last executing test programs: 16.044732017s ago: executing program 2 (id=793): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10003}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0xf}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 13.773213341s ago: executing program 2 (id=797): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.759719592s ago: executing program 2 (id=803): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd0, &(0x7f0000005900), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 7.983341747s ago: executing program 2 (id=812): r0 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 7.883402975s ago: executing program 0 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 5.689947532s ago: executing program 2 (id=815): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) 5.591187339s ago: executing program 1 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x2, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 5.33651221s ago: executing program 0 (id=817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x2400c044) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffef}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0x8001, @private2, 0x100}}}, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r6, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 5.152340815s ago: executing program 1 (id=818): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev, @private1, [0x0, 0x0, 0xff], [], [], 0x843}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 5.064547612s ago: executing program 3 (id=819): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.047708154s ago: executing program 3 (id=820): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ftruncate(r3, 0x1) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ftruncate(r0, 0x1) ftruncate(r1, 0x1) ftruncate(r4, 0x1) 3.941006002s ago: executing program 0 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) 3.940298043s ago: executing program 1 (id=822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.59681681s ago: executing program 3 (id=823): getpid() r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0xfffffffffffffffc}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x10000000, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) sendmmsg(r0, &(0x7f0000001f80), 0x0, 0x41) write$rfkill(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={'trans=tcp,', {'port', 0x3d, 0x1800000000000000}}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.683267264s ago: executing program 0 (id=824): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8c, 0x4, 0x9, 0x1, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x42000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0x33) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c00bf2baacf00001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 1.758491428s ago: executing program 1 (id=825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb6525a732e749ba6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.678023225s ago: executing program 0 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6_icmp(0xa, 0x2, 0x3a) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r3, 0x1, {0x0, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, 0x0, {0x6, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.602158011s ago: executing program 3 (id=827): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r5, 0x1, {0x0, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0x6, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.516679518s ago: executing program 1 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) 673.361566ms ago: executing program 2 (id=829): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file2\x00', 0x218000, &(0x7f00000007c0)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@quota}, {@errors_remount}, {@grpid}, {@orlov}]}, 0x7c, 0x57f, &(0x7f0000001440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x40111, r4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) 377.33622ms ago: executing program 1 (id=830): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 334.208703ms ago: executing program 3 (id=831): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 333.410533ms ago: executing program 0 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 3 (id=833): syz_mount_image$udf(&(0x7f0000000380), &(0x7f00000001c0)='./file0\x00', 0x30001, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRES32], 0x2, 0xa41, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000400)={r4, 0x6, 0xee8}, &(0x7f0000001140)=0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.215' (ED25519) to the list of known hosts. [ 77.622916][ T5778] cgroup: Unknown subsys name 'net' [ 77.792281][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.529375][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.619081][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.628651][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.653921][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.661832][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.679454][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.686936][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.688290][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.709068][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.717259][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.726161][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.734269][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.734493][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.741805][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.756590][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.757018][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.771984][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.779700][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.788104][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.788789][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.803678][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.811729][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.813353][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.829675][ T5806] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.837233][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.255969][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 82.381173][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 82.505960][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 82.547932][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.555465][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.563575][ T5788] bridge_slave_0: entered allmulticast mode [ 82.570697][ T5788] bridge_slave_0: entered promiscuous mode [ 82.608072][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.615573][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.622965][ T5788] bridge_slave_1: entered allmulticast mode [ 82.630057][ T5788] bridge_slave_1: entered promiscuous mode [ 82.637359][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 82.708059][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.715340][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.722526][ T5791] bridge_slave_0: entered allmulticast mode [ 82.730648][ T5791] bridge_slave_0: entered promiscuous mode [ 82.760748][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.773004][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.782546][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.789906][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.797547][ T5791] bridge_slave_1: entered allmulticast mode [ 82.804698][ T5791] bridge_slave_1: entered promiscuous mode [ 82.906877][ T5788] team0: Port device team_slave_0 added [ 82.915662][ T5788] team0: Port device team_slave_1 added [ 82.932368][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.939937][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.947466][ T5787] bridge_slave_0: entered allmulticast mode [ 82.954555][ T5787] bridge_slave_0: entered promiscuous mode [ 82.983893][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.993368][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.000579][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.009246][ T5787] bridge_slave_1: entered allmulticast mode [ 83.016698][ T5787] bridge_slave_1: entered promiscuous mode [ 83.063972][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.109774][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.117376][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.145821][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.173754][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.190031][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.197476][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.205764][ T5789] bridge_slave_0: entered allmulticast mode [ 83.213129][ T5789] bridge_slave_0: entered promiscuous mode [ 83.221291][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.228577][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.254866][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.269651][ T5791] team0: Port device team_slave_0 added [ 83.278535][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.299960][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.307518][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.314912][ T5789] bridge_slave_1: entered allmulticast mode [ 83.322204][ T5789] bridge_slave_1: entered promiscuous mode [ 83.350849][ T5791] team0: Port device team_slave_1 added [ 83.375082][ T5787] team0: Port device team_slave_0 added [ 83.436502][ T5787] team0: Port device team_slave_1 added [ 83.461484][ T5788] hsr_slave_0: entered promiscuous mode [ 83.469158][ T5788] hsr_slave_1: entered promiscuous mode [ 83.480751][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.521877][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.542656][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.550282][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.576747][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.588535][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.596198][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.622256][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.635387][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.642376][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.668397][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.703098][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.710097][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.736550][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.780436][ T5789] team0: Port device team_slave_0 added [ 83.790500][ T5789] team0: Port device team_slave_1 added [ 83.814033][ T5104] Bluetooth: hci3: command tx timeout [ 83.819942][ T5806] Bluetooth: hci1: command tx timeout [ 83.864945][ T5787] hsr_slave_0: entered promiscuous mode [ 83.871447][ T5787] hsr_slave_1: entered promiscuous mode [ 83.878067][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.887196][ T5787] Cannot create hsr debugfs directory [ 83.892891][ T5104] Bluetooth: hci2: command tx timeout [ 83.898727][ T5806] Bluetooth: hci0: command tx timeout [ 83.910136][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.917187][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.943356][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.988609][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.995683][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.021736][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.044231][ T5791] hsr_slave_0: entered promiscuous mode [ 84.050674][ T5791] hsr_slave_1: entered promiscuous mode [ 84.057640][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.065319][ T5791] Cannot create hsr debugfs directory [ 84.212357][ T5789] hsr_slave_0: entered promiscuous mode [ 84.220454][ T5789] hsr_slave_1: entered promiscuous mode [ 84.227934][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.235681][ T5789] Cannot create hsr debugfs directory [ 84.504301][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.519161][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.562135][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.576178][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.660381][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.671815][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.691227][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.703386][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.798305][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.817988][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.830791][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.844274][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.952568][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.968463][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.988167][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.999121][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.019247][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.082015][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.115663][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.123174][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.160786][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.167991][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.237381][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.251932][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.316706][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.330968][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.358318][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.365508][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.387623][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.394800][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.429711][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.445424][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.452617][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.478442][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.485677][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.540737][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.589310][ T5787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.600360][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.625260][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.632487][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.658417][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.665969][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.718441][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.729266][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.801831][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.893364][ T5806] Bluetooth: hci1: command tx timeout [ 85.899325][ T5806] Bluetooth: hci3: command tx timeout [ 85.960983][ T5788] veth0_vlan: entered promiscuous mode [ 85.973435][ T5806] Bluetooth: hci0: command tx timeout [ 85.978936][ T5806] Bluetooth: hci2: command tx timeout [ 86.033755][ T5788] veth1_vlan: entered promiscuous mode [ 86.187835][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.247048][ T5788] veth0_macvtap: entered promiscuous mode [ 86.285236][ T5788] veth1_macvtap: entered promiscuous mode [ 86.310294][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.398827][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.423053][ T5791] veth0_vlan: entered promiscuous mode [ 86.435769][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.451943][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.484180][ T5791] veth1_vlan: entered promiscuous mode [ 86.492196][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.502241][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.512039][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.521181][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.570390][ T5787] veth0_vlan: entered promiscuous mode [ 86.624114][ T5787] veth1_vlan: entered promiscuous mode [ 86.640038][ T5789] veth0_vlan: entered promiscuous mode [ 86.686730][ T5789] veth1_vlan: entered promiscuous mode [ 86.759146][ T5791] veth0_macvtap: entered promiscuous mode [ 86.784206][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.792301][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.828914][ T5791] veth1_macvtap: entered promiscuous mode [ 86.844061][ T5787] veth0_macvtap: entered promiscuous mode [ 86.853287][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.867451][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.870645][ T5787] veth1_macvtap: entered promiscuous mode [ 86.896473][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.909325][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.931567][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.960962][ T5789] veth0_macvtap: entered promiscuous mode [ 86.985479][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.998213][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.010794][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.047235][ T5789] veth1_macvtap: entered promiscuous mode [ 87.059421][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.070383][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.080985][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.093520][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.109310][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.135696][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.175662][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.203194][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.319246][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.441088][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.451763][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.462099][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.474593][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.486278][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.499889][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.520492][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.704349][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.838910][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.973788][ T5104] Bluetooth: hci1: command tx timeout [ 87.980454][ T5806] Bluetooth: hci3: command tx timeout [ 88.090787][ T5806] Bluetooth: hci2: command tx timeout [ 88.096327][ T5104] Bluetooth: hci0: command tx timeout [ 88.143861][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.181663][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.212258][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.251994][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.262295][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.277775][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.292476][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.363316][ T5888] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.390697][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.406514][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.417079][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.432644][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.444910][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.458139][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.470449][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.620453][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.663016][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.671872][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.712811][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.763386][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 88.816818][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.826033][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.892370][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.908943][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.971530][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.988866][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.027861][ T5895] mmap: syz.1.7 (5895): VmData 45780992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 89.061617][ T1205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.095875][ T1205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.273044][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.281714][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.317876][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.342984][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 89.356135][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.451153][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 89.681624][ T5905] dvmrp0: entered allmulticast mode [ 89.716603][ T5905] dvmrp0: left allmulticast mode [ 90.053522][ T5806] Bluetooth: hci3: command tx timeout [ 90.059130][ T5104] Bluetooth: hci1: command tx timeout [ 90.133860][ T5806] Bluetooth: hci2: command tx timeout [ 90.133930][ T5104] Bluetooth: hci0: command tx timeout [ 91.676006][ T27] IPVS: starting estimator thread 0... [ 91.813714][ T5931] IPVS: using max 15 ests per chain, 36000 per kthread [ 92.259354][ T787] cfg80211: failed to load regulatory.db [ 92.400644][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 92.488621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.372765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 93.381186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.776303][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.056101][ T5967] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 95.273571][ T5971] syz.2.24[5971]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.342193][ T5972] Cannot find add_set index 0 as target [ 95.579438][ T5969] veth3: entered promiscuous mode [ 96.076032][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 96.139216][ T5979] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.425069][ T5985] loop2: detected capacity change from 0 to 128 [ 96.830777][ T5985] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 96.986261][ T5988] loop1: detected capacity change from 0 to 2048 [ 97.008669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 97.021437][ T5988] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.024019][ T5985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.164865][ T5988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.468571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.571028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.673354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.878144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 97.887141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.983217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.026796][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.232293][ T6017] ptrace attach of "./syz-executor exec"[6018] was attempted by "./syz-executor exec"[6017] [ 101.943497][ T6060] warning: `syz.3.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.327316][ T6061] netlink: 'syz.0.39': attribute type 21 has an invalid length. [ 102.428584][ T6083] netlink: 'syz.0.39': attribute type 39 has an invalid length. [ 102.741336][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 102.939592][ T6105] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 103.585616][ T6112] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 104.127633][ T6114] loop0: detected capacity change from 0 to 512 [ 104.232075][ T6114] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.45: casefold flag without casefold feature [ 104.527665][ T6114] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.45: couldn't read orphan inode 15 (err -117) [ 104.544628][ T6114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.958768][ T6126] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.47'. [ 104.968312][ T6126] openvswitch: netlink: ct_state flags 00030000 unsupported [ 105.338875][ T6114] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz.0.45: Invalid inode table block 0 in block_group 0 [ 105.629386][ T6114] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 105.640887][ T6114] EXT4-fs error (device loop0): ext4_setent:3695: inode #2: comm syz.0.45: mark_inode_dirty error [ 106.127400][ T6079] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm kworker/u4:23: Invalid inode table block 0 in block_group 0 [ 106.156540][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.445169][ T6142] loop0: detected capacity change from 0 to 2048 [ 106.639576][ T6145] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.860409][ T6157] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 107.860407][ T6142] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 107.920057][ T6142] Remounting filesystem read-only [ 108.011556][ T6142] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 108.043039][ T6142] NILFS (loop0): discard dirty page: offset=0, ino=2097152 [ 108.050861][ T6142] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 108.082838][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.095364][ T6161] veth3: entered promiscuous mode [ 108.106523][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.170159][ T6162] gretap1: entered allmulticast mode [ 108.225850][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.266817][ T6142] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 108.293057][ T6142] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 108.327922][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.396257][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.406596][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.416611][ T6142] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 108.461790][ T6142] NILFS (loop0): discard dirty block: blocknr=3, size=1024 [ 108.511627][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.560008][ T6142] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 108.619441][ T6142] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 108.705484][ T6142] NILFS (loop0): discard dirty page: offset=268697600, ino=6 [ 108.829343][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.219370][ T6142] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 109.307911][ T6142] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 109.345596][ T6142] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 109.360553][ T6142] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 109.369366][ T6142] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 109.376906][ T6142] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 109.403803][ T6142] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 109.411182][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.443033][ T6142] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 109.458748][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.484742][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.499708][ T6142] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 109.507731][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.517767][ T6142] NILFS (loop0): discard dirty page: offset=67371008, ino=3 [ 109.525692][ T6142] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.535286][ T6142] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 109.542631][ T6142] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 109.551303][ T6142] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 116.929352][ T6227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.493803][ T6254] loop3: detected capacity change from 0 to 8192 [ 122.607819][ T6254] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 122.621482][ T6254] loop3: partition table partially beyond EOD, truncated [ 122.673229][ T6254] loop3: p1 start 67108864 is beyond EOD, truncated [ 122.679920][ T6254] loop3: p2 size 61546 extends beyond EOD, truncated [ 122.727268][ T6254] loop3: p3 start 100859904 is beyond EOD, truncated [ 122.744706][ T6254] loop3: p5 start 67108864 is beyond EOD, truncated [ 122.751392][ T6254] loop3: p6 size 61546 extends beyond EOD, truncated [ 122.773242][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.175941][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 123.492393][ T5878] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 123.693037][ T5878] usb 4-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config [ 123.804800][ T5878] usb 4-1: config 0 has no interface number 0 [ 123.820091][ T5878] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 123.842305][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.871671][ T5878] usb 4-1: Product: syz [ 123.885577][ T5878] usb 4-1: Manufacturer: syz [ 123.906779][ T5878] usb 4-1: SerialNumber: syz [ 123.939381][ T5878] usb 4-1: config 0 descriptor?? [ 123.971459][ T5878] usb 4-1: can't set config #0, error -71 [ 124.045691][ T5878] usb 4-1: USB disconnect, device number 2 [ 124.209574][ T5807] udevd[5807]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 124.215210][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 124.218819][ T5797] udevd[5797]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 125.499309][ T6275] loop1: detected capacity change from 0 to 2048 [ 125.500582][ T6275] UDF-fs: bad mount option "" or missing value [ 126.162685][ C1] sched: RT throttling activated [ 126.675007][ T5790] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.259766][ T6300] loop2: detected capacity change from 0 to 128 [ 130.970217][ T6307] misc userio: No port type given on /dev/userio [ 130.991340][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 132.181604][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 133.813511][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.822759][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.233228][ T6348] netlink: 'syz.0.102': attribute type 3 has an invalid length. [ 136.894585][ T6356] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.105'. [ 136.942212][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.105'. [ 140.117531][ T6385] netlink: 'syz.0.111': attribute type 10 has an invalid length. [ 140.125384][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.111'. [ 140.137587][ T6385] batman_adv: batadv0: Adding interface: virt_wifi0 [ 140.144282][ T6385] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.170573][ T6385] batman_adv: batadv0: Interface activated: virt_wifi0 [ 142.636898][ T6409] syz.1.117 uses obsolete (PF_INET,SOCK_PACKET) [ 142.739005][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'. [ 146.543323][ T6416] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.165382][ T6413] syz.2.127 (6413) used greatest stack depth: 20720 bytes left [ 152.359168][ T28] audit: type=1326 audit(1756523373.254:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 152.539481][ T28] audit: type=1326 audit(1756523373.254:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 152.571095][ T28] audit: type=1326 audit(1756523373.254:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 152.595605][ T28] audit: type=1326 audit(1756523373.254:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 153.672749][ T28] audit: type=1326 audit(1756523373.254:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 153.782022][ T28] audit: type=1326 audit(1756523373.254:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbe138ec23 code=0x7ffc0000 [ 153.857896][ T6442] vlan2: entered allmulticast mode [ 153.863548][ T28] audit: type=1326 audit(1756523373.254:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdbe138d69f code=0x7ffc0000 [ 153.893730][ T28] audit: type=1326 audit(1756523373.564:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdbe138ec77 code=0x7ffc0000 [ 154.043894][ T28] audit: type=1326 audit(1756523374.014:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdbe138d550 code=0x7ffc0000 [ 154.105925][ T28] audit: type=1326 audit(1756523374.034:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdbe138d84a code=0x7ffc0000 [ 155.985800][ T6459] loop2: detected capacity change from 0 to 512 [ 155.999024][ T6459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.191874][ T6459] ext4: Unknown parameter 'smackfsdef' [ 157.246864][ T6459] Zero length message leads to an empty skb [ 158.192958][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 158.192973][ T28] audit: type=1326 audit(1756523379.094:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 158.317134][ T28] audit: type=1326 audit(1756523379.104:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 158.440805][ T28] audit: type=1326 audit(1756523379.144:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 158.509245][ T28] audit: type=1326 audit(1756523379.144:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 159.083313][ T6474] loop1: detected capacity change from 0 to 16 [ 159.159054][ T6474] erofs: (device loop1): mounted with root inode @ nid 36. [ 159.229776][ T5104] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 159.250543][ T6474] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 159.308281][ T6474] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 159.321093][ T6474] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 159.414402][ T28] audit: type=1326 audit(1756523379.144:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 159.729978][ T6474] syz.1.133 (6474) used greatest stack depth: 20016 bytes left [ 159.780054][ T28] audit: type=1326 audit(1756523379.144:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 159.823181][ T28] audit: type=1326 audit(1756523379.144:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 159.846810][ T28] audit: type=1326 audit(1756523379.144:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 159.869305][ T28] audit: type=1326 audit(1756523379.144:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 159.895130][ T28] audit: type=1326 audit(1756523379.144:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x7ffc0000 [ 159.923156][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.943333][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.970430][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.982869][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.009114][ T6479] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 160.016722][ T6479] batman_adv: batadv0: Removing interface: virt_wifi0 [ 160.323409][ T6488] netlink: 176 bytes leftover after parsing attributes in process `syz.1.139'. [ 160.341311][ T6488] ip6gretap0: entered promiscuous mode [ 160.350013][ T6488] netlink: 176 bytes leftover after parsing attributes in process `syz.1.139'. [ 163.525480][ T6529] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 164.299514][ T6529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.884942][ T6536] veth3: entered promiscuous mode [ 164.904425][ T6536] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 166.194952][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 166.194967][ T28] audit: type=1326 audit(1756523387.094:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6d18ebe9 code=0x7ffc0000 [ 166.443779][ T28] audit: type=1326 audit(1756523387.124:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6d18ebe9 code=0x7ffc0000 [ 166.475245][ T28] audit: type=1326 audit(1756523387.124:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb6d18ebe9 code=0x7ffc0000 [ 166.503407][ T28] audit: type=1326 audit(1756523387.124:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6d18ebe9 code=0x7ffc0000 [ 166.808428][ T28] audit: type=1326 audit(1756523387.134:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb6d18ebe9 code=0x7ffc0000 [ 166.863232][ T28] audit: type=1326 audit(1756523387.134:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6d18ebe9 code=0x7ffc0000 [ 166.941499][ T6556] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 167.342866][ T28] audit: type=1326 audit(1756523387.134:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6d18ebe9 code=0x7ffc0000 [ 167.466393][ T28] audit: type=1326 audit(1756523387.134:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb6d18ebe9 code=0x7ffc0000 [ 167.501920][ T28] audit: type=1326 audit(1756523387.134:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6d18ebe9 code=0x7ffc0000 [ 167.525164][ T28] audit: type=1326 audit(1756523387.134:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6d18ebe9 code=0x7ffc0000 [ 169.254353][ T6579] loop2: detected capacity change from 0 to 128 [ 169.293334][ T6579] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 169.609143][ T6419] udevd[6419]: incorrect ext4 checksum on /dev/loop2 [ 170.137272][ T6592] bridge_slave_0: left allmulticast mode [ 170.146562][ T6592] bridge_slave_0: left promiscuous mode [ 170.175553][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.438473][ T6592] bridge_slave_1: left allmulticast mode [ 170.462143][ T6592] bridge_slave_1: left promiscuous mode [ 170.469274][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.513735][ T6592] bond0: (slave bond_slave_0): Releasing backup interface [ 170.540686][ T6592] bond0: (slave bond_slave_1): Releasing backup interface [ 170.591871][ T6592] team0: Port device team_slave_0 removed [ 170.610263][ T6592] team0: Port device team_slave_1 removed [ 171.633371][ T5838] IPVS: starting estimator thread 0... [ 171.723070][ T6604] IPVS: using max 18 ests per chain, 43200 per kthread [ 171.813189][ T6609] tipc: Started in network mode [ 171.825890][ T6609] tipc: Node identity 6, cluster identity 4711 [ 171.842459][ T6609] tipc: Node number set to 6 [ 172.042407][ T6615] loop3: detected capacity change from 0 to 128 [ 172.314279][ T6616] syz.3.167: attempt to access beyond end of device [ 172.314279][ T6616] loop3: rw=2049, sector=145, nr_sectors = 248 limit=128 [ 172.397802][ T6613] loop1: detected capacity change from 0 to 40427 [ 172.414407][ T6613] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 172.423121][ T6613] F2FS-fs (loop1): Image doesn't support compression [ 172.430909][ T6613] F2FS-fs (loop1): Image doesn't support compression [ 172.437728][ T6613] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 172.486051][ T6613] F2FS-fs (loop1): invalid crc value [ 172.516289][ T6613] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.538355][ T6615] syz.3.167: attempt to access beyond end of device [ 172.538355][ T6615] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 172.559050][ T6615] syz.3.167: attempt to access beyond end of device [ 172.559050][ T6615] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 172.592454][ T6613] F2FS-fs (loop1): Start checkpoint disabled! [ 172.622395][ T6613] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 173.708758][ T6625] bridge_slave_0: left promiscuous mode [ 173.741239][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.766494][ T6625] bridge_slave_1: left allmulticast mode [ 173.772339][ T6625] bridge_slave_1: left promiscuous mode [ 173.778426][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.843368][ T6625] bond0: (slave bond_slave_0): Releasing backup interface [ 173.956835][ T6625] bond0: (slave bond_slave_1): Releasing backup interface [ 174.192861][ T6625] team0: Port device team_slave_0 removed [ 174.263704][ T6625] team0: Port device team_slave_1 removed [ 175.055255][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.179805][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.214648][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.247130][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.278395][ T6625] bond1: (slave veth3): Releasing backup interface [ 175.309833][ T6054] kworker/u4:12: attempt to access beyond end of device [ 175.309833][ T6054] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 175.327402][ T6054] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 175.342855][ T6054] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 175.358171][ T6054] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 175.453544][ T6628] team0: Mode changed to "loadbalance" [ 175.478917][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 182.303711][ T6647] syz.3.175: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 182.338025][ T6647] CPU: 0 PID: 6647 Comm: syz.3.175 Not tainted syzkaller #0 [ 182.345384][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.355503][ T6647] Call Trace: [ 182.358828][ T6647] [ 182.361801][ T6647] dump_stack_lvl+0x16c/0x230 [ 182.366537][ T6647] ? show_regs_print_info+0x20/0x20 [ 182.371786][ T6647] ? load_image+0x3b0/0x3b0 [ 182.376335][ T6647] ? __rcu_read_unlock+0x7c/0xd0 [ 182.381322][ T6647] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 182.387790][ T6647] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 182.394353][ T6647] warn_alloc+0x210/0x300 [ 182.398765][ T6647] ? zone_watermark_ok_safe+0x230/0x230 [ 182.404388][ T6647] ? _raw_spin_unlock+0x28/0x40 [ 182.409312][ T6647] __vmalloc_node_range+0x662/0x1320 [ 182.414665][ T6647] ? __asan_memset+0x22/0x40 [ 182.419338][ T6647] ? free_vm_area+0x50/0x50 [ 182.423908][ T6647] ? kvmalloc_node+0x70/0x180 [ 182.428638][ T6647] ? rcu_is_watching+0x15/0xb0 [ 182.433464][ T6647] ? kvmalloc_node+0x70/0x180 [ 182.438279][ T6647] ? trace_kmalloc+0x1f/0xa0 [ 182.442930][ T6647] kvmalloc_node+0x13f/0x180 [ 182.447567][ T6647] ? hash_ipport4_resize+0x1ed/0x1a30 [ 182.452988][ T6647] hash_ipport4_resize+0x1ed/0x1a30 [ 182.458246][ T6647] ? __local_bh_enable_ip+0x12e/0x1c0 [ 182.463682][ T6647] call_ad+0x43f/0xae0 [ 182.467806][ T6647] ? ip_set_ad+0x930/0x930 [ 182.472284][ T6647] ? __nla_parse+0x40/0x50 [ 182.476754][ T6647] ip_set_ad+0x787/0x930 [ 182.481138][ T6647] ? trace_raw_output_contention_end+0x90/0xd0 [ 182.487429][ T6647] ? ip_set_dump_done+0x1e0/0x1e0 [ 182.492499][ T6647] ? rcu_is_watching+0x15/0xb0 [ 182.497357][ T6647] nfnetlink_rcv_msg+0xb49/0x1130 [ 182.502418][ T6647] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.508552][ T6647] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 182.513826][ T6647] ? nfnetlink_unbind+0x160/0x160 [ 182.519006][ T6647] ? __dev_queue_xmit+0x1a64/0x35a0 [ 182.524241][ T6647] ? __netlink_deliver_tap+0x5ab/0x830 [ 182.529734][ T6647] ? netlink_deliver_tap+0x19c/0x1b0 [ 182.535053][ T6647] ? netlink_unicast+0x72c/0x8d0 [ 182.540023][ T6647] ? netlink_sendmsg+0x8c1/0xbe0 [ 182.545003][ T6647] ? ____sys_sendmsg+0x5bf/0x950 [ 182.549986][ T6647] ? ___sys_sendmsg+0x220/0x290 [ 182.554880][ T6647] ? __se_sys_sendmsg+0x1a5/0x270 [ 182.559947][ T6647] ? do_syscall_64+0x55/0xb0 [ 182.564592][ T6647] netlink_rcv_skb+0x216/0x480 [ 182.569400][ T6647] ? nfnetlink_unbind+0x160/0x160 [ 182.574471][ T6647] ? netlink_ack+0x1110/0x1110 [ 182.579291][ T6647] ? apparmor_capable+0x137/0x1a0 [ 182.584362][ T6647] ? bpf_lsm_capable+0x9/0x10 [ 182.589085][ T6647] ? security_capable+0x89/0xb0 [ 182.593992][ T6647] nfnetlink_rcv+0x274/0x2180 [ 182.598727][ T6647] ? __local_bh_enable_ip+0x12e/0x1c0 [ 182.604152][ T6647] ? lockdep_hardirqs_on+0x98/0x150 [ 182.609428][ T6647] ? __local_bh_enable_ip+0x12e/0x1c0 [ 182.614844][ T6647] ? _local_bh_enable+0xa0/0xa0 [ 182.619747][ T6647] ? __dev_queue_xmit+0x245/0x35a0 [ 182.624906][ T6647] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 182.630512][ T6647] ? __dev_queue_xmit+0x245/0x35a0 [ 182.635672][ T6647] ? ref_tracker_free+0x634/0x7d0 [ 182.640728][ T6647] ? __copy_skb_header+0xa7/0x550 [ 182.645806][ T6647] ? refcount_inc+0x70/0x70 [ 182.650369][ T6647] ? __skb_clone+0x63/0x790 [ 182.654937][ T6647] ? __skb_clone+0x480/0x790 [ 182.659600][ T6647] ? __netlink_deliver_tap+0x7e8/0x830 [ 182.665103][ T6647] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.670366][ T6647] ? __lock_acquire+0x7c80/0x7c80 [ 182.675450][ T6647] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.680696][ T6647] netlink_unicast+0x751/0x8d0 [ 182.685521][ T6647] netlink_sendmsg+0x8c1/0xbe0 [ 182.690366][ T6647] ? netlink_getsockopt+0x580/0x580 [ 182.695628][ T6647] ? aa_sock_msg_perm+0x94/0x150 [ 182.700609][ T6647] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 182.705932][ T6647] ? security_socket_sendmsg+0x80/0xa0 [ 182.711431][ T6647] ? netlink_getsockopt+0x580/0x580 [ 182.716671][ T6647] ____sys_sendmsg+0x5bf/0x950 [ 182.721486][ T6647] ? __asan_memset+0x22/0x40 [ 182.726115][ T6647] ? __sys_sendmsg_sock+0x30/0x30 [ 182.731177][ T6647] ? __import_iovec+0x5f2/0x860 [ 182.736083][ T6647] ? import_iovec+0x73/0xa0 [ 182.740637][ T6647] ___sys_sendmsg+0x220/0x290 [ 182.745363][ T6647] ? __sys_sendmsg+0x270/0x270 [ 182.750230][ T6647] __se_sys_sendmsg+0x1a5/0x270 [ 182.755145][ T6647] ? __x64_sys_sendmsg+0x80/0x80 [ 182.760143][ T6647] ? lockdep_hardirqs_on+0x98/0x150 [ 182.765386][ T6647] do_syscall_64+0x55/0xb0 [ 182.769847][ T6647] ? clear_bhb_loop+0x40/0x90 [ 182.774559][ T6647] ? clear_bhb_loop+0x40/0x90 [ 182.779274][ T6647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.785212][ T6647] RIP: 0033:0x7f15e438ebe9 [ 182.789669][ T6647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.809313][ T6647] RSP: 002b:00007f15e521b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.817766][ T6647] RAX: ffffffffffffffda RBX: 00007f15e45c6090 RCX: 00007f15e438ebe9 [ 182.825772][ T6647] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007 [ 182.833775][ T6647] RBP: 00007f15e4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 182.841775][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.849779][ T6647] R13: 00007f15e45c6128 R14: 00007f15e45c6090 R15: 00007fffa107cd98 [ 182.857807][ T6647] [ 182.883521][ T6647] Mem-Info: [ 182.886694][ T6647] active_anon:10780 inactive_anon:0 isolated_anon:0 [ 182.886694][ T6647] active_file:11140 inactive_file:39881 isolated_file:0 [ 182.886694][ T6647] unevictable:768 dirty:287 writeback:0 [ 182.886694][ T6647] slab_reclaimable:10195 slab_unreclaimable:91207 [ 182.886694][ T6647] mapped:29947 shmem:7082 pagetables:520 [ 182.886694][ T6647] sec_pagetables:0 bounce:0 [ 182.886694][ T6647] kernel_misc_reclaimable:0 [ 182.886694][ T6647] free:1348148 free_pcp:9810 free_cma:0 [ 182.933235][ T6647] Node 0 active_anon:43220kB inactive_anon:0kB active_file:44560kB inactive_file:159324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119788kB dirty:1148kB writeback:0kB shmem:26792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11940kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no [ 183.027571][ T6647] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 183.066926][ T6647] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.937569][ T6647] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 183.963597][ T6647] Node 0 DMA32 free:1480436kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:43508kB inactive_anon:0kB active_file:44560kB inactive_file:158012kB unevictable:1536kB writepending:1184kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:20252kB local_pcp:15928kB free_cma:0kB [ 184.153962][ T6647] lowmem_reserve[]: 0 0 1 1 1 [ 184.158723][ T6647] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.315060][ T6647] lowmem_reserve[]: 0 0 0 0 0 [ 184.333109][ T6647] Node 1 Normal free:3896332kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18592kB local_pcp:7872kB free_cma:0kB [ 184.383884][ T6647] lowmem_reserve[]: 0 0 0 0 0 [ 184.394445][ T6647] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.408153][ T6647] Node 0 DMA32: 14*4kB (UME) 671*8kB (UME) 338*16kB (UE) 143*32kB (UME) 272*64kB (UME) 49*128kB (UME) 31*256kB (UME) 18*512kB (UM) 9*1024kB (UM) 3*2048kB (M) 343*4096kB (M) = 1476528kB [ 184.472849][ T6647] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 184.485859][ T6647] Node 1 Normal: 253*4kB (UM) 65*8kB (UME) 41*16kB (UME) 40*32kB (UME) 16*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3896332kB [ 184.503861][ T6647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.521934][ T6647] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.542990][ T6647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.557193][ T6697] netlink: 'syz.2.186': attribute type 21 has an invalid length. [ 184.565530][ T6647] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.575083][ T6697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.186'. [ 184.584636][ T6647] 53940 total pagecache pages [ 184.593256][ T6647] 0 pages in swap cache [ 184.607103][ T6647] Free swap = 124448kB [ 184.616333][ T6647] Total swap = 124996kB [ 184.630577][ T6647] 2097051 pages RAM [ 184.647700][ T6647] 0 pages HighMem/MovableOnly [ 184.652429][ T6647] 416139 pages reserved [ 184.666204][ T6647] 0 pages cma reserved [ 185.495573][ T6708] process 'syz.1.187' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 186.429299][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 187.477156][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 187.602386][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.634250][ T9] usb 3-1: config 0 descriptor?? [ 189.131104][ T9] usb 3-1: Cannot set autoneg [ 189.136528][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 189.143560][ T9] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 189.215234][ T9] usb 3-1: USB disconnect, device number 2 [ 194.363593][ T27] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 194.576213][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 195.150285][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.156984][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.173398][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 195.193773][ T27] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 195.222018][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.249491][ T27] usb 3-1: Product: syz [ 196.640701][ T27] usb 3-1: Manufacturer: syz [ 196.645698][ T27] usb 3-1: SerialNumber: syz [ 196.673902][ T27] usb 3-1: config 0 descriptor?? [ 196.731867][ T27] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 197.247706][ T5878] usb 3-1: USB disconnect, device number 3 [ 197.350717][ T6792] loop1: detected capacity change from 0 to 256 [ 197.380764][ T6781] ceph: No mds server is up or the cluster is laggy [ 197.411212][ T27] libceph: connect (1)[c::]:6789 error -101 [ 197.500981][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 197.597109][ T6792] FAT-fs (loop1): Directory bread(block 64) failed [ 197.604460][ T6792] FAT-fs (loop1): Directory bread(block 65) failed [ 197.611867][ T6792] FAT-fs (loop1): Directory bread(block 66) failed [ 197.619200][ T6792] FAT-fs (loop1): Directory bread(block 67) failed [ 197.626618][ T6792] FAT-fs (loop1): Directory bread(block 68) failed [ 197.633642][ T6792] FAT-fs (loop1): Directory bread(block 69) failed [ 197.641406][ T6792] FAT-fs (loop1): Directory bread(block 70) failed [ 197.648344][ T6792] FAT-fs (loop1): Directory bread(block 71) failed [ 197.655824][ T6792] FAT-fs (loop1): Directory bread(block 72) failed [ 197.662570][ T6792] FAT-fs (loop1): Directory bread(block 73) failed [ 198.531638][ T6786] loop3: detected capacity change from 0 to 2048 [ 198.559596][ T6786] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 198.629649][ T6786] NILFS (loop3): mounting unchecked fs [ 198.767770][ T6786] NILFS (loop3): recovery complete [ 198.860856][ T6794] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.413534][ T6805] Falling back ldisc for ttyS3. [ 201.616525][ T6818] binder: 6816:6818 ioctl c0306201 0 returned -14 [ 201.931993][ T6828] netlink: 'syz.1.222': attribute type 10 has an invalid length. [ 201.989023][ T6828] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 202.074081][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 203.156533][ T6827] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 204.937931][ T6868] SET target dimension over the limit! [ 206.232753][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.240772][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.287485][ T6884] bridge0: entered allmulticast mode [ 206.327960][ T6887] bridge_slave_1: left allmulticast mode [ 206.360350][ T6890] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 206.360350][ T6890] program syz.2.244 not setting count and/or reply_len properly [ 206.388493][ T6887] bridge_slave_1: left promiscuous mode [ 206.405056][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.460731][ T6887] bridge_slave_0: left allmulticast mode [ 206.468240][ T6887] bridge_slave_0: left promiscuous mode [ 206.478866][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.580082][ T6890] netlink: 'syz.2.244': attribute type 10 has an invalid length. [ 206.649017][ T6890] team0: Port device dummy0 added [ 206.735649][ T6898] netlink: 'syz.0.246': attribute type 5 has an invalid length. [ 206.760182][ T6898] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.246'. [ 206.915115][ T6900] loop2: detected capacity change from 0 to 4096 [ 206.938301][ T6900] __ntfs_error: 21 callbacks suppressed [ 206.938319][ T6900] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 206.960932][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 206.965145][ T6900] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 206.967141][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 206.976818][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 206.982259][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 206.982875][ T6900] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 207.028341][ T6902] loop1: detected capacity change from 0 to 512 [ 207.040642][ T6900] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 207.064121][ T6902] ======================================================= [ 207.064121][ T6902] WARNING: The mand mount option has been deprecated and [ 207.064121][ T6902] and is ignored by this kernel. Remove the mand [ 207.064121][ T6902] option from the mount to silence this warning. [ 207.064121][ T6902] ======================================================= [ 207.112035][ T6902] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 207.136767][ T6902] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 207.151068][ T6902] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 207.165476][ T6900] ntfs: volume version 3.1. [ 207.186492][ T6902] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 207.201670][ T6902] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e11c, mo2=0000] [ 207.211002][ T6902] EXT4-fs (loop1): failed to initialize system zone (-117) [ 207.218581][ T6902] EXT4-fs (loop1): mount failed [ 207.978316][ T6917] loop1: detected capacity change from 0 to 164 [ 208.814526][ T6793] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.533435][ T6936] sg_write: data in/out 1048540/10 bytes for SCSI command 0xc0-- guessing data in; [ 210.533435][ T6936] program syz.3.257 not setting count and/or reply_len properly [ 212.362848][ T6936] netlink: 'syz.3.257': attribute type 10 has an invalid length. [ 212.446219][ T6936] team0: Port device dummy0 added [ 214.469105][ T6957] loop1: detected capacity change from 0 to 4096 [ 216.987706][ T28] audit: type=1326 audit(1756523437.884:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 217.082068][ T28] audit: type=1326 audit(1756523437.884:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 217.175490][ T28] audit: type=1326 audit(1756523437.884:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 217.262353][ T28] audit: type=1326 audit(1756523437.884:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 217.317082][ T28] audit: type=1326 audit(1756523437.884:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 217.370204][ T28] audit: type=1326 audit(1756523437.884:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 217.412962][ T27] IPVS: starting estimator thread 0... [ 217.422495][ T28] audit: type=1326 audit(1756523437.884:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 217.477236][ T28] audit: type=1326 audit(1756523437.914:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 217.515121][ T6980] IPVS: using max 17 ests per chain, 40800 per kthread [ 217.553027][ T28] audit: type=1326 audit(1756523437.914:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 217.628733][ T28] audit: type=1326 audit(1756523437.914:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 218.656303][ T6994] netlink: 116 bytes leftover after parsing attributes in process `syz.0.273'. [ 219.203842][ T7000] sctp: [Deprecated]: syz.2.274 (pid 7000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.203842][ T7000] Use struct sctp_sack_info instead [ 219.432097][ T6994] team0: Mode changed to "broadcast" [ 221.405573][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 226.216109][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 226.274557][ T7056] vlan2: entered promiscuous mode [ 226.414811][ T7056] team0: entered promiscuous mode [ 226.420304][ T7056] team_slave_0: entered promiscuous mode [ 226.436338][ T7056] team_slave_1: entered promiscuous mode [ 226.445997][ T7056] dummy0: entered promiscuous mode [ 228.510003][ T7074] syz_tun: entered allmulticast mode [ 228.525033][ T7072] syz_tun: left allmulticast mode [ 229.572995][ T7077] loop3: detected capacity change from 0 to 32768 [ 229.580654][ T7077] XFS: ikeep mount option is deprecated. [ 229.623103][ T7077] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.718736][ T7077] XFS (loop3): Ending clean mount [ 229.743520][ T7077] XFS (loop3): Quotacheck needed: Please wait. [ 230.350258][ T7077] XFS (loop3): Quotacheck: Done. [ 230.634285][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 230.634300][ T28] audit: type=1326 audit(1756523451.534:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.3.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 230.746424][ T28] audit: type=1326 audit(1756523451.574:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.3.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e438ebe9 code=0x7ffc0000 [ 231.412190][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 231.761548][ T7113] loop2: detected capacity change from 0 to 512 [ 231.835012][ T7113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.873953][ T7113] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.943397][ T7113] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.304: corrupted inode contents [ 231.971774][ T7113] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz.2.304: mark_inode_dirty error [ 231.985538][ T7113] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.304: corrupted inode contents [ 231.998366][ T7113] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.304: mark_inode_dirty error [ 232.271552][ T7122] loop1: detected capacity change from 0 to 2048 [ 232.445220][ T7122] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 232.674600][ T7122] NILFS (loop1): mounting unchecked fs [ 232.931760][ T7122] NILFS (loop1): recovery complete [ 232.976116][ T7125] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.057237][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.232209][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.309'. [ 234.334621][ T7134] syz.1.309 (7134) used greatest stack depth: 19048 bytes left [ 235.607538][ T9] libceph: connect (1)[c::]:6789 error -101 [ 235.618306][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 235.639273][ T9] libceph: connect (1)[c::]:6789 error -101 [ 235.693299][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 236.072108][ T7151] ceph: No mds server is up or the cluster is laggy [ 236.600583][ T7162] loop1: detected capacity change from 0 to 1024 [ 236.677294][ T7162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 236.868646][ T7162] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.003271][ T7167] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 237.906467][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 239.540365][ T7183] tipc: Failed to remove unknown binding: 66,1,1/6:2939789224/2939789226 [ 239.551684][ T7183] tipc: Failed to remove unknown binding: 66,1,1/6:2939789224/2939789226 [ 239.733380][ T7183] tipc: Failed to remove unknown binding: 66,1,1/6:2939789224/2939789226 [ 241.056970][ T7191] loop1: detected capacity change from 0 to 2048 [ 241.075012][ T7193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.155833][ T8] wlan1: authenticate with 08:02:11:00:00:00 [ 241.165624][ T7193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.177471][ T8] wlan1: No basic rates, using min rate instead [ 241.268311][ T7193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.285153][ T8] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 241.351411][ T7191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.145733][ T6077] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 242.274041][ T6077] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 243.310179][ T6097] wlan1: authentication with 08:02:11:00:00:00 timed out [ 243.658004][ T7214] loop1: detected capacity change from 0 to 512 [ 243.730099][ T7214] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 243.746323][ T7214] System zones: 0-2, 18-18, 34-35 [ 243.778569][ T7214] EXT4-fs error (device loop1): ext4_quota_enable:7131: inode #4: comm syz.1.330: iget: bad i_size value: 5910974510929920 [ 243.800007][ T7214] EXT4-fs error (device loop1): ext4_quota_enable:7134: comm syz.1.330: Bad quota inode: 4, type: 1 [ 243.815563][ T7214] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 243.840953][ T7214] EXT4-fs (loop1): mount failed [ 248.273494][ T7278] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 251.399354][ T7306] No such timeout policy "syz1" [ 254.121141][ T7315] loop2: detected capacity change from 0 to 256 [ 254.261050][ T7315] binder: 7313:7315 ioctl 40086607 2000000001c0 returned -22 [ 255.068581][ T7328] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 256.055829][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.062273][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.113307][ T7329] xt_TPROXY: Can be used only with -p tcp or -p udp [ 256.339370][ T7331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.528413][ T7335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.144878][ T7331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.474852][ T7339] sctp: [Deprecated]: syz.2.362 (pid 7339) Use of int in max_burst socket option. [ 257.474852][ T7339] Use struct sctp_assoc_value instead [ 257.516785][ T7339] netlink: 'syz.2.362': attribute type 4 has an invalid length. [ 257.988041][ T7342] mmap: syz.2.363 (7342) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 261.676361][ T7380] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 262.750856][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 264.068426][ T7408] tipc: Started in network mode [ 264.076220][ T7408] tipc: Node identity ba6dc4fd5915, cluster identity 4711 [ 264.085686][ T7408] tipc: Enabled bearer , priority 0 [ 264.099556][ T7408] syzkaller0: entered promiscuous mode [ 264.116497][ T7408] syzkaller0: entered allmulticast mode [ 264.240246][ T7408] tipc: Resetting bearer [ 264.278906][ T7407] tipc: Resetting bearer [ 264.313265][ T7407] tipc: Disabling bearer [ 265.039278][ T7419] netlink: 277 bytes leftover after parsing attributes in process `syz.0.388'. [ 265.199489][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.389'. [ 266.890699][ T7445] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 270.763305][ T7469] netlink: 292 bytes leftover after parsing attributes in process `syz.1.403'. [ 270.832006][ T7471] tipc: Enabling of bearer rejected, failed to enable media [ 275.131400][ T7500] loop2: detected capacity change from 0 to 32768 [ 275.238731][ T7500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.408 (7500) [ 275.451896][ T7500] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.462909][ T7500] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 275.471706][ T7500] BTRFS info (device loop2): turning on sync discard [ 275.478807][ T7500] BTRFS info (device loop2): setting nodatacow, compression disabled [ 275.487077][ T7500] BTRFS info (device loop2): turning off barriers [ 275.493978][ T7500] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 275.504745][ T7500] BTRFS info (device loop2): trying to use backup root at mount time [ 275.512991][ T7500] BTRFS info (device loop2): metadata ratio 3 [ 275.519123][ T7500] BTRFS info (device loop2): enabling auto defrag [ 275.525823][ T7500] BTRFS info (device loop2): max_inline at 0 [ 275.531856][ T7500] BTRFS info (device loop2): using free space tree [ 275.723994][ T6099] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 275.729445][ T7516] loop1: detected capacity change from 0 to 1024 [ 275.753660][ T7516] EXT4-fs: Ignoring removed nobh option [ 275.759286][ T7516] EXT4-fs: Ignoring removed bh option [ 275.773342][ T7500] BTRFS error (device loop2): failed to load root extent [ 275.780515][ T7500] BTRFS warning (device loop2): try to load backup roots slot 1 [ 275.791504][ T6097] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 275.888754][ T7500] BTRFS warning (device loop2): couldn't read tree root [ 275.896784][ T7500] BTRFS warning (device loop2): try to load backup roots slot 2 [ 275.906031][ T6099] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 275.963903][ T7516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.377228][ T7500] BTRFS warning (device loop2): couldn't read tree root [ 276.384455][ T7500] BTRFS warning (device loop2): try to load backup roots slot 3 [ 276.409441][ T7500] BTRFS info (device loop2): enabling ssd optimizations [ 276.423673][ T7500] BTRFS info (device loop2): rebuilding free space tree [ 276.493197][ T7500] BTRFS info (device loop2): checking UUID tree [ 277.115997][ T5789] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.644087][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.079892][ T28] audit: type=1326 audit(1756523505.974:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.0.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbe138ebe9 code=0x0 [ 287.436388][ T7594] loop1: detected capacity change from 0 to 1024 [ 287.615875][ T7594] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.374316][ T7594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.503071][ T7604] sctp: [Deprecated]: syz.3.432 (pid 7604) Use of int in max_burst socket option. [ 289.503071][ T7604] Use struct sctp_assoc_value instead [ 289.807794][ T7604] netlink: 'syz.3.432': attribute type 4 has an invalid length. [ 289.817515][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.872785][ T5792] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 292.103980][ T5792] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 292.130316][ T5792] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 292.180056][ T5792] usb 2-1: config 0 has no interface number 0 [ 292.199946][ T5792] usb 2-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 292.282916][ T5792] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 292.301372][ T5792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.334838][ T5792] usb 2-1: config 0 descriptor?? [ 292.651933][ T23] usb 2-1: USB disconnect, device number 2 [ 295.132053][ T7653] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 295.199189][ T7653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.666618][ T7653] bond2: (slave geneve2): making interface the new active one [ 297.732161][ T7653] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 297.945676][ T7670] loop2: detected capacity change from 0 to 65 [ 297.978247][ T7670] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 299.151053][ T7681] netlink: 184 bytes leftover after parsing attributes in process `syz.2.453'. [ 299.165157][ T7681] bond0: entered allmulticast mode [ 299.170348][ T7681] bond_slave_0: entered allmulticast mode [ 299.177164][ T7681] bond_slave_1: entered allmulticast mode [ 299.494308][ T7686] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.695753][ T7704] tipc: Started in network mode [ 301.700745][ T7704] tipc: Node identity ae82957a694c, cluster identity 4711 [ 301.763963][ T7704] tipc: Enabled bearer , priority 0 [ 301.779503][ T7707] syzkaller0: entered promiscuous mode [ 301.813782][ T7707] syzkaller0: entered allmulticast mode [ 302.055053][ T7712] loop1: detected capacity change from 0 to 1764 [ 302.787773][ T7707] tipc: Resetting bearer [ 302.832917][ T6419] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.897856][ T7701] tipc: Resetting bearer [ 303.078259][ T5878] tipc: Node number set to 3352204666 [ 303.177160][ T7701] tipc: Disabling bearer [ 304.452283][ T7730] Cannot find add_set index 0 as target [ 304.914161][ T7728] loop3: detected capacity change from 0 to 4096 [ 304.921815][ T7728] ntfs3: Bad value for 'gid' [ 304.970131][ T6419] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.737514][ T7746] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 307.405742][ T7750] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 307.418514][ T7750] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 307.638120][ T7746] gretap1: entered promiscuous mode [ 307.683024][ T7746] bond3: (slave gretap1): making interface the new active one [ 307.691536][ T7746] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 307.715552][ T7754] macvlan2: entered promiscuous mode [ 307.722171][ T7754] macvlan2: entered allmulticast mode [ 307.738106][ T7754] bond3: entered promiscuous mode [ 307.744554][ T7754] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.355021][ T7754] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 308.424958][ T7754] bond3: left promiscuous mode [ 309.750996][ T7776] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 310.295996][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 310.750798][ T7776] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 310.778259][ T7776] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 314.028715][ T7807] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 314.036863][ T7807] netlink: 'syz.0.488': attribute type 2 has an invalid length. [ 317.616722][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.624838][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.851548][ T7858] netlink: 'syz.1.493': attribute type 10 has an invalid length. [ 319.859536][ T7858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.493'. [ 319.884760][ T7858] batman_adv: batadv0: Adding interface: virt_wifi0 [ 319.891491][ T7858] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.917332][ T7858] batman_adv: batadv0: Interface activated: virt_wifi0 [ 321.765816][ T7868] loop3: detected capacity change from 0 to 1024 [ 321.977800][ T7868] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.088861][ T7868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.358069][ T7886] Cannot find add_set index 0 as target [ 325.105442][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.554532][ T7902] 9pnet_fd: p9_fd_create_unix (7902): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 327.356075][ T7910] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 328.184218][ T7910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.718685][ T7912] bond1: (slave geneve2): making interface the new active one [ 330.046898][ T7912] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 331.089456][ T7941] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 337.833023][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 338.419311][ T7990] loop2: detected capacity change from 0 to 1024 [ 338.641373][ T7990] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 338.937315][ T7990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.506262][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.873188][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 341.882122][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 345.145347][ T8025] xt_TPROXY: Can be used only with -p tcp or -p udp [ 345.215809][ T27] IPVS: starting estimator thread 0... [ 345.312822][ T8031] IPVS: using max 26 ests per chain, 62400 per kthread [ 345.684870][ T8033] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 345.928969][ T8043] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 345.946864][ T8043] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 352.006382][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 352.290752][ T8085] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 352.362765][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'. [ 352.372452][ T8089] bond1: entered promiscuous mode [ 352.399757][ T8089] ip6gretap1: entered promiscuous mode [ 352.406639][ T8089] bond1: entered allmulticast mode [ 352.415171][ T8089] ip6gretap1: entered allmulticast mode [ 352.437370][ T8089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.362885][ T8111] ksmbd: Unknown IPC event: 8, ignore. [ 356.693271][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 358.325801][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 358.355112][ T8148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.404083][ T8148] vlan2: entered promiscuous mode [ 358.409554][ T8148] bond2: entered promiscuous mode [ 358.414912][ T8148] vlan2: entered allmulticast mode [ 358.420416][ T8148] bond2: entered allmulticast mode [ 358.491067][ T8148] gretap1: entered promiscuous mode [ 358.497786][ T8148] gretap1: entered allmulticast mode [ 358.504549][ T8148] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 359.323996][ T8155] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 359.562439][ T8159] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.571529][ T8159] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.594113][ T8159] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.988494][ T8159] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 360.012331][ T8159] bond4: (slave geneve3): making interface the new active one [ 360.031486][ T8159] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 360.269785][ T8155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.578'. [ 360.280473][ T8155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 361.513977][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 361.834031][ T27] usb 4-1: config 0 has no interfaces? [ 361.885416][ T27] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 361.937189][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.018815][ T27] usb 4-1: Product: syz [ 362.056892][ T27] usb 4-1: Manufacturer: syz [ 362.061999][ T27] usb 4-1: SerialNumber: syz [ 362.078134][ T27] usb 4-1: config 0 descriptor?? [ 364.181047][ T27] usb 4-1: USB disconnect, device number 3 [ 367.235028][ T8219] tipc: Enabling of bearer rejected, failed to enable media [ 367.375430][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 368.585542][ T8236] tipc: Enabled bearer , priority 0 [ 368.780809][ T8236] syzkaller0: entered promiscuous mode [ 368.787158][ T8236] syzkaller0: entered allmulticast mode [ 368.839758][ T8240] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 368.872416][ T8236] tipc: Resetting bearer [ 368.907319][ T8235] tipc: Resetting bearer [ 369.011178][ T8235] tipc: Disabling bearer [ 370.270408][ T8256] tipc: Enabled bearer , priority 0 [ 370.294056][ T8256] syzkaller0: entered promiscuous mode [ 370.311786][ T8256] syzkaller0: entered allmulticast mode [ 371.523389][ T8263] tipc: Resetting bearer [ 371.652988][ T8254] tipc: Resetting bearer [ 372.077473][ T8271] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 372.758966][ T8254] tipc: Disabling bearer [ 372.988970][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 373.215310][ T8283] loop3: detected capacity change from 0 to 64 [ 373.881937][ T8285] loop2: detected capacity change from 0 to 2048 [ 373.926528][ T8285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.992793][ T8285] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.775037][ T8290] loop1: detected capacity change from 0 to 1024 [ 375.828687][ T8290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.911116][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.659165][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.472938][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.588326][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.268718][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 380.288491][ T8327] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 386.154266][ T8369] xt_TCPMSS: Only works on TCP SYN packets [ 389.334674][ T8380] binder: 8379:8380 ioctl c0306201 0 returned -14 [ 391.181254][ T8390] netlink: 'syz.1.634': attribute type 4 has an invalid length. [ 392.299572][ T8396] tipc: Cannot configure node identity twice [ 392.399319][ T8403] loop2: detected capacity change from 0 to 512 [ 393.460184][ T8403] EXT4-fs (loop2): Test dummy encryption mode enabled [ 393.629503][ T8403] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 393.726584][ T8403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 393.751049][ T8403] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.640: bad orphan inode 131083 [ 393.774133][ T8403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.948887][ T8403] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 397.041049][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 397.098859][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.475826][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 398.291095][ T8464] tipc: Enabling of bearer rejected, failed to enable media [ 400.114449][ T8487] tipc: Enabled bearer , priority 0 [ 400.123455][ T8487] syzkaller0: entered promiscuous mode [ 400.129077][ T8487] syzkaller0: entered allmulticast mode [ 401.083190][ T8486] tipc: Resetting bearer [ 401.192285][ T8486] tipc: Disabling bearer [ 403.428418][ T8504] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 403.435365][ T8504] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 403.464524][ T8504] vhci_hcd vhci_hcd.0: Device attached [ 404.185490][ T8502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 404.201987][ T8502] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 404.208561][ T8502] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.218997][ T8502] vhci_hcd vhci_hcd.0: Device attached [ 404.236317][ T8502] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 404.242989][ T8502] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 404.256122][ T8502] vhci_hcd vhci_hcd.0: Device attached [ 404.280522][ T8502] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 404.287180][ T8502] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 404.391499][ T5878] vhci_hcd: vhci_device speed not set [ 404.567138][ T8502] vhci_hcd vhci_hcd.0: Device attached [ 404.604416][ T8504] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 404.647184][ T8512] vhci_hcd: connection closed [ 404.650510][ T8510] vhci_hcd: connection closed [ 404.692745][ T5878] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 405.308909][ T8505] vhci_hcd: connection closed [ 405.309130][ T8508] vhci_hcd: connection closed [ 405.353180][ T6075] vhci_hcd: stop threads [ 405.390959][ T6075] vhci_hcd: release socket [ 405.397810][ T6075] vhci_hcd: disconnect device [ 405.415126][ T6075] vhci_hcd: stop threads [ 405.421500][ T6075] vhci_hcd: release socket [ 405.504598][ T8506] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 405.513481][ T6075] vhci_hcd: disconnect device [ 405.707095][ T8522] tipc: Enabled bearer , priority 0 [ 405.734391][ T6075] vhci_hcd: stop threads [ 405.738889][ T6075] vhci_hcd: release socket [ 405.745895][ T8522] tipc: Resetting bearer [ 405.752339][ T6075] vhci_hcd: disconnect device [ 405.761825][ T6075] vhci_hcd: stop threads [ 405.775900][ T6075] vhci_hcd: release socket [ 405.791630][ T6075] vhci_hcd: disconnect device [ 407.579693][ T8535] loop2: detected capacity change from 0 to 32768 [ 407.714796][ T8535] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 407.723502][ T8535] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 407.822734][ T8535] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 407.872677][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 408.266632][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 408.547714][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 281ms [ 408.584553][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 408.615133][ T8535] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 410.641717][ T5878] vhci_hcd: vhci_device speed not set [ 411.539053][ T8559] tipc: Enabling of bearer rejected, failed to enable media [ 411.935605][ T8573] tipc: Enabling of bearer rejected, already enabled [ 412.160778][ T8576] tipc: Enabled bearer , priority 0 [ 412.194158][ T8576] syzkaller0: entered promiscuous mode [ 412.199709][ T8576] syzkaller0: entered allmulticast mode [ 412.270338][ T8576] tipc: Resetting bearer [ 412.544492][ T8575] tipc: Resetting bearer [ 413.243370][ T8575] tipc: Disabling bearer [ 417.239142][ T8618] option changes via remount are deprecated (pid=8610 comm=syz.1.687) [ 419.047618][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 422.383891][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 422.573924][ T8679] loop2: detected capacity change from 0 to 128 [ 422.589790][ T8679] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.634970][ T8679] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 424.587773][ T6079] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 429.205371][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 434.881679][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 438.462023][ T8787] netlink: 32 bytes leftover after parsing attributes in process `syz.0.735'. [ 438.471341][ T8787] netlink: 32 bytes leftover after parsing attributes in process `syz.0.735'. [ 439.511985][ T8793] batadv_slave_1: entered promiscuous mode [ 439.537962][ T8793] hsr0: entered promiscuous mode [ 439.544409][ T8793] batadv_slave_1: left promiscuous mode [ 439.574605][ T8792] hsr0: left promiscuous mode [ 440.011219][ T8797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.729'. [ 440.076582][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 440.352376][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 440.377571][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.630554][ T8817] tipc: Enabling of bearer rejected, failed to enable media [ 440.759881][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 442.463359][ T8845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.742'. [ 443.127558][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020d51800: rx timeout, send abort [ 443.637835][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020d51800: abort rx timeout. Force session deactivation [ 450.637853][ T8890] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 450.661788][ T8892] capability: warning: `syz.2.755' uses deprecated v2 capabilities in a way that may be insecure [ 450.699200][ T8890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.731319][ T8893] bond1: (slave ip6erspan0): making interface the new active one [ 450.741857][ T8893] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 450.829398][ T8890] gretap1: entered promiscuous mode [ 450.847294][ T8890] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 450.890910][ T8883] syz.3.752 (8883) used greatest stack depth: 17672 bytes left [ 450.909173][ T8890] macvlan2: entered promiscuous mode [ 450.916386][ T8890] macvlan2: entered allmulticast mode [ 450.927017][ T8890] bond1: entered promiscuous mode [ 450.933116][ T8890] ip6erspan0: entered promiscuous mode [ 450.939947][ T8890] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 450.948533][ T8890] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 450.966567][ T8890] bond1: left promiscuous mode [ 450.971519][ T8890] ip6erspan0: left promiscuous mode [ 451.583252][ T787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 451.943097][ T787] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 451.971066][ T787] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 452.013546][ T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 452.049954][ T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 452.124271][ T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 452.177812][ T787] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 452.197268][ T787] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 452.208110][ T787] usb 2-1: Product: syz [ 452.212341][ T787] usb 2-1: Manufacturer: syz [ 452.231744][ T787] cdc_wdm 2-1:1.0: skipping garbage [ 452.239528][ T8907] tipc: Enabled bearer , priority 0 [ 452.263917][ T8907] syzkaller0: entered promiscuous mode [ 452.269466][ T8907] syzkaller0: entered allmulticast mode [ 452.359917][ T8907] tipc: Resetting bearer [ 452.427844][ T8906] tipc: Resetting bearer [ 452.461837][ T787] cdc_wdm 2-1:1.0: skipping garbage [ 452.523927][ T787] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 452.529999][ T787] cdc_wdm 2-1:1.0: Unknown control protocol [ 452.811444][ T8906] tipc: Disabling bearer [ 453.136127][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 453.262269][ T23] usb 2-1: USB disconnect, device number 3 [ 454.869457][ T8930] loop2: detected capacity change from 0 to 4096 [ 454.898565][ T8930] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 454.938777][ T8930] ntfs3: loop2: Failed to load $Extend (-22). [ 454.949192][ T8930] ntfs3: loop2: Failed to initialize $Extend. [ 456.076097][ T8944] netlink: 'syz.1.768': attribute type 1 has an invalid length. [ 456.232440][ T8944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.719548][ T8949] bond3: (slave ip6erspan0): making interface the new active one [ 456.926061][ T8949] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 456.954127][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 457.026529][ T8944] gretap2: entered promiscuous mode [ 457.138401][ T8944] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 457.281790][ T8930] ptrace attach of "./syz-executor exec"[5789] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[8930] [ 457.298347][ T8954] macvlan2: entered promiscuous mode [ 457.387790][ T8954] macvlan2: entered allmulticast mode [ 457.403855][ T8954] bond3: entered promiscuous mode [ 457.414714][ T8954] ip6erspan0: entered promiscuous mode [ 457.428011][ T8954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 457.440295][ T8954] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 457.508826][ T8954] bond3: left promiscuous mode [ 457.522703][ T8954] ip6erspan0: left promiscuous mode [ 458.410156][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 459.926406][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 463.159977][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 464.918443][ T9029] netlink: 'syz.1.786': attribute type 1 has an invalid length. [ 464.996923][ T9029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 465.621912][ T9029] vlan3: entered allmulticast mode [ 465.694537][ T9029] macvtap0: entered allmulticast mode [ 465.935452][ T9027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.982960][ T9029] veth0_macvtap: entered allmulticast mode [ 466.327883][ T9029] bond4: (slave vlan3): making interface the new active one [ 467.037563][ T9029] bond4: (slave vlan3): Enslaving as an active interface with an up link [ 467.291234][ T9031] bond4: (slave veth3): Enslaving as an active interface with a down link [ 467.308589][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 467.425983][ T9059] overlayfs: failed to clone lowerpath [ 470.118432][ T9082] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 470.176451][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 471.723557][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'. [ 473.556987][ T9121] tipc: Enabling of bearer rejected, already enabled [ 473.770807][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 474.882373][ T9135] gfs2: not a GFS2 filesystem [ 475.634744][ T9142] loop1: detected capacity change from 0 to 764 [ 475.848215][ T9142] rock: directory entry would overflow storage [ 476.518057][ T9142] rock: sig=0x4654, size=5, remaining=4 [ 477.424219][ T9146] netlink: 'syz.2.812': attribute type 2 has an invalid length. [ 477.431931][ T9146] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.812'. [ 478.172072][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 478.201612][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'. [ 481.522450][ T9203] 8021q: VLANs not supported on nlmon0 [ 481.805239][ T9205] tipc: Enabling of bearer rejected, already enabled [ 482.107529][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 482.265582][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 483.187248][ T9230] loop1: detected capacity change from 0 to 128 [ 483.433376][ T9227] loop2: detected capacity change from 0 to 1024 [ 483.441032][ T9227] EXT4-fs: Ignoring removed orlov option [ 484.714581][ C1] ------------[ cut here ]------------ [ 484.720577][ C1] WARNING: CPU: 1 PID: 9225 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 484.730767][ C1] Modules linked in: [ 484.734746][ C1] CPU: 1 PID: 9225 Comm: syz.0.832 Not tainted syzkaller #0 [ 484.742078][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.752202][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 484.758617][ C1] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 484.778342][ C1] RSP: 0000:ffffc900001f0a18 EFLAGS: 00010246 [ 484.784571][ C1] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff88801a2eda00 [ 484.792614][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 484.800705][ C1] RBP: 0000000000000000 R08: ffff88801a2eda00 R09: 0000000000000003 [ 484.808714][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bd063c0 [ 484.816756][ C1] R13: dffffc0000000000 R14: ffff88805bd068b0 R15: ffff88802684e424 [ 484.824843][ C1] FS: 0000555557ddd500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 484.833852][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.840477][ C1] CR2: 00007ffb6e0b8f98 CR3: 000000002e8b9000 CR4: 00000000003506e0 [ 484.848526][ C1] Call Trace: [ 484.851839][ C1] [ 484.854759][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 484.860392][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 484.865940][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 484.872773][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 484.878400][ C1] __iterate_interfaces+0x243/0x500 [ 484.883643][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 484.889961][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 484.897232][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 484.903559][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 484.910669][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 484.915917][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 484.921189][ C1] ? hw_scan_work+0xf40/0xf40 [ 484.925918][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 484.931110][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 484.937236][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 484.942424][ C1] handle_softirqs+0x280/0x820 [ 484.947234][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 484.952075][ C1] ? do_softirq+0x180/0x180 [ 484.956618][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 484.961890][ C1] __irq_exit_rcu+0xc7/0x190 [ 484.966516][ C1] ? irq_exit_rcu+0x20/0x20 [ 484.971090][ C1] irq_exit_rcu+0x9/0x20 [ 484.975365][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 484.981131][ C1] [ 484.984094][ C1] [ 484.987056][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 484.993098][ C1] RIP: 0010:finish_task_switch+0x26a/0x920 [ 484.999118][ C1] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 20 54 1b 09 e8 ab a6 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 485.019166][ C1] RSP: 0000:ffffc9000fac7c78 EFLAGS: 00000286 [ 485.022447][ T6079] ------------[ cut here ]------------ [ 485.025302][ C1] RAX: 666d19eda726ea00 RBX: 0000000000000000 RCX: 666d19eda726ea00 [ 485.025341][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040 [ 485.025362][ C1] RBP: ffffc9000fac7cd0 R08: ffffffff8e4a8f2f R09: 1ffffffff1c951e5 [ 485.025377][ C1] R10: dffffc0000000000 R11: fffffbfff1c951e6 R12: ffff88801a2eda00 [ 485.025390][ C1] R13: dffffc0000000000 R14: ffff888026a58000 R15: ffff8880b8f3cf08 [ 485.031132][ T6079] WARNING: CPU: 0 PID: 6079 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 485.039161][ C1] ? finish_task_switch+0x265/0x920 [ 485.039194][ C1] __schedule+0x14da/0x44d0 [ 485.039244][ C1] ? asan.module_dtor+0x20/0x20 [ 485.039279][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 485.039308][ C1] ? lock_chain_count+0x20/0x20 [ 485.039339][ C1] schedule+0xbd/0x170 [ 485.039364][ C1] exit_to_user_mode_loop+0x47/0x110 [ 485.039393][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 485.048068][ T6079] Modules linked in: [ 485.055470][ C1] irqentry_exit_to_user_mode+0x9/0x40 [ 485.055514][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 485.055534][ C1] RIP: 0033:0x7fdbe1268002 [ 485.055555][ C1] Code: 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e <48> 89 33 48 83 c3 08 48 8b 70 f8 48 89 08 48 8b 0b 49 8b 14 24 eb [ 485.055574][ C1] RSP: 002b:00007ffd6a927e30 EFLAGS: 00000293 [ 485.055598][ C1] RAX: 00007fdbe0cb4cb8 RBX: 00007fdbe0ac8cb0 RCX: ffffffff886675b7 [ 485.055615][ C1] RDX: ffffffff8866681d RSI: ffffffff81582927 RDI: 00007fdbe0d3f510 [ 485.055632][ C1] RBP: 00007fdbe09fd010 R08: 00007fdbe0b9e288 R09: 00007fdbe15b2000 [ 485.055648][ C1] R10: 00007fdbe09fd008 R11: 000000000000000a R12: 00007fdbe09fd008 [ 485.063716][ T6079] [ 485.063735][ T6079] CPU: 0 PID: 6079 Comm: kworker/u4:23 Not tainted syzkaller #0 [ 485.071830][ C1] R13: 0000000000000022 R14: ffffffffffffffff R15: 00007fdbe09fd008 [ 485.071859][ C1] ? skb_copy_datagram_iter+0x47/0x200 [ 485.071886][ C1] ? skb_free_datagram+0xd/0x20 [ 485.071907][ C1] ? put_pid+0xc7/0x120 [ 485.082905][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.088119][ C1] [ 485.088133][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 485.088144][ C1] CPU: 1 PID: 9225 Comm: syz.0.832 Not tainted syzkaller #0 [ 485.088163][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.088176][ C1] Call Trace: [ 485.088185][ C1] [ 485.088191][ C1] dump_stack_lvl+0x16c/0x230 [ 485.088221][ C1] ? show_regs_print_info+0x20/0x20 [ 485.088250][ C1] ? load_image+0x3b0/0x3b0 [ 485.088290][ C1] panic+0x2c0/0x710 [ 485.088332][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 485.088388][ C1] __warn+0x2e0/0x470 [ 485.088419][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 485.088457][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 485.088493][ C1] report_bug+0x2be/0x4f0 [ 485.088521][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 485.088558][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 485.088593][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 485.088628][ C1] handle_bug+0xcf/0x120 [ 485.088667][ C1] exc_invalid_op+0x1a/0x50 [ 485.088696][ C1] asm_exc_invalid_op+0x1a/0x20 [ 485.088732][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 485.088771][ C1] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 485.088789][ C1] RSP: 0000:ffffc900001f0a18 EFLAGS: 00010246 [ 485.088811][ C1] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff88801a2eda00 [ 485.088829][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.088844][ C1] RBP: 0000000000000000 R08: ffff88801a2eda00 R09: 0000000000000003 [ 485.088858][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bd063c0 [ 485.088873][ C1] R13: dffffc0000000000 R14: ffff88805bd068b0 R15: ffff88802684e424 [ 485.088895][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 485.088934][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 485.088977][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 485.089014][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 485.089060][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 485.089102][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 485.089151][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 485.089193][ C1] __iterate_interfaces+0x243/0x500 [ 485.089220][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 485.089248][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 485.089279][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 485.089309][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 485.089341][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 485.089372][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 485.089406][ C1] ? hw_scan_work+0xf40/0xf40 [ 485.089442][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 485.089467][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 485.089506][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 485.089536][ C1] handle_softirqs+0x280/0x820 [ 485.089565][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 485.089594][ C1] ? do_softirq+0x180/0x180 [ 485.089622][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 485.089664][ C1] __irq_exit_rcu+0xc7/0x190 [ 485.089687][ C1] ? irq_exit_rcu+0x20/0x20 [ 485.089721][ C1] irq_exit_rcu+0x9/0x20 [ 485.089741][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 485.089778][ C1] [ 485.089785][ C1] [ 485.089793][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 485.089817][ C1] RIP: 0010:finish_task_switch+0x26a/0x920 [ 485.089838][ C1] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 20 54 1b 09 e8 ab a6 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 485.089856][ C1] RSP: 0000:ffffc9000fac7c78 EFLAGS: 00000286 [ 485.089876][ C1] RAX: 666d19eda726ea00 RBX: 0000000000000000 RCX: 666d19eda726ea00 [ 485.089892][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040 [ 485.089909][ C1] RBP: ffffc9000fac7cd0 R08: ffffffff8e4a8f2f R09: 1ffffffff1c951e5 [ 485.089926][ C1] R10: dffffc0000000000 R11: fffffbfff1c951e6 R12: ffff88801a2eda00 [ 485.089942][ C1] R13: dffffc0000000000 R14: ffff888026a58000 R15: ffff8880b8f3cf08 [ 485.089981][ C1] ? finish_task_switch+0x265/0x920 [ 485.090011][ C1] __schedule+0x14da/0x44d0 [ 485.090067][ C1] ? asan.module_dtor+0x20/0x20 [ 485.090105][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 485.090135][ C1] ? lock_chain_count+0x20/0x20 [ 485.090170][ C1] schedule+0xbd/0x170 [ 485.090198][ C1] exit_to_user_mode_loop+0x47/0x110 [ 485.090233][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 485.090264][ C1] irqentry_exit_to_user_mode+0x9/0x40 [ 485.090297][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 485.090318][ C1] RIP: 0033:0x7fdbe1268002 [ 485.090339][ C1] Code: 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e <48> 89 33 48 83 c3 08 48 8b 70 f8 48 89 08 48 8b 0b 49 8b 14 24 eb [ 485.090356][ C1] RSP: 002b:00007ffd6a927e30 EFLAGS: 00000293 [ 485.090375][ C1] RAX: 00007fdbe0cb4cb8 RBX: 00007fdbe0ac8cb0 RCX: ffffffff886675b7 [ 485.090390][ C1] RDX: ffffffff8866681d RSI: ffffffff81582927 RDI: 00007fdbe0d3f510 [ 485.090407][ C1] RBP: 00007fdbe09fd010 R08: 00007fdbe0b9e288 R09: 00007fdbe15b2000 [ 485.090422][ C1] R10: 00007fdbe09fd008 R11: 000000000000000a R12: 00007fdbe09fd008 [ 485.090437][ C1] R13: 0000000000000022 R14: ffffffffffffffff R15: 00007fdbe09fd008 [ 485.090464][ C1] ? skb_copy_datagram_iter+0x47/0x200 [ 485.090490][ C1] ? skb_free_datagram+0xd/0x20 [ 485.090512][ C1] ? put_pid+0xc7/0x120 [ 485.090544][ C1] [ 485.092968][ C1] Kernel Offset: disabled