last executing test programs: 1m23.213622274s ago: executing program 2 (id=243): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x6}, {0x8, 0x1a, 0x0, 0x0, 0x8}]}}]}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000120001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="0000000064995c9898e01bac000000001483350077673000"/36], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000780)={0x0, 0xd, 0x2, 0x2, 0x2, [], [0xa6, 0x20000000, 0xffff, 0x1], [0x5, 0x2, 0x4, 0x20], [0x8001, 0x3ff, 0x3, 0x3d]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6], 0x40}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m22.505904908s ago: executing program 2 (id=245): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_cancel(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x1a, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003440)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008004) openat$hwrng(0xffffff9c, 0x0, 0x1e5380, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f00000002c0)={0x2, 0x12c, @ioapic={0x100000, 0x11, 0x4492, 0x5, 0x0, [{0x3, 0x0, 0x2, '\x00', 0x7}, {0x5, 0x3, 0x3, '\x00', 0x5}, {0x0, 0x3, 0x8, '\x00', 0xd3}, {0x7, 0x1, 0x10, '\x00', 0x90}, {0x7, 0x7, 0x48, '\x00', 0x59}, {0x2, 0x2, 0x8c, '\x00', 0x3}, {0x2, 0x7, 0x40, '\x00', 0x6}, {0x6, 0x2a, 0x0, '\x00', 0x6}, {0x3, 0x2, 0x3, '\x00', 0xa5}, {0xac, 0x0, 0x5, '\x00', 0xf}, {0x0, 0x8, 0x6, '\x00', 0x2}, {0xf5, 0x4}, {0x0, 0x0, 0x3f, '\x00', 0x7}, {0x0, 0xd, 0x12, '\x00', 0x7}, {0x1, 0xbb, 0x5a, '\x00', 0xd}, {0x5, 0x7, 0x7, '\x00', 0x4}, {0x10, 0x1, 0xd, '\x00', 0xa}, {0x9, 0x5, 0x4, '\x00', 0x4}, {0x0, 0x7, 0x1, '\x00', 0x3}, {0x8, 0x7f, 0x1}, {0x9, 0x7, 0xff, '\x00', 0x3}, {0x1, 0x5, 0x9, '\x00', 0xa4}, {0x39, 0x4, 0x0, '\x00', 0xe}, {0x2, 0x2, 0x0, '\x00', 0x35}]}}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 1m19.756775466s ago: executing program 2 (id=248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4604}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000280)={0x0, 0x34324258, 0x3, @stepwise={0x0, 0x0, 0x16, 0xc, 0x1, 0xffffffff}}) 1m17.408196461s ago: executing program 2 (id=250): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000540)='ext4_discard_preallocations\x00', r0}, 0xfffffffffffffff4) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0xa0300, 0x0) inotify_rm_watch(r2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES64=0x0], 0x20) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, 0x1411, 0x105, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0xf334, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101302, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0x8, &(0x7f0000000480)=0x80000001}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) 1m14.42607445s ago: executing program 2 (id=254): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)=""/41, 0x29}, {0x0}, {&(0x7f0000000180)=""/213, 0xd5}], 0x3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000940)=ANY=[]) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x1, 0x7, 0x0, 0x0, ' }=\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m10.800723974s ago: executing program 2 (id=261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4604}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000280)={0x0, 0x34324258, 0x3, @stepwise={0x0, 0x0, 0x16, 0xc, 0x1, 0xffffffff}}) 55.720828291s ago: executing program 32 (id=261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4604}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000280)={0x0, 0x34324258, 0x3, @stepwise={0x0, 0x0, 0x16, 0xc, 0x1, 0xffffffff}}) 30.072649287s ago: executing program 4 (id=336): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 28.116966349s ago: executing program 4 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000340)={@id={0x2, 0x0, @auto="0008a09233ffff472c6896e7f3067953"}}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$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") mkdir(&(0x7f00000000c0)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(r2, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 27.324237375s ago: executing program 5 (id=274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[], 0x6) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r8, 0x100000000000f7) read$watch_queue(r7, &(0x7f0000000000)=""/1, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 24.91423141s ago: executing program 4 (id=344): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0) 24.032295876s ago: executing program 5 (id=346): socket$netlink(0x10, 0x3, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) 23.246040661s ago: executing program 5 (id=349): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4417e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map, r2, 0x31}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3002019, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x1000a, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 20.814336957s ago: executing program 4 (id=354): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = syz_io_uring_setup(0x114, &(0x7f00000003c0)={0x0, 0xabb9, 0x0, 0xb, 0x20a}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x3c1d5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0xfffffdf7) 18.882168321s ago: executing program 4 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000340)={@id={0x2, 0x0, @auto="0008a09233ffff472c6896e7f3067953"}}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$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") mkdir(&(0x7f00000000c0)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(r2, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 17.670844491s ago: executing program 4 (id=356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[], 0x6) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r8, 0x100000000000f7) read$watch_queue(r7, &(0x7f0000000000)=""/1, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 14.993112492s ago: executing program 1 (id=365): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) 14.608393825s ago: executing program 1 (id=366): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x68040200) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES64], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) 12.496639881s ago: executing program 0 (id=369): syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) 11.862256177s ago: executing program 0 (id=371): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) capset(&(0x7f0000000080)={0x20080522}, 0x0) syslog(0x0, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) 10.830533424s ago: executing program 0 (id=372): setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100)=0x1000000, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 10.638230426s ago: executing program 0 (id=373): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 10.543297937s ago: executing program 0 (id=374): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 10.13327454s ago: executing program 0 (id=375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r7, 0x100000000000f7) read$watch_queue(r6, &(0x7f0000000000)=""/1, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 8.024139926s ago: executing program 33 (id=349): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4417e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map, r2, 0x31}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3002019, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x1000a, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 6.489839829s ago: executing program 3 (id=382): r0 = fanotify_init(0xf00, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r0, 0x0, 0x64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffbfe, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5.374726428s ago: executing program 3 (id=383): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) capset(&(0x7f0000000080)={0x20080522}, 0x0) syslog(0x0, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) 5.324987218s ago: executing program 1 (id=384): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 4.328948496s ago: executing program 3 (id=385): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 4.274019466s ago: executing program 1 (id=386): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 3.71372963s ago: executing program 3 (id=387): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) 2.579393309s ago: executing program 3 (id=388): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 2.51536851s ago: executing program 34 (id=356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[], 0x6) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r8, 0x100000000000f7) read$watch_queue(r7, &(0x7f0000000000)=""/1, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 1.446171698s ago: executing program 3 (id=390): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000100)={0x200000000009}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10001) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.021176171s ago: executing program 1 (id=391): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x10, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) pipe2(&(0x7f0000000040), 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) sendfile(r4, r4, 0x0, 0x40008) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 0s ago: executing program 1 (id=392): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x141) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x700000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 58.333469][ T4173] cgroup: Unknown subsys name 'net' [ 58.450424][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.959907][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.047035][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 62.061225][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.089861][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 62.145994][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 62.244263][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.251568][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.263584][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.302705][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.310136][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.318705][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.335258][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 62.362194][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.369529][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.377635][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.399495][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.408814][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.416517][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.424662][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.441312][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.449328][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.457871][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.466356][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.495934][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.503278][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.511246][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.525416][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.532530][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.540720][ T4196] device bridge_slave_0 entered promiscuous mode [ 62.566946][ T4185] team0: Port device team_slave_0 added [ 62.581840][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.589516][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.597885][ T4196] device bridge_slave_1 entered promiscuous mode [ 62.618336][ T4185] team0: Port device team_slave_1 added [ 62.626389][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.653534][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.675963][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.687097][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.697957][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.728582][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.755398][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.762402][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.788627][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.830271][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.837393][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.863523][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.877517][ T4191] team0: Port device team_slave_0 added [ 62.893847][ T4184] team0: Port device team_slave_0 added [ 62.899979][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.907212][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.915337][ T4193] device bridge_slave_0 entered promiscuous mode [ 62.929020][ T4191] team0: Port device team_slave_1 added [ 62.937349][ T4196] team0: Port device team_slave_0 added [ 62.944817][ T4184] team0: Port device team_slave_1 added [ 62.952594][ T4196] team0: Port device team_slave_1 added [ 62.965904][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.973151][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.981116][ T4193] device bridge_slave_1 entered promiscuous mode [ 63.060065][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.067308][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.094031][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.116039][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.125779][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.132756][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.159228][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.170933][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.178261][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.204271][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.216152][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.223250][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.250172][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.264511][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.273589][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.284156][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.293976][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.300961][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.327117][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.338960][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.346082][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.372032][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.429384][ T4193] team0: Port device team_slave_0 added [ 63.460299][ T4193] team0: Port device team_slave_1 added [ 63.492146][ T4196] device hsr_slave_0 entered promiscuous mode [ 63.499480][ T4196] device hsr_slave_1 entered promiscuous mode [ 63.506316][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.514487][ T4196] Cannot create hsr debugfs directory [ 63.529959][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.537116][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.544197][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.551801][ T4191] Cannot create hsr debugfs directory [ 63.588759][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.595880][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.622239][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.624339][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 63.639716][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 63.648337][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.655790][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.662360][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.670185][ T4184] Cannot create hsr debugfs directory [ 63.687659][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.694875][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.721096][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 63.721380][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.727739][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 63.738280][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 63.884416][ T4193] device hsr_slave_0 entered promiscuous mode [ 63.891476][ T4193] device hsr_slave_1 entered promiscuous mode [ 63.898341][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.906333][ T4193] Cannot create hsr debugfs directory [ 64.103729][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.115051][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.126725][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.139324][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.216722][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.227166][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.238467][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.260890][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.294977][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.324517][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.335517][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.346225][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.364554][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.388198][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.397695][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.430098][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.447502][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.466009][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.475810][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.495808][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.510839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.519972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.529706][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.537176][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.572441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.580855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.590559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.599657][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.606803][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.616346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.630740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.655724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.665308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.674607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.684205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.721448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.729952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.739066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.748548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.757758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.770857][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.786572][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.803877][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.818851][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.833837][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.857878][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.887100][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.900687][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.937350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.947085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.971728][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.982035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.999920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.032775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.042577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.053201][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.060300][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.091426][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.102302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.113141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.121811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.130582][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.137710][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.146124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.156090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.164667][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.171721][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.179529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.189048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.198354][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.205575][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.215553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.224809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.234491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.244737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.278088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.287430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.297681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.307056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.315601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.324765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.336208][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.345123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.354493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.384071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.391615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.399703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.411276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.420186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.429605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.439125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.448605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.457489][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.464634][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.473309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.482138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.500211][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.511003][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.532291][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.549104][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.559987][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.578673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.588519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.598268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.607052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.616272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.625871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.634711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.643980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.652521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.661326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.670424][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.677743][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.686401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.695422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.703449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.714766][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 65.721412][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 65.761111][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.779221][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.789449][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 65.794650][ T4247] Bluetooth: hci4: command 0x041b tx timeout [ 65.801915][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 65.811663][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.830751][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.842860][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.857707][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.895401][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.910198][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.920285][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.937546][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.951665][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.968931][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.982444][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.998470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.013891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.036214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.051169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.060640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.076114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.096397][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.118723][ T4185] device veth0_vlan entered promiscuous mode [ 66.134227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.149389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.158109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.167988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.180882][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.198404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.208222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.217448][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.224604][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.248424][ T4185] device veth1_vlan entered promiscuous mode [ 66.267566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.277336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.291566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.299723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.313966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.322421][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.329603][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.338888][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.369809][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.379529][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.389330][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.400212][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.412865][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.448886][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.459430][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.469220][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.477514][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.488517][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.498972][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.521440][ T4184] device veth0_vlan entered promiscuous mode [ 66.531802][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.554726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.564547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.573419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.582166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.592905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.604864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.613994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.621862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.637691][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.647801][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.662166][ T4185] device veth0_macvtap entered promiscuous mode [ 66.678488][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.703559][ T4185] device veth1_macvtap entered promiscuous mode [ 66.714071][ T4184] device veth1_vlan entered promiscuous mode [ 66.732395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.751805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.769591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.778160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.793355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.848672][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.868349][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.882058][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.892872][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.904312][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.913486][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.921940][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.930804][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.940814][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.950233][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.964154][ T4191] device veth0_vlan entered promiscuous mode [ 67.000257][ T4191] device veth1_vlan entered promiscuous mode [ 67.009240][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.017723][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.026801][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.036098][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.044569][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.053622][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.067714][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.085411][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.094922][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.104159][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.113440][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.121792][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.130769][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.139754][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.156676][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.168915][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.178127][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.187206][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.205190][ T4184] device veth0_macvtap entered promiscuous mode [ 67.214701][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.224860][ T4196] device veth0_vlan entered promiscuous mode [ 67.240136][ T4184] device veth1_macvtap entered promiscuous mode [ 67.256137][ T4191] device veth0_macvtap entered promiscuous mode [ 67.269711][ T4191] device veth1_macvtap entered promiscuous mode [ 67.280990][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.290090][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.300238][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.317282][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.348190][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.357871][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.379993][ T4196] device veth1_vlan entered promiscuous mode [ 67.398773][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.410996][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.424194][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.434373][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.444181][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.452776][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.461652][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.481588][ T4193] device veth0_vlan entered promiscuous mode [ 67.492759][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.504549][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.515360][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.527203][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.538643][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.553423][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.561448][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.570048][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.579289][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.593857][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.610369][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.621774][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.634481][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.643570][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.652264][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.661087][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.683486][ T4196] device veth0_macvtap entered promiscuous mode [ 67.692239][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.701263][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.710978][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.719996][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.728669][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.749891][ T4196] device veth1_macvtap entered promiscuous mode [ 67.759358][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.769945][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.780398][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.791540][ T4194] Bluetooth: hci1: command 0x040f tx timeout [ 67.797917][ T4194] Bluetooth: hci0: command 0x040f tx timeout [ 67.798161][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.816992][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.828325][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.837463][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.846792][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.855962][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.863669][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 67.871396][ T4194] Bluetooth: hci2: command 0x040f tx timeout [ 67.878708][ T4194] Bluetooth: hci4: command 0x040f tx timeout [ 67.899396][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.910240][ T4193] device veth1_vlan entered promiscuous mode [ 67.923974][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.927565][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.944641][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.952763][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.961238][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.970059][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.979273][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.017407][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.030679][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.041112][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.052776][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.064406][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.075359][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.088523][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.134778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.150267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.167532][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.179427][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.189896][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.201474][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.211374][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.221849][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.233490][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.259383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.269084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.289112][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.299008][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.308475][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.317291][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.348078][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.365401][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.373315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.381963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.383467][ T1387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.403622][ T1387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.429861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.444727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.455374][ T4193] device veth0_macvtap entered promiscuous mode [ 68.500801][ T4193] device veth1_macvtap entered promiscuous mode [ 68.514691][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.552336][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.558027][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.565190][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.587286][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.594475][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.602575][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.615833][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.659772][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.683753][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.688260][ T4291] loop3: detected capacity change from 0 to 8 [ 68.703548][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.719162][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.731404][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.750116][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.773835][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.779402][ T4291] SQUASHFS error: Unable to read directory block [249:c] [ 68.785441][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.805312][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.867325][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.889273][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.904374][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.925098][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.936232][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.947638][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.958170][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.969328][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.979656][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.991087][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.003467][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.031856][ T1387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.055627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.077138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.079872][ T1387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.117769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.127190][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.129543][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.143351][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.156251][ T4298] loop2: detected capacity change from 0 to 256 [ 69.156254][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.156289][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.181025][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.214118][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 69.225469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.236107][ T4298] exfat: Deprecated parameter 'utf8' [ 69.324039][ T1387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.332075][ T1387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.354372][ T4298] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 69.386005][ T3097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.391810][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.406452][ T3097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.465434][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.516512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.605030][ T4305] Invalid ELF header type: 3 != 1 [ 69.863650][ T1325] Bluetooth: hci0: command 0x0419 tx timeout [ 70.028475][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.263390][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.418120][ T1325] Bluetooth: hci1: command 0x0419 tx timeout [ 70.424770][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 70.430941][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 70.437088][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 70.554296][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.669500][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.711020][ T4314] loop3: detected capacity change from 0 to 128 [ 70.719649][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.874153][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 70.883431][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.013476][ T26] audit: type=1326 audit(1762365466.260:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1510aa66c9 code=0x7ffc0000 [ 71.013529][ T26] audit: type=1326 audit(1762365466.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1510aa66c9 code=0x7ffc0000 [ 71.013566][ T26] audit: type=1326 audit(1762365466.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1510aa66c9 code=0x7ffc0000 [ 71.013602][ T26] audit: type=1326 audit(1762365466.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1510aa66c9 code=0x7ffc0000 [ 71.013638][ T26] audit: type=1326 audit(1762365466.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1510aa66c9 code=0x7ffc0000 [ 71.013674][ T26] audit: type=1326 audit(1762365466.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4313 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1510aa4f10 code=0x7ffc0000 [ 71.069846][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.069897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.069940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.069982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.070022][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.859520][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.859639][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.344245][ T4314] ======================================================= [ 72.344245][ T4314] WARNING: The mand mount option has been deprecated and [ 72.344245][ T4314] and is ignored by this kernel. Remove the mand [ 72.344245][ T4314] option from the mount to silence this warning. [ 72.344245][ T4314] ======================================================= [ 74.509739][ T4338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.348255][ T4342] loop0: detected capacity change from 0 to 32768 [ 77.937266][ T4350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.754503][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.763009][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.223338][ T4289] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 80.289351][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.342319][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.583225][ T4289] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 80.598709][ T4289] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 80.609736][ T4289] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.619009][ T4289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.657796][ T4357] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.665859][ T4357] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.958434][ T4328] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.967712][ T4328] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.976961][ T4328] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.987236][ T4328] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.190466][ T4328] syz.4.10 (4328) used greatest stack depth: 21184 bytes left [ 81.504300][ T4361] loop1: detected capacity change from 0 to 40427 [ 81.527396][ T4361] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.535715][ T4361] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.548508][ T4361] F2FS-fs (loop1): invalid crc value [ 81.594532][ T4361] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.650994][ T4361] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.658652][ T4361] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.073224][ T1110] usb 3-1: USB disconnect, device number 2 [ 83.410861][ T4373] loop3: detected capacity change from 0 to 40427 [ 83.462619][ T4373] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 83.470713][ T4373] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.484444][ T4373] F2FS-fs (loop3): invalid crc value [ 83.497371][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.500160][ T4373] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.505500][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.576769][ T4373] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 83.584650][ T4373] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.551815][ T4397] loop1: detected capacity change from 0 to 2048 [ 85.627960][ T4397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.711229][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.799021][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.606916][ T4354] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.616328][ T4354] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.626281][ T4354] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.635753][ T4354] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.916165][ T7] cfg80211: failed to load regulatory.db [ 87.078456][ T4375] tipc: Enabling of bearer rejected, failed to enable media [ 87.195799][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.226609][ T4404] loop4: detected capacity change from 0 to 164 [ 87.249597][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.278901][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.305851][ T4404] isofs_fill_super: root inode is not a directory. Corrupted media? [ 87.809065][ T4412] loop0: detected capacity change from 0 to 128 [ 88.822334][ T4416] loop3: detected capacity change from 0 to 2048 [ 90.969840][ T4416] NILFS (loop3): error -4 creating segctord thread [ 95.156809][ T4451] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 95.774495][ T4457] loop2: detected capacity change from 0 to 32768 [ 96.604651][ T4457] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 96.634993][ T26] audit: type=1800 audit(1762365491.890:8): pid=4457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.38" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 98.001824][ T4468] loop4: detected capacity change from 0 to 40427 [ 98.097235][ T4468] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 98.105379][ T4468] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 98.117616][ T4468] F2FS-fs (loop4): invalid crc value [ 98.214016][ T4468] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.263608][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 98.294987][ T4468] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 98.302197][ T4468] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.957879][ T4482] device syzkaller0 entered promiscuous mode [ 101.342779][ T4490] serio: Serial port ttyS3 [ 103.155811][ T4492] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.455258][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.469417][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.479593][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.539216][ T4520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'. [ 105.444325][ T4501] loop0: detected capacity change from 0 to 32768 [ 105.629888][ T4501] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 105.854360][ T26] audit: type=1800 audit(1762365501.110:9): pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.53" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 106.154957][ T4264] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 106.198248][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 106.764949][ T4264] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 108.149209][ T4264] usb 5-1: config 0 has no interface number 0 [ 108.155513][ T4264] usb 5-1: config 0 interface 52 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 108.166432][ T4264] usb 5-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=1f.8d [ 108.175835][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.186975][ T4264] usb 5-1: config 0 descriptor?? [ 108.225942][ T4264] usb-storage 5-1:0.52: USB Mass Storage device detected [ 108.460679][ T4559] serio: Serial port ttyS3 [ 108.561670][ T4264] usb 5-1: USB disconnect, device number 2 [ 108.907556][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.928449][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.938144][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.660142][ T4571] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.681416][ T4571] infiniband syq1: RDMA CMA: cma_listen_on_dev, error -98 [ 112.003113][ T2303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.393842][ T2303] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.533710][ T2303] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.883169][ T2303] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 113.892089][ T2303] usb 4-1: can't read configurations, error -71 [ 114.843316][ T2303] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 114.989738][ T4617] serio: Serial port ttyS3 [ 115.253192][ T2303] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 115.269158][ T2303] usb 4-1: config 0 has no interface number 0 [ 115.310277][ T2303] usb 4-1: config 0 interface 52 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 115.357684][ T2303] usb 4-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=1f.8d [ 115.380179][ T2303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.467782][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.483508][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.492355][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.675191][ T2303] usb 4-1: config 0 descriptor?? [ 115.714274][ T2303] usb-storage 4-1:0.52: USB Mass Storage device detected [ 115.741626][ T4622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.86'. [ 115.894452][ T4627] loop2: detected capacity change from 0 to 16 [ 115.900970][ T4615] loop0: detected capacity change from 0 to 32768 [ 115.995542][ T2303] usb 4-1: USB disconnect, device number 3 [ 116.035596][ T4615] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 116.079246][ T4627] erofs: (device loop2): mounted with root inode @ nid 36. [ 116.139007][ T4627] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 4095 of nid 36 [ 116.151785][ T4627] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 116.162305][ T4627] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 116.176706][ T26] audit: type=1800 audit(1762365511.430:10): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.83" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 116.188829][ T4627] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 4095 of nid 36 [ 116.263238][ T4627] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 116.296292][ T4627] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 116.648181][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.564119][ T4615] syz.0.83 (4615) used greatest stack depth: 19312 bytes left [ 117.565403][ T26] audit: type=1800 audit(1762365512.820:11): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.83" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 117.653029][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 117.773246][ T21] usb 2-1: config index 0 descriptor too short (expected 62738, got 42) [ 117.789526][ T21] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 117.798096][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.809061][ T21] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 117.899371][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 117.973478][ T21] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 117.983061][ T4194] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.423400][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.120120][ T21] usb 2-1: Product: syz [ 120.172026][ T4658] loop1: detected capacity change from 0 to 128 [ 120.190489][ T21] usb 2-1: Manufacturer: syz [ 120.204845][ T21] usb 2-1: SerialNumber: syz [ 121.872422][ T4660] loop4: detected capacity change from 0 to 40427 [ 121.906929][ T21] usb 2-1: config 0 descriptor?? [ 121.953334][ T4660] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 121.961197][ T4660] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 122.037979][ T4660] F2FS-fs (loop4): invalid crc value [ 122.140141][ T4660] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.280989][ T21] usb 2-1: can't set config #0, error -71 [ 122.288093][ T21] usb 2-1: USB disconnect, device number 2 [ 122.294399][ T4660] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 122.294429][ T4660] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.362833][ T144] attempt to access beyond end of device [ 122.362833][ T144] loop1: rw=1, want=1041, limit=128 [ 122.534522][ T4194] usb 3-1: device descriptor read/all, error -71 [ 122.594055][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.619234][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.636867][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.213434][ T4671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.99'. [ 123.519895][ T4676] serio: Serial port ttyS3 [ 124.558243][ T4684] loop3: detected capacity change from 0 to 2048 [ 125.175482][ T4699] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.663295][ T4710] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '..' [ 125.682572][ T4710] Remounting filesystem read-only [ 126.050069][ T4712] loop0: detected capacity change from 0 to 128 [ 126.100877][ T4185] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 126.873041][ T4194] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.137137][ T4721] serio: Serial port ttyS3 [ 127.161369][ T4297] attempt to access beyond end of device [ 127.161369][ T4297] loop0: rw=1, want=913, limit=128 [ 127.263362][ T4194] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.393207][ T4194] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.533228][ T4194] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.744135][ T4729] loop0: detected capacity change from 0 to 40427 [ 127.804072][ T4729] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 127.811883][ T4729] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 127.828729][ T4729] F2FS-fs (loop0): invalid crc value [ 127.866785][ T4729] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.955711][ T4729] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 127.962888][ T4729] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.964086][ T4194] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 128.121956][ T4735] serio: Serial port ttyS3 [ 128.491617][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.509000][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.518208][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.896230][ T4194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 128.905490][ T4194] usb 4-1: Product: syz [ 128.910185][ T4194] usb 4-1: Manufacturer: syz [ 128.914606][ T4741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 128.916642][ T4194] usb 4-1: SerialNumber: syz [ 128.961075][ T4194] usb 4-1: config 0 descriptor?? [ 130.967518][ T2303] usb 4-1: USB disconnect, device number 4 [ 131.007269][ T4756] loop2: detected capacity change from 0 to 128 [ 132.808697][ T4779] loop0: detected capacity change from 0 to 32768 [ 132.988830][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.997345][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.019428][ T4779] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 133.037071][ T26] audit: type=1800 audit(1762365528.290:12): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.125" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 133.846636][ T4784] loop2: detected capacity change from 0 to 32768 [ 133.985134][ T4784] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 134.090811][ T4784] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 134.107895][ T26] audit: type=1800 audit(1762365529.360:13): pid=4784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.126" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 134.796596][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 134.917813][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 135.457233][ T4792] loop2: detected capacity change from 0 to 40427 [ 136.016341][ T4792] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 136.024275][ T4792] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 136.042406][ T4792] F2FS-fs (loop2): invalid crc value [ 136.097427][ T4797] serio: Serial port ttyS3 [ 136.146798][ T4792] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.205627][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.220849][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.230111][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.401174][ T4792] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 136.408626][ T4792] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.561972][ T4805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.130'. [ 137.513107][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.613103][ T2303] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.763059][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 137.969790][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.980144][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.990393][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.001431][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.015157][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.049314][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.253266][ T4829] loop4: detected capacity change from 0 to 32768 [ 138.262486][ T2303] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.395494][ T4829] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 138.411030][ T26] audit: type=1800 audit(1762365533.660:14): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.138" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 138.453758][ T2303] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.995040][ T4811] udc-core: couldn't find an available UDC or it's busy [ 139.002044][ T4811] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 139.013272][ T21] usb 1-1: usb_control_msg returned -32 [ 139.018977][ T21] usbtmc 1-1:16.0: can't read capabilities [ 139.068267][ T21] usb 1-1: USB disconnect, device number 2 [ 139.093432][ T2303] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.147441][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 139.283364][ T2303] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 139.313040][ T2303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 139.412704][ T2303] usb 2-1: Product: syz [ 139.458370][ T2303] usb 2-1: Manufacturer: syz [ 139.477262][ T2303] usb 2-1: SerialNumber: syz [ 139.513438][ T2303] usb 2-1: config 0 descriptor?? [ 141.018071][ T4346] usb 2-1: USB disconnect, device number 3 [ 142.426554][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 142.442207][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 142.722351][ T4869] device hsr_slave_1 left promiscuous mode [ 142.896569][ T4873] loop1: detected capacity change from 0 to 32768 [ 143.007259][ T4873] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 143.026457][ T26] audit: type=1800 audit(1762365538.280:15): pid=4873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.150" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 144.833497][ T4885] cifs: Unknown parameter 'usrquota/#/msr' [ 144.876705][ T4193] ocfs2: Unmounting device (7,1) on (node local) [ 145.778296][ T4900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.154'. [ 146.147702][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 148.423039][ T4346] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.958042][ T4922] loop4: detected capacity change from 0 to 32768 [ 149.085118][ T4346] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.393230][ T4346] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.466129][ T4922] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 149.556331][ T26] audit: type=1800 audit(1762365544.810:16): pid=4922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.158" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 149.663630][ T4346] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.217009][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 150.235053][ T4932] loop3: detected capacity change from 0 to 512 [ 150.297870][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 150.323155][ T4346] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 150.351112][ T4346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 150.375463][ T4932] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.376982][ T4346] usb 2-1: Product: syz [ 150.386656][ T4346] usb 2-1: Manufacturer: syz [ 150.391952][ T4346] usb 2-1: SerialNumber: syz [ 150.395563][ T4932] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 150.406672][ T4346] usb 2-1: config 0 descriptor?? [ 150.417889][ T4933] device hsr_slave_1 left promiscuous mode [ 150.435841][ T4932] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 150.466878][ T4932] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.161: attempt to clear invalid blocks 2 len 1 [ 150.489659][ T4932] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.161: invalid indirect mapped block 1819239214 (level 0) [ 150.513660][ T4932] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.161: invalid indirect mapped block 1819239214 (level 1) [ 150.598075][ T4932] EXT4-fs (loop3): 1 truncate cleaned up [ 150.618281][ T4932] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 151.885853][ T7] usb 2-1: USB disconnect, device number 4 [ 151.931217][ T4947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.166'. [ 152.869561][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 155.401829][ T4964] serio: Serial port ttyS3 [ 156.204332][ T4971] serio: Serial port ttyS3 [ 157.447961][ T4987] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 160.035283][ T4998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.178'. [ 160.578303][ T5006] loop3: detected capacity change from 0 to 128 [ 160.683205][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.587176][ T144] attempt to access beyond end of device [ 161.587176][ T144] loop3: rw=1, want=441, limit=128 [ 161.673222][ T21] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 161.739669][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 161.761525][ T5019] netlink: 56 bytes leftover after parsing attributes in process `syz.0.183'. [ 161.771424][ T21] usb 3-1: Product: syz [ 161.777375][ T21] usb 3-1: Manufacturer: syz [ 161.782809][ T21] usb 3-1: SerialNumber: syz [ 162.627355][ T21] usb 3-1: config 0 descriptor?? [ 162.767742][ T5022] serio: Serial port ttyS3 [ 162.806843][ T21] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 162.834843][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 162.886161][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.923532][ T21] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 162.931781][ T21] usb 3-1: media controller created [ 162.973222][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.342223][ T5032] loop1: detected capacity change from 0 to 40427 [ 163.425749][ T5032] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 163.433709][ T5032] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 163.500593][ T5032] F2FS-fs (loop1): invalid crc value [ 163.642254][ T5032] F2FS-fs (loop1): Found nat_bits in checkpoint [ 163.692790][ T5032] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 163.700796][ T5032] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.613143][ T21] cxusb: set interface failed [ 164.617975][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 164.825595][ T21] DVB: Unable to find symbol mt352_attach() [ 164.832141][ T21] dvb-usb: bulk message failed: -22 (5/0) [ 164.912575][ T21] zl10353_read_register: readreg error (reg=127, ret==-121) [ 164.963355][ T21] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 165.263219][ T21] rc_core: IR keymap rc-dvico-mce not found [ 165.310450][ T5050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'. [ 165.539439][ T21] Registered IR keymap rc-empty [ 165.577573][ T21] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 165.680272][ T21] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5 [ 165.791835][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 165.838775][ T21] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 165.942198][ T21] usb 3-1: USB disconnect, device number 5 [ 168.747108][ T21] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 168.941129][ T5072] loop1: detected capacity change from 0 to 128 [ 169.669835][ T5080] loop4: detected capacity change from 0 to 40427 [ 169.780034][ T5080] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 169.788224][ T5080] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 169.798769][ T5080] F2FS-fs (loop4): invalid crc value [ 169.925976][ T5080] F2FS-fs (loop4): Found nat_bits in checkpoint [ 170.011679][ T5080] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 170.018817][ T5080] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 170.916011][ T5094] serio: Serial port ttyS3 [ 171.163332][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.222497][ T5099] netlink: 56 bytes leftover after parsing attributes in process `syz.1.201'. [ 171.536001][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.550257][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.558743][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.620151][ T5103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'. [ 172.133930][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 172.263188][ T21] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 173.788087][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 173.820891][ T21] usb 4-1: Product: syz [ 173.867258][ T21] usb 4-1: Manufacturer: syz [ 173.871940][ T21] usb 4-1: SerialNumber: syz [ 173.897311][ T21] usb 4-1: config 0 descriptor?? [ 173.917175][ T21] usb 4-1: can't set config #0, error -71 [ 173.924240][ T21] usb 4-1: USB disconnect, device number 5 [ 174.068239][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'. [ 176.849458][ T5136] loop3: detected capacity change from 0 to 40427 [ 176.886181][ T5136] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 176.894631][ T5136] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 176.991295][ T5139] siw: device registration error -23 [ 177.133847][ T5136] F2FS-fs (loop3): invalid crc value [ 177.550389][ T5136] F2FS-fs (loop3): Found nat_bits in checkpoint [ 177.613805][ T5136] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 177.620877][ T5136] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.441727][ T5151] loop2: detected capacity change from 0 to 128 [ 178.731000][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'. [ 179.645474][ T4344] attempt to access beyond end of device [ 179.645474][ T4344] loop2: rw=1, want=1041, limit=128 [ 179.748225][ T5161] serio: Serial port ttyS3 [ 180.056926][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 180.291550][ T5172] netlink: 56 bytes leftover after parsing attributes in process `syz.2.216'. [ 180.537929][ T5176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 180.602764][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 180.863218][ T7] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 180.914276][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 180.997250][ T7] usb 5-1: Product: syz [ 181.001481][ T7] usb 5-1: Manufacturer: syz [ 181.016856][ T7] usb 5-1: SerialNumber: syz [ 181.044719][ T7] usb 5-1: config 0 descriptor?? [ 181.094618][ T7] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 181.102168][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 181.172414][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.248967][ T7] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 182.960159][ T7] usb 5-1: media controller created [ 183.488159][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.753162][ T7] cxusb: set interface failed [ 184.757891][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 184.918776][ T7] DVB: Unable to find symbol mt352_attach() [ 184.933739][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 184.997341][ T7] zl10353_read_register: readreg error (reg=127, ret==-121) [ 185.025291][ T7] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 185.293054][ T7] rc_core: IR keymap rc-dvico-mce not found [ 185.299029][ T7] Registered IR keymap rc-empty [ 185.343115][ T7] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 185.436656][ T7] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 185.508175][ T7] dvb-usb: schedule remote query interval to 100 msecs. [ 185.543376][ T7] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 186.600492][ T4239] Bluetooth: hci3: command 0x0406 tx timeout [ 187.274586][ T7] usb 5-1: USB disconnect, device number 3 [ 187.866072][ T4346] Bluetooth: hci4: command 0x0406 tx timeout [ 187.876089][ T4346] Bluetooth: hci1: command 0x0406 tx timeout [ 187.896318][ T4346] Bluetooth: hci0: command 0x0406 tx timeout [ 187.943135][ T4346] Bluetooth: hci2: command 0x0406 tx timeout [ 188.152811][ T7] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 188.162373][ T5214] loop4: detected capacity change from 0 to 128 [ 188.253657][ T5219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.227'. [ 189.059816][ T5218] serio: Serial port ttyS3 [ 189.283878][ T4345] attempt to access beyond end of device [ 189.283878][ T4345] loop4: rw=1, want=1041, limit=128 [ 189.699664][ T5230] loop1: detected capacity change from 0 to 40427 [ 189.966490][ T5230] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 189.974370][ T5230] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 189.984733][ T5230] F2FS-fs (loop1): invalid crc value [ 190.665692][ T5230] F2FS-fs (loop1): Found nat_bits in checkpoint [ 190.773836][ T5227] netlink: 56 bytes leftover after parsing attributes in process `syz.3.229'. [ 191.057932][ T5230] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 191.065560][ T5230] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.887683][ T5252] device syzkaller0 entered promiscuous mode [ 192.143156][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 192.833794][ T7] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 192.871555][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 192.942171][ T7] usb 4-1: Product: syz [ 192.952470][ T7] usb 4-1: Manufacturer: syz [ 192.957820][ T7] usb 4-1: SerialNumber: syz [ 193.042581][ T7] usb 4-1: config 0 descriptor?? [ 193.077091][ T5267] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 193.871210][ T7] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 193.979694][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 194.022017][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.093334][ T7] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 194.101323][ T7] usb 4-1: media controller created [ 194.180301][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 194.220738][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.255884][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 194.310105][ T5273] loop4: detected capacity change from 0 to 128 [ 194.446019][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.452377][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.580275][ T5271] device hsr_slave_1 left promiscuous mode [ 194.592331][ T4345] attempt to access beyond end of device [ 194.592331][ T4345] loop4: rw=1, want=1041, limit=128 [ 194.973077][ T7] cxusb: set interface failed [ 194.979527][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 195.129948][ T7] DVB: Unable to find symbol mt352_attach() [ 195.136193][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 195.155481][ T7] zl10353_read_register: readreg error (reg=127, ret==-121) [ 195.163709][ T7] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 195.383124][ T7] rc_core: IR keymap rc-dvico-mce not found [ 195.389459][ T7] Registered IR keymap rc-empty [ 195.439527][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 195.454408][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.462723][ T5284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.515511][ T5285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.243'. [ 195.673597][ T7] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 195.729829][ T7] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7 [ 195.823182][ T7] dvb-usb: schedule remote query interval to 100 msecs. [ 195.850563][ T7] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 195.919382][ T7] usb 4-1: USB disconnect, device number 6 [ 196.124683][ T5288] netlink: 56 bytes leftover after parsing attributes in process `syz.0.244'. [ 196.333194][ T7] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 198.561524][ T5298] loop0: detected capacity change from 0 to 40427 [ 198.658622][ T5298] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 198.667617][ T5298] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 198.683423][ T5298] F2FS-fs (loop0): invalid crc value [ 198.804726][ T5298] F2FS-fs (loop0): Found nat_bits in checkpoint [ 199.002135][ T5298] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 199.009466][ T5298] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 201.584919][ T5319] loop3: detected capacity change from 0 to 128 [ 201.846515][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 204.122830][ T4344] attempt to access beyond end of device [ 204.122830][ T4344] loop3: rw=1, want=1041, limit=128 [ 204.276164][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 204.470652][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.488267][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.497239][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.555813][ T5336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.255'. [ 204.623201][ T4288] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.283262][ T4288] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 207.292393][ T4288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 207.380938][ T4288] usb 5-1: Product: syz [ 207.434815][ T4288] usb 5-1: Manufacturer: syz [ 207.439481][ T4288] usb 5-1: SerialNumber: syz [ 209.922103][ T4288] usb 5-1: config 0 descriptor?? [ 210.113087][ T4288] usb 5-1: can't set config #0, error -71 [ 210.128531][ T5351] netlink: 56 bytes leftover after parsing attributes in process `syz.4.260'. [ 211.473281][ T4288] usb 5-1: USB disconnect, device number 4 [ 211.949321][ T5365] loop1: detected capacity change from 0 to 40427 [ 211.976472][ T5365] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 211.984347][ T5365] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 211.995085][ T5365] F2FS-fs (loop1): invalid crc value [ 212.096543][ T5365] F2FS-fs (loop1): Found nat_bits in checkpoint [ 212.146397][ T5365] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 212.153591][ T5365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 213.500168][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.508023][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.078949][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 216.144376][ T5384] loop1: detected capacity change from 0 to 128 [ 216.874916][ T1166] attempt to access beyond end of device [ 216.874916][ T1166] loop1: rw=1, want=1041, limit=128 [ 217.402264][ T5393] loop1: detected capacity change from 0 to 40427 [ 217.466545][ T5393] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 217.474420][ T5393] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 217.508435][ T5393] F2FS-fs (loop1): invalid crc value [ 217.555295][ T5393] F2FS-fs (loop1): Found nat_bits in checkpoint [ 217.590536][ T5191] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.613977][ T5393] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 217.621110][ T5393] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.726085][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.875414][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.603963][ T5191] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 218.632791][ T5191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 218.685279][ T5191] usb 4-1: Product: syz [ 218.717396][ T5191] usb 4-1: Manufacturer: syz [ 218.768125][ T5191] usb 4-1: SerialNumber: syz [ 218.872409][ T5191] usb 4-1: config 0 descriptor?? [ 218.976055][ T5191] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 219.015110][ T5191] dvb-usb: bulk message failed: -22 (2/0) [ 219.117377][ T5191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.214075][ T5191] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 219.280098][ T5191] usb 4-1: media controller created [ 219.576759][ T5191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.543380][ T5191] cxusb: set interface failed [ 220.548379][ T5191] dvb-usb: bulk message failed: -22 (1/0) [ 221.248702][ T5191] DVB: Unable to find symbol mt352_attach() [ 221.259624][ T5191] dvb-usb: bulk message failed: -22 (5/0) [ 222.110308][ T5191] zl10353_read_register: readreg error (reg=127, ret==-121) [ 222.118282][ T5191] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 222.253151][ T5410] siw: device registration error -23 [ 222.773033][ T5191] rc_core: IR keymap rc-dvico-mce not found [ 222.782999][ T5191] Registered IR keymap rc-empty [ 222.810821][ T5191] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 223.274370][ T5191] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 223.494854][ T5191] dvb-usb: schedule remote query interval to 100 msecs. [ 223.502000][ T5191] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 223.770312][ T5191] usb 4-1: USB disconnect, device number 7 [ 224.188305][ T5191] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 224.992312][ T5434] loop3: detected capacity change from 0 to 128 [ 225.140152][ T5357] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.149359][ T5357] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.158446][ T5357] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.167912][ T5357] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.218264][ T4344] attempt to access beyond end of device [ 225.218264][ T4344] loop3: rw=1, want=1041, limit=128 [ 225.498844][ T5388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'. [ 225.514464][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 226.281436][ T5191] Bluetooth: hci5: command 0x0409 tx timeout [ 226.435627][ T5428] device hsr_slave_1 left promiscuous mode [ 226.482272][ T5441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.282'. [ 227.023959][ T4247] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 227.476466][ T5422] chnl_net:caif_netlink_parms(): no params data found [ 227.647359][ T5458] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 227.979688][ T4247] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 228.000663][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 228.009169][ T4247] usb 4-1: Product: syz [ 228.013437][ T4247] usb 4-1: Manufacturer: syz [ 228.018068][ T4247] usb 4-1: SerialNumber: syz [ 228.544991][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 228.574981][ T4247] usb 4-1: config 0 descriptor?? [ 228.625218][ T4247] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 228.637439][ T4247] dvb-usb: bulk message failed: -22 (2/0) [ 228.665426][ T4247] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.719253][ T5476] loop4: detected capacity change from 0 to 128 [ 228.710751][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.743320][ T4247] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 228.772428][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.864802][ T4247] usb 4-1: media controller created [ 228.866219][ T5422] device bridge_slave_0 entered promiscuous mode [ 229.028931][ T4247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.075642][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.100222][ T4385] attempt to access beyond end of device [ 229.100222][ T4385] loop4: rw=1, want=1041, limit=128 [ 229.114518][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.122827][ T5422] device bridge_slave_1 entered promiscuous mode [ 229.484747][ T5422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.704153][ T5484] loop0: detected capacity change from 0 to 40427 [ 229.730607][ T5422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.771326][ T5484] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 229.779553][ T5484] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 229.788261][ T4247] cxusb: set interface failed [ 229.795474][ T4247] dvb-usb: bulk message failed: -22 (1/0) [ 229.813734][ T5484] F2FS-fs (loop0): invalid crc value [ 229.844463][ T4247] DVB: Unable to find symbol mt352_attach() [ 229.850472][ T4247] dvb-usb: bulk message failed: -22 (5/0) [ 229.868388][ T4247] zl10353_read_register: readreg error (reg=127, ret==-121) [ 229.876941][ T4247] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 229.886376][ T5484] F2FS-fs (loop0): Found nat_bits in checkpoint [ 229.968772][ T5484] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 229.975958][ T5484] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 231.430179][ T4232] Bluetooth: hci5: command 0x040f tx timeout [ 231.723012][ T4247] rc_core: IR keymap rc-dvico-mce not found [ 231.729004][ T4247] Registered IR keymap rc-empty [ 231.843440][ T5504] loop1: detected capacity change from 0 to 64 [ 231.854321][ T4247] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 231.904287][ T4247] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input9 [ 231.924686][ T4247] dvb-usb: schedule remote query interval to 100 msecs. [ 231.935494][ T4247] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 231.994588][ T4247] usb 4-1: USB disconnect, device number 8 [ 232.067575][ T5422] team0: Port device team_slave_0 added [ 232.154469][ T5422] team0: Port device team_slave_1 added [ 232.155639][ T4247] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 232.606229][ T5518] loop0: detected capacity change from 0 to 16 [ 232.747863][ T5518] erofs: (device loop0): mounted with root inode @ nid 36. [ 232.820051][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.855087][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.912292][ T5422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.971401][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.013052][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.120413][ T5422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.463110][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 233.580424][ T5422] device hsr_slave_0 entered promiscuous mode [ 233.738934][ T5422] device hsr_slave_1 entered promiscuous mode [ 233.757058][ T5422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.775906][ T5538] loop3: detected capacity change from 0 to 128 [ 233.788437][ T5422] Cannot create hsr debugfs directory [ 234.326408][ T4341] attempt to access beyond end of device [ 234.326408][ T4341] loop3: rw=1, want=1041, limit=128 [ 236.027102][ T5570] loop0: detected capacity change from 0 to 164 [ 236.033565][ T1325] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 236.145740][ T5544] loop4: detected capacity change from 0 to 32768 [ 236.178098][ T5422] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.190117][ T5578] xt_hashlimit: max too large, truncated to 1048576 [ 236.237996][ T5422] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.261039][ T5422] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.389832][ T5544] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 236.442833][ T4309] device hsr_slave_0 left promiscuous mode [ 236.465233][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.482373][ T26] audit: type=1800 audit(1762365631.730:17): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.301" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 236.868357][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.921974][ T4309] device bridge_slave_1 left promiscuous mode [ 237.062517][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.070510][ T1325] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 237.090189][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 237.112585][ T1325] usb 2-1: Product: syz [ 237.132601][ T1325] usb 2-1: Manufacturer: syz [ 237.153045][ T1325] usb 2-1: SerialNumber: syz [ 237.186949][ T1325] usb 2-1: config 0 descriptor?? [ 237.221712][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 237.236441][ T4309] device bridge_slave_0 left promiscuous mode [ 237.254860][ T1325] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 237.272033][ T1325] dvb-usb: bulk message failed: -22 (2/0) [ 237.293078][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.309488][ T1325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.373390][ T1325] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 237.391686][ T1325] usb 2-1: media controller created [ 237.431588][ T1325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.953129][ T1325] cxusb: set interface failed [ 237.957963][ T1325] dvb-usb: bulk message failed: -22 (1/0) [ 238.109869][ T1325] DVB: Unable to find symbol mt352_attach() [ 238.134165][ T1325] dvb-usb: bulk message failed: -22 (5/0) [ 238.193125][ T5599] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 238.487935][ T1325] zl10353_read_register: readreg error (reg=127, ret==-121) [ 238.513254][ T1325] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 238.573548][ T4309] team0 (unregistering): Port device team_slave_1 removed [ 238.654730][ T4309] team0 (unregistering): Port device team_slave_0 removed [ 238.683127][ T1325] rc_core: IR keymap rc-dvico-mce not found [ 238.691415][ T1325] Registered IR keymap rc-empty [ 238.718425][ T1325] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 238.753368][ T1325] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input10 [ 238.777758][ T1325] dvb-usb: schedule remote query interval to 100 msecs. [ 238.796942][ T1325] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 238.841632][ T1325] usb 2-1: USB disconnect, device number 5 [ 238.873528][ T4309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.918404][ T5604] loop1: detected capacity change from 0 to 128 [ 238.955614][ T1325] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 238.965391][ T4309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.185221][ T4345] attempt to access beyond end of device [ 239.185221][ T4345] loop1: rw=1, want=1041, limit=128 [ 239.301062][ T4309] bond0 (unregistering): Released all slaves [ 239.624227][ T5612] loop3: detected capacity change from 0 to 40427 [ 239.849015][ T5612] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 239.857067][ T5612] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 239.868816][ T5612] F2FS-fs (loop3): invalid crc value [ 239.924789][ T5612] F2FS-fs (loop3): Found nat_bits in checkpoint [ 239.982325][ T5612] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 239.989815][ T5612] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 240.016766][ T5616] loop1: detected capacity change from 0 to 40427 [ 240.060496][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 240.090407][ T5422] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.107136][ T5616] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 240.115294][ T5616] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 240.156900][ T5616] F2FS-fs (loop1): invalid crc value [ 240.210071][ T5616] F2FS-fs (loop1): Found nat_bits in checkpoint [ 240.855006][ T5616] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 240.862129][ T5616] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 242.386876][ T5422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.460311][ T5422] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.493205][ T1325] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 242.513960][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.570477][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.660907][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.708145][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.765674][ T1387] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.772799][ T1387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.832030][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.862781][ T5662] loop4: detected capacity change from 0 to 4096 [ 242.863730][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.903939][ T1387] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.911095][ T1387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.007642][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.040134][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.096133][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.142564][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.183289][ T1325] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 243.192759][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 243.195958][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.252815][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.264137][ T1325] usb 1-1: Product: syz [ 243.268448][ T1325] usb 1-1: Manufacturer: syz [ 243.281968][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.293586][ T1325] usb 1-1: SerialNumber: syz [ 243.302759][ T5662] EXT4-fs (loop4): Test dummy encryption mode enabled [ 243.320367][ T1325] usb 1-1: config 0 descriptor?? [ 243.341704][ T5422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.372439][ T5422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.395232][ T1325] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 243.402776][ T1325] dvb-usb: bulk message failed: -22 (2/0) [ 243.413159][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.423941][ T5662] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 243.432188][ T5662] System zones: 0-5 [ 243.438658][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.471493][ T5677] loop1: detected capacity change from 0 to 128 [ 243.484835][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.494870][ T1325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.496524][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.517734][ T5662] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 243.549569][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.643251][ T1325] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 243.673058][ T1325] usb 1-1: media controller created [ 243.726375][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.803863][ T1325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.905139][ T5662] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 243.925416][ T4344] attempt to access beyond end of device [ 243.925416][ T4344] loop1: rw=1, want=1041, limit=128 [ 244.392832][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.403530][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.450754][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.463204][ T1325] cxusb: set interface failed [ 244.467955][ T1325] dvb-usb: bulk message failed: -22 (1/0) [ 244.623535][ T1325] DVB: Unable to find symbol mt352_attach() [ 244.629567][ T1325] dvb-usb: bulk message failed: -22 (5/0) [ 244.661791][ T1325] zl10353_read_register: readreg error (reg=127, ret==-121) [ 244.713168][ T1325] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 244.723289][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 244.963071][ T1325] rc_core: IR keymap rc-dvico-mce not found [ 244.969046][ T1325] Registered IR keymap rc-empty [ 245.011733][ T1325] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 245.093104][ T1325] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 245.154502][ T1325] dvb-usb: schedule remote query interval to 100 msecs. [ 245.161510][ T1325] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 245.221604][ T1325] usb 1-1: USB disconnect, device number 3 [ 245.631537][ T1325] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 245.654913][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.760142][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.874745][ T5422] device veth0_vlan entered promiscuous mode [ 245.905799][ T5422] device veth1_vlan entered promiscuous mode [ 246.719276][ T5728] capability: warning: `syz.0.329' uses 32-bit capabilities (legacy support in use) [ 246.927790][ T5735] loop4: detected capacity change from 0 to 2048 [ 246.947917][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.448497][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.457646][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.469251][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.478461][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.488317][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.496528][ T5738] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.502427][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.752132][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.900779][ T5743] loop0: detected capacity change from 0 to 40427 [ 248.098747][ T5743] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 248.107196][ T5743] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 248.119724][ T5743] F2FS-fs (loop0): invalid crc value [ 248.125785][ T5745] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '..' [ 248.179216][ T5745] Remounting filesystem read-only [ 248.198827][ T5743] F2FS-fs (loop0): Found nat_bits in checkpoint [ 248.265557][ T5743] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 248.272674][ T5743] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 248.326551][ T5422] device veth0_macvtap entered promiscuous mode [ 248.339307][ T5422] device veth1_macvtap entered promiscuous mode [ 248.444459][ T5751] loop3: detected capacity change from 0 to 128 [ 248.464632][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.480795][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.529013][ T5755] syz.1.335 uses obsolete (PF_INET,SOCK_PACKET) [ 249.003054][ T4196] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 249.043000][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.082755][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.104717][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.125524][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.220529][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.273843][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.332925][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.342813][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.422946][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.459028][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.461615][ T4344] attempt to access beyond end of device [ 249.461615][ T4344] loop3: rw=1, want=1041, limit=128 [ 249.511715][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.554458][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.593506][ T5422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.602275][ T5422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.633055][ T5422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.668394][ T5422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.702337][ T5761] loop1: detected capacity change from 0 to 16 [ 249.821973][ T5761] erofs: (device loop1): mounted with root inode @ nid 36. [ 249.930790][ T5759] netlink: 56 bytes leftover after parsing attributes in process `syz.4.336'. [ 250.193144][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.235872][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.339150][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.438441][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.453260][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.669481][ T5778] loop4: detected capacity change from 0 to 40427 [ 250.708940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.774354][ T5780] netlink: 48 bytes leftover after parsing attributes in process `syz.0.337'. [ 250.794736][ T5778] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 250.802606][ T5778] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 250.819292][ T5778] F2FS-fs (loop4): invalid crc value [ 250.896166][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 250.915683][ T5778] F2FS-fs (loop4): Found nat_bits in checkpoint [ 251.106280][ T5778] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 251.113480][ T5778] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 255.115268][ T5815] loop3: detected capacity change from 0 to 128 [ 255.453684][ T5817] loop0: detected capacity change from 0 to 32768 [ 255.460965][ T1110] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 255.670694][ T5817] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 255.685236][ T26] audit: type=1800 audit(1762365650.940:18): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.348" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 255.740679][ T4345] attempt to access beyond end of device [ 255.740679][ T4345] loop3: rw=1, want=1041, limit=128 [ 255.763621][ T5819] overlayfs: missing 'lowerdir' [ 255.783139][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 255.795597][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 255.920118][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.926526][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.533264][ T1110] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 256.557771][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.737059][ T1110] usb 5-1: Product: syz [ 256.741346][ T1110] usb 5-1: Manufacturer: syz [ 256.753715][ T1110] usb 5-1: SerialNumber: syz [ 257.512548][ T1110] usb 5-1: config 0 descriptor?? [ 257.603211][ T1110] usb 5-1: can't set config #0, error -71 [ 257.619581][ T1110] usb 5-1: USB disconnect, device number 5 [ 259.814388][ T5846] loop4: detected capacity change from 0 to 40427 [ 259.873281][ T5846] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 259.881581][ T5846] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 259.892001][ T5846] F2FS-fs (loop4): invalid crc value [ 259.994934][ T5846] F2FS-fs (loop4): Found nat_bits in checkpoint [ 260.058970][ T5846] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 260.066188][ T5846] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 261.330358][ T5864] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 262.301376][ T5875] loop3: detected capacity change from 0 to 32768 [ 262.385124][ T5877] loop0: detected capacity change from 0 to 128 [ 262.506288][ T5875] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 262.530777][ T26] audit: type=1800 audit(1762365657.780:19): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.361" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 262.667357][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 262.788604][ T4341] attempt to access beyond end of device [ 262.788604][ T4341] loop0: rw=1, want=1041, limit=128 [ 267.664161][ T5939] team0: No ports can be present during mode change [ 267.997937][ T5931] netlink: 56 bytes leftover after parsing attributes in process `syz.3.370'. [ 268.025891][ T5947] loop0: detected capacity change from 0 to 128 [ 268.353258][ T4309] attempt to access beyond end of device [ 268.353258][ T4309] loop0: rw=1, want=1041, limit=128 [ 271.800931][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 272.045446][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 272.795609][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.802809][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.816513][ T5979] device bridge_slave_0 entered promiscuous mode [ 272.845651][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.853064][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.862173][ T5979] device bridge_slave_1 entered promiscuous mode [ 272.940871][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.006043][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.191428][ T5979] team0: Port device team_slave_0 added [ 273.212650][ T5979] team0: Port device team_slave_1 added [ 273.463178][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 274.193130][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.200143][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.239957][ T6016] loop3: detected capacity change from 0 to 128 [ 274.319551][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.436721][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.461266][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.497376][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.750501][ T1166] attempt to access beyond end of device [ 274.750501][ T1166] loop3: rw=1, want=1041, limit=128 [ 274.824658][ T5979] device hsr_slave_0 entered promiscuous mode [ 274.864051][ T5979] device hsr_slave_1 entered promiscuous mode [ 274.928189][ T5979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.119194][ T5979] Cannot create hsr debugfs directory [ 275.854478][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 276.042520][ T6028] loop3: detected capacity change from 0 to 2048 [ 276.202617][ T6028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.496457][ T6018] netlink: 56 bytes leftover after parsing attributes in process `syz.1.386'. [ 276.607168][ T5979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.821094][ T5979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.066110][ T5979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.145806][ T5979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.485349][ T6045] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 277.795405][ T6053] netlink: 56 bytes leftover after parsing attributes in process `syz.1.391'. [ 277.873176][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 277.953681][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.093225][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.114908][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.152530][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.197543][ T6039] chnl_net:caif_netlink_parms(): no params data found [ 278.335711][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.353681][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.420040][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.427252][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.526143][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.709719][ T6065] loop1: detected capacity change from 0 to 32768 [ 278.754943][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.819728][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.827098][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.923093][ T6065] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 278.944352][ T26] audit: type=1800 audit(1762365674.200:20): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.392" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 278.977564][ T6065] [ 278.979956][ T6065] ====================================================== [ 278.987084][ T6065] WARNING: possible circular locking dependency detected [ 278.994100][ T6065] syzkaller #0 Not tainted [ 278.998508][ T6065] ------------------------------------------------------ [ 279.005533][ T6065] syz.1.392/6065 is trying to acquire lock: [ 279.011425][ T6065] ffff888061576a20 (&ocfs2_file_ip_alloc_sem_key/1){+.+.}-{3:3}, at: ocfs2_remap_file_range+0x3f3/0x720 [ 279.022588][ T6065] [ 279.022588][ T6065] but task is already holding lock: [ 279.029958][ T6065] ffff8880615714a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_remap_file_range+0x3d7/0x720 [ 279.040941][ T6065] [ 279.040941][ T6065] which lock already depends on the new lock. [ 279.040941][ T6065] [ 279.051340][ T6065] [ 279.051340][ T6065] the existing dependency chain (in reverse order) is: [ 279.060436][ T6065] [ 279.060436][ T6065] -> #2 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 279.069209][ T6065] down_read+0x44/0x2e0 [ 279.073895][ T6065] ocfs2_read_virt_blocks+0x23f/0x8a0 [ 279.079791][ T6065] ocfs2_find_entry+0x3d1/0x1f90 [ 279.085340][ T6065] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 279.091329][ T6065] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 279.097409][ T6065] ocfs2_get_system_file_inode+0x319/0x760 [ 279.103747][ T6065] ocfs2_init_global_system_inodes+0x316/0x650 [ 279.110620][ T6065] ocfs2_fill_super+0x3dbf/0x4d80 [ 279.116172][ T6065] mount_bdev+0x287/0x3c0 [ 279.121027][ T6065] legacy_get_tree+0xe6/0x180 [ 279.126250][ T6065] vfs_get_tree+0x88/0x270 [ 279.131188][ T6065] do_new_mount+0x24a/0xa40 [ 279.136220][ T6065] __se_sys_mount+0x2d6/0x3c0 [ 279.141519][ T6065] do_syscall_64+0x4c/0xa0 [ 279.146486][ T6065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.152910][ T6065] [ 279.152910][ T6065] -> #1 (&osb->system_file_mutex){+.+.}-{3:3}: [ 279.161250][ T6065] __mutex_lock_common+0x1eb/0x2390 [ 279.166980][ T6065] mutex_lock_nested+0x17/0x20 [ 279.172273][ T6065] ocfs2_get_system_file_inode+0x1b5/0x760 [ 279.179043][ T6065] ocfs2_reserve_suballoc_bits+0x139/0x4350 [ 279.185486][ T6065] ocfs2_reserve_new_metadata_blocks+0x400/0x940 [ 279.192348][ T6065] ocfs2_create_refcount_tree+0x273/0x1280 [ 279.198681][ T6065] ocfs2_reflink_remap_blocks+0x2e7/0x1930 [ 279.205026][ T6065] ocfs2_remap_file_range+0x4aa/0x720 [ 279.210953][ T6065] vfs_copy_file_range+0xce7/0x1470 [ 279.216678][ T6065] __se_sys_copy_file_range+0x31d/0x480 [ 279.223446][ T6065] do_syscall_64+0x4c/0xa0 [ 279.228499][ T6065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.234925][ T6065] [ 279.234925][ T6065] -> #0 (&ocfs2_file_ip_alloc_sem_key/1){+.+.}-{3:3}: [ 279.243883][ T6065] __lock_acquire+0x2c33/0x7c60 [ 279.249270][ T6065] lock_acquire+0x197/0x3f0 [ 279.254424][ T6065] down_write_nested+0x3b/0x60 [ 279.259726][ T6065] ocfs2_remap_file_range+0x3f3/0x720 [ 279.265635][ T6065] vfs_copy_file_range+0xce7/0x1470 [ 279.271364][ T6065] __se_sys_copy_file_range+0x31d/0x480 [ 279.277449][ T6065] do_syscall_64+0x4c/0xa0 [ 279.282408][ T6065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.288822][ T6065] [ 279.288822][ T6065] other info that might help us debug this: [ 279.288822][ T6065] [ 279.299048][ T6065] Chain exists of: [ 279.299048][ T6065] &ocfs2_file_ip_alloc_sem_key/1 --> &osb->system_file_mutex --> &ocfs2_file_ip_alloc_sem_key [ 279.299048][ T6065] [ 279.315215][ T6065] Possible unsafe locking scenario: [ 279.315215][ T6065] [ 279.322662][ T6065] CPU0 CPU1 [ 279.328059][ T6065] ---- ---- [ 279.333469][ T6065] lock(&ocfs2_file_ip_alloc_sem_key); [ 279.339020][ T6065] lock(&osb->system_file_mutex); [ 279.346645][ T6065] lock(&ocfs2_file_ip_alloc_sem_key); [ 279.354702][ T6065] lock(&ocfs2_file_ip_alloc_sem_key/1); [ 279.360423][ T6065] [ 279.360423][ T6065] *** DEADLOCK *** [ 279.360423][ T6065] [ 279.368557][ T6065] 4 locks held by syz.1.392/6065: [ 279.373594][ T6065] #0: ffff88801abda460 (sb_writers#19){.+.+}-{0:0}, at: vfs_copy_file_range+0x8d7/0x1470 [ 279.383515][ T6065] #1: ffff888061571808 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: lock_two_nondirectories+0xd5/0x150 [ 279.394998][ T6065] #2: ffff888061576d88 (&sb->s_type->i_mutex_key#27/4){+.+.}-{3:3}, at: ocfs2_reflink_inodes_lock+0x116/0xb50 [ 279.406833][ T6065] #3: ffff8880615714a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_remap_file_range+0x3d7/0x720 [ 279.418237][ T6065] [ 279.418237][ T6065] stack backtrace: [ 279.424487][ T6065] CPU: 1 PID: 6065 Comm: syz.1.392 Not tainted syzkaller #0 [ 279.431787][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.441858][ T6065] Call Trace: [ 279.445133][ T6065] [ 279.448060][ T6065] dump_stack_lvl+0x168/0x230 [ 279.452737][ T6065] ? load_image+0x3b0/0x3b0 [ 279.457250][ T6065] ? show_regs_print_info+0x20/0x20 [ 279.462466][ T6065] ? print_circular_bug+0x12b/0x1a0 [ 279.467751][ T6065] check_noncircular+0x274/0x310 [ 279.472707][ T6065] ? add_chain_block+0x940/0x940 [ 279.477636][ T6065] ? lockdep_lock+0xdc/0x1e0 [ 279.482230][ T6065] ? lockdep_unlock+0x134/0x2d0 [ 279.487079][ T6065] ? lockdep_lock+0x1e0/0x1e0 [ 279.491757][ T6065] ? mark_lock+0x94/0x320 [ 279.496176][ T6065] __lock_acquire+0x2c33/0x7c60 [ 279.501039][ T6065] ? verify_lock_unused+0x140/0x140 [ 279.506240][ T6065] ? __mark_inode_dirty+0x7c7/0xc90 [ 279.511452][ T6065] ? generic_update_time+0x1cd/0x1f0 [ 279.516757][ T6065] ? __mnt_drop_write_file+0xbf/0xf0 [ 279.522065][ T6065] ? file_remove_privs+0x590/0x590 [ 279.527175][ T6065] lock_acquire+0x197/0x3f0 [ 279.531676][ T6065] ? ocfs2_remap_file_range+0x3f3/0x720 [ 279.537245][ T6065] ? __might_sleep+0xf0/0xf0 [ 279.541848][ T6065] ? preempt_count_add+0x8d/0x190 [ 279.546867][ T6065] ? read_lock_is_recursive+0x10/0x10 [ 279.552237][ T6065] ? rwsem_write_trylock+0x12f/0x1b0 [ 279.557527][ T6065] ? clear_nonspinnable+0x60/0x60 [ 279.562551][ T6065] ? kernel_read_file_from_fd+0x120/0x120 [ 279.568272][ T6065] ? aa_file_perm+0x3a3/0xe20 [ 279.573037][ T6065] down_write_nested+0x3b/0x60 [ 279.577811][ T6065] ? ocfs2_remap_file_range+0x3f3/0x720 [ 279.583359][ T6065] ocfs2_remap_file_range+0x3f3/0x720 [ 279.588733][ T6065] ? ocfs2_fallocate+0x240/0x240 [ 279.593675][ T6065] ? rcu_read_lock_any_held+0xb0/0x120 [ 279.599133][ T6065] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 279.604415][ T6065] ? end_current_label_crit_section+0x14b/0x170 [ 279.610679][ T6065] ? common_file_perm+0x171/0x1c0 [ 279.615710][ T6065] ? ocfs2_fallocate+0x240/0x240 [ 279.620648][ T6065] vfs_copy_file_range+0xce7/0x1470 [ 279.625852][ T6065] ? generic_copy_file_range+0x110/0x110 [ 279.631486][ T6065] ? __fdget+0x18b/0x210 [ 279.635726][ T6065] ? __se_sys_copy_file_range+0xa9/0x480 [ 279.641386][ T6065] __se_sys_copy_file_range+0x31d/0x480 [ 279.646940][ T6065] ? __x64_sys_copy_file_range+0xf0/0xf0 [ 279.652569][ T6065] ? vtime_user_exit+0x2dc/0x400 [ 279.657520][ T6065] ? __x64_sys_copy_file_range+0x1d/0xf0 [ 279.663154][ T6065] do_syscall_64+0x4c/0xa0 [ 279.667571][ T6065] ? clear_bhb_loop+0x30/0x80 [ 279.672267][ T6065] ? clear_bhb_loop+0x30/0x80 [ 279.676941][ T6065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.682847][ T6065] RIP: 0033:0x7feb61d596c9 [ 279.687280][ T6065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.706885][ T6065] RSP: 002b:00007feb5ffc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 279.715299][ T6065] RAX: ffffffffffffffda RBX: 00007feb61faffa0 RCX: 00007feb61d596c9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 279.723293][ T6065] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 279.731265][ T6065] RBP: 00007feb61ddbf91 R08: fffffbffa003e458 R09: 0700000000000000 [ 279.739237][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.747207][ T6065] R13: 00007feb61fb0038 R14: 00007feb61faffa0 R15: 00007ffc758728c8 [ 279.755291][ T6065] [ 279.776900][ T4232] Bluetooth: hci6: command 0x0409 tx timeout [ 279.810270][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.907743][ T4193] ocfs2: Unmounting device (7,1) on (node local) [ 279.934225][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.943250][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 281.997380][ T1166] device hsr_slave_0 left promiscuous mode [ 282.008723][ T1166] device hsr_slave_1 left promiscuous mode [ 282.015623][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.026913][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.034860][ T1166] device bridge_slave_1 left promiscuous mode [ 282.041234][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.053784][ T1166] device bridge_slave_0 left promiscuous mode [ 282.060043][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.145999][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 282.157589][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 282.168380][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.180896][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.230441][ T1166] bond0 (unregistering): Released all slaves [ 283.051885][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.128534][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.177438][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.230035][ T1166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.346323][ T1166] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.407290][ T1166] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.446866][ T1166] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.486954][ T1166] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.821172][ T1166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.887397][ T1166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.958070][ T1166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.999943][ T1166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.379981][ T1166] device hsr_slave_0 left promiscuous mode [ 285.390511][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.398962][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.409838][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.417576][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.428972][ T1166] device bridge_slave_1 left promiscuous mode [ 285.435933][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.447199][ T1166] device bridge_slave_0 left promiscuous mode [ 285.453676][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.467988][ T1166] device hsr_slave_0 left promiscuous mode [ 285.474448][ T1166] device hsr_slave_1 left promiscuous mode [ 285.480834][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.491774][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.499839][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.510739][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.518750][ T1166] device bridge_slave_1 left promiscuous mode [ 285.528046][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.536846][ T1166] device bridge_slave_0 left promiscuous mode [ 285.543800][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.554203][ T1166] device hsr_slave_0 left promiscuous mode [ 285.560395][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.568131][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.576028][ T1166] device bridge_slave_1 left promiscuous mode [ 285.582172][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.590105][ T1166] device bridge_slave_0 left promiscuous mode [ 285.596498][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.607456][ T1166] device hsr_slave_0 left promiscuous mode [ 285.613767][ T1166] device hsr_slave_1 left promiscuous mode [ 285.619987][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.627931][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.636351][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.643949][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.651495][ T1166] device bridge_slave_1 left promiscuous mode [ 285.657728][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.665744][ T1166] device bridge_slave_0 left promiscuous mode [ 285.671901][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.685667][ T1166] device veth1_macvtap left promiscuous mode [ 285.691713][ T1166] device veth0_macvtap left promiscuous mode [ 285.697819][ T1166] device veth1_vlan left promiscuous mode [ 285.703692][ T1166] device veth0_vlan left promiscuous mode [ 285.710007][ T1166] device veth1_macvtap left promiscuous mode [ 285.716185][ T1166] device veth0_macvtap left promiscuous mode [ 285.722227][ T1166] device veth1_vlan left promiscuous mode [ 285.728048][ T1166] device veth0_vlan left promiscuous mode [ 285.734948][ T1166] device veth1_macvtap left promiscuous mode [ 285.740964][ T1166] device veth0_macvtap left promiscuous mode [ 285.747169][ T1166] device veth1_vlan left promiscuous mode [ 285.753075][ T1166] device veth0_vlan left promiscuous mode [ 285.946087][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 285.958813][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 285.970355][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.982588][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.031514][ T1166] bond0 (unregistering): Released all slaves [ 286.127265][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 286.138717][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 286.152057][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.165054][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.211528][ T1166] bond0 (unregistering): Released all slaves [ 286.296958][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 286.308147][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 286.322366][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.335869][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.383954][ T1166] bond0 (unregistering): Released all slaves [ 286.457840][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 286.471239][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 286.482621][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.495842][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.544945][ T1166] bond0 (unregistering): Released all slaves [ 286.620063][ T1166] bond0 (unregistering): Released all slaves