last executing test programs: 15.033791913s ago: executing program 4 (id=85): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0xc1280, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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") rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 14.162319127s ago: executing program 3 (id=87): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0xffffffffffffffff) 12.052433662s ago: executing program 4 (id=89): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x40800000000000, 0x3a, 'btrfs\x00', 0x3a, 'quota', 0x3a, './file1'}, 0x32) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580), 0x3, 0x465, &(0x7f0000000f00)="$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") syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae881f474bc02017144068c380d864a5ac3b7eece595a5144a114312ea2de35167e041e3d3031af83fbd71db410d6fe995f42f7b7e656c95a717cfe1a2530b521bba2d97ecedd3a946c1a6af44605dd2a18869d8b61be43a9ae03ca6d57db60bb92ef13470eaf1b64762134b61619a4d6d9e0db0f025e0b15bb6dac6823159acf2f8470e18be135d30e15d22e45fe9db22cdd8305a5ccef407c817", @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0xa7a, &(0x7f0000000980)="$eJzs3UuMHEcZAODu3Z21nTh4HGxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRIFEkbJ+4kcgyN8RDnHKJACGRC7Jy4hKJWOKSU+DAActIkThAgj1oZ6tmZ37PpGe9j97Z+T6ppqa7arqqZ3t6+1VVBTC2Jtqvjfbr5TcvHf3nQ//YtvD+8U6OZvt1qmtqIXeZpqfC8t6bXIxvvP/KyX5xWcy1X/P0ZNdn7yyK4nyxr7hSNIu9l6++9vbcU8cvHLu4/53XD19bg1UHAICx860rhw/u/ttf7t35wRv3Hym2dObn4/Nmmt6ejvuPpAP/hWiqzOcPS+cDZVfoNh3yTaUwEfJN9slXdOVr5Hxbez8Xy58Oy20MyLelovzJcI5ShvrAKMvbcbMoJ2Z6picmZmYWz8mL9nn9dDlz9vSZ587VVFFg1f37gaIo9gnCuIXWjs6PoPa61Be6vgWAWsX7hbc4H68srExnaVPDlX/9iYn+n+/VWM06Mj7We/tXflx+bz3Wu/yq9f/NhTVef8bK8FvT1jWtx2rL65V/R9vTdLyPEJ9fWu7+Jy9vMixv2AOAQfcRRuX+wqB6Tq5zPW7XoPrH7WKz+lqK8/fw9ZDe/fuJf9NR+RsD/f1nw13/37ZUudrrIgibO7Tq3PkA9ao4rY/PzbWSnB6f64vpWyrSt1akb6tIv6Mi/c6KdBhnv3/xp8WrZdG3PV6xeP7f/rEMez0sX2e7K8UfW2Z94vXI5V6Pi8/9LtdKy4/PE8NG9scTT5/68rPPXF18/r/sbP830/a+L00302/rSsqQrxfG6+qdZ/+bveVMDMh3d6jPXX3yt9/v6s1X7lpaTtG1n7mlHnt6P7djUL77evM1Q75tKcTDpXh8ckf4XD7+yPvV/H1NhfVthPWYDvXI+5WdKR6tuzFsVHl7HPT8f94+9xSN8rnTZ049lqbzdvrnycaWhfkH1rnewMoN2/5nT9Hb/md7Z35jonu/sGNpftm9X2iG+XMD5s+n6fx/7juT29rzZ05+78yzq73yMObOvfTyd0+cOXPqB9544403nTd175mAtTb74gvfnz330suPnn7hxPOnnj91dv7Qofm5uUNfmT842z6un+0+ugc2k6V/+nXXBAAAAAAAAAAAABjWD48dvfrXt7707mL7/6X2f7n9f37yN7f//0lo/x/byed28Lkd4M4+6e08oYPV6ZCvkcLHQ313hXJ2h899IsWdcfxS+/9cXOzXNdfnnjA/9t+b84XuBG7pL2U69EESxwv8dIovpvjXBdSo/Hn/2Smu6t86b+u5fwr9Uoym/HfL/Znkfkxy++9B/Trl/f/O/ov98WrXk9W1Hs0J615HoL9/bbj+v9ckLHX4WXtdus4Yaq+LsNHCjVartZ7ltVofNYqHsaaA9VP3+J/5umeOz/7pG1sXQs52/Yne/WXsvxRWou7xL2srP19YHNf1H7L81R7/szP+3dD7vzBiXvP2yv3vL66921VssXdg+VuKnvLj+ud+oHctr/wPUvl5bR4uBpXfu/6tX4Xy4w2hIX0Yyr9jyPLj+l9absGpwP+l8vPX9siDw5a/uIByorce8bpxvv8XrxtnN8L65749l7v+tztQ481UPoyzURlndrl6xv+90Fr/8X9XOMJQfA7ji2k67wjzcw5xvJPl1j8/X5H/D+wOyy8r/r8Z/3e0fTXFVb+HPP5v3h6bfaYnuqYbfb7bzbqvgVH13qrd/+t6Ym4D3EcRxieUtrnbDq1Wq9abfO4w1qvu77/u84S6y6/7+68Sx/+Nx/Bx/N+YHsf/jelx/N+Y3r6u+OHSoL3x+4rj/8b0OP5vTL8nlBvHB95Tkf7JivS9Fen3VqTfV5H+qYr0/RXp91ekP1CRfndF+oMV6Z8Jf/GY/tmKzz9Ukf7IR6fP/6ji85tdbo8yrusP4yy2z/P7h/GR7/8M+v3vqkgHRtfP3jjw5DO/+3Zzsf3/dOd6SL6PdyRNN9K5czxfitdPJlPaW2n67yF9o1/vgHES+8+I/98frkgHRld+zsvvG8ZQ2b/HnmH7rRp0nM9o+VyKP5/iL6T40RTPpHg2xQdSPLdO9WNtPPnbPxx+tVw6398R0od9njy2B4r9RM0PWZ94fWC5z7PHfvyWa6Xl32ZzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNpMtF8PHtxTFsXlNy8dffr46dmFOY93cjTbr1NdU43O54risRRPpviX6c2N91852R3fTHFZzBVlUXbmF9+83inpzqIozhf7iitFs9h7+eprb889dfzCsYv733n98LW1+wYAAABg8/t/AAAA//9N2hwq") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, &(0x7f0000000340)={@desc={0x1, 0x0, @auto="896e70bc3fc61bfa"}}) creat(&(0x7f0000000340)='./bus\x00', 0x11a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file1'}, 0xb) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) capset(&(0x7f0000000100)={0x20071026}, 0x0) 11.334239114s ago: executing program 3 (id=90): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) (fail_nth: 1) 7.129929003s ago: executing program 3 (id=94): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000b40)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@errors_remount}, {@umask={'umask', 0x3d, 0x4}}, {}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x151d, &(0x7f0000002480)="$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") 7.055290614s ago: executing program 2 (id=95): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 5.877759844s ago: executing program 2 (id=97): socket$kcm(0x11, 0x200000000000003, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x6c}}, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)="711f664eb50cd5279c17da770c65", 0xe}, 0x1, 0x0, 0x0, 0x8885}, 0x24044054) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x120, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) unshare(0x2c020400) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000240)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@noenospc_debug}, {@nodatacow}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) fdatasync(r3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000003c0)) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045519, 0xffffffffffffffff) open(&(0x7f00000000c0)='.\x00', 0x440000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.649547197s ago: executing program 3 (id=100): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c790103", @ANYRES16=0x0, @ANYBLOB="c89045efe05ae52d00009300000008003617"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f00000000c0)={0x6, "39ed4066619b36be820169c662c25d1f44b3fb2ebd47a94407fc553a58664bdc33f31e601a31beabe02e86ef213f92f7a72db964532859b593c16ca9b33b5eb6", {0x6, 0x6}}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r6, 0x4004510f, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 4.742490303s ago: executing program 1 (id=102): r0 = socket(0x2, 0x80805, 0xfffffffe) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c40001009fc5d7"], 0x2c}}, 0x40) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd8, 0x3e}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0xf8]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7d, &(0x7f0000000080)={r7, 0x2}, 0x8) 4.469931267s ago: executing program 3 (id=104): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (fail_nth: 1) 4.469501547s ago: executing program 1 (id=105): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) 4.371136449s ago: executing program 4 (id=106): r0 = socket(0x1d, 0x800, 0x1000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_sset_info={0x51}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="dc6fa7f00340586d0100000000000000000013000000057f030000000000"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="7c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00010000014000005c0012800b00010067726574617000004c0002800800040008000000060003008100000008000700ffffffff05000900c800000005000800fc000000060002"], 0x7c}}, 0x0) 4.062838394s ago: executing program 2 (id=107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 3.969793655s ago: executing program 3 (id=108): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="40190c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x20, 0x31, 0x28, "4ee099e0d0c2163789691ddbaec8367bd2081fdd4eb4ecbdc6ed2e4c58734f4a99d480865bf2da07"}, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x10, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@generic={0xdb, 0xc, 0xd, 0x3, 0x4}, @alu={0x7, 0x0, 0xd, 0x3, 0xa, 0x6, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x61, &(0x7f0000000680)=""/97, 0x41100, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x14d78, 0xffffffffffffffff, 0x5, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f0000000700)=[{0x1, 0x2, 0xf, 0x4}, {0x4, 0x2, 0x3, 0x4}, {0x4, 0x5, 0x4, 0x7}, {0x5, 0x4, 0x0, 0x6}, {0x5, 0x3, 0xa, 0x9}], 0x10, 0x9}, 0x94) r7 = dup2(r0, r5) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r6, r7, 0xb, 0x0, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x81, 0x840, 0x0, 0x575, 0x800004}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040090}, 0x10000000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 3.187004608s ago: executing program 4 (id=110): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) (fail_nth: 1) 3.0673278s ago: executing program 1 (id=111): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x2, &(0x7f0000000640)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f0000000440)="83bafc61c0bdd9dbf42bb567db47ba36da70effc7bf09307f6148bcd0f8400000000150400"/50, 0x32, 0x4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000540)="3433512668cd5eee86b1efe7f985f59d335383e879020ac283ea5ee1a7a2a12de5448f9a2c2be40545f00e7ef35133b632a2fba3ed36ef681ff257954ace7920acec4fffc298125619b099eb327508c9a155d473cee4fa9404e21953d3b2f5787728a238eb0b964044df32e87b089799afa45107bba60db18089bdd40848b08d63ce7a84789b14b7b486f5b3d5c016d259578e0e5d58e76f443002f3aa4a136cfa23bf167eee4a05440ebfea74eccb18b795b7fbad0a6f86ce13a0e2d87fe3", 0xbf, 0xe3, 0x0, 0x1, r3}]) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) (async, rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, &(0x7f0000000240)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) (async, rerun: 64) r8 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, 0x0) (async) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) (async) connect$inet(r9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x5, @private0, 0x8}], 0x2c) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x80000000, 0x0, 0x8, 0x1, 0x34, 0x1ff}, 0x9c) (rerun: 32) 3.04363755s ago: executing program 0 (id=112): setrlimit(0x6, &(0x7f00000000c0)={0xffffffff, 0x200000f}) r0 = msgget$private(0x0, 0x100) r1 = msgget(0x2, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, &(0x7f00000004c0)=""/55, 0x37) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) msgget$private(0x0, 0x214) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x898}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x440}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc81}]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040800) read$FUSE(0xffffffffffffffff, &(0x7f0000002bc0)={0x2020}, 0x2020) msgrcv(r1, &(0x7f0000000100)={0x0, ""/4096}, 0x1008, 0x3, 0x0) msgsnd(r0, &(0x7f0000003900)=ANY=[@ANYBLOB="03000000000000002c5b92fe53d0a8d45c82f77b3a5b24f5b5f47fb21e984f7cd98be58672f21c"], 0xfd1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x17}, 0x0, 0x0, 0x1, 0x1414, 0x10041, 0x4e, 0xffffffffffffffc9, 0x8, 0x8582, 0x6}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3.04318536s ago: executing program 2 (id=113): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 2.308339082s ago: executing program 2 (id=114): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c790103", @ANYRES16=0x0, @ANYBLOB="c89045efe05ae52d00009300000008003617"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f00000000c0)={0x6, "39ed4066619b36be820169c662c25d1f44b3fb2ebd47a94407fc553a58664bdc33f31e601a31beabe02e86ef213f92f7a72db964532859b593c16ca9b33b5eb6", {0x6, 0x6}}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r6, 0x4004510f, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.098807736s ago: executing program 0 (id=115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000400)={0x1ff, 0x8bcd0c0000000000, 0xeb8, 0x800000000000008, 0xa4, 0x3, 0x29eb6be, 0x7, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2000005, 0x3, 0x3, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x3}) setreuid(0xffffffffffffffff, 0xee00) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x9}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r5, 0x29, 0x4d, &(0x7f0000000400)=ANY=[@ANYRES16], 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x5aa) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000", @ANYRES16=r4, @ANYBLOB="000200000000000000002a000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x50}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd0a}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfffb}, {0x8, 0xb, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.84989317s ago: executing program 4 (id=116): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x40800000000000, 0x3a, 'btrfs\x00', 0x3a, 'quota', 0x3a, './file1'}, 0x32) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580), 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae881f474bc02017144068c380d864a5ac3b7eece595a5144a114312ea2de35167e041e3d3031af83fbd71db410d6fe995f42f7b7e656c95a717cfe1a2530b521bba2d97ecedd3a946c1a6af44605dd2a18869d8b61be43a9ae03ca6d57db60bb92ef13470eaf1b64762134b61619a4d6d9e0db0f025e0b15bb6dac6823159acf2f8470e18be135d30e15d22e45fe9db22cdd8305a5ccef407c817", @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0xa7a, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, &(0x7f0000000340)={@desc={0x1, 0x0, @auto="896e70bc3fc61bfa"}}) creat(&(0x7f0000000340)='./bus\x00', 0x11a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file1'}, 0xb) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) capset(&(0x7f0000000100)={0x20071026}, 0x0) 1.806187471s ago: executing program 0 (id=117): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) (fail_nth: 1) 1.777804681s ago: executing program 1 (id=118): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1.386068288s ago: executing program 0 (id=119): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1, 0xd605}, 0x1c) r1 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @dev, @null, 0x1, @default}, &(0x7f0000000100)=0x1c, 0x800) shutdown(r1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty, 0x9}, 0x1c) 1.25913181s ago: executing program 1 (id=120): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty, 0x4000}, 0x1c) (fail_nth: 1) 1.20837813s ago: executing program 4 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) 1.122006252s ago: executing program 0 (id=122): prctl$PR_SET_NAME(0x4, 0x0) (async) prctl$PR_SET_NAME(0x4, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='ns\x00') statx(r0, &(0x7f0000000040)='.\x00', 0x0, 0x5c00, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000700)={[{@numtail}, {@rodir}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x2f9}}, {@uni_xlate}, {@shortname_win95}, {@shortname_lower}, {@utf8}, {@fat=@flush}, {@rodir}, {@numtail}, {@utf8}]}, 0x6, 0x2a6, &(0x7f0000000440)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 738.789408ms ago: executing program 2 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) (fail_nth: 1) 1.95508ms ago: executing program 0 (id=124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 0s ago: executing program 1 (id=125): syz_emit_ethernet(0x1e, &(0x7f0000000000)={@multicast, @empty, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "6a9ec5d11766e013"}}}}, &(0x7f0000000040)={0x0, 0x4, [0xae2, 0xe4b, 0x1f0, 0xd24]}) r0 = msgget$private(0x0, 0x100) r1 = msgget(0x2, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, &(0x7f00000004c0)=""/55, 0x37) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) msgget$private(0x0, 0x214) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x898}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x440}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc81}]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040800) read$FUSE(0xffffffffffffffff, &(0x7f0000002bc0)={0x2020}, 0x2020) msgrcv(r1, &(0x7f0000000100)={0x0, ""/4096}, 0x1008, 0x3, 0x0) msgsnd(r0, &(0x7f0000003900)=ANY=[@ANYBLOB="03000000000000002c5b92fe53d0a8d45c82f77b3a5b24f5b5f47fb21e984f7cd98be58672f21c"], 0xfd1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x17}, 0x0, 0x0, 0x1, 0x1414, 0x10041, 0x4e, 0xffffffffffffffc9, 0x8, 0x8582, 0x6}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.202' (ED25519) to the list of known hosts. [ 51.804826][ T4240] cgroup: Unknown subsys name 'net' [ 51.916779][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.127109][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.467589][ T4259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.475471][ T4259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.478688][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.485986][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.490575][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.497442][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.504629][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.512499][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.518416][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.525340][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.532058][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.539770][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.546452][ T4265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.560075][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.568422][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.568646][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.576488][ T4265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.583909][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.590860][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.596948][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.603882][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.610594][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.617803][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.631162][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.633350][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.667500][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.673968][ T4257] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.684407][ T4257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.692174][ T4257] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.718164][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.063146][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 55.202938][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 55.215490][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 55.225523][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.233964][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.242219][ T4256] device bridge_slave_0 entered promiscuous mode [ 55.252834][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.259903][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.267606][ T4256] device bridge_slave_1 entered promiscuous mode [ 55.293915][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 55.317203][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 55.377958][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.394057][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.451963][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.459104][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.466990][ T4260] device bridge_slave_0 entered promiscuous mode [ 55.483114][ T4256] team0: Port device team_slave_0 added [ 55.514196][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.521602][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.529215][ T4260] device bridge_slave_1 entered promiscuous mode [ 55.537418][ T4256] team0: Port device team_slave_1 added [ 55.548934][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.556168][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.564123][ T4262] device bridge_slave_0 entered promiscuous mode [ 55.593301][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.600385][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.608591][ T4252] device bridge_slave_0 entered promiscuous mode [ 55.616459][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.623711][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.631805][ T4262] device bridge_slave_1 entered promiscuous mode [ 55.638864][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.646058][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.653697][ T4251] device bridge_slave_0 entered promiscuous mode [ 55.671751][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.687814][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.695044][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.702817][ T4252] device bridge_slave_1 entered promiscuous mode [ 55.716965][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.724113][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.732475][ T4251] device bridge_slave_1 entered promiscuous mode [ 55.740642][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.750569][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.757621][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.783827][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.821148][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.828107][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.854073][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.877624][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.911491][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.922114][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.933027][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.944279][ T4260] team0: Port device team_slave_0 added [ 55.959390][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.981712][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.999073][ T4260] team0: Port device team_slave_1 added [ 56.007141][ T4256] device hsr_slave_0 entered promiscuous mode [ 56.013917][ T4256] device hsr_slave_1 entered promiscuous mode [ 56.034977][ T4262] team0: Port device team_slave_0 added [ 56.043366][ T4262] team0: Port device team_slave_1 added [ 56.090063][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.097068][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.123640][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.136776][ T4252] team0: Port device team_slave_0 added [ 56.147408][ T4251] team0: Port device team_slave_0 added [ 56.159230][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.166252][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.192311][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.203735][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.210698][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.237093][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.249455][ T4252] team0: Port device team_slave_1 added [ 56.264626][ T4251] team0: Port device team_slave_1 added [ 56.280780][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.287811][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.313989][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.325807][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.332980][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.358976][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.388130][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.395097][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.421049][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.458164][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.465253][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.491694][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.530674][ T4260] device hsr_slave_0 entered promiscuous mode [ 56.537808][ T4260] device hsr_slave_1 entered promiscuous mode [ 56.544488][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.552301][ T4260] Cannot create hsr debugfs directory [ 56.558104][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.565352][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.591283][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.609293][ T4252] device hsr_slave_0 entered promiscuous mode [ 56.616010][ T4252] device hsr_slave_1 entered promiscuous mode [ 56.623225][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.630773][ T4252] Cannot create hsr debugfs directory [ 56.658634][ T4262] device hsr_slave_0 entered promiscuous mode [ 56.665607][ T4262] device hsr_slave_1 entered promiscuous mode [ 56.672304][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.679841][ T4262] Cannot create hsr debugfs directory [ 56.741750][ T4253] Bluetooth: hci1: command 0x0409 tx timeout [ 56.741759][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 56.741946][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 56.747945][ T4253] Bluetooth: hci3: command 0x0409 tx timeout [ 56.754157][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 56.827842][ T4251] device hsr_slave_0 entered promiscuous mode [ 56.834450][ T4251] device hsr_slave_1 entered promiscuous mode [ 56.840845][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.848394][ T4251] Cannot create hsr debugfs directory [ 57.054568][ T4256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.065345][ T4256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.077939][ T4256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.092498][ T4256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.111632][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.126737][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.148906][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.164056][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.192563][ T4262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.213611][ T4262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.235468][ T4262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.263476][ T4262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.305398][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.333368][ T4260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.344180][ T4260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.353145][ T4260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.390910][ T4260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.406508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.417310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.469008][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.479569][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.499811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.509022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.519011][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.526213][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.535445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.544770][ T4251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.553606][ T4251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.565015][ T4251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.588338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.597226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.606320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.615499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.624968][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.632097][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.640235][ T4251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.654351][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.666321][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.698588][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.727063][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.736123][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.744992][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.752180][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.759897][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.768513][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.777576][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.786198][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.793304][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.802945][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.812015][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.820279][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.828862][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.837314][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.846140][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.855221][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.872521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.883959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.892725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.901329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.918412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.927430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.937250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.954472][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.967895][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.986672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.994973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.003849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.013256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.022046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.030279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.038992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.047647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.056596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.065945][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.073067][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.082214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.112148][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.121726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.130418][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.139589][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.146725][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.166440][ T4262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.202162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.211342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.219656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.229148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.238886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.246808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.255597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.272628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.281363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.308825][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.330268][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.353802][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.387129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.432246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.443618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.452860][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.459954][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.468611][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.478214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.487282][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.494419][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.508152][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.518179][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.529884][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.538690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.547165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.555687][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.564331][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.579384][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.589633][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.599461][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.615805][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.629935][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.639052][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.665758][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.676480][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.707439][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.729602][ T4260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.746796][ T4260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.778682][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.793360][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.807528][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.816042][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.824596][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 58.824616][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 58.830605][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 58.836623][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 58.843107][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 58.856686][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.865760][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.874258][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.882843][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.891609][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.899920][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.907028][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.916574][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.924615][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.937587][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.946885][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.955657][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.962773][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.970298][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.003643][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.011634][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.019116][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.031454][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.043667][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.058000][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.072753][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.091964][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.127615][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.172678][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.185717][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.196115][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.209172][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.219853][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.237690][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.252102][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.260506][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.273884][ T4251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.285723][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.303415][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.310579][ T4256] device veth0_vlan entered promiscuous mode [ 59.322398][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.337041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.346407][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.355641][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.364347][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.372169][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.408938][ T4256] device veth1_vlan entered promiscuous mode [ 59.442425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.450769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.466971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.484805][ T4262] device veth0_vlan entered promiscuous mode [ 59.512616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.522122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.529955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.539443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.548965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.583169][ T4256] device veth0_macvtap entered promiscuous mode [ 59.593394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.612440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.623073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.632029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.641710][ T4262] device veth1_vlan entered promiscuous mode [ 59.653392][ T4252] device veth0_vlan entered promiscuous mode [ 59.668730][ T4256] device veth1_macvtap entered promiscuous mode [ 59.681100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.689154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.700103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.713283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.724983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.735625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.746718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.754758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.767221][ T4252] device veth1_vlan entered promiscuous mode [ 59.786607][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.816220][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.825172][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.835108][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.843945][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.863154][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.875163][ T4262] device veth0_macvtap entered promiscuous mode [ 59.894524][ T4252] device veth0_macvtap entered promiscuous mode [ 59.905851][ T4252] device veth1_macvtap entered promiscuous mode [ 59.914882][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.924368][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.933303][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.942858][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.951926][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.960509][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.968752][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.976579][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.984209][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.003200][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.018448][ T4262] device veth1_macvtap entered promiscuous mode [ 60.026089][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.035348][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.045248][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.053858][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.062846][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.083464][ T4256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.092703][ T4256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.102185][ T4256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.110923][ T4256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.126883][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.136164][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.144672][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.153796][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.167536][ T4260] device veth0_vlan entered promiscuous mode [ 60.178506][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.190020][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.202950][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.217865][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.234507][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.246421][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.275590][ T4260] device veth1_vlan entered promiscuous mode [ 60.288951][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.302088][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.320671][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.340685][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.359795][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.390784][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.400175][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.419283][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.429746][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.455164][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.467071][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.482871][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.498038][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.519900][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.542840][ T4260] device veth0_macvtap entered promiscuous mode [ 60.562663][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.576755][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.586638][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.597376][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.614191][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.624532][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.635197][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.648086][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.658576][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.670238][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.680456][ T4260] device veth1_macvtap entered promiscuous mode [ 60.699675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.709528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.723948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.736905][ T4262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.749727][ T4262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.760685][ T4262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.770142][ T4262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.792482][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.798275][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.805857][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.826434][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.836904][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.847812][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.858032][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.868651][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.880214][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.897057][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.907870][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 60.911339][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 60.915072][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.920496][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 60.930372][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.931564][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.936600][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 60.947917][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.956613][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 60.980722][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.993785][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.003174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.011274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.019828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.028738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.038161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.065646][ T4260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.075144][ T4260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.084557][ T4260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.093302][ T4260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.120642][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.129100][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.157900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.174164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.183949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.257790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.276767][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.289157][ T4251] device veth0_vlan entered promiscuous mode [ 61.326866][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.342074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.354819][ T4251] device veth1_vlan entered promiscuous mode [ 61.379691][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.411732][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.423267][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.427033][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.452484][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.468489][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.474291][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.485843][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.496705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.505064][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.514008][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.521947][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.530329][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.540087][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.571514][ T4251] device veth0_macvtap entered promiscuous mode [ 61.589093][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.598702][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.598708][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.598753][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.626347][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.628089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.642950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.653605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.664923][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.682834][ T4251] device veth1_macvtap entered promiscuous mode [ 61.748199][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.801022][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.848929][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.859772][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.870319][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.881008][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.891747][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.903540][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.917167][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.929128][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.937916][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.947385][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.063379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 62.071870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 62.080853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 62.090849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 62.099122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 62.107453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 62.115750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 62.124076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 62.132372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 62.140650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 62.205164][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.360086][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.370893][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.390402][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.403640][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.414521][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.425361][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.436048][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.447462][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.455669][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.466096][ T4372] sctp: [Deprecated]: syz.2.6 (pid 4372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.466096][ T4372] Use struct sctp_sack_info instead [ 62.468355][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.496818][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.507822][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.517382][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.529636][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.568291][ T4380] loop1: detected capacity change from 0 to 512 [ 62.729227][ T4380] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2: inode #1: comm syz.1.2: iget: illegal inode # [ 62.744745][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.764311][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.777092][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.787338][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.801227][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.835542][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.864036][ T4380] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2: error while reading EA inode 1 err=-117 [ 62.878208][ T4386] loop0: detected capacity change from 0 to 256 [ 62.898658][ T4386] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119aed8) [ 62.909161][ T4386] exFAT-fs (loop0): invalid boot region [ 62.915040][ T4386] exFAT-fs (loop0): failed to recognize exfat type [ 63.026357][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 63.032949][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 63.038996][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 63.045404][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 63.051535][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 63.062370][ T4380] EXT4-fs (loop1): 1 orphan inode deleted [ 63.068151][ T4380] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 63.084510][ T4269] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.148622][ T4380] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 66.009510][ T4380] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 66.117335][ T4409] Zero length message leads to an empty skb [ 66.173166][ T4413] loop4: detected capacity change from 0 to 4096 [ 66.222666][ T4262] EXT4-fs (loop1): unmounting filesystem. [ 66.621410][ T4413] ntfs: (device loop4): parse_options(): NLS character set cp43 not found. [ 67.713323][ T4441] loop3: detected capacity change from 0 to 512 [ 67.864184][ T4441] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.026720][ T4446] sctp: [Deprecated]: syz.4.17 (pid 4446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.026720][ T4446] Use struct sctp_sack_info instead [ 68.764461][ T4441] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.037176][ T4441] EXT4-fs (loop3): 1 truncate cleaned up [ 69.120913][ T4441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.268503][ T4423] loop1: detected capacity change from 0 to 40427 [ 69.301409][ T4423] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 69.346793][ T4423] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 69.416190][ T4423] F2FS-fs (loop1): invalid crc value [ 69.451327][ T4325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.459281][ T4423] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 69.529885][ T4457] FAULT_INJECTION: forcing a failure. [ 69.529885][ T4457] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.587331][ T4457] CPU: 1 PID: 4457 Comm: syz.4.20 Not tainted 6.1.142-syzkaller #0 [ 69.595268][ T4457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.605350][ T4457] Call Trace: [ 69.608643][ T4457] [ 69.610076][ T4466] FAULT_INJECTION: forcing a failure. [ 69.610076][ T4466] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.611566][ T4457] dump_stack_lvl+0x168/0x22e [ 69.611605][ T4457] ? show_regs_print_info+0x12/0x12 [ 69.611625][ T4457] ? load_image+0x3b0/0x3b0 [ 69.611643][ T4457] ? __lock_acquire+0x7c50/0x7c50 [ 69.611663][ T4457] ? verify_lock_unused+0x140/0x140 [ 69.649225][ T4457] should_fail_ex+0x399/0x4d0 [ 69.653897][ T4457] _copy_from_user+0x2c/0x170 [ 69.658562][ T4457] ___sys_sendmsg+0x155/0x290 [ 69.660910][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 69.663222][ T4457] ? __sys_sendmsg+0x270/0x270 [ 69.673019][ T4457] ? __lock_acquire+0x7c50/0x7c50 [ 69.678055][ T4457] ? __fdget+0x17c/0x200 [ 69.682288][ T4457] __se_sys_sendmsg+0x19e/0x270 [ 69.687122][ T4457] ? __x64_sys_sendmsg+0x80/0x80 [ 69.692049][ T4457] ? lockdep_hardirqs_on+0x94/0x140 [ 69.697228][ T4457] do_syscall_64+0x4c/0xa0 [ 69.701639][ T4457] ? clear_bhb_loop+0x60/0xb0 [ 69.706322][ T4457] ? clear_bhb_loop+0x60/0xb0 [ 69.710992][ T4457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.716867][ T4457] RIP: 0033:0x7fbb8958e929 [ 69.721275][ T4457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.740872][ T4457] RSP: 002b:00007fbb8a4a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.749264][ T4457] RAX: ffffffffffffffda RBX: 00007fbb897b5fa0 RCX: 00007fbb8958e929 [ 69.757214][ T4457] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000004 [ 69.765163][ T4457] RBP: 00007fbb8a4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 69.773114][ T4457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.781074][ T4457] R13: 0000000000000000 R14: 00007fbb897b5fa0 R15: 00007ffd9be7eda8 [ 69.789053][ T4457] [ 69.793917][ T4466] CPU: 1 PID: 4466 Comm: syz.1.22 Not tainted 6.1.142-syzkaller #0 [ 69.801826][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.811871][ T4466] Call Trace: [ 69.815135][ T4466] [ 69.818049][ T4466] dump_stack_lvl+0x168/0x22e [ 69.822716][ T4466] ? show_regs_print_info+0x12/0x12 [ 69.827896][ T4466] ? load_image+0x3b0/0x3b0 [ 69.832382][ T4466] ? __lock_acquire+0x7c50/0x7c50 [ 69.837387][ T4466] ? snprintf+0xd7/0x120 [ 69.841611][ T4466] should_fail_ex+0x399/0x4d0 [ 69.846267][ T4466] _copy_to_user+0x2c/0x130 [ 69.850754][ T4466] simple_read_from_buffer+0xe3/0x150 [ 69.856115][ T4466] proc_fail_nth_read+0x19a/0x210 [ 69.861131][ T4466] ? proc_fault_inject_write+0x2f0/0x2f0 [ 69.866769][ T4466] ? fsnotify_perm+0x248/0x550 [ 69.871524][ T4466] ? proc_fault_inject_write+0x2f0/0x2f0 [ 69.877141][ T4466] vfs_read+0x2c0/0x920 [ 69.881284][ T4466] ? kernel_read+0x1e0/0x1e0 [ 69.885859][ T4466] ? do_sys_openat2+0x1fe/0x490 [ 69.890690][ T4466] ? aa_sock_opt_perm+0x74/0x100 [ 69.895611][ T4466] ? __sys_setsockopt+0x423/0x660 [ 69.900617][ T4466] ? rcu_is_watching+0x11/0xa0 [ 69.905363][ T4466] ? __sys_setsockopt+0x423/0x660 [ 69.910367][ T4466] ? kfree+0x30/0x190 [ 69.914328][ T4466] ? __sys_setsockopt+0x435/0x660 [ 69.919333][ T4466] ? __fdget_pos+0x2b5/0x360 [ 69.923907][ T4466] ksys_read+0x143/0x240 [ 69.928135][ T4466] ? vfs_write+0x960/0x960 [ 69.932530][ T4466] ? lockdep_hardirqs_on+0x94/0x140 [ 69.937709][ T4466] do_syscall_64+0x4c/0xa0 [ 69.942109][ T4466] ? clear_bhb_loop+0x60/0xb0 [ 69.946766][ T4466] ? clear_bhb_loop+0x60/0xb0 [ 69.951424][ T4466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.957302][ T4466] RIP: 0033:0x7ff7df78d33c [ 69.961697][ T4466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 69.981294][ T4466] RSP: 002b:00007ff7e05f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.989694][ T4466] RAX: ffffffffffffffda RBX: 00007ff7df9b5fa0 RCX: 00007ff7df78d33c [ 69.997646][ T4466] RDX: 000000000000000f RSI: 00007ff7e05f30a0 RDI: 0000000000000004 [ 70.005598][ T4466] RBP: 00007ff7e05f3090 R08: 0000000000000000 R09: 0000000000000000 [ 70.013557][ T4466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.021521][ T4466] R13: 0000000000000000 R14: 00007ff7df9b5fa0 R15: 00007ffe91625b38 [ 70.029481][ T4466] [ 70.071228][ T4325] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 70.123830][ T4325] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 70.178375][ T4325] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.248960][ T4325] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.307669][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.343568][ T4325] usb 4-1: Manufacturer: ೵侻ਙȯﺨ╹沛ꁋ [ 70.903297][ T4492] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.551503][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.558027][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.696446][ T4505] loop2: detected capacity change from 0 to 8 [ 71.812060][ T4505] SQUASHFS error: zlib decompression failed, data probably corrupt [ 71.833195][ T4505] SQUASHFS error: Failed to read block 0x9b: -5 [ 71.854327][ T4505] SQUASHFS error: Unable to read metadata cache entry [99] [ 71.896230][ T4325] usb 4-1: 0:2 : does not exist [ 71.918487][ T4505] SQUASHFS error: Unable to read inode 0x127 [ 71.959180][ T4325] usb 4-1: USB disconnect, device number 2 [ 72.109774][ T4510] loop1: detected capacity change from 0 to 256 [ 72.126170][ T4510] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119aed8) [ 72.137641][ T4510] exFAT-fs (loop1): invalid boot region [ 72.143396][ T4510] exFAT-fs (loop1): failed to recognize exfat type [ 72.342745][ T4515] FAULT_INJECTION: forcing a failure. [ 72.342745][ T4515] name failslab, interval 1, probability 0, space 0, times 1 [ 72.401346][ T4515] CPU: 1 PID: 4515 Comm: syz.0.29 Not tainted 6.1.142-syzkaller #0 [ 72.409290][ T4515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.419357][ T4515] Call Trace: [ 72.422644][ T4515] [ 72.425586][ T4515] dump_stack_lvl+0x168/0x22e [ 72.430279][ T4515] ? show_regs_print_info+0x12/0x12 [ 72.435502][ T4515] ? load_image+0x3b0/0x3b0 [ 72.440019][ T4515] ? __might_sleep+0xd0/0xd0 [ 72.444632][ T4515] ? __lock_acquire+0x7c50/0x7c50 [ 72.449690][ T4515] ? verify_lock_unused+0x140/0x140 [ 72.454914][ T4515] should_fail_ex+0x399/0x4d0 [ 72.459613][ T4515] should_failslab+0x5/0x20 [ 72.464123][ T4515] slab_pre_alloc_hook+0x59/0x310 [ 72.469158][ T4515] ? snd_pcm_oss_change_params_locked+0x15a/0x3ee0 [ 72.475679][ T4515] __kmem_cache_alloc_node+0x4f/0x260 [ 72.481074][ T4515] ? snd_pcm_oss_change_params_locked+0x15a/0x3ee0 [ 72.487588][ T4515] kmalloc_trace+0x26/0xe0 [ 72.492018][ T4515] snd_pcm_oss_change_params_locked+0x15a/0x3ee0 [ 72.498359][ T4515] ? __mutex_trylock_common+0x14f/0x250 [ 72.503922][ T4515] ? trace_raw_output_contention_end+0xd0/0xd0 [ 72.510095][ T4515] ? rcu_is_watching+0x11/0xa0 [ 72.514873][ T4515] ? __mutex_lock+0x19e/0xaf0 [ 72.519565][ T4515] ? __lock_acquire+0x7c50/0x7c50 [ 72.524602][ T4515] ? snd_pcm_oss_read2+0x3c0/0x3c0 [ 72.529729][ T4515] ? mutex_lock_nested+0x10/0x10 [ 72.534687][ T4515] ? aa_file_perm+0x3ef/0xec0 [ 72.539377][ T4515] ? verify_lock_unused+0x140/0x140 [ 72.544577][ T4515] ? aa_file_perm+0x117/0xec0 [ 72.549256][ T4515] snd_pcm_oss_write+0x2f8/0x1110 [ 72.554274][ T4515] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 72.559278][ T4515] ? end_current_label_crit_section+0x14b/0x170 [ 72.565503][ T4515] ? common_file_perm+0x171/0x1c0 [ 72.570510][ T4515] ? fsnotify_perm+0x5a/0x550 [ 72.575172][ T4515] ? security_file_permission+0x75/0xa0 [ 72.580705][ T4515] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 72.585713][ T4515] vfs_write+0x2c4/0x960 [ 72.589939][ T4515] ? file_end_write+0x250/0x250 [ 72.594773][ T4515] ? __fget_files+0x28/0x4d0 [ 72.599351][ T4515] ? __fget_files+0x44a/0x4d0 [ 72.604014][ T4515] ? __fdget_pos+0x1d4/0x360 [ 72.608587][ T4515] ? ksys_write+0x71/0x240 [ 72.612984][ T4515] ksys_write+0x143/0x240 [ 72.617293][ T4515] ? __ia32_sys_read+0x80/0x80 [ 72.622037][ T4515] ? lockdep_hardirqs_on+0x94/0x140 [ 72.627216][ T4515] do_syscall_64+0x4c/0xa0 [ 72.631617][ T4515] ? clear_bhb_loop+0x60/0xb0 [ 72.636290][ T4515] ? clear_bhb_loop+0x60/0xb0 [ 72.640961][ T4515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.646850][ T4515] RIP: 0033:0x7f5635b8e929 [ 72.651252][ T4515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.670852][ T4515] RSP: 002b:00007f5636948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.679266][ T4515] RAX: ffffffffffffffda RBX: 00007f5635db6080 RCX: 00007f5635b8e929 [ 72.687223][ T4515] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 72.695179][ T4515] RBP: 00007f5636948090 R08: 0000000000000000 R09: 0000000000000000 [ 72.703139][ T4515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.711100][ T4515] R13: 0000000000000001 R14: 00007f5635db6080 R15: 00007ffe5b4baec8 [ 72.719068][ T4515] [ 72.827811][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 73.462137][ T4519] tmpfs: Bad value for 'mpol' [ 74.603675][ T4304] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.615274][ T4533] FAULT_INJECTION: forcing a failure. [ 75.615274][ T4533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.629608][ T4533] CPU: 0 PID: 4533 Comm: syz.3.36 Not tainted 6.1.142-syzkaller #0 [ 75.637510][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.647559][ T4533] Call Trace: [ 75.650834][ T4533] [ 75.653758][ T4533] dump_stack_lvl+0x168/0x22e [ 75.658429][ T4533] ? show_regs_print_info+0x12/0x12 [ 75.663615][ T4533] ? load_image+0x3b0/0x3b0 [ 75.668101][ T4533] ? __lock_acquire+0x7c50/0x7c50 [ 75.673148][ T4533] ? verify_lock_unused+0x140/0x140 [ 75.678331][ T4533] should_fail_ex+0x399/0x4d0 [ 75.682993][ T4533] _copy_from_user+0x2c/0x170 [ 75.687655][ T4533] ___sys_sendmsg+0x155/0x290 [ 75.692317][ T4533] ? __sys_sendmsg+0x270/0x270 [ 75.697073][ T4533] ? __lock_acquire+0x7c50/0x7c50 [ 75.702087][ T4533] ? __fdget+0x17c/0x200 [ 75.706332][ T4533] __se_sys_sendmsg+0x19e/0x270 [ 75.711183][ T4533] ? __x64_sys_sendmsg+0x80/0x80 [ 75.716120][ T4533] ? lockdep_hardirqs_on+0x94/0x140 [ 75.721305][ T4533] do_syscall_64+0x4c/0xa0 [ 75.725710][ T4533] ? clear_bhb_loop+0x60/0xb0 [ 75.730365][ T4533] ? clear_bhb_loop+0x60/0xb0 [ 75.735035][ T4533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.740927][ T4533] RIP: 0033:0x7f327138e929 [ 75.745334][ T4533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.764945][ T4533] RSP: 002b:00007f32722e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.773367][ T4533] RAX: ffffffffffffffda RBX: 00007f32715b5fa0 RCX: 00007f327138e929 [ 75.781333][ T4533] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 75.789302][ T4533] RBP: 00007f32722e4090 R08: 0000000000000000 R09: 0000000000000000 [ 75.797277][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.805250][ T4533] R13: 0000000000000000 R14: 00007f32715b5fa0 R15: 00007ffd7f7b5e18 [ 75.813226][ T4533] [ 75.851009][ T4304] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 75.882058][ T4304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.956038][ T4304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 75.994902][ T4304] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 76.047986][ T4304] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 76.298720][ T952] cfg80211: failed to load regulatory.db [ 78.369416][ T4304] usb 1-1: Manufacturer: syz [ 78.427654][ T4304] usb 1-1: config 0 descriptor?? [ 78.518332][ T4304] usb 1-1: can't set config #0, error -71 [ 78.532678][ T4304] usb 1-1: USB disconnect, device number 2 [ 78.605377][ T4550] loop4: detected capacity change from 0 to 512 [ 78.630429][ T4550] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 78.657636][ T4557] FAULT_INJECTION: forcing a failure. [ 78.657636][ T4557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.682497][ T4557] CPU: 0 PID: 4557 Comm: syz.2.44 Not tainted 6.1.142-syzkaller #0 [ 78.690433][ T4557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.700496][ T4557] Call Trace: [ 78.703780][ T4557] [ 78.706717][ T4557] dump_stack_lvl+0x168/0x22e [ 78.711408][ T4557] ? show_regs_print_info+0x12/0x12 [ 78.716619][ T4557] ? load_image+0x3b0/0x3b0 [ 78.721131][ T4557] ? __lock_acquire+0x7c50/0x7c50 [ 78.726167][ T4557] ? verify_lock_unused+0x140/0x140 [ 78.731379][ T4557] should_fail_ex+0x399/0x4d0 [ 78.736066][ T4557] _copy_from_user+0x2c/0x170 [ 78.740754][ T4557] ___sys_sendmsg+0x155/0x290 [ 78.745446][ T4557] ? __sys_sendmsg+0x270/0x270 [ 78.750237][ T4557] ? __lock_acquire+0x7c50/0x7c50 [ 78.755285][ T4557] ? __fdget+0x17c/0x200 [ 78.759547][ T4557] __se_sys_sendmsg+0x19e/0x270 [ 78.764414][ T4557] ? __x64_sys_sendmsg+0x80/0x80 [ 78.769378][ T4557] ? lockdep_hardirqs_on+0x94/0x140 [ 78.774584][ T4557] do_syscall_64+0x4c/0xa0 [ 78.779007][ T4557] ? clear_bhb_loop+0x60/0xb0 [ 78.783688][ T4557] ? clear_bhb_loop+0x60/0xb0 [ 78.788370][ T4557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.794278][ T4557] RIP: 0033:0x7f9b0378e929 [ 78.798703][ T4557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.818326][ T4557] RSP: 002b:00007f9b04687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.826751][ T4557] RAX: ffffffffffffffda RBX: 00007f9b039b5fa0 RCX: 00007f9b0378e929 [ 78.834713][ T4557] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 78.842677][ T4557] RBP: 00007f9b04687090 R08: 0000000000000000 R09: 0000000000000000 [ 78.850637][ T4557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.858596][ T4557] R13: 0000000000000000 R14: 00007f9b039b5fa0 R15: 00007ffdfd9d8fa8 [ 78.866566][ T4557] [ 78.897529][ T4406] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.903593][ T4556] capability: warning: `syz.0.43' uses 32-bit capabilities (legacy support in use) [ 79.031436][ T4561] netlink: 224 bytes leftover after parsing attributes in process `syz.2.44'. [ 79.594640][ T4563] netlink: 224 bytes leftover after parsing attributes in process `syz.0.43'. [ 80.993214][ T4593] FAULT_INJECTION: forcing a failure. [ 80.993214][ T4593] name failslab, interval 1, probability 0, space 0, times 0 [ 81.020889][ T4593] CPU: 1 PID: 4593 Comm: syz.2.51 Not tainted 6.1.142-syzkaller #0 [ 81.028823][ T4593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.038874][ T4593] Call Trace: [ 81.042152][ T4593] [ 81.045079][ T4593] dump_stack_lvl+0x168/0x22e [ 81.049753][ T4593] ? show_regs_print_info+0x12/0x12 [ 81.054945][ T4593] ? load_image+0x3b0/0x3b0 [ 81.059439][ T4593] ? __might_sleep+0xd0/0xd0 [ 81.064027][ T4593] ? __lock_acquire+0x7c50/0x7c50 [ 81.069054][ T4593] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 81.074680][ T4593] should_fail_ex+0x399/0x4d0 [ 81.079348][ T4593] should_failslab+0x5/0x20 [ 81.083841][ T4593] slab_pre_alloc_hook+0x59/0x310 [ 81.088859][ T4593] kmem_cache_alloc+0x56/0x2f0 [ 81.093612][ T4593] ? getname_flags+0xb7/0x500 [ 81.098280][ T4593] getname_flags+0xb7/0x500 [ 81.102777][ T4593] __x64_sys_mknod+0x77/0xa0 [ 81.107355][ T4593] do_syscall_64+0x4c/0xa0 [ 81.111760][ T4593] ? clear_bhb_loop+0x60/0xb0 [ 81.116423][ T4593] ? clear_bhb_loop+0x60/0xb0 [ 81.121089][ T4593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.126978][ T4593] RIP: 0033:0x7f9b0378e929 [ 81.131382][ T4593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.150981][ T4593] RSP: 002b:00007f9b04687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 81.159384][ T4593] RAX: ffffffffffffffda RBX: 00007f9b039b5fa0 RCX: 00007f9b0378e929 [ 81.167350][ T4593] RDX: 0000000000000704 RSI: 0000000000000fff RDI: 0000200000000140 [ 81.175312][ T4593] RBP: 00007f9b04687090 R08: 0000000000000000 R09: 0000000000000000 [ 81.183270][ T4593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.191234][ T4593] R13: 0000000000000000 R14: 00007f9b039b5fa0 R15: 00007ffdfd9d8fa8 [ 81.199203][ T4593] [ 81.787702][ T4594] loop3: detected capacity change from 0 to 256 [ 81.797028][ T4594] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119aed8) [ 81.807359][ T4594] exFAT-fs (loop3): invalid boot region [ 81.812920][ T4594] exFAT-fs (loop3): failed to recognize exfat type [ 81.957592][ T4596] device bridge0 entered promiscuous mode [ 81.986701][ T4596] device vlan2 entered promiscuous mode [ 82.319676][ T4606] ceph: Path missing in source [ 82.434889][ T4607] ceph: Path missing in source [ 84.241829][ T4623] loop2: detected capacity change from 0 to 512 [ 84.288817][ T4623] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.61: inode #1: comm syz.2.61: iget: illegal inode # [ 84.513199][ T4623] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.61: error while reading EA inode 1 err=-117 [ 84.527395][ T4623] EXT4-fs (loop2): 1 orphan inode deleted [ 84.536493][ T4623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.686395][ T4623] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 84.824826][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 84.844749][ T4644] FAULT_INJECTION: forcing a failure. [ 84.844749][ T4644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.859872][ T4640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.879240][ T4640] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.884802][ T4644] CPU: 1 PID: 4644 Comm: syz.0.64 Not tainted 6.1.142-syzkaller #0 [ 84.893064][ T4644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.903159][ T4644] Call Trace: [ 84.906429][ T4644] [ 84.909347][ T4644] dump_stack_lvl+0x168/0x22e [ 84.914027][ T4644] ? show_regs_print_info+0x12/0x12 [ 84.919216][ T4644] ? load_image+0x3b0/0x3b0 [ 84.923718][ T4644] ? __lock_acquire+0x7c50/0x7c50 [ 84.928749][ T4644] ? snprintf+0xd7/0x120 [ 84.932986][ T4644] should_fail_ex+0x399/0x4d0 [ 84.937658][ T4644] _copy_to_user+0x2c/0x130 [ 84.942157][ T4644] simple_read_from_buffer+0xe3/0x150 [ 84.947521][ T4644] proc_fail_nth_read+0x19a/0x210 [ 84.952537][ T4644] ? proc_fault_inject_write+0x2f0/0x2f0 [ 84.958162][ T4644] ? fsnotify_perm+0x248/0x550 [ 84.962919][ T4644] ? proc_fault_inject_write+0x2f0/0x2f0 [ 84.968541][ T4644] vfs_read+0x2c0/0x920 [ 84.972694][ T4644] ? kernel_read+0x1e0/0x1e0 [ 84.977279][ T4644] ? __fget_files+0x28/0x4d0 [ 84.981864][ T4644] ? __fget_files+0x44a/0x4d0 [ 84.986538][ T4644] ? __fdget_pos+0x2ae/0x360 [ 84.991122][ T4644] ? ksys_read+0x71/0x240 [ 84.995438][ T4644] ksys_read+0x143/0x240 [ 84.999667][ T4644] ? vfs_write+0x960/0x960 [ 85.004075][ T4644] ? lockdep_hardirqs_on+0x94/0x140 [ 85.009261][ T4644] do_syscall_64+0x4c/0xa0 [ 85.013672][ T4644] ? clear_bhb_loop+0x60/0xb0 [ 85.018338][ T4644] ? clear_bhb_loop+0x60/0xb0 [ 85.023000][ T4644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.028890][ T4644] RIP: 0033:0x7f5635b8d33c [ 85.033301][ T4644] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 85.052899][ T4644] RSP: 002b:00007f5636948030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.061304][ T4644] RAX: ffffffffffffffda RBX: 00007f5635db6080 RCX: 00007f5635b8d33c [ 85.069261][ T4644] RDX: 000000000000000f RSI: 00007f56369480a0 RDI: 0000000000000004 [ 85.077224][ T4644] RBP: 00007f5636948090 R08: 0000000000000000 R09: 0000000000000000 [ 85.085183][ T4644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.093140][ T4644] R13: 0000000000000000 R14: 00007f5635db6080 R15: 00007ffe5b4baec8 [ 85.101111][ T4644] [ 85.111414][ T4640] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 85.140596][ T4640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.161023][ T4640] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.168723][ T4629] loop1: detected capacity change from 0 to 32768 [ 85.188341][ T4629] ======================================================= [ 85.188341][ T4629] WARNING: The mand mount option has been deprecated and [ 85.188341][ T4629] and is ignored by this kernel. Remove the mand [ 85.188341][ T4629] option from the mount to silence this warning. [ 85.188341][ T4629] ======================================================= [ 85.225108][ T4640] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 85.225276][ T4640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.241213][ T4640] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.247199][ T4640] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 85.260456][ T4640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.266537][ T4640] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.272562][ T4640] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 85.279752][ T4640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 85.285743][ T4640] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 85.291744][ T4640] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 85.447536][ T4629] JBD2: Ignoring recovery information on journal [ 86.208969][ T4629] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 86.268270][ T4657] FAULT_INJECTION: forcing a failure. [ 86.268270][ T4657] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 86.302217][ T4621] (syz.1.60,4621,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 86.355931][ T4657] CPU: 1 PID: 4657 Comm: syz.3.68 Not tainted 6.1.142-syzkaller #0 [ 86.363874][ T4657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.373937][ T4657] Call Trace: [ 86.377222][ T4657] [ 86.380154][ T4657] dump_stack_lvl+0x168/0x22e [ 86.384850][ T4657] ? show_regs_print_info+0x12/0x12 [ 86.390056][ T4657] ? load_image+0x3b0/0x3b0 [ 86.394569][ T4657] ? __lock_acquire+0x7c50/0x7c50 [ 86.399603][ T4657] ? verify_lock_unused+0x140/0x140 [ 86.404819][ T4657] should_fail_ex+0x399/0x4d0 [ 86.409509][ T4657] prepare_alloc_pages+0x1e2/0x5f0 [ 86.414645][ T4657] __alloc_pages+0x123/0x4e0 [ 86.419246][ T4657] ? lock_chain_count+0x20/0x20 [ 86.424107][ T4657] ? zone_statistics+0x170/0x170 [ 86.429052][ T4657] ? count_memcg_event_mm+0x8f/0x3b0 [ 86.434344][ T4657] ? count_memcg_event_mm+0x358/0x3b0 [ 86.439719][ T4657] ? __lock_acquire+0x7c50/0x7c50 [ 86.444749][ T4657] ? count_memcg_event_mm+0x8f/0x3b0 [ 86.450044][ T4657] __folio_alloc+0xe/0x30 [ 86.454376][ T4657] vma_alloc_folio+0x4a3/0x900 [ 86.459167][ T4657] handle_mm_fault+0x2242/0x3e70 [ 86.464127][ T4657] ? mt_find+0x145/0x810 [ 86.468401][ T4657] ? numa_migrate_prep+0x250/0x250 [ 86.473535][ T4657] ? lock_chain_count+0x20/0x20 [ 86.478402][ T4657] ? lock_mm_and_find_vma+0xae/0x2f0 [ 86.483684][ T4657] do_user_addr_fault+0x51f/0xb10 [ 86.488713][ T4657] exc_page_fault+0x60/0x100 [ 86.493295][ T4657] ? clear_bhb_loop+0x60/0xb0 [ 86.497965][ T4657] asm_exc_page_fault+0x22/0x30 [ 86.502808][ T4657] RIP: 0033:0x7f3271256a6a [ 86.507222][ T4657] Code: e8 4b ad ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 41 57 41 bf 00 00 c0 fe 41 56 41 55 41 54 45 31 e4 55 53 48 81 ec 08 1b 00 00 <48> 89 7c 24 78 48 8d 9c 24 f0 06 00 00 48 89 74 24 70 48 89 54 24 [ 86.526824][ T4657] RSP: 002b:00007f32722e24f0 EFLAGS: 00010206 [ 86.532883][ T4657] RAX: 00007f3271256a50 RBX: 00007f32715b5fa0 RCX: 0000200000000080 [ 86.540842][ T4657] RDX: 0000200000fe8000 RSI: 0000000000000005 RDI: 0000000000000004 [ 86.548801][ T4657] RBP: 00007f32722e4090 R08: 0000000000000001 R09: 0000000000000072 [ 86.556766][ T4657] R10: 0000000000000004 R11: 0000200000fe8000 R12: 0000000000000000 [ 86.564725][ T4657] R13: 0000000000000000 R14: 00007f32715b5fa0 R15: 00000000fec00000 [ 86.572702][ T4657] [ 86.577529][ T4621] (syz.1.60,4621,1):ocfs2_group_add:495 ERROR: Can't read the group descriptor # 21474836480 from the device. [ 86.598477][ T4657] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 86.764412][ T4669] FAULT_INJECTION: forcing a failure. [ 86.764412][ T4669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.778110][ T4669] CPU: 1 PID: 4669 Comm: syz.4.69 Not tainted 6.1.142-syzkaller #0 [ 86.786016][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.796072][ T4669] Call Trace: [ 86.799352][ T4669] [ 86.802283][ T4669] dump_stack_lvl+0x168/0x22e [ 86.806976][ T4669] ? show_regs_print_info+0x12/0x12 [ 86.812180][ T4669] ? load_image+0x3b0/0x3b0 [ 86.816688][ T4669] ? __lock_acquire+0x7c50/0x7c50 [ 86.821733][ T4669] should_fail_ex+0x399/0x4d0 [ 86.826421][ T4669] _copy_from_user+0x2c/0x170 [ 86.831108][ T4669] ___sys_sendmsg+0x155/0x290 [ 86.835796][ T4669] ? __sys_sendmsg+0x270/0x270 [ 86.841472][ T4669] __se_sys_sendmsg+0x19e/0x270 [ 86.846508][ T4669] ? __x64_sys_sendmsg+0x80/0x80 [ 86.851464][ T4669] ? lockdep_hardirqs_on+0x94/0x140 [ 86.856673][ T4669] do_syscall_64+0x4c/0xa0 [ 86.861095][ T4669] ? clear_bhb_loop+0x60/0xb0 [ 86.865778][ T4669] ? clear_bhb_loop+0x60/0xb0 [ 86.870459][ T4669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.876361][ T4669] RIP: 0033:0x7fbb8958e929 [ 86.880802][ T4669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.900410][ T4669] RSP: 002b:00007fbb8a467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.908829][ T4669] RAX: ffffffffffffffda RBX: 00007fbb897b6160 RCX: 00007fbb8958e929 [ 86.916804][ T4669] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 86.924782][ T4669] RBP: 00007fbb8a467090 R08: 0000000000000000 R09: 0000000000000000 [ 86.932758][ T4669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.940735][ T4669] R13: 0000000000000000 R14: 00007fbb897b6160 R15: 00007ffd9be7eda8 [ 86.948715][ T4669] [ 87.193133][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.199608][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.311581][ T4265] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.511375][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.517507][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.868588][ T4676] loop4: detected capacity change from 0 to 1764 [ 88.122856][ T4262] ocfs2: Unmounting device (7,1) on (node local) [ 88.633301][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.654963][ T4688] loop2: detected capacity change from 0 to 512 [ 88.676356][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.685796][ T4688] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.76: inode #1: comm syz.2.76: iget: illegal inode # [ 88.715278][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.731434][ T4688] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.76: error while reading EA inode 1 err=-117 [ 88.752684][ T4676] device bridge_slave_0 left promiscuous mode [ 88.761327][ T4688] EXT4-fs (loop2): 1 orphan inode deleted [ 88.772864][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.834013][ T4688] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.030372][ T4676] device bridge_slave_1 left promiscuous mode [ 89.149665][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.231333][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 89.237612][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 89.369069][ T4676] bond0: (slave bond_slave_0): Releasing backup interface [ 89.380974][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 89.417141][ T4676] bond0: (slave bond_slave_1): Releasing backup interface [ 89.472678][ T4676] team0: Port device team_slave_0 removed [ 89.527782][ T4676] team0: Port device team_slave_1 removed [ 89.541025][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 89.543081][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.547046][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 89.564730][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.592792][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.629514][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.656201][ T4688] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 89.804245][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 89.887761][ T4703] FAULT_INJECTION: forcing a failure. [ 89.887761][ T4703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.900990][ T4703] CPU: 1 PID: 4703 Comm: syz.3.78 Not tainted 6.1.142-syzkaller #0 [ 89.908893][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.918950][ T4703] Call Trace: [ 89.922234][ T4703] [ 89.925169][ T4703] dump_stack_lvl+0x168/0x22e [ 89.929868][ T4703] ? show_regs_print_info+0x12/0x12 [ 89.935071][ T4703] ? load_image+0x3b0/0x3b0 [ 89.939580][ T4703] ? __lock_acquire+0x7c50/0x7c50 [ 89.944620][ T4703] should_fail_ex+0x399/0x4d0 [ 89.949312][ T4703] _copy_from_user+0x2c/0x170 [ 89.954006][ T4703] core_sys_select+0x4d0/0x8b0 [ 89.958791][ T4703] ? poll_select_set_timeout+0x150/0x150 [ 89.964461][ T4703] ? sigprocmask+0x190/0x190 [ 89.969081][ T4703] __se_sys_pselect6+0x2ed/0x3a0 [ 89.974037][ T4703] ? __x64_sys_pselect6+0xf0/0xf0 [ 89.979072][ T4703] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 89.985067][ T4703] ? __x64_sys_pselect6+0x1d/0xf0 [ 89.990101][ T4703] do_syscall_64+0x4c/0xa0 [ 89.994525][ T4703] ? clear_bhb_loop+0x60/0xb0 [ 89.999206][ T4703] ? clear_bhb_loop+0x60/0xb0 [ 90.003888][ T4703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.009794][ T4703] RIP: 0033:0x7f327138e929 [ 90.014217][ T4703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.033839][ T4703] RSP: 002b:00007f32722c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 90.042259][ T4703] RAX: ffffffffffffffda RBX: 00007f32715b6080 RCX: 00007f327138e929 [ 90.050237][ T4703] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 90.058210][ T4703] RBP: 00007f32722c3090 R08: 0000000000000000 R09: 0000000000000000 [ 90.066185][ T4703] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 90.074159][ T4703] R13: 0000000000000001 R14: 00007f32715b6080 R15: 00007ffd7f7b5e18 [ 90.082144][ T4703] [ 90.873524][ T4693] loop0: detected capacity change from 0 to 32768 [ 90.883420][ T4702] loop1: detected capacity change from 0 to 256 [ 90.893280][ T4702] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119aed8) [ 90.903603][ T4702] exFAT-fs (loop1): invalid boot region [ 90.909124][ T4702] exFAT-fs (loop1): failed to recognize exfat type [ 91.215132][ T4269] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.479102][ T4711] loop3: detected capacity change from 0 to 256 [ 91.492745][ T4711] exfat: Deprecated parameter 'utf8' [ 91.498234][ T4711] exfat: Deprecated parameter 'namecase' [ 91.504002][ T4711] exfat: Deprecated parameter 'utf8' [ 91.567459][ T4711] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb2b571bb, utbl_chksum : 0xe619d30d) [ 91.631120][ T4711] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 91.664055][ T4711] Bluetooth: MGMT ver 1.22 [ 93.008486][ T4733] device bridge_slave_1 left promiscuous mode [ 93.024172][ T4734] loop4: detected capacity change from 0 to 8 [ 93.030717][ T4734] squashfs: Unknown parameter '/dev/dsp1' [ 93.098189][ T4735] FAULT_INJECTION: forcing a failure. [ 93.098189][ T4735] name failslab, interval 1, probability 0, space 0, times 0 [ 93.111011][ T4735] CPU: 1 PID: 4735 Comm: syz.1.84 Not tainted 6.1.142-syzkaller #0 [ 93.118909][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.128973][ T4735] Call Trace: [ 93.132253][ T4735] [ 93.135185][ T4735] dump_stack_lvl+0x168/0x22e [ 93.139874][ T4735] ? show_regs_print_info+0x12/0x12 [ 93.145076][ T4735] ? load_image+0x3b0/0x3b0 [ 93.149586][ T4735] ? __might_sleep+0xd0/0xd0 [ 93.154190][ T4735] ? __lock_acquire+0x7c50/0x7c50 [ 93.159223][ T4735] ? finish_task_switch+0x265/0x8f0 [ 93.164440][ T4735] should_fail_ex+0x399/0x4d0 [ 93.169126][ T4735] should_failslab+0x5/0x20 [ 93.173631][ T4735] slab_pre_alloc_hook+0x59/0x310 [ 93.178665][ T4735] kmem_cache_alloc_node+0x5a/0x320 [ 93.183865][ T4735] ? __alloc_skb+0xfc/0x7e0 [ 93.188399][ T4735] __alloc_skb+0xfc/0x7e0 [ 93.192751][ T4735] alloc_skb_with_frags+0xa7/0x710 [ 93.197872][ T4735] ? aa_label_sk_perm+0x3e7/0x500 [ 93.202914][ T4735] sock_alloc_send_pskb+0x853/0x980 [ 93.208138][ T4735] ? sock_kzfree_s+0x50/0x50 [ 93.212740][ T4735] ? aa_sk_perm+0x1b1/0x920 [ 93.217259][ T4735] ? aa_sk_perm+0x7e5/0x920 [ 93.221772][ T4735] hci_sock_sendmsg+0x200/0xe70 [ 93.226635][ T4735] ? aa_file_perm+0x3ef/0xec0 [ 93.231317][ T4735] ? hci_sock_getsockopt+0x5a0/0x5a0 [ 93.236610][ T4735] ? aa_sock_msg_perm+0x94/0x150 [ 93.241551][ T4735] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 93.246841][ T4735] ? security_socket_sendmsg+0x7c/0xa0 [ 93.252304][ T4735] sock_write_iter+0x2b5/0x3a0 [ 93.257081][ T4735] ? sock_read_iter+0x370/0x370 [ 93.261949][ T4735] ? common_file_perm+0x171/0x1c0 [ 93.266998][ T4735] ? fsnotify_perm+0x5a/0x550 [ 93.271683][ T4735] vfs_write+0x44c/0x960 [ 93.275931][ T4735] ? file_end_write+0x250/0x250 [ 93.280787][ T4735] ? __fget_files+0x44a/0x4d0 [ 93.285480][ T4735] ? __fdget_pos+0x1d4/0x360 [ 93.290077][ T4735] ? ksys_write+0x71/0x240 [ 93.294495][ T4735] ksys_write+0x143/0x240 [ 93.298835][ T4735] ? __ia32_sys_read+0x80/0x80 [ 93.303604][ T4735] ? lockdep_hardirqs_on+0x94/0x140 [ 93.308821][ T4735] do_syscall_64+0x4c/0xa0 [ 93.313267][ T4735] ? clear_bhb_loop+0x60/0xb0 [ 93.317959][ T4735] ? clear_bhb_loop+0x60/0xb0 [ 93.322652][ T4735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.328561][ T4735] RIP: 0033:0x7ff7df78e929 [ 93.332984][ T4735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.352604][ T4735] RSP: 002b:00007ff7e05b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.361022][ T4735] RAX: ffffffffffffffda RBX: 00007ff7df9b6160 RCX: 00007ff7df78e929 [ 93.368999][ T4735] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000009 [ 93.376960][ T4735] RBP: 00007ff7e05b1090 R08: 0000000000000000 R09: 0000000000000000 [ 93.384915][ T4735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.392870][ T4735] R13: 0000000000000000 R14: 00007ff7df9b6160 R15: 00007ffe91625b38 [ 93.400918][ T4735] [ 93.428727][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.438851][ T4737] loop2: detected capacity change from 0 to 8 [ 93.447430][ T4737] squashfs: Unknown parameter '0xffffffffffffffff0x000000000000000300000000000000000003' [ 93.475398][ T4268] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 93.524579][ T4406] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.829969][ T4733] device bridge_slave_0 left promiscuous mode [ 94.854710][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.045947][ T4754] FAULT_INJECTION: forcing a failure. [ 97.045947][ T4754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.059094][ T4754] CPU: 1 PID: 4754 Comm: syz.3.90 Not tainted 6.1.142-syzkaller #0 [ 97.066998][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.077063][ T4754] Call Trace: [ 97.080352][ T4754] [ 97.083289][ T4754] dump_stack_lvl+0x168/0x22e [ 97.087995][ T4754] ? show_regs_print_info+0x12/0x12 [ 97.093216][ T4754] ? load_image+0x3b0/0x3b0 [ 97.097735][ T4754] ? __lock_acquire+0x7c50/0x7c50 [ 97.102781][ T4754] should_fail_ex+0x399/0x4d0 [ 97.107473][ T4754] _copy_from_user+0x2c/0x170 [ 97.112166][ T4754] core_sys_select+0x4d0/0x8b0 [ 97.116966][ T4754] ? poll_select_set_timeout+0x150/0x150 [ 97.122636][ T4754] ? sigprocmask+0x190/0x190 [ 97.127239][ T4754] ? __fget_files+0x44a/0x4d0 [ 97.131936][ T4754] __se_sys_pselect6+0x2ed/0x3a0 [ 97.136892][ T4754] ? __x64_sys_pselect6+0xf0/0xf0 [ 97.141930][ T4754] ? __x64_sys_pselect6+0x1d/0xf0 [ 97.146965][ T4754] do_syscall_64+0x4c/0xa0 [ 97.151390][ T4754] ? clear_bhb_loop+0x60/0xb0 [ 97.156071][ T4754] ? clear_bhb_loop+0x60/0xb0 [ 97.160753][ T4754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.166660][ T4754] RIP: 0033:0x7f327138e929 [ 97.171078][ T4754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.190693][ T4754] RSP: 002b:00007f32722a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 97.199112][ T4754] RAX: ffffffffffffffda RBX: 00007f32715b6160 RCX: 00007f327138e929 [ 97.207092][ T4754] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 97.215073][ T4754] RBP: 00007f32722a2090 R08: 0000000000000000 R09: 0000000000000000 [ 97.223056][ T4754] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 97.231034][ T4754] R13: 0000000000000001 R14: 00007f32715b6160 R15: 00007ffd7f7b5e18 [ 97.239043][ T4754] [ 98.990152][ T4764] loop1: detected capacity change from 0 to 4096 [ 99.032508][ T4764] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 100.351565][ T4774] loop3: detected capacity change from 0 to 256 [ 100.387964][ T4774] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119aed8) [ 100.472952][ T4774] exFAT-fs (loop3): invalid boot region [ 100.478548][ T4774] exFAT-fs (loop3): failed to recognize exfat type [ 101.376933][ T4782] loop1: detected capacity change from 0 to 8192 [ 101.399494][ T4782] FAT-fs (loop1): bogus number of directory entries (3) [ 101.408802][ T4782] FAT-fs (loop1): Can't find a valid FAT filesystem [ 101.680657][ T4788] loop2: detected capacity change from 0 to 32768 [ 101.699290][ T4788] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.97 (4788) [ 101.729931][ T4795] FAULT_INJECTION: forcing a failure. [ 101.729931][ T4795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.743074][ T4795] CPU: 1 PID: 4795 Comm: syz.1.99 Not tainted 6.1.142-syzkaller #0 [ 101.751035][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.761107][ T4795] Call Trace: [ 101.764415][ T4795] [ 101.767355][ T4795] dump_stack_lvl+0x168/0x22e [ 101.772056][ T4795] ? show_regs_print_info+0x12/0x12 [ 101.777270][ T4795] ? load_image+0x3b0/0x3b0 [ 101.781797][ T4795] ? __lock_acquire+0x7c50/0x7c50 [ 101.786856][ T4795] ? snprintf+0xd7/0x120 [ 101.791131][ T4795] should_fail_ex+0x399/0x4d0 [ 101.795825][ T4795] _copy_to_user+0x2c/0x130 [ 101.800359][ T4795] simple_read_from_buffer+0xe3/0x150 [ 101.805754][ T4795] proc_fail_nth_read+0x19a/0x210 [ 101.810803][ T4795] ? proc_fault_inject_write+0x2f0/0x2f0 [ 101.816460][ T4795] ? fsnotify_perm+0x248/0x550 [ 101.821248][ T4795] ? proc_fault_inject_write+0x2f0/0x2f0 [ 101.826899][ T4795] vfs_read+0x2c0/0x920 [ 101.831061][ T4795] ? kernel_read+0x1e0/0x1e0 [ 101.835652][ T4795] ? __fget_files+0x28/0x4d0 [ 101.840237][ T4795] ? __fget_files+0x44a/0x4d0 [ 101.844919][ T4795] ? __fdget_pos+0x2ae/0x360 [ 101.849502][ T4795] ? ksys_read+0x71/0x240 [ 101.853821][ T4795] ksys_read+0x143/0x240 [ 101.858057][ T4795] ? vfs_write+0x960/0x960 [ 101.862465][ T4795] ? lockdep_hardirqs_on+0x94/0x140 [ 101.867653][ T4795] do_syscall_64+0x4c/0xa0 [ 101.872065][ T4795] ? clear_bhb_loop+0x60/0xb0 [ 101.876733][ T4795] ? clear_bhb_loop+0x60/0xb0 [ 101.881399][ T4795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.887290][ T4795] RIP: 0033:0x7ff7df78d33c [ 101.891699][ T4795] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.911300][ T4795] RSP: 002b:00007ff7e05d2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.919705][ T4795] RAX: ffffffffffffffda RBX: 00007ff7df9b6080 RCX: 00007ff7df78d33c [ 101.927670][ T4795] RDX: 000000000000000f RSI: 00007ff7e05d20a0 RDI: 0000000000000003 [ 101.935633][ T4795] RBP: 00007ff7e05d2090 R08: 0000000000000000 R09: 0000000000000000 [ 101.943597][ T4795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.951558][ T4795] R13: 0000000000000000 R14: 00007ff7df9b6080 R15: 00007ffe91625b38 [ 101.959539][ T4795] [ 101.969415][ T4788] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.980157][ T4788] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 101.988921][ T4788] BTRFS info (device loop2): enabling auto defrag [ 101.995405][ T4788] BTRFS info (device loop2): doing ref verification [ 102.002051][ T4788] BTRFS info (device loop2): use no compression [ 102.008317][ T4788] BTRFS info (device loop2): force clearing of disk cache [ 102.015506][ T4788] BTRFS info (device loop2): setting nodatacow, compression disabled [ 102.023626][ T4788] BTRFS info (device loop2): disabling free space tree [ 102.130511][ T4801] loop4: detected capacity change from 0 to 512 [ 102.252560][ T4801] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.89: inode #1: comm syz.4.89: iget: illegal inode # [ 102.306303][ T4801] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.89: error while reading EA inode 1 err=-117 [ 102.355676][ T4788] BTRFS info (device loop2): enabling ssd optimizations [ 102.366943][ T4788] BTRFS info (device loop2): rebuilding free space tree [ 102.371617][ T4801] EXT4-fs (loop4): 1 orphan inode deleted [ 102.391632][ T4801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.402021][ T4788] BTRFS info (device loop2): disabling free space tree [ 102.409734][ T4788] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.419733][ T4788] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.589160][ T4801] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 102.735284][ T4788] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.810561][ T4269] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop2 scanned by udevd (4269) [ 102.884228][ T4829] FAULT_INJECTION: forcing a failure. [ 102.884228][ T4829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.898347][ T4829] CPU: 1 PID: 4829 Comm: syz.3.104 Not tainted 6.1.142-syzkaller #0 [ 102.906522][ T4829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.916585][ T4829] Call Trace: [ 102.919867][ T4829] [ 102.922803][ T4829] dump_stack_lvl+0x168/0x22e [ 102.927496][ T4829] ? show_regs_print_info+0x12/0x12 [ 102.932707][ T4829] ? load_image+0x3b0/0x3b0 [ 102.937219][ T4829] ? __lock_acquire+0x7c50/0x7c50 [ 102.942260][ T4829] should_fail_ex+0x399/0x4d0 [ 102.946949][ T4829] _copy_from_user+0x2c/0x170 [ 102.951638][ T4829] iovec_from_user+0x143/0x360 [ 102.956416][ T4829] __import_iovec+0x6d/0x500 [ 102.961015][ T4829] ? __fget_files+0x44a/0x4d0 [ 102.965713][ T4829] import_iovec+0x6f/0xa0 [ 102.970057][ T4829] do_writev+0x205/0x410 [ 102.974311][ T4829] ? do_readv+0x3e0/0x3e0 [ 102.978658][ T4829] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 102.984655][ T4829] ? lock_chain_count+0x20/0x20 [ 102.989521][ T4829] ? lockdep_hardirqs_on+0x94/0x140 [ 102.994910][ T4829] do_syscall_64+0x4c/0xa0 [ 102.999339][ T4829] ? clear_bhb_loop+0x60/0xb0 [ 103.004036][ T4829] ? clear_bhb_loop+0x60/0xb0 [ 103.008722][ T4829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.014633][ T4829] RIP: 0033:0x7f327138e929 [ 103.019041][ T4829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.038646][ T4829] RSP: 002b:00007f32722e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 103.047061][ T4829] RAX: ffffffffffffffda RBX: 00007f32715b5fa0 RCX: 00007f327138e929 [ 103.055023][ T4829] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 103.062982][ T4829] RBP: 00007f32722e4090 R08: 0000000000000000 R09: 0000000000000000 [ 103.070945][ T4829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.078906][ T4829] R13: 0000000000000000 R14: 00007f32715b5fa0 R15: 00007ffd7f7b5e18 [ 103.086876][ T4829] [ 103.110952][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 103.501100][ T4834] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.721453][ T4834] usb 4-1: Using ep0 maxpacket: 32 [ 103.738718][ T4834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.924560][ T4834] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 104.159041][ T4834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.283949][ T4834] usb 4-1: Product: syz [ 104.291073][ T4834] usb 4-1: Manufacturer: syz [ 104.295787][ T4834] usb 4-1: SerialNumber: syz [ 104.306291][ T4834] usb 4-1: config 0 descriptor?? [ 104.380560][ T4860] FAULT_INJECTION: forcing a failure. [ 104.380560][ T4860] name failslab, interval 1, probability 0, space 0, times 0 [ 104.394104][ T4860] CPU: 0 PID: 4860 Comm: syz.4.110 Not tainted 6.1.142-syzkaller #0 [ 104.402096][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.412150][ T4860] Call Trace: [ 104.415429][ T4860] [ 104.418362][ T4860] dump_stack_lvl+0x168/0x22e [ 104.423054][ T4860] ? show_regs_print_info+0x12/0x12 [ 104.428262][ T4860] ? load_image+0x3b0/0x3b0 [ 104.432771][ T4860] ? __might_sleep+0xd0/0xd0 [ 104.437371][ T4860] ? __lock_acquire+0x7c50/0x7c50 [ 104.442404][ T4860] should_fail_ex+0x399/0x4d0 [ 104.447091][ T4860] should_failslab+0x5/0x20 [ 104.451602][ T4860] slab_pre_alloc_hook+0x59/0x310 [ 104.456635][ T4860] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 104.462363][ T4860] __kmem_cache_alloc_node+0x4f/0x260 [ 104.467744][ T4860] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 104.473475][ T4860] __kmalloc+0xa0/0x240 [ 104.477636][ T4860] tomoyo_realpath_from_path+0xdf/0x5d0 [ 104.483201][ T4860] tomoyo_path_number_perm+0x1e3/0x600 [ 104.488666][ T4860] ? tomoyo_path_number_perm+0x1b6/0x600 [ 104.494305][ T4860] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 104.499772][ T4860] ? ksys_write+0x1bd/0x240 [ 104.504279][ T4860] ? common_file_perm+0x171/0x1c0 [ 104.509336][ T4860] ? __fget_files+0x28/0x4d0 [ 104.513954][ T4860] security_file_ioctl+0x6c/0xa0 [ 104.518905][ T4860] __se_sys_ioctl+0x48/0x170 [ 104.523525][ T4860] do_syscall_64+0x4c/0xa0 [ 104.527949][ T4860] ? clear_bhb_loop+0x60/0xb0 [ 104.532629][ T4860] ? clear_bhb_loop+0x60/0xb0 [ 104.537308][ T4860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.543212][ T4860] RIP: 0033:0x7fbb8958e929 [ 104.547630][ T4860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.567238][ T4860] RSP: 002b:00007fbb8a467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.575664][ T4860] RAX: ffffffffffffffda RBX: 00007fbb897b6160 RCX: 00007fbb8958e929 [ 104.583638][ T4860] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000003 [ 104.591610][ T4860] RBP: 00007fbb8a467090 R08: 0000000000000000 R09: 0000000000000000 [ 104.599579][ T4860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.607551][ T4860] R13: 0000000000000000 R14: 00007fbb897b6160 R15: 00007ffd9be7eda8 [ 104.615541][ T4860] [ 104.621029][ T4860] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.364416][ T4834] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 105.441563][ T4871] FAULT_INJECTION: forcing a failure. [ 105.441563][ T4871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.475012][ T4871] CPU: 1 PID: 4871 Comm: syz.0.117 Not tainted 6.1.142-syzkaller #0 [ 105.483041][ T4871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.493122][ T4871] Call Trace: [ 105.496417][ T4871] [ 105.499360][ T4871] dump_stack_lvl+0x168/0x22e [ 105.504059][ T4871] ? show_regs_print_info+0x12/0x12 [ 105.509277][ T4871] ? load_image+0x3b0/0x3b0 [ 105.513799][ T4871] ? __lock_acquire+0x7c50/0x7c50 [ 105.518858][ T4871] ? snprintf+0xd7/0x120 [ 105.523114][ T4871] should_fail_ex+0x399/0x4d0 [ 105.527807][ T4871] _copy_to_user+0x2c/0x130 [ 105.532334][ T4871] simple_read_from_buffer+0xe3/0x150 [ 105.533537][ T4873] loop4: detected capacity change from 0 to 512 [ 105.537707][ T4871] proc_fail_nth_read+0x19a/0x210 [ 105.537735][ T4871] ? proc_fault_inject_write+0x2f0/0x2f0 [ 105.537754][ T4871] ? fsnotify_perm+0x248/0x550 [ 105.537774][ T4871] ? proc_fault_inject_write+0x2f0/0x2f0 [ 105.537791][ T4871] vfs_read+0x2c0/0x920 [ 105.537810][ T4871] ? kernel_read+0x1e0/0x1e0 [ 105.573934][ T4871] ? __fget_files+0x28/0x4d0 [ 105.578546][ T4871] ? __fget_files+0x44a/0x4d0 [ 105.583253][ T4871] ? __fdget_pos+0x2ae/0x360 [ 105.587865][ T4871] ? ksys_read+0x71/0x240 [ 105.592214][ T4871] ksys_read+0x143/0x240 [ 105.596473][ T4871] ? vfs_write+0x960/0x960 [ 105.600907][ T4871] ? lockdep_hardirqs_on+0x94/0x140 [ 105.606119][ T4871] do_syscall_64+0x4c/0xa0 [ 105.610550][ T4871] ? clear_bhb_loop+0x60/0xb0 [ 105.615241][ T4871] ? clear_bhb_loop+0x60/0xb0 [ 105.619932][ T4871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.625849][ T4871] RIP: 0033:0x7f5635b8d33c [ 105.630277][ T4871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.650248][ T4871] RSP: 002b:00007f5636969030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.658680][ T4871] RAX: ffffffffffffffda RBX: 00007f5635db5fa0 RCX: 00007f5635b8d33c [ 105.666665][ T4871] RDX: 000000000000000f RSI: 00007f56369690a0 RDI: 0000000000000004 [ 105.674653][ T4871] RBP: 00007f5636969090 R08: 0000000000000000 R09: 0000000000000000 [ 105.682643][ T4871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.690625][ T4871] R13: 0000000000000000 R14: 00007f5635db5fa0 R15: 00007ffe5b4baec8 [ 105.695807][ T4873] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.116: inode #1: comm syz.4.116: iget: illegal inode # [ 105.698605][ T4871] [ 105.726199][ T4873] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.116: error while reading EA inode 1 err=-117 [ 105.726626][ T4873] EXT4-fs (loop4): 1 orphan inode deleted [ 105.726653][ T4873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 105.843501][ T4873] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 105.996718][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 106.062023][ T4884] FAULT_INJECTION: forcing a failure. [ 106.062023][ T4884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.139593][ T4888] loop0: detected capacity change from 0 to 256 [ 106.159284][ T4884] CPU: 1 PID: 4884 Comm: syz.1.120 Not tainted 6.1.142-syzkaller #0 [ 106.167302][ T4884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.177354][ T4884] Call Trace: [ 106.180632][ T4884] [ 106.183571][ T4884] dump_stack_lvl+0x168/0x22e [ 106.188258][ T4884] ? show_regs_print_info+0x12/0x12 [ 106.193462][ T4884] ? load_image+0x3b0/0x3b0 [ 106.197968][ T4884] ? __lock_acquire+0x7c50/0x7c50 [ 106.202998][ T4884] should_fail_ex+0x399/0x4d0 [ 106.207682][ T4884] _copy_from_user+0x2c/0x170 [ 106.212365][ T4884] __sys_connect+0x132/0x410 [ 106.216961][ T4884] ? __sys_connect_file+0x170/0x170 [ 106.222182][ T4884] __x64_sys_connect+0x76/0x80 [ 106.226949][ T4884] do_syscall_64+0x4c/0xa0 [ 106.231383][ T4884] ? clear_bhb_loop+0x60/0xb0 [ 106.236064][ T4884] ? clear_bhb_loop+0x60/0xb0 [ 106.240751][ T4884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.246651][ T4884] RIP: 0033:0x7ff7df78e929 [ 106.251070][ T4884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.270678][ T4884] RSP: 002b:00007ff7e05f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 106.279096][ T4884] RAX: ffffffffffffffda RBX: 00007ff7df9b5fa0 RCX: 00007ff7df78e929 [ 106.287074][ T4884] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 106.295043][ T4884] RBP: 00007ff7e05f3090 R08: 0000000000000000 R09: 0000000000000000 [ 106.303017][ T4884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.310984][ T4884] R13: 0000000000000000 R14: 00007ff7df9b5fa0 R15: 00007ffe91625b38 [ 106.318966][ T4884] [ 106.580698][ T4892] FAULT_INJECTION: forcing a failure. [ 106.580698][ T4892] name failslab, interval 1, probability 0, space 0, times 0 [ 106.671785][ T4892] CPU: 0 PID: 4892 Comm: syz.2.123 Not tainted 6.1.142-syzkaller #0 [ 106.679809][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.689862][ T4892] Call Trace: [ 106.693140][ T4892] [ 106.696070][ T4892] dump_stack_lvl+0x168/0x22e [ 106.700766][ T4892] ? show_regs_print_info+0x12/0x12 [ 106.705968][ T4892] ? load_image+0x3b0/0x3b0 [ 106.710479][ T4892] ? __might_sleep+0xd0/0xd0 [ 106.715077][ T4892] ? __lock_acquire+0x7c50/0x7c50 [ 106.720113][ T4892] should_fail_ex+0x399/0x4d0 [ 106.724796][ T4892] should_failslab+0x5/0x20 [ 106.729300][ T4892] slab_pre_alloc_hook+0x59/0x310 [ 106.734329][ T4892] ? file_end_write+0x156/0x250 [ 106.739183][ T4892] kmem_cache_alloc+0x56/0x2f0 [ 106.743965][ T4892] ? getname_flags+0xb7/0x500 [ 106.748657][ T4892] getname_flags+0xb7/0x500 [ 106.753172][ T4892] do_sys_openat2+0xcf/0x490 [ 106.757783][ T4892] ? do_sys_open+0xe0/0xe0 [ 106.762207][ T4892] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 106.768199][ T4892] ? lock_chain_count+0x20/0x20 [ 106.773061][ T4892] __x64_sys_openat+0x135/0x160 [ 106.777929][ T4892] do_syscall_64+0x4c/0xa0 [ 106.782364][ T4892] ? clear_bhb_loop+0x60/0xb0 [ 106.787040][ T4892] ? clear_bhb_loop+0x60/0xb0 [ 106.791720][ T4892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.797625][ T4892] RIP: 0033:0x7f9b0378e929 [ 106.802042][ T4892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.821653][ T4892] RSP: 002b:00007f9b04687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.830072][ T4892] RAX: ffffffffffffffda RBX: 00007f9b039b5fa0 RCX: 00007f9b0378e929 [ 106.838047][ T4892] RDX: 0000000000101142 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 106.846022][ T4892] RBP: 00007f9b04687090 R08: 0000000000000000 R09: 0000000000000000 [ 106.853995][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.861966][ T4892] R13: 0000000000000000 R14: 00007f9b039b5fa0 R15: 00007ffdfd9d8fa8 [ 106.869978][ T4892] [ 212.313566][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 212.320767][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4672/1:b..l [ 212.329107][ C0] (detected by 0, t=10502 jiffies, g=9965, q=708 ncpus=2) [ 212.336308][ C0] task:kworker/u4:15 state:R running task stack:25376 pid:4672 ppid:2 flags:0x00004000 [ 212.347935][ C0] Workqueue: bat_events batadv_nc_worker [ 212.353609][ C0] Call Trace: [ 212.356904][ C0] [ 212.359846][ C0] __schedule+0x10e9/0x40d0 [ 212.364378][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 212.370276][ C0] ? lock_chain_count+0x20/0x20 [ 212.375138][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 212.380431][ C0] preempt_schedule_irq+0xb1/0x150 [ 212.385548][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 212.391279][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 212.397098][ C0] irqentry_exit+0x63/0x70 [ 212.401517][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 212.406976][ C0] RIP: 0010:lock_acquire+0x20f/0x490 [ 212.412275][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 212.431886][ C0] RSP: 0018:ffffc90005637ac0 EFLAGS: 00000206 [ 212.437965][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 90b501bc95861d00 [ 212.445939][ C0] RDX: 0000000000000000 RSI: ffffffff8a6c1160 RDI: ffffffff8abf14a0 [ 212.453911][ C0] RBP: ffffc90005637bc8 R08: dffffc0000000000 R09: fffffbfff2117249 [ 212.461882][ C0] R10: fffffbfff2117249 R11: 1ffffffff2117248 R12: 0000000000000000 [ 212.469862][ C0] R13: 1ffff92000ac6f64 R14: 0000000000000246 R15: dffffc0000000000 [ 212.477861][ C0] ? read_lock_is_recursive+0x10/0x10 [ 212.483255][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 212.488482][ C0] ? batadv_nc_worker+0xce/0x600 [ 212.493423][ C0] batadv_nc_worker+0xeb/0x600 [ 212.498191][ C0] ? batadv_nc_worker+0xce/0x600 [ 212.503139][ C0] ? process_one_work+0x7a1/0x1160 [ 212.508598][ C0] process_one_work+0x898/0x1160 [ 212.513568][ C0] ? worker_detach_from_pool+0x240/0x240 [ 212.519213][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 212.524263][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 212.529647][ C0] ? kthread_data+0x4b/0xc0 [ 212.534166][ C0] worker_thread+0xaa2/0x1250 [ 212.538857][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 212.544766][ C0] ? __kthread_parkme+0x162/0x1c0 [ 212.549804][ C0] kthread+0x29d/0x330 [ 212.553881][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 212.558914][ C0] ? kthread_blkcg+0xd0/0xd0 [ 212.563518][ C0] ret_from_fork+0x1f/0x30 [ 212.567955][ C0] [ 212.570975][ C0] rcu: rcu_preempt kthread starved for 10523 jiffies! g9965 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 212.582169][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 212.592235][ C0] rcu: RCU grace-period kthread stack dump: [ 212.598138][ C0] task:rcu_preempt state:R running task stack:27432 pid:16 ppid:2 flags:0x00004000 [ 212.608932][ C0] Call Trace: [ 212.612213][ C0] [ 212.615155][ C0] __schedule+0x10e9/0x40d0 [ 212.619693][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 212.625695][ C0] schedule+0xb9/0x180 [ 212.629774][ C0] schedule_timeout+0x15c/0x280 [ 212.634814][ C0] ? console_conditional_schedule+0x40/0x40 [ 212.640714][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 212.646881][ C0] ? update_process_times+0x1b0/0x1b0 [ 212.652274][ C0] ? prepare_to_swait_event+0x335/0x350 [ 212.657844][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 212.662703][ C0] ? rcu_gp_kthread+0x380/0x380 [ 212.667555][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 212.673543][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 212.678738][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 212.683600][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 212.688810][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 212.694018][ C0] rcu_gp_kthread+0x95/0x380 [ 212.698620][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 212.703743][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 212.709646][ C0] ? __kthread_parkme+0x162/0x1c0 [ 212.714685][ C0] kthread+0x29d/0x330 [ 212.718760][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 212.723873][ C0] ? kthread_blkcg+0xd0/0xd0 [ 212.728472][ C0] ret_from_fork+0x1f/0x30 [ 212.732960][ C0] [ 212.735991][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 212.742313][ C0] Sending NMI from CPU 0 to CPUs 1: [ 212.747518][ C1] NMI backtrace for cpu 1 [ 212.747535][ C1] CPU: 1 PID: 4836 Comm: syz.3.108 Not tainted 6.1.142-syzkaller #0 [ 212.747548][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.747556][ C1] RIP: 0010:kasan_check_range+0x7b/0x290 [ 212.747582][ C1] Code: 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 <0f> 85 c1 01 00 00 49 ff c1 48 ff c3 75 ee e9 1c 01 00 00 44 89 cb [ 212.747593][ C1] RSP: 0018:ffffc900001e0880 EFLAGS: 00000046 [ 212.747605][ C1] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff8163a354 [ 212.747615][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff908b9248 [ 212.747624][ C1] RBP: 0000000000000008 R08: dffffc0000000000 R09: fffffbfff2117249 [ 212.747634][ C1] R10: fffffbfff211724a R11: 1ffffffff2117249 R12: 0000000000000100 [ 212.747643][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000001 [ 212.747653][ C1] FS: 000055555c049500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 212.747665][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.747674][ C1] CR2: 00007ff7e05b1d58 CR3: 0000000079244000 CR4: 00000000003506e0 [ 212.747687][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.747694][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.747703][ C1] Call Trace: [ 212.747709][ C1] [ 212.747714][ C1] mark_lock+0x94/0x320 [ 212.747734][ C1] __lock_acquire+0xd6f/0x7c50 [ 212.747751][ C1] ? verify_lock_unused+0x140/0x140 [ 212.747773][ C1] ? __lock_task_sighand+0x146/0x2d0 [ 212.747793][ C1] ? verify_lock_unused+0x140/0x140 [ 212.747818][ C1] lock_acquire+0x1b4/0x490 [ 212.747839][ C1] ? __hrtimer_run_queues+0x63a/0xd60 [ 212.747856][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 212.747875][ C1] ? read_lock_is_recursive+0x10/0x10 [ 212.747892][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 212.747912][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 212.747931][ C1] ? _raw_spin_unlock+0x40/0x40 [ 212.747949][ C1] _raw_spin_lock_irq+0x9f/0xe0 [ 212.747968][ C1] ? __hrtimer_run_queues+0x63a/0xd60 [ 212.747981][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 212.748000][ C1] ? posix_timer_fn+0x2dd/0x3d0 [ 212.748014][ C1] __hrtimer_run_queues+0x63a/0xd60 [ 212.748027][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 212.748042][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 212.748060][ C1] ? common_timer_wait_running+0x10/0x10 [ 212.748076][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 212.748092][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 212.748114][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 212.748134][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 212.748149][ C1] [ 212.748152][ C1] [ 212.748156][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 212.748170][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 212.748190][ C1] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 9e 90 49 f7 48 89 df e8 f6 55 4a f7 e8 01 58 6d f7 fb bf 01 00 00 00 06 d3 3d f7 65 8b 05 d7 93 e8 75 85 c0 74 02 5b c3 e8 24 a5 e6 [ 212.748200][ C1] RSP: 0018:ffffc90005547bb8 EFLAGS: 00000286 [ 212.748210][ C1] RAX: b4493d410cc0bf00 RBX: ffff888055c1e5c0 RCX: b4493d410cc0bf00 [ 212.748220][ C1] RDX: dffffc0000000000 RSI: ffffffff8a6bffe0 RDI: 0000000000000001 [ 212.748230][ C1] RBP: ffff888055c1e858 R08: dffffc0000000000 R09: ffffed100ab83cb9 [ 212.748240][ C1] R10: ffffed100ab83cb9 R11: 1ffff1100ab83cb8 R12: 1ffff1100ab83d0b [ 212.748250][ C1] R13: 0000000000000011 R14: dffffc0000000000 R15: 0000000000000000 [ 212.748264][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 212.748282][ C1] get_signal+0x1163/0x1350 [ 212.748307][ C1] arch_do_signal_or_restart+0xb0/0x1230 [ 212.748325][ C1] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 212.748342][ C1] ? load_gs_index+0x120/0x120 [ 212.748358][ C1] ? get_sigframe_size+0x10/0x10 [ 212.748379][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 212.748398][ C1] exit_to_user_mode_loop+0x70/0x110 [ 212.748417][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 212.748435][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 212.748448][ C1] do_syscall_64+0x58/0xa0 [ 212.748465][ C1] ? clear_bhb_loop+0x60/0xb0 [ 212.748478][ C1] ? clear_bhb_loop+0x60/0xb0 [ 212.748491][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.748511][ C1] RIP: 0033:0x7f327138e929 [ 212.748527][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.748537][ C1] RSP: 002b:00007ffd7f7b5f78 EFLAGS: 00000246 [ 212.748547][ C1] RAX: 0000000000000001 RBX: 00007f32715b6088 RCX: 00007f327138e929 [ 212.748556][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f32715b6088 [ 212.748565][ C1] RBP: 0000000000000001 R08: 0000000000000008 R09: 0000001b7f7b626f [ 212.748573][ C1] R10: 00007f32715b5fa0 R11: 0000000000000246 R12: 00007f32715b608c [ 212.748583][ C1] R13: 00007f32715b6080 R14: 00000000000015d0 R15: 0000000000000003 [ 212.748596][ C1]