syz.5.316'. [ 210.422041][ T5730] sctp: [Deprecated]: syz.2.314 (pid 5730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.422041][ T5730] Use struct sctp_sack_info instead [ 211.840122][ T5750] sctp: [Deprecated]: syz.2.330 (pid 5750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.840122][ T5750] Use struct sctp_sack_info instead [ 216.278927][ T5800] loop5: detected capacity change from 0 to 32768 [ 217.124128][ T5800] XFS (loop5): Mounting V5 Filesystem [ 217.384325][ T5800] XFS (loop5): Ending clean mount [ 217.398975][ T5800] XFS (loop5): Quotacheck needed: Please wait. [ 217.542043][ T5800] XFS (loop5): Quotacheck: Done. [ 218.903831][ T5217] XFS (loop5): Unmounting Filesystem [ 220.970336][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 222.440277][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.342'. [ 225.210336][ T5883] ALSA: mixer_oss: invalid OSS volume '' [ 225.292756][ T5888] qfq: no options [ 225.559781][ T5888] netlink: 64 bytes leftover after parsing attributes in process `syz.2.347'. [ 225.858094][ T5903] sctp: [Deprecated]: syz.5.348 (pid 5903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.858094][ T5903] Use struct sctp_sack_info instead [ 232.089083][ T5926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.916161][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 237.350453][ T5976] loop2: detected capacity change from 0 to 1024 [ 237.623726][ T5976] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 238.701244][ T5976] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 238.867759][ T26] audit: type=1326 audit(1773169992.499:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec3c84799 code=0x7ffc0000 [ 239.650291][ T5999] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 241.540721][ T26] audit: type=1326 audit(1773169992.499:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec3c84799 code=0x7ffc0000 [ 241.636597][ T26] audit: type=1326 audit(1773169992.529:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7feec3c84799 code=0x7ffc0000 [ 241.818184][ T26] audit: type=1326 audit(1773169992.529:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec3c84799 code=0x7ffc0000 [ 241.913304][ T26] audit: type=1326 audit(1773169992.529:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec3c84799 code=0x7ffc0000 [ 242.049530][ T26] audit: type=1326 audit(1773169992.529:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feec3c84799 code=0x7ffc0000 [ 242.159741][ T26] audit: type=1326 audit(1773169992.529:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec3c84799 code=0x7ffc0000 [ 242.444435][ T26] audit: type=1326 audit(1773169992.529:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec3c84799 code=0x7ffc0000 [ 242.498756][ T26] audit: type=1326 audit(1773169992.529:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feec3c84799 code=0x7ffc0000 [ 242.521302][ T26] audit: type=1326 audit(1773169992.529:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec3c84799 code=0x7ffc0000 [ 242.637318][ T6027] sctp: [Deprecated]: syz.4.374 (pid 6027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.637318][ T6027] Use struct sctp_sack_info instead [ 242.751087][ T6023] wlan0 speed is unknown, defaulting to 1000 [ 242.931866][ T4407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.184815][ T4407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.361705][ T4407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.437825][ T6023] chnl_net:caif_netlink_parms(): no params data found [ 243.579313][ T4407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.851270][ T6048] sctp: [Deprecated]: syz.5.375 (pid 6048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.851270][ T6048] Use struct sctp_sack_info instead [ 243.972058][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.999664][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.007943][ T6023] device bridge_slave_0 entered promiscuous mode [ 244.109210][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.116895][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.150276][ T6023] device bridge_slave_1 entered promiscuous mode [ 244.262481][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.362213][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.510452][ T4919] Bluetooth: hci4: command 0x0409 tx timeout [ 244.733996][ T6023] team0: Port device team_slave_0 added [ 244.744009][ T6023] team0: Port device team_slave_1 added [ 244.771585][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.778575][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.865779][ T6077] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 245.243114][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.476519][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.508002][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.651537][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.812536][ T6023] device hsr_slave_0 entered promiscuous mode [ 245.873930][ T6023] device hsr_slave_1 entered promiscuous mode [ 245.905285][ T6023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.923295][ T6023] Cannot create hsr debugfs directory [ 246.834419][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 248.130659][ T6023] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 248.206329][ T6023] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 248.258267][ T6023] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 248.365916][ T6139] sctp: [Deprecated]: syz.2.393 (pid 6139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.365916][ T6139] Use struct sctp_sack_info instead [ 248.390440][ T6023] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 248.529037][ T4407] device hsr_slave_0 left promiscuous mode [ 248.547038][ T4407] device hsr_slave_1 left promiscuous mode [ 248.554254][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.576888][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.608489][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.626509][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.667867][ T4407] device bridge_slave_1 left promiscuous mode [ 248.759654][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.551847][ T5008] Bluetooth: hci4: command 0x040f tx timeout [ 249.581916][ T4407] device bridge_slave_0 left promiscuous mode [ 249.588192][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.617555][ T4407] device veth1_macvtap left promiscuous mode [ 249.629923][ T4407] device veth0_macvtap left promiscuous mode [ 249.636195][ T4407] device veth1_vlan left promiscuous mode [ 249.642634][ T4407] device veth0_vlan left promiscuous mode [ 251.941490][ T5008] Bluetooth: hci4: command 0x0419 tx timeout [ 252.184052][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 252.215925][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 252.258595][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.318936][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.238213][ T4407] bond0 (unregistering): Released all slaves [ 254.254654][ T6181] sctp: [Deprecated]: syz.5.407 (pid 6181) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.254654][ T6181] Use struct sctp_sack_info instead [ 255.915988][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.922454][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.016421][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.054439][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.069681][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.087562][ T6023] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.172745][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.192325][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.205949][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.213208][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.236640][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.258818][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.277293][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.288728][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.295889][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.305586][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.338133][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.382626][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.408064][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.440982][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.454535][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.477929][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.600170][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.641432][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.702557][ T6023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.748350][ T6023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.822839][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.870043][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.964036][ T6210] sctp: [Deprecated]: syz.4.416 (pid 6210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.964036][ T6210] Use struct sctp_sack_info instead [ 258.516440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.535134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.577862][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.770774][ T6248] loop5: detected capacity change from 0 to 16 [ 260.813971][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.845902][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.917425][ T6248] erofs: (device loop5): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 260.954705][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.985783][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.037621][ T6023] device veth0_vlan entered promiscuous mode [ 261.056522][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.090360][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.135058][ T6023] device veth1_vlan entered promiscuous mode [ 261.335714][ T6023] device veth0_macvtap entered promiscuous mode [ 261.432573][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.458990][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.598833][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.370260][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.450289][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.524490][ T6023] device veth1_macvtap entered promiscuous mode [ 263.637713][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.656157][ T6271] loop5: detected capacity change from 0 to 16 [ 263.689396][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.699291][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.776730][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.819566][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.856672][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.910995][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.919031][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.959599][ T6271] erofs: (device loop5): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 263.985096][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.446904][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.579438][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.757194][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.359392][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.369254][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.665711][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.704922][ T6300] sctp: [Deprecated]: syz.4.431 (pid 6300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.704922][ T6300] Use struct sctp_sack_info instead [ 269.300712][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.459379][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.556401][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.568360][ T6023] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.577890][ T6023] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.644272][ T6023] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.874592][ T6023] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.489250][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.576762][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.075259][ T6328] loop5: detected capacity change from 0 to 16 [ 273.194084][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.282528][ T6328] erofs: (device loop5): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 273.317011][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.864567][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.089441][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.116364][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.183703][ T6344] sctp: [Deprecated]: syz.4.441 (pid 6344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.183703][ T6344] Use struct sctp_sack_info instead [ 277.404235][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.234853][ T6396] loop2: detected capacity change from 0 to 16 [ 285.311326][ T6396] erofs: (device loop2): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 285.511680][ T6401] sctp: [Deprecated]: syz.3.453 (pid 6401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.511680][ T6401] Use struct sctp_sack_info instead [ 288.381600][ T6416] loop2: detected capacity change from 0 to 16 [ 288.489602][ T6416] erofs: (device loop2): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 295.971802][ T6456] syz.3.463 (6456): drop_caches: 2 [ 297.173382][ T6471] loop5: detected capacity change from 0 to 16 [ 297.240219][ T6472] sctp: [Deprecated]: syz.4.466 (pid 6472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.240219][ T6472] Use struct sctp_sack_info instead [ 297.452633][ T6471] erofs: (device loop5): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 297.944246][ T6469] wlan0 speed is unknown, defaulting to 1000 [ 300.950044][ T4232] Bluetooth: hci1: command 0x0409 tx timeout [ 301.996284][ T6469] chnl_net:caif_netlink_parms(): no params data found [ 303.410160][ T6516] ODEBUG: Out of memory. ODEBUG disabled [ 303.486794][ T6516] syz.3.475 (6516): drop_caches: 2 [ 303.751038][ T4562] Bluetooth: hci1: command 0x041b tx timeout [ 303.784026][ T6518] loop5: detected capacity change from 0 to 16 [ 303.846713][ T6522] loop2: detected capacity change from 0 to 16 [ 304.606438][ T6530] sctp: [Deprecated]: syz.3.479 (pid 6530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.606438][ T6530] Use struct sctp_sack_info instead [ 304.626395][ T6522] erofs: (device loop2): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 304.642189][ T6518] erofs: (device loop5): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 306.363241][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 306.590773][ T6548] loop5: detected capacity change from 0 to 16 [ 306.568376][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.608839][ T6548] erofs: (device loop5): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 306.635339][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.666404][ T6469] device bridge_slave_0 entered promiscuous mode [ 307.314895][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 308.227348][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.239822][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.247679][ T6469] device bridge_slave_1 entered promiscuous mode [ 308.343991][ T6561] loop5: detected capacity change from 0 to 16 [ 308.429633][ T4919] Bluetooth: hci1: command 0x0419 tx timeout [ 308.507680][ T6561] erofs: (device loop5): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 309.152169][ T4890] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.056399][ T6469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.983039][ T6575] syz.3.488 (6575): drop_caches: 2 [ 311.007826][ T6469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.602015][ T6587] sctp: [Deprecated]: syz.2.491 (pid 6587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.602015][ T6587] Use struct sctp_sack_info instead [ 313.045968][ T4890] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.115501][ T6469] team0: Port device team_slave_0 added [ 313.185156][ T6469] team0: Port device team_slave_1 added [ 313.214420][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.222261][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.312882][ T6469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.350012][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.368228][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.970290][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.343204][ T4890] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.834552][ T4890] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.219878][ T6469] device hsr_slave_0 entered promiscuous mode [ 317.318130][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.326209][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.413234][ T6469] device hsr_slave_1 entered promiscuous mode [ 320.091151][ T6469] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 320.144606][ T6651] loop5: detected capacity change from 0 to 16 [ 320.168228][ T6469] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 320.207534][ T6655] loop2: detected capacity change from 0 to 16 [ 320.228877][ T6469] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 320.240137][ T6651] erofs: (device loop5): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 320.295397][ T6469] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 320.427746][ T6655] erofs: (device loop2): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 322.496017][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.706211][ T6469] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.219548][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.228145][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.569287][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.578502][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.832828][ T6710] sctp: [Deprecated]: syz.3.513 (pid 6710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.832828][ T6710] Use struct sctp_sack_info instead [ 330.104068][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.111239][ T6588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.122921][ T6718] loop2: detected capacity change from 0 to 16 [ 330.262819][ T6718] erofs: (device loop2): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 330.370061][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.631105][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.670876][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.677983][ T6588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.721025][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.748645][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.767914][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.792987][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.822804][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.858469][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.917740][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.000184][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.031968][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.160378][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.182210][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.052958][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 333.074430][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.265602][ T6742] tipc: Enabled bearer , priority 0 [ 333.304784][ T6742] device syzkaller0 entered promiscuous mode [ 333.361752][ T6742] tipc: Resetting bearer [ 333.438665][ T6726] loop5: detected capacity change from 0 to 32768 [ 333.464430][ T6741] tipc: Resetting bearer [ 333.507931][ T6741] tipc: Disabling bearer [ 333.576195][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.594142][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.654731][ T6749] sctp: [Deprecated]: syz.3.524 (pid 6749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.654731][ T6749] Use struct sctp_sack_info instead [ 334.374833][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.426529][ T4890] device hsr_slave_0 left promiscuous mode [ 340.567691][ T4890] device hsr_slave_1 left promiscuous mode [ 340.583038][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.618447][ T4890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.715358][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.786792][ T4890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.867794][ T4890] device bridge_slave_1 left promiscuous mode [ 340.878301][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.932354][ T4890] device bridge_slave_0 left promiscuous mode [ 340.938650][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.177113][ T6792] sctp: [Deprecated]: syz.5.527 (pid 6792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.177113][ T6792] Use struct sctp_sack_info instead [ 341.772130][ T4890] device veth1_macvtap left promiscuous mode [ 341.778208][ T4890] device veth0_macvtap left promiscuous mode [ 341.835271][ T4890] device veth1_vlan left promiscuous mode [ 341.868802][ T4890] device veth0_vlan left promiscuous mode [ 342.834826][ T6800] syz.3.533 (6800): drop_caches: 2 [ 343.673819][ T6809] sctp: [Deprecated]: syz.4.534 (pid 6809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.673819][ T6809] Use struct sctp_sack_info instead [ 344.065457][ T4890] team0 (unregistering): Port device team_slave_1 removed [ 344.131518][ T4890] team0 (unregistering): Port device team_slave_0 removed [ 344.164510][ T4890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.182200][ T4890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.074257][ T4890] bond0 (unregistering): Released all slaves [ 345.810866][ T6826] tipc: Enabling of bearer rejected, failed to enable media [ 346.574761][ T6826] device syzkaller0 entered promiscuous mode [ 346.588784][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 346.712260][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.727913][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.778679][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.795292][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.836152][ T6469] device veth0_vlan entered promiscuous mode [ 346.857513][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.892792][ T6845] loop2: detected capacity change from 0 to 7 [ 346.894628][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.911321][ T6692] Dev loop2: unable to read RDB block 7 [ 346.917181][ T6692] loop2: AHDI p1 p2 p3 [ 346.927288][ T6692] loop2: partition table partially beyond EOD, truncated [ 346.944856][ T6692] loop2: p1 start 1601398130 is beyond EOD, truncated [ 346.957756][ T6692] loop2: p2 start 1702059890 is beyond EOD, truncated [ 347.044658][ T6469] device veth1_vlan entered promiscuous mode [ 347.113139][ T6845] Dev loop2: unable to read RDB block 7 [ 347.127840][ T6845] loop2: AHDI p1 p2 p3 [ 347.206983][ T6860] sctp: [Deprecated]: syz.2.543 (pid 6860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.206983][ T6860] Use struct sctp_sack_info instead [ 347.321054][ T6845] loop2: partition table partially beyond EOD, truncated [ 347.439411][ T6845] loop2: p1 start 1601398130 is beyond EOD, truncated [ 347.578649][ T6845] loop2: p2 start 1702059890 is beyond EOD, truncated [ 347.800410][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.829964][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.854185][ T6469] device veth0_macvtap entered promiscuous mode [ 347.873237][ T6469] device veth1_macvtap entered promiscuous mode [ 347.919129][ T3561] Dev loop2: unable to read RDB block 7 [ 347.922607][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.936356][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.946595][ T3561] loop2: AHDI p1 p2 p3 [ 347.951142][ T3561] loop2: partition table partially beyond EOD, truncated [ 347.958293][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.036085][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.053683][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.066221][ T3561] loop2: p1 start 1601398130 is beyond EOD, truncated [ 348.078566][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.090252][ T3561] loop2: p2 start 1702059890 is beyond EOD, truncated [ 348.127069][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.422179][ T6873] sctp: [Deprecated]: syz.4.546 (pid 6873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.422179][ T6873] Use struct sctp_sack_info instead [ 349.027422][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.056157][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.104924][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.133640][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.181401][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.192188][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.202811][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.212827][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.227550][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.237703][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.248712][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.260923][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.300375][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.334127][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.860901][ T6889] sctp: [Deprecated]: syz.4.557 (pid 6889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.860901][ T6889] Use struct sctp_sack_info instead [ 350.791143][ T3520] Bluetooth: hci5: command 0x0406 tx timeout [ 351.335031][ T6898] sctp: [Deprecated]: syz.4.560 (pid 6898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.335031][ T6898] Use struct sctp_sack_info instead [ 351.504217][ T6469] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.588148][ T6469] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.749806][ T6469] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.894414][ T6469] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.195721][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.275031][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.331628][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 352.863918][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.897662][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.090429][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 354.995588][ T6930] sctp: [Deprecated]: syz.5.555 (pid 6930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.995588][ T6930] Use struct sctp_sack_info instead [ 356.380488][ T6950] sctp: [Deprecated]: syz.4.562 (pid 6950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.380488][ T6950] Use struct sctp_sack_info instead [ 357.646702][ T6948] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 357.775363][ T6948] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 358.073272][ T6948] ovl_remap_lower_ino: 8 callbacks suppressed [ 358.073317][ T6948] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 358.087639][ T6948] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 358.097410][ T6948] overlayfs: d_ino too big (54, ino=9223372036854776116, xinobits=3) [ 358.107107][ T6948] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 358.117200][ T6948] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 358.127958][ T6948] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 358.137262][ T6948] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 358.146631][ T6948] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 358.155707][ T6948] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3) [ 358.165748][ T6948] overlayfs: d_ino too big (kernel, ino=4611686018427389040, xinobits=3) [ 359.802701][ T6988] loop7: detected capacity change from 0 to 16 [ 359.899452][ T6988] erofs: (device loop7): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 367.360683][ T7016] netlink: 'syz.3.575': attribute type 1 has an invalid length. [ 367.692965][ T7019] sctp: [Deprecated]: syz.2.577 (pid 7019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.692965][ T7019] Use struct sctp_sack_info instead [ 368.084732][ T7025] bond1: (slave veth3): Enslaving as an active interface with a down link [ 368.928676][ T7024] overlayfs: failed to clone lowerpath [ 368.953376][ T7024] overlayfs: failed to clone lowerpath [ 369.071558][ T7016] bond1: (slave dummy0): making interface the new active one [ 369.100213][ T7016] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 369.180452][ T7025] netlink: 14 bytes leftover after parsing attributes in process `syz.3.575'. [ 369.207790][ T7032] loop2: detected capacity change from 0 to 16 [ 369.256659][ T7032] erofs: (device loop2): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 369.295541][ T7025] bond1: (slave dummy0): Releasing active interface [ 373.446903][ T7053] sctp: [Deprecated]: syz.2.586 (pid 7053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.446903][ T7053] Use struct sctp_sack_info instead [ 375.540874][ T7063] loop7: detected capacity change from 0 to 16 [ 375.698474][ T7063] erofs: (device loop7): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 377.083320][ T7076] sctp: [Deprecated]: syz.2.597 (pid 7076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.083320][ T7076] Use struct sctp_sack_info instead [ 377.969905][ T7083] sctp: [Deprecated]: syz.4.590 (pid 7083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.969905][ T7083] Use struct sctp_sack_info instead [ 378.062352][ T7080] wlan0 speed is unknown, defaulting to 1000 [ 378.753028][ C0] ================================================================== [ 378.761579][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 378.769079][ C0] Read of size 2 at addr ffff888025f3e82a by task syz.2.605/7099 [ 378.776819][ C0] [ 378.779157][ C0] CPU: 0 PID: 7099 Comm: syz.2.605 Not tainted syzkaller #0 [ 378.786456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.796612][ C0] Call Trace: [ 378.799906][ C0] [ 378.802761][ C0] dump_stack_lvl+0x188/0x250 [ 378.807463][ C0] ? show_regs_print_info+0x20/0x20 [ 378.812682][ C0] ? _printk+0xda/0x130 [ 378.816945][ C0] ? rose_timer_expiry+0x470/0x490 [ 378.822082][ C0] ? load_image+0x400/0x400 [ 378.826610][ C0] print_address_description+0x60/0x2d0 [ 378.832177][ C0] ? rose_timer_expiry+0x470/0x490 [ 378.837309][ C0] kasan_report+0xdf/0x130 [ 378.841750][ C0] ? rose_timer_expiry+0x470/0x490 [ 378.846885][ C0] rose_timer_expiry+0x470/0x490 [ 378.851857][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 378.856898][ C0] call_timer_fn+0x17b/0x540 [ 378.861505][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 378.866552][ C0] ? __run_timers+0x800/0x800 [ 378.871256][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 378.876473][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 378.881691][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 378.887254][ C0] __run_timers+0x53e/0x800 [ 378.891793][ C0] ? detach_timer+0x2b0/0x2b0 [ 378.896504][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 378.902526][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 378.907414][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 378.912730][ C0] run_timer_softirq+0x63/0xf0 [ 378.917515][ C0] handle_softirqs+0x339/0x830 [ 378.922307][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 378.927184][ C0] ? do_softirq+0x210/0x210 [ 378.928649][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.931704][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 378.938416][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.943171][ C0] __irq_exit_rcu+0x13b/0x230 [ 378.943201][ C0] ? irq_exit_rcu+0x20/0x20 [ 378.943231][ C0] irq_exit_rcu+0x5/0x20 [ 378.943249][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 378.968528][ C0] [ 378.971584][ C0] [ 378.974538][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 378.980546][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 378.987079][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2f 8a 8c f7 65 8b 05 d0 97 3c 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 379.006708][ C0] RSP: 0018:ffffc90002f0f420 EFLAGS: 00000206 [ 379.012799][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 7af09d19442c9000 [ 379.020783][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 379.028764][ C0] RBP: ffffc90002f0f4b0 R08: ffffffff901d4107 R09: 1ffffffff203a820 [ 379.036749][ C0] R10: dffffc0000000000 R11: fffffbfff203a821 R12: dffffc0000000000 [ 379.044738][ C0] R13: dffffc0000000000 R14: ffff888028915050 R15: 1ffff920005e1e84 [ 379.052744][ C0] ? _raw_spin_unlock+0x40/0x40 [ 379.057626][ C0] __pagevec_lru_add+0x13e9/0x1780 [ 379.062767][ C0] ? lru_cache_add+0x750/0x750 [ 379.067558][ C0] lru_cache_add+0x516/0x750 [ 379.072168][ C0] shmem_getpage_gfp+0x186b/0x2d40 [ 379.077330][ C0] shmem_fault+0x1ac/0x540 [ 379.081772][ C0] ? shmem_fallocate+0xee0/0xee0 [ 379.086739][ C0] ? filemap_read_page+0x4c0/0x4c0 [ 379.091879][ C0] ? count_memcg_event_mm+0x324/0x370 [ 379.097286][ C0] __do_fault+0x141/0x330 [ 379.101643][ C0] handle_mm_fault+0x2985/0x4410 [ 379.106616][ C0] ? get_page+0xe0/0xe0 [ 379.110799][ C0] ? follow_page_mask+0xa6e/0x12d0 [ 379.115944][ C0] __get_user_pages+0x94b/0x11e0 [ 379.121008][ C0] ? populate_vma_page_range+0x290/0x290 [ 379.126664][ C0] ? read_lock_is_recursive+0x10/0x10 [ 379.132072][ C0] populate_vma_page_range+0x213/0x290 [ 379.137814][ C0] __mm_populate+0x275/0x3b0 [ 379.142432][ C0] ? check_vma_flags+0x480/0x480 [ 379.147386][ C0] ? up_write+0x1bb/0x420 [ 379.151739][ C0] vm_mmap_pgoff+0x212/0x2d0 [ 379.156370][ C0] ? account_locked_vm+0xe0/0xe0 [ 379.161322][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 379.166370][ C0] ksys_mmap_pgoff+0x140/0x790 [ 379.171156][ C0] ? mmap_region+0x1650/0x1650 [ 379.175942][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 379.181165][ C0] do_syscall_64+0x4c/0xa0 [ 379.185594][ C0] ? clear_bhb_loop+0x30/0x80 [ 379.190286][ C0] ? clear_bhb_loop+0x30/0x80 [ 379.194987][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 379.200896][ C0] RIP: 0033:0x7feec3c84799 [ 379.205415][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.225037][ C0] RSP: 002b:00007feec1ede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 379.233476][ C0] RAX: ffffffffffffffda RBX: 00007feec3efdfa0 RCX: 00007feec3c84799 [ 379.241467][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 379.249450][ C0] RBP: 00007feec3d1ac99 R08: ffffffffffffffff R09: 0000000000000000 [ 379.257527][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 379.265507][ C0] R13: 00007feec3efe038 R14: 00007feec3efdfa0 R15: 00007ffcfa537ce8 [ 379.273512][ C0] [ 379.276537][ C0] [ 379.278870][ C0] Allocated by task 6023: [ 379.283202][ C0] __kasan_kmalloc+0xb5/0xf0 [ 379.287818][ C0] fib6_info_alloc+0x2e/0xe0 [ 379.292419][ C0] ip6_route_info_create+0x44f/0x1210 [ 379.297802][ C0] ip6_route_add+0x24/0x130 [ 379.302342][ C0] addrconf_permanent_addr+0x692/0xa00 [ 379.307845][ C0] addrconf_notify+0x827/0xf00 [ 379.312638][ C0] raw_notifier_call_chain+0xcb/0x160 [ 379.318035][ C0] __dev_notify_flags+0x194/0x300 [ 379.323087][ C0] dev_change_flags+0xe3/0x1a0 [ 379.327873][ C0] do_setlink+0xcdb/0x3d60 [ 379.332306][ C0] rtnl_newlink+0x1658/0x1a50 [ 379.336996][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 379.342047][ C0] netlink_rcv_skb+0x1f5/0x440 [ 379.346996][ C0] netlink_unicast+0x774/0x920 [ 379.351777][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 379.356576][ C0] __sys_sendto+0x46d/0x620 [ 379.361098][ C0] __x64_sys_sendto+0xda/0xf0 [ 379.365791][ C0] do_syscall_64+0x4c/0xa0 [ 379.370495][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 379.376403][ C0] [ 379.378745][ C0] Last potentially related work creation: [ 379.384928][ C0] kasan_save_stack+0x35/0x60 [ 379.389625][ C0] kasan_record_aux_stack+0xb8/0x100 [ 379.394937][ C0] call_rcu+0x189/0x950 [ 379.399110][ C0] fib6_del+0x112b/0x1550 [ 379.403459][ C0] fib6_clean_node+0x293/0x540 [ 379.408240][ C0] fib6_walk_continue+0x640/0x8c0 [ 379.413462][ C0] fib6_walk+0x149/0x290 [ 379.417827][ C0] __fib6_clean_all+0x25f/0x3c0 [ 379.422703][ C0] rt6_disable_ip+0x127/0x6b0 [ 379.427391][ C0] addrconf_ifdown+0x155/0x19c0 [ 379.432259][ C0] addrconf_notify+0x445/0xf00 [ 379.437042][ C0] raw_notifier_call_chain+0xcb/0x160 [ 379.442427][ C0] dev_close_many+0x29f/0x400 [ 379.447126][ C0] unregister_netdevice_many+0x481/0x19f0 [ 379.452889][ C0] default_device_exit_batch+0x364/0x3c0 [ 379.458543][ C0] cleanup_net+0x791/0xba0 [ 379.462972][ C0] process_one_work+0x85f/0x1010 [ 379.467922][ C0] worker_thread+0xaa6/0x1290 [ 379.472611][ C0] kthread+0x436/0x520 [ 379.476693][ C0] ret_from_fork+0x1f/0x30 [ 379.481124][ C0] [ 379.483461][ C0] The buggy address belongs to the object at ffff888025f3e800 [ 379.483461][ C0] which belongs to the cache kmalloc-512 of size 512 [ 379.497529][ C0] The buggy address is located 42 bytes inside of [ 379.497529][ C0] 512-byte region [ffff888025f3e800, ffff888025f3ea00) [ 379.510732][ C0] The buggy address belongs to the page: [ 379.516379][ C0] page:ffffea000097cf00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888025f3d400 pfn:0x25f3c [ 379.527856][ C0] head:ffffea000097cf00 order:2 compound_mapcount:0 compound_pincount:0 [ 379.536195][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 379.544199][ C0] raw: 00fff00000010200 ffffea00017f6908 ffffea000174b908 ffff888016c41c80 [ 379.552813][ C0] raw: ffff888025f3d400 0000000000100006 00000001ffffffff 0000000000000000 [ 379.561414][ C0] page dumped because: kasan: bad access detected [ 379.567851][ C0] page_owner tracks the page as allocated [ 379.573580][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2422, ts 10985894609, free_ts 0 [ 379.591845][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 379.597418][ C0] __alloc_pages+0x1ee/0x480 [ 379.602030][ C0] new_slab+0xc0/0x4b0 [ 379.606116][ C0] ___slab_alloc+0x80a/0xdd0 [ 379.610723][ C0] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 379.616098][ C0] alloc_bprm+0x56/0x6a0 [ 379.620339][ C0] kernel_execve+0x49/0x900 [ 379.624841][ C0] call_usermodehelper_exec_async+0x207/0x350 [ 379.630903][ C0] ret_from_fork+0x1f/0x30 [ 379.635318][ C0] page_owner free stack trace missing [ 379.640687][ C0] [ 379.643005][ C0] Memory state around the buggy address: [ 379.648630][ C0] ffff888025f3e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.656685][ C0] ffff888025f3e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.664830][ C0] >ffff888025f3e800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.673082][ C0] ^ [ 379.678443][ C0] ffff888025f3e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.686494][ C0] ffff888025f3e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.694546][ C0] ================================================================== [ 379.702597][ C0] Disabling lock debugging due to kernel taint [ 379.708819][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 379.716025][ C0] CPU: 0 PID: 7099 Comm: syz.2.605 Tainted: G B syzkaller #0 [ 379.724713][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.734783][ C0] Call Trace: [ 379.738072][ C0] [ 379.740928][ C0] dump_stack_lvl+0x188/0x250 [ 379.745622][ C0] ? show_regs_print_info+0x20/0x20 [ 379.750844][ C0] ? load_image+0x400/0x400 [ 379.755365][ C0] panic+0x2e5/0x810 [ 379.759291][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 379.763813][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 379.769738][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 379.775649][ C0] ? _raw_spin_unlock+0x40/0x40 [ 379.780512][ C0] ? print_memory_metadata+0x314/0x400 [ 379.785986][ C0] ? rose_timer_expiry+0x470/0x490 [ 379.791120][ C0] check_panic_on_warn+0x80/0xa0 [ 379.796075][ C0] ? rose_timer_expiry+0x470/0x490 [ 379.801199][ C0] end_report+0x6d/0xf0 [ 379.805373][ C0] kasan_report+0x102/0x130 [ 379.809895][ C0] ? rose_timer_expiry+0x470/0x490 [ 379.815024][ C0] rose_timer_expiry+0x470/0x490 [ 379.819978][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 379.825019][ C0] call_timer_fn+0x17b/0x540 [ 379.829628][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 379.834670][ C0] ? __run_timers+0x800/0x800 [ 379.839364][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 379.844666][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 379.849886][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 379.854929][ C0] __run_timers+0x53e/0x800 [ 379.859451][ C0] ? detach_timer+0x2b0/0x2b0 [ 379.864144][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 379.870143][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 379.875013][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 379.880323][ C0] run_timer_softirq+0x63/0xf0 [ 379.885191][ C0] handle_softirqs+0x339/0x830 [ 379.889978][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 379.894932][ C0] ? do_softirq+0x210/0x210 [ 379.899456][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 379.904675][ C0] __irq_exit_rcu+0x13b/0x230 [ 379.909368][ C0] ? irq_exit_rcu+0x20/0x20 [ 379.913888][ C0] irq_exit_rcu+0x5/0x20 [ 379.918233][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 379.923886][ C0] [ 379.926826][ C0] [ 379.929864][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 379.935864][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 379.942389][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2f 8a 8c f7 65 8b 05 d0 97 3c 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 379.962021][ C0] RSP: 0018:ffffc90002f0f420 EFLAGS: 00000206 [ 379.968110][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 7af09d19442c9000 [ 379.976103][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 379.984096][ C0] RBP: ffffc90002f0f4b0 R08: ffffffff901d4107 R09: 1ffffffff203a820 [ 379.992345][ C0] R10: dffffc0000000000 R11: fffffbfff203a821 R12: dffffc0000000000 [ 380.000339][ C0] R13: dffffc0000000000 R14: ffff888028915050 R15: 1ffff920005e1e84 [ 380.008338][ C0] ? _raw_spin_unlock+0x40/0x40 [ 380.013213][ C0] __pagevec_lru_add+0x13e9/0x1780 [ 380.018439][ C0] ? lru_cache_add+0x750/0x750 [ 380.023223][ C0] lru_cache_add+0x516/0x750 [ 380.027848][ C0] shmem_getpage_gfp+0x186b/0x2d40 [ 380.032992][ C0] shmem_fault+0x1ac/0x540 [ 380.037446][ C0] ? shmem_fallocate+0xee0/0xee0 [ 380.042404][ C0] ? filemap_read_page+0x4c0/0x4c0 [ 380.047534][ C0] ? count_memcg_event_mm+0x324/0x370 [ 380.052948][ C0] __do_fault+0x141/0x330 [ 380.057309][ C0] handle_mm_fault+0x2985/0x4410 [ 380.062531][ C0] ? get_page+0xe0/0xe0 [ 380.066710][ C0] ? follow_page_mask+0xa6e/0x12d0 [ 380.071848][ C0] __get_user_pages+0x94b/0x11e0 [ 380.076814][ C0] ? populate_vma_page_range+0x290/0x290 [ 380.082466][ C0] ? read_lock_is_recursive+0x10/0x10 [ 380.087864][ C0] populate_vma_page_range+0x213/0x290 [ 380.093347][ C0] __mm_populate+0x275/0x3b0 [ 380.097955][ C0] ? check_vma_flags+0x480/0x480 [ 380.102909][ C0] ? up_write+0x1bb/0x420 [ 380.107255][ C0] vm_mmap_pgoff+0x212/0x2d0 [ 380.111868][ C0] ? account_locked_vm+0xe0/0xe0 [ 380.116835][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 380.121892][ C0] ksys_mmap_pgoff+0x140/0x790 [ 380.126677][ C0] ? mmap_region+0x1650/0x1650 [ 380.131464][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 380.136954][ C0] do_syscall_64+0x4c/0xa0 [ 380.141389][ C0] ? clear_bhb_loop+0x30/0x80 [ 380.146085][ C0] ? clear_bhb_loop+0x30/0x80 [ 380.150778][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 380.156703][ C0] RIP: 0033:0x7feec3c84799 [ 380.161143][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.180940][ C0] RSP: 002b:00007feec1ede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 380.189384][ C0] RAX: ffffffffffffffda RBX: 00007feec3efdfa0 RCX: 00007feec3c84799 [ 380.197374][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 380.205365][ C0] RBP: 00007feec3d1ac99 R08: ffffffffffffffff R09: 0000000000000000 [ 380.213359][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 380.221427][ C0] R13: 00007feec3efe038 R14: 00007feec3efdfa0 R15: 00007ffcfa537ce8 [ 380.229416][ C0] [ 380.232719][ C0] Kernel Offset: disabled [ 380.237042][ C0] Rebooting in 86400 seconds..