last executing test programs: 2m48.162629257s ago: executing program 1 (id=68): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x0, 0x0, {0x7, r3}}, 0x18}}, 0x0) 2m46.532907561s ago: executing program 1 (id=73): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x1008883, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x2, 0x1fb, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x37, 0x8f}, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}]}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x20000004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) 2m42.311943656s ago: executing program 1 (id=80): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x8, 0x4e24, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000640)="1c0bfd21d6da", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) 2m40.701814172s ago: executing program 1 (id=83): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000007540)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32], 0x43, 0x5552, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 2m38.414043797s ago: executing program 1 (id=91): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x6a882) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x11, 0x7, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 2m36.477499011s ago: executing program 1 (id=98): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x339b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xffffffff, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 2m35.364794505s ago: executing program 32 (id=98): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x339b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xffffffff, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 2m17.309831448s ago: executing program 0 (id=152): ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) getpid() syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000005f00)=ANY=[@ANYBLOB="c94a02c52c6572726f72733d636f6e74696e75652c636f6d7072657373696f6e3d677a69702c6eef7265636f766572792c6e6ffeffffff696e6f64657311dd457af5d252bb6f6d7072657373696f6e3d6c7a342c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5918, &(0x7f0000000280)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2m6.256683359s ago: executing program 5 (id=183): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x6}) 2m5.830190688s ago: executing program 0 (id=184): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f00000002c0)={0xffff, 0x0, 0x0, 0x7fff, 0xff, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x2d) 2m5.72221054s ago: executing program 5 (id=186): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000000c0)={0x40, 0xe}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x81}, 0x0}) 2m3.848232276s ago: executing program 0 (id=190): socket$inet6(0xa, 0x80001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @multicast1}], 0x10) get_mempolicy(0x0, &(0x7f0000002680), 0xfffffffffffffffe, &(0x7f0000ffa000/0x4000)=nil, 0x4) 2m2.609413061s ago: executing program 0 (id=194): open(&(0x7f0000000480)='./file0\x00', 0x80ff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000100)={0x0, "743fedd3add15c65712ea4c5a112f60f8377ba5089b34f08204569381985d16e9cfd3974fb09fa9fa4ff42a688e0302b715f37ed8ab4cc1e5f75db3bb5cfb510"}) 2m2.042147733s ago: executing program 5 (id=199): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usbip_server_init(0x4) write$usbip_server(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000300000001"], 0x38) 2m0.742098135s ago: executing program 5 (id=205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m0.478091166s ago: executing program 5 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x200000000000031a, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 2m0.421065125s ago: executing program 0 (id=208): socket$inet6(0xa, 0x80001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) 1m59.341401555s ago: executing program 0 (id=211): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 1m59.217015172s ago: executing program 5 (id=212): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601010000000000000000eb7af834050005000a000000050004000000000014000780080006400000000008000840000000f00900020073797a3000000000050001000600000011000300686173683a6e"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x3a0, 0x700, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open$dir(0x0, 0x0, 0x0) 1m44.247638555s ago: executing program 33 (id=211): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 1m44.060230696s ago: executing program 34 (id=212): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601010000000000000000eb7af834050005000a000000050004000000000014000780080006400000000008000840000000f00900020073797a3000000000050001000600000011000300686173683a6e"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x3a0, 0x700, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open$dir(0x0, 0x0, 0x0) 1m27.033760357s ago: executing program 2 (id=299): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000cf00)=[{0x10, 0x10d, 0x1}], 0x10}}], 0x2, 0x20000000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1m25.880516233s ago: executing program 2 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000300), 0x0, &(0x7f0000000380)={0x0, "81ceea4ebf75be2d6313e2c52f9822fa4231ff5a996bb932d3cce1bfcbe856be9024a9ef80779ada519b487f8aed75d873356f0e6138e4f10c6bfc3567326dbb", 0x26}, 0x48, 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x20000000) keyctl$clear(0x7, r3) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)={0x5, 0x0, @b}, 0x48, r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2c060000) 1m23.91389487s ago: executing program 2 (id=303): mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir}]}) 1m23.726787345s ago: executing program 2 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x4) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$binfmt_register(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r2, 0x0, r1, &(0x7f00000000c0)=0x10000, 0x3df1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 1m21.206571947s ago: executing program 2 (id=307): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FREEZING\x00', 0x9) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) write$qrtrtun(r0, &(0x7f0000000440)="7f86ee76b078d5804af5ed79aed7", 0xe) 1m20.053489575s ago: executing program 2 (id=310): socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x2, 0x0) socket(0x40000000002, 0x3, 0xfb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 1m4.586512376s ago: executing program 35 (id=310): socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x2, 0x0) socket(0x40000000002, 0x3, 0xfb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 16.294180344s ago: executing program 3 (id=414): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4808040, &(0x7f00000003c0)=ANY=[], 0x1, 0x1507, &(0x7f0000001b00)="$eJzs3Au4TtX2MPAx5pyLTdKb5D7HHIs3bUyXJLkkySVJkiNJbgkhSZKQ3G9JSELuSe4huYXkfr/lniRJkiQkJJnfo9P5Oud0/v++8z/n+zzf2eP3POt553jXGnPNucfe+11z7WevbzoMqVy3SoXazAz/EvzzS3cASAGA/gBwHQBEAFAiS4ksV/Zn0Nj9XzuJ+Pd6aPrVHoG4mqT+aZvUP22T+qdtUv+0Teqftkn90zapf9om9RciLds+I+f1sqXdTe7/p2Xy+f8f5GjhsV9sLHxjx38iReqftkn90zapf9om9U/bpP5pm9Q/bZP6p21SfyHSsv/5vWP528F/wna1v/+EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQNF8JvDAD85VUIIYQQQgghhBD/OUL6qz0CIYQQQgghhBBC/N+HoECDgQjSQXpIgQyQEa6BTHAtZIbrIAHXQxa4AbLCjZANskMOyAm5IDfkAQsEDhhiyAv5IAk3QX64GVKhABSEQuChMBSBolAMboHicCuUgNugJNwOpaA0lIGycAeUgzuhPNwFFeBuqAiVoDJUgXugKtwL1eA+qA73Qw14AGrCg1AL/gS14SGoAw9DXXgE6sGjUB8aQENoBI3/R/kvQBd4EbpCN+gOPaAn9ILe0Af6Qj/oDy/BAHgZBsIrMAgGwxB4FYbCazAMXofhMAJGwhswCkbDGBgL42A8TIA3YSK8BZPgbZgMU2AqTIPpMANmwjswC2bDHHgX5sJ7MA/mwwJYCIvgfVgMS2ApfADL4ENYDitgJayC1bAG1sI6WA8bYCNsgs2wBbbCNtgOH8EO2Am7YDfsgb2wDz6G/fAJHIBP4SB89k/mn/+7/I4ICKhQoUGD6TAdpmAKZsSMmAkzYWbMjAlMYBbMglkxK2bDbJgDc2AuzIV5MA8SEjIy5sW8mMQk5sf8mIqpWBALokePRbAIFsNbsDgWxxJYAktiSSyFpbE0lsWyWA7LYXksjxWwAlbEilgZK+M9eA/ei9WwGlbH6lgDa2BNrIm1sBbWxtpYB+tgXayL9bAe1sf62BAbYmNsjE2wCTbFptgcm2MLbIGtsBW2xtbYBttgW2yL7bAdtsf22AE7YEfshJ3wBXwBX8QXsRtWVD2wJ/bE3tgb+2I/7Icv4QB8GV/GV3AQDsYh+Cq+iq/hMDyHw3EEjsSRWE6NxjE4FlmNxwk4ASfiRJyEk3AyTsEpOA2n4wyciTNxFs7G2fguzsX38D2cj/NxIS7CRbgYl+BSXIrL8DwuxxW4ElfhalyDq3Edrsd1uBE34UbcgltwG27Dj/Aj3Ik7cTfuxr1oAPBj/AQ/wUF4EA/iITyEh/EwHsEjeBSP4jE8hsfxOJ7AE3gST+IpPI1n8DSexbN4Ds/jBbyAF/EiXsLncn1VZ2+BDYNAXWGUUelUOpWiUlRGlVFlUplUZpVZJVRCZVFZVFaVVWVT2VQOlUPlUrlUHpVHkSLFKlZ5VV6VVEmVX+VXqSpVFVQFlVdeFVFFVDFVTBVXxVUJdZsqqW5XpVRp1cyXVWVVOdXcl1d3qQqqgqqoKqnKqoqqoqqqqqqaqqaqq+qqhqqhaqoHVS3VA/viQ+pKZeqqwVhPDcH6qoFqqBqp1/Ax1UQNw6aqmWqunlAjcDi2Uk18a/WUaqPGYFv1jBqLz6r2ajx2UM+rjqqT6qxeUF1UU99VdVOTsYfqqaZhb9VH9VX91CyspK5UrLJ6RQ1Sg9UQ9apaiK+pYep1NVyNUCPVG2qUGq3GqLFqnBqvJqg31UT1lpqk3laT1RQ1VU1T09UMNVO9o2ap2WqOelfNVe+peWq+WqAWqkXqfbVYLVFL1QdqmfpQLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fa1TW1XH6kdaqfapXarPWqv2qc+VvvVJ+qA+lQdVJ+pQ+pzdVh9oY6oL9VR9ZU6pr5Wx9U36oT6Vp1U36lT6rQ6o75XZ9UP6pw6ry6oH9VF9ZO6pH5Wl1VQoFErrbXRkU6n0+sUnUFn1NfoTPpanVlfpxP6ep1F36Cz6ht1Np1d59A5dS6dW+fRVpN2mnWs8+p8Oqlv0vn1zTpVF9AFdSHtdWFdRBfVxfQturi+VZfQt+mS+nZdSpfWZXRZfYcup+/U5fVduoK+W1fUlXRlXUXfo6vqe3U1fZ+uru/XNfQDuqZ+UNfSf9K19UO6jn5Y19WP6Hr6UV1fN9ANdSPdWD+mm+jHdVPdTDfXT+gWuqVupZ/UrfVTuo1+WrfVz+h2+lndXj+nO+jndUfdSXfWP+vLOuiuupvurnvonrqX7q376L66n+6vX9ID9Mt6oH5FD9KD9RD9qh6qX9PD9Ot6uB6hR+o39Cg9Wo/RY/U4PV5P0G/qifotPUm/rSfrKXqqnqan6xm67689zfk/yH/rH+QP/OXs2/R2/ZHeoXfqXXq33qP36n16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+pg+ro/rE/qEPqlP6lP6tP5Rf6/P6h/0OX1en9c/6ov6or7069cADBpltDEmMulMepNiMpiM5hqTyVxrMpvrTMJcb7KYG0xWc6PJZrKbHCanyWVymzzGGjLOsIlNXpPPJM1N+OsFhSloChlvCpsipug/k2/ym5tNqinwN/l/NL7GprFpYpqYpqapaW6amxamhWllWpnWprVpY9qYtqataWfamfamvelgOpiOpqPpbDqbLqaL6Wq6mu6mu+lpepnepo/pa/qZ/uYlM8AMMAPNQDPIDDJDzBAz1Aw1w8wwM9wMNyPNSDPKjDJjzBgzzowzE8wEM9FMNJPMJDPZTDZTzVQz3Uw3M81MM8vMMnPMHDPXzDXzzDyzwCwwi8wis9gsNkvNUrPMLDPLzQqzwqwyq8was8asM+vMBrPBbDKbzBazxSw32812s8PsMLvMLrPH7DH7zD6z3+w3B8wBc9AcNIfMIXPYHDZHzBFz1Bw1x8wxc9wcNyfMCXPSnDSnzClzxpwxZ81Zc86cMxfMBXPRXDSXzCVz2Vy+ctkXqUhFJjJRuihdlBKlRBmjjFGmKFOUOcocJaJElCXKEmWNboyyRdmjHFHOKFeUO8oT2YgiF3EUR3mjfFEyuinKH90cpUYFooJRochHhaMiUdGoWHRLVDy6NSoR3RaVjG6PSkWlozJR2eiOqFx0Z1Q+uiuqEN0dVYwqRZWjKtE9UdXo3qhadF9UPbo/qhE9ENWMHoxqRX+KakcPRXWih6O60SNRvejRqH7UIGoYNYoa/1v7D+Fc9sd9V9vNdrc9bE/by/a2fWxf28/2ty/ZAfZlO9C+YgfZwXaIfdUOta/ZYfZ1O9yOsCPtG3aUHW3H2LF2nB1vJ9g37UT7lp1k37aT7RQ71U6z0+0MO9O+Y2fZ2XaOfdfOte/ZeXa+XWAX2kX2fbvYLrFL7Qd2mf3QLrcr7Eq7yq62a+xau86utxvsRrvJbrZb7Fa7zW63H9kddqfdZXfbPXav3Wc/tvvtJ/aA/dQetJ/ZQ/Zze9h+YY/YL+1R+5U9Zr+2x+039oT91p6039lT9rQ9Y7+3Z+0P9pw9by/YH+1F+5O9ZH+2l224cnF/5eOdDBlKR+kohVIoI2WkTJSJMlNmSlCCslAWykpZKRtloxyUg3JRLspDeegKJqa8lJeSlKT8lJ9SKZUKUkHy5KkIFaFiVIyKU3EqQSWoJJWkUlSKylAZuoPuoDvpTrqL7qK76W6qRJWoClWhqlSVqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpITWkxtSYmlATakpNqTk1pxbUglpRK2pNrakNtaG21JbaUTtqT+2pA3WgjtSROlNn6kJdqCt1pe7UnXpST+pNvakv9aX+1J8G0AAaSANpEA2iITSEhtJQGkbDaDiNoJH0Bo2i0TSGxtI4Gk8TaAJNpIk0iSbRZJpMU2kqTafpNJNm0iyaRXNoDs2luTSP5tECWkCLaBEtpsW0lJbSMlpGy2k5raSVtJpW01paS+tpPW2kjbSZNtNW2krbaTvtoB20i3bRHtpD+2gf7af9dIAO0EE6SIfoUEAAOkJH6CgdpWN0jI7TcTpBJ+gknaRTdIrO0Bk6S2fpHJ2jC3SBLtJPdIl+pssUKMVlcBndNS6Tu9Zldte5v49zuJwul8vt8jjrsrnsfxOTcy7VFXAF/7LEdEVdasqV10LOu8KuiCvqSrnSrowr6+5w5dydrvzv4qruXlfN3eequ/tdFXfP38Q13AOupnvE1XKPutqugavjGrm67hFXzz3q6rsGrqFr5Fq4lq6Ve9K1dk+5Nu7p38WL3RK33m1wG90mt9994i64H91x94276H5yXV0319+95Aa4l91A94ob5Ab/Lh7p3nCj3Gg3xo1149z438VT3TQ33c1wM907bpab/bt4kXvfzXVL3Tw33y1wC3+Jr4xpqfvALXMfuuVuhVvpVrnVbo1b69b977GuclvcVrfN7XMfux1up9vldrs9bu8v8ZV5HHCfuoPuM3fMfe0Ouy/cEXfCHXVf/RJfmd8J96076b5zp9xpd8Z97866H9w5d/7K/MOVuX/vfnaXXXDAyIo1G444HafnFM7AGfkazsTXcma+jhN8PWfhGzgr38jZODvn4Jyci3NzHrZM7Jg55rycj5N8E+fnmzmVC3BBLsSeC3MRLsrF+BYuzrdyCb6NS/LtXIpLcxkuy3dwOb6Ty/NdXIHv5opciStzFb6Hq/K9XI3v4+p8P9fgB7gmP8i1+E9cmx/iOvww1+VHuB4/yvW5ATfkRtyYH+Mm/Dg35WbcnJ/gFtySW/GT3Jqf4jb8NLflZ7gdP8vt+TnuwM9zR+7EnfkF7sIvclfuxt25B/fkXtyb+3Bf7sf9+SUewC/zQH6FB/FgHsKv8lB+jYfx6zycR/BIfoNH8Wgew2N5HI/nCfwmT+S3eBK/zZN5Ck/laTydZ/BMfodn8Wyew+/yXH6P5/F8XsALeRG/z4t5CS/lD3gZf8jLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbextv5I97BO3kX7+Y9vJf38ce8nzP8+gP3GR/iz/kwf8FH+Es+yl/xMf6aj/M3fIK/5ZP8HZ/i03yGv+ez/AOf4/N8gX/ki/wTX+Kf+TIHhhhjFevYxFGcLk4fp8QZ4ozxNXGm+No4c3xdnIivj7PEN8RZ4xvjbHH2OEecM84V547zxDam2MUcx3HeOF+cjG+K88c3x6lxgbhgXCj2ceG4SFw0LhbfEhePb41LxLfFJePb41Jx6fiR+8vGd8Tl4jvj8vFdcYX47rhiXCmuHFeJ74mrxvfG1eL74urx/XHx+IG4ZvxgDL/+v0qd+OG4bvxIXC9+NK4fN4gbxo3ixvFjcZP48bhp3CxuHj8Rt4hbxq3iJ+PW8VNxm/jpP9zfPe4R94x7xb3iEO7TC5ILk4uS7ycXJ5cklyY/SC5LfphcnlyRXJlclVydXJNcm1yXXJ/ckNyY3JTcnNyS3JrclgyhSnrw6JXX3vjIp/PpfYrP4DP6a3wmf63P7K/zCX+9z+Jv8Fn9jT6bz+5z+Jw+l8/t83jryTvPPvZ5fT6f9Df5/P5mn+oL+IK+kPe+sC/iG/nGvrFv4h/3TX0z39w/4Z/wLX1L/6R/0j/l2/infVv/jG/nn/Xt/XP+Of+87+g7+c7+Bd/Fv+i7+m6+u+/ue/qevrfv7fv6vr6/7+8H+AF+oB/oB/lBfogf4of6oX6YH+aH++F+pB/pR/lRfowf48f5cX6Cn+An+ol+kp/kIwCY6qf66X66n+ln+ll+lp/j5/i5qXP9PD/PL/AL/CK/yC/2i/1Sv9Qv88v8cr/cr/Qr/Wq/2q/1a/16v95v9Bv9Zr/Zb/Vb/Xa/3e/wO/wuv8vv8Xv8Pr/P7/f7/QF/wB/0B/0hf8gf9of9Ef+lP+q/8sf81/64/8af8N/6k/47f8qf9mf89/6s/8Gf8+f9Bf+jv+h/8pf8z/6yD35C4s3ExMRbiUmJtxOTE1MSUxPTEtMTMxIzE+8kZiVmJ+Yk3k3MTbyXmJeYn1iQWJhYlHg/sTixJLE08UFiWeLDxPLEisTKxKrE6sQaAyH3jjjkDflCMtwU8oebQ2ooEAqGQsGHwqFIKBqKhVtC8XBrKBFuCyXD7aFUKB3KhEdD/dAgNAyNQuPwWGgSHg9NQ7PQPDwRWoSWoVV4MrQOT4U24enQNjwT2oVnQ/vwXOgQng8dQ6fQObwQuoQXQ9fQLXQPPULP0Cv0Dn1C39Av9A8vhQHh5TAwvBIGhcFhSHg1DA2vhWHh9TA8jAgjwxthVBgdxoSxYVwYHyaEN8PE8FaYFN4Ok8OUMDVMC9PDjDAzvBNmhdlhTng3zA3vhXlhflgQFoZF4f2wOCwJS8MHYVn4MCwPK8LKsCqsDmvC2rAurA8bwsawKWwOW8LWsC1sDx+FHWFn2BV2hz1hb9gXPg77wyfhQPg0HAyfhUPh83A4fBGOhC/D0fBVOBa+DsfDN+FE+DacDN+FU+F0OBO+D2fDD+FcOB8uhB/DxfBTuBR+DpdDCP/MXe9K/85b6EIIIYQQ/x/p9Qf7e/yD9wwAqF/bP4UQrt2Z8+hf79cAsDnbn9t9VK4WCQB4qluHh/6yVazYvXv3X49driHKNx8AEn93gl/jFdAcWkJraAbF/uH4+qhOF/kP+k/eBpDxr3JS4Lf4t/4//y/6f+yJkYtLxhey/Df9zwdIzfdbzpVV+F/iFdD8l8cpNIPi/0X/2Zv8wfgzfDEBoOlf5WQCgKYZ/n78ReBxeBpa/82RQgghhBBCCCHEn/VRZdr90fr5yvo81189FDA9/Bb/0fpcCCGEEEIIIYQQV9+znTo/+Vjr1s3aSUMa0khjjZb/zTFX+zeTEEIIIYQQ4t/tt4v+397LcDUHJIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpEH/L540drXnKIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQlxt/ysAAP//KWozhQ==") accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) listen(0xffffffffffffffff, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r2, 0x0, 0x0) close(r4) 15.147308027s ago: executing program 3 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000300), 0x0, &(0x7f0000000380)={0x0, "81ceea4ebf75be2d6313e2c52f9822fa4231ff5a996bb932d3cce1bfcbe856be9024a9ef80779ada519b487f8aed75d873356f0e6138e4f10c6bfc3567326dbb", 0x26}, 0x48, 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x20000000) keyctl$clear(0x7, r3) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)={0x5, 0x0, @b}, 0x48, r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2c060000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c000714"], 0xf) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x7, 0x4, 0x4}, &(0x7f0000000100)=0x14) 9.63214246s ago: executing program 3 (id=418): socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000400)={[], [{@fowner_lt}, {@appraise}, {@flag='rw'}, {@uid_eq}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '/dev/cpu/#/msr\x00'}}, {@uid_lt}, {@obj_type={'obj_type', 0x3d, '\xee'}}, {@uid_lt}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES32], 0x42, 0x30f, &(0x7f0000000640)="$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") socket(0x29, 0x80000, 0x20) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x4000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d2140000000000"], 0x68}}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) 8.068624972s ago: executing program 4 (id=422): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYRES8], 0x11, 0x2e1, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000c, 0x10, 0xffffffffffffffff, 0xfdb5a000) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x18c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 7.45224683s ago: executing program 3 (id=423): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x40015b0b, &(0x7f0000000040)) 7.306157974s ago: executing program 6 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00011000252155b21c0012000c0001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@dellink={0x20, 0x11, 0x1, 0x1070bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x0, 0x10201}}, 0x20}}, 0x0) 6.94253526s ago: executing program 4 (id=425): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4808040, &(0x7f00000003c0)=ANY=[], 0x1, 0x1507, &(0x7f0000001b00)="$eJzs3Au4TtX2MPAx5pyLTdKb5D7HHIs3bUyXJLkkySVJkiNJbgkhSZKQ3G9JSELuSe4huYXkfr/lniRJkiQkJJnfo9P5Oud0/v++8z/n+zzf2eP3POt553jXGnPNucfe+11z7WevbzoMqVy3SoXazAz/EvzzS3cASAGA/gBwHQBEAFAiS4ksV/Zn0Nj9XzuJ+Pd6aPrVHoG4mqT+aZvUP22T+qdtUv+0Teqftkn90zapf9om9RciLds+I+f1sqXdTe7/p2Xy+f8f5GjhsV9sLHxjx38iReqftkn90zapf9om9U/bpP5pm9Q/bZP6p21SfyHSsv/5vWP528F/wna1v/+EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQNF8JvDAD85VUIIYQQQgghhBD/OUL6qz0CIYQQQgghhBBC/N+HoECDgQjSQXpIgQyQEa6BTHAtZIbrIAHXQxa4AbLCjZANskMOyAm5IDfkAQsEDhhiyAv5IAk3QX64GVKhABSEQuChMBSBolAMboHicCuUgNugJNwOpaA0lIGycAeUgzuhPNwFFeBuqAiVoDJUgXugKtwL1eA+qA73Qw14AGrCg1AL/gS14SGoAw9DXXgE6sGjUB8aQENoBI3/R/kvQBd4EbpCN+gOPaAn9ILe0Af6Qj/oDy/BAHgZBsIrMAgGwxB4FYbCazAMXofhMAJGwhswCkbDGBgL42A8TIA3YSK8BZPgbZgMU2AqTIPpMANmwjswC2bDHHgX5sJ7MA/mwwJYCIvgfVgMS2ApfADL4ENYDitgJayC1bAG1sI6WA8bYCNsgs2wBbbCNtgOH8EO2Am7YDfsgb2wDz6G/fAJHIBP4SB89k/mn/+7/I4ICKhQoUGD6TAdpmAKZsSMmAkzYWbMjAlMYBbMglkxK2bDbJgDc2AuzIV5MA8SEjIy5sW8mMQk5sf8mIqpWBALokePRbAIFsNbsDgWxxJYAktiSSyFpbE0lsWyWA7LYXksjxWwAlbEilgZK+M9eA/ei9WwGlbH6lgDa2BNrIm1sBbWxtpYB+tgXayL9bAe1sf62BAbYmNsjE2wCTbFptgcm2MLbIGtsBW2xtbYBttgW2yL7bAdtsf22AE7YEfshJ3wBXwBX8QXsRtWVD2wJ/bE3tgb+2I/7Icv4QB8GV/GV3AQDsYh+Cq+iq/hMDyHw3EEjsSRWE6NxjE4FlmNxwk4ASfiRJyEk3AyTsEpOA2n4wyciTNxFs7G2fguzsX38D2cj/NxIS7CRbgYl+BSXIrL8DwuxxW4ElfhalyDq3Edrsd1uBE34UbcgltwG27Dj/Aj3Ik7cTfuxr1oAPBj/AQ/wUF4EA/iITyEh/EwHsEjeBSP4jE8hsfxOJ7AE3gST+IpPI1n8DSexbN4Ds/jBbyAF/EiXsLncn1VZ2+BDYNAXWGUUelUOpWiUlRGlVFlUplUZpVZJVRCZVFZVFaVVWVT2VQOlUPlUrlUHpVHkSLFKlZ5VV6VVEmVX+VXqSpVFVQFlVdeFVFFVDFVTBVXxVUJdZsqqW5XpVRp1cyXVWVVOdXcl1d3qQqqgqqoKqnKqoqqoqqqqqqaqqaqq+qqhqqhaqoHVS3VA/viQ+pKZeqqwVhPDcH6qoFqqBqp1/Ax1UQNw6aqmWqunlAjcDi2Uk18a/WUaqPGYFv1jBqLz6r2ajx2UM+rjqqT6qxeUF1UU99VdVOTsYfqqaZhb9VH9VX91CyspK5UrLJ6RQ1Sg9UQ9apaiK+pYep1NVyNUCPVG2qUGq3GqLFqnBqvJqg31UT1lpqk3laT1RQ1VU1T09UMNVO9o2ap2WqOelfNVe+peWq+WqAWqkXqfbVYLVFL1QdqmfpQLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fa1TW1XH6kdaqfapXarPWqv2qc+VvvVJ+qA+lQdVJ+pQ+pzdVh9oY6oL9VR9ZU6pr5Wx9U36oT6Vp1U36lT6rQ6o75XZ9UP6pw6ry6oH9VF9ZO6pH5Wl1VQoFErrbXRkU6n0+sUnUFn1NfoTPpanVlfpxP6ep1F36Cz6ht1Np1d59A5dS6dW+fRVpN2mnWs8+p8Oqlv0vn1zTpVF9AFdSHtdWFdRBfVxfQturi+VZfQt+mS+nZdSpfWZXRZfYcup+/U5fVduoK+W1fUlXRlXUXfo6vqe3U1fZ+uru/XNfQDuqZ+UNfSf9K19UO6jn5Y19WP6Hr6UV1fN9ANdSPdWD+mm+jHdVPdTDfXT+gWuqVupZ/UrfVTuo1+WrfVz+h2+lndXj+nO+jndUfdSXfWP+vLOuiuupvurnvonrqX7q376L66n+6vX9ID9Mt6oH5FD9KD9RD9qh6qX9PD9Ot6uB6hR+o39Cg9Wo/RY/U4PV5P0G/qifotPUm/rSfrKXqqnqan6xm67689zfk/yH/rH+QP/OXs2/R2/ZHeoXfqXXq33qP36n16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+pg+ro/rE/qEPqlP6lP6tP5Rf6/P6h/0OX1en9c/6ov6or7069cADBpltDEmMulMepNiMpiM5hqTyVxrMpvrTMJcb7KYG0xWc6PJZrKbHCanyWVymzzGGjLOsIlNXpPPJM1N+OsFhSloChlvCpsipug/k2/ym5tNqinwN/l/NL7GprFpYpqYpqapaW6amxamhWllWpnWprVpY9qYtqataWfamfamvelgOpiOpqPpbDqbLqaL6Wq6mu6mu+lpepnepo/pa/qZ/uYlM8AMMAPNQDPIDDJDzBAz1Aw1w8wwM9wMNyPNSDPKjDJjzBgzzowzE8wEM9FMNJPMJDPZTDZTzVQz3Uw3M81MM8vMMnPMHDPXzDXzzDyzwCwwi8wis9gsNkvNUrPMLDPLzQqzwqwyq8was8asM+vMBrPBbDKbzBazxSw32812s8PsMLvMLrPH7DH7zD6z3+w3B8wBc9AcNIfMIXPYHDZHzBFz1Bw1x8wxc9wcNyfMCXPSnDSnzClzxpwxZ81Zc86cMxfMBXPRXDSXzCVz2Vy+ctkXqUhFJjJRuihdlBKlRBmjjFGmKFOUOcocJaJElCXKEmWNboyyRdmjHFHOKFeUO8oT2YgiF3EUR3mjfFEyuinKH90cpUYFooJRochHhaMiUdGoWHRLVDy6NSoR3RaVjG6PSkWlozJR2eiOqFx0Z1Q+uiuqEN0dVYwqRZWjKtE9UdXo3qhadF9UPbo/qhE9ENWMHoxqRX+KakcPRXWih6O60SNRvejRqH7UIGoYNYoa/1v7D+Fc9sd9V9vNdrc9bE/by/a2fWxf28/2ty/ZAfZlO9C+YgfZwXaIfdUOta/ZYfZ1O9yOsCPtG3aUHW3H2LF2nB1vJ9g37UT7lp1k37aT7RQ71U6z0+0MO9O+Y2fZ2XaOfdfOte/ZeXa+XWAX2kX2fbvYLrFL7Qd2mf3QLrcr7Eq7yq62a+xau86utxvsRrvJbrZb7Fa7zW63H9kddqfdZXfbPXav3Wc/tvvtJ/aA/dQetJ/ZQ/Zze9h+YY/YL+1R+5U9Zr+2x+039oT91p6039lT9rQ9Y7+3Z+0P9pw9by/YH+1F+5O9ZH+2l224cnF/5eOdDBlKR+kohVIoI2WkTJSJMlNmSlCCslAWykpZKRtloxyUg3JRLspDeegKJqa8lJeSlKT8lJ9SKZUKUkHy5KkIFaFiVIyKU3EqQSWoJJWkUlSKylAZuoPuoDvpTrqL7qK76W6qRJWoClWhqlSVqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpITWkxtSYmlATakpNqTk1pxbUglpRK2pNrakNtaG21JbaUTtqT+2pA3WgjtSROlNn6kJdqCt1pe7UnXpST+pNvakv9aX+1J8G0AAaSANpEA2iITSEhtJQGkbDaDiNoJH0Bo2i0TSGxtI4Gk8TaAJNpIk0iSbRZJpMU2kqTafpNJNm0iyaRXNoDs2luTSP5tECWkCLaBEtpsW0lJbSMlpGy2k5raSVtJpW01paS+tpPW2kjbSZNtNW2krbaTvtoB20i3bRHtpD+2gf7af9dIAO0EE6SIfoUEAAOkJH6CgdpWN0jI7TcTpBJ+gknaRTdIrO0Bk6S2fpHJ2jC3SBLtJPdIl+pssUKMVlcBndNS6Tu9Zldte5v49zuJwul8vt8jjrsrnsfxOTcy7VFXAF/7LEdEVdasqV10LOu8KuiCvqSrnSrowr6+5w5dydrvzv4qruXlfN3eequ/tdFXfP38Q13AOupnvE1XKPutqugavjGrm67hFXzz3q6rsGrqFr5Fq4lq6Ve9K1dk+5Nu7p38WL3RK33m1wG90mt9994i64H91x94276H5yXV0319+95Aa4l91A94ob5Ab/Lh7p3nCj3Gg3xo1149z438VT3TQ33c1wM907bpab/bt4kXvfzXVL3Tw33y1wC3+Jr4xpqfvALXMfuuVuhVvpVrnVbo1b69b977GuclvcVrfN7XMfux1up9vldrs9bu8v8ZV5HHCfuoPuM3fMfe0Ouy/cEXfCHXVf/RJfmd8J96076b5zp9xpd8Z97866H9w5d/7K/MOVuX/vfnaXXXDAyIo1G444HafnFM7AGfkazsTXcma+jhN8PWfhGzgr38jZODvn4Jyci3NzHrZM7Jg55rycj5N8E+fnmzmVC3BBLsSeC3MRLsrF+BYuzrdyCb6NS/LtXIpLcxkuy3dwOb6Ty/NdXIHv5opciStzFb6Hq/K9XI3v4+p8P9fgB7gmP8i1+E9cmx/iOvww1+VHuB4/yvW5ATfkRtyYH+Mm/Dg35WbcnJ/gFtySW/GT3Jqf4jb8NLflZ7gdP8vt+TnuwM9zR+7EnfkF7sIvclfuxt25B/fkXtyb+3Bf7sf9+SUewC/zQH6FB/FgHsKv8lB+jYfx6zycR/BIfoNH8Wgew2N5HI/nCfwmT+S3eBK/zZN5Ck/laTydZ/BMfodn8Wyew+/yXH6P5/F8XsALeRG/z4t5CS/lD3gZf8jLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbextv5I97BO3kX7+Y9vJf38ce8nzP8+gP3GR/iz/kwf8FH+Es+yl/xMf6aj/M3fIK/5ZP8HZ/i03yGv+ez/AOf4/N8gX/ki/wTX+Kf+TIHhhhjFevYxFGcLk4fp8QZ4ozxNXGm+No4c3xdnIivj7PEN8RZ4xvjbHH2OEecM84V547zxDam2MUcx3HeOF+cjG+K88c3x6lxgbhgXCj2ceG4SFw0LhbfEhePb41LxLfFJePb41Jx6fiR+8vGd8Tl4jvj8vFdcYX47rhiXCmuHFeJ74mrxvfG1eL74urx/XHx+IG4ZvxgDL/+v0qd+OG4bvxIXC9+NK4fN4gbxo3ixvFjcZP48bhp3CxuHj8Rt4hbxq3iJ+PW8VNxm/jpP9zfPe4R94x7xb3iEO7TC5ILk4uS7ycXJ5cklyY/SC5LfphcnlyRXJlclVydXJNcm1yXXJ/ckNyY3JTcnNyS3JrclgyhSnrw6JXX3vjIp/PpfYrP4DP6a3wmf63P7K/zCX+9z+Jv8Fn9jT6bz+5z+Jw+l8/t83jryTvPPvZ5fT6f9Df5/P5mn+oL+IK+kPe+sC/iG/nGvrFv4h/3TX0z39w/4Z/wLX1L/6R/0j/l2/infVv/jG/nn/Xt/XP+Of+87+g7+c7+Bd/Fv+i7+m6+u+/ue/qevrfv7fv6vr6/7+8H+AF+oB/oB/lBfogf4of6oX6YH+aH++F+pB/pR/lRfowf48f5cX6Cn+An+ol+kp/kIwCY6qf66X66n+ln+ll+lp/j5/i5qXP9PD/PL/AL/CK/yC/2i/1Sv9Qv88v8cr/cr/Qr/Wq/2q/1a/16v95v9Bv9Zr/Zb/Vb/Xa/3e/wO/wuv8vv8Xv8Pr/P7/f7/QF/wB/0B/0hf8gf9of9Ef+lP+q/8sf81/64/8af8N/6k/47f8qf9mf89/6s/8Gf8+f9Bf+jv+h/8pf8z/6yD35C4s3ExMRbiUmJtxOTE1MSUxPTEtMTMxIzE+8kZiVmJ+Yk3k3MTbyXmJeYn1iQWJhYlHg/sTixJLE08UFiWeLDxPLEisTKxKrE6sQaAyH3jjjkDflCMtwU8oebQ2ooEAqGQsGHwqFIKBqKhVtC8XBrKBFuCyXD7aFUKB3KhEdD/dAgNAyNQuPwWGgSHg9NQ7PQPDwRWoSWoVV4MrQOT4U24enQNjwT2oVnQ/vwXOgQng8dQ6fQObwQuoQXQ9fQLXQPPULP0Cv0Dn1C39Av9A8vhQHh5TAwvBIGhcFhSHg1DA2vhWHh9TA8jAgjwxthVBgdxoSxYVwYHyaEN8PE8FaYFN4Ok8OUMDVMC9PDjDAzvBNmhdlhTng3zA3vhXlhflgQFoZF4f2wOCwJS8MHYVn4MCwPK8LKsCqsDmvC2rAurA8bwsawKWwOW8LWsC1sDx+FHWFn2BV2hz1hb9gXPg77wyfhQPg0HAyfhUPh83A4fBGOhC/D0fBVOBa+DsfDN+FE+DacDN+FU+F0OBO+D2fDD+FcOB8uhB/DxfBTuBR+DpdDCP/MXe9K/85b6EIIIYQQ/x/p9Qf7e/yD9wwAqF/bP4UQrt2Z8+hf79cAsDnbn9t9VK4WCQB4qluHh/6yVazYvXv3X49driHKNx8AEn93gl/jFdAcWkJraAbF/uH4+qhOF/kP+k/eBpDxr3JS4Lf4t/4//y/6f+yJkYtLxhey/Df9zwdIzfdbzpVV+F/iFdD8l8cpNIPi/0X/2Zv8wfgzfDEBoOlf5WQCgKYZ/n78ReBxeBpa/82RQgghhBBCCCHEn/VRZdr90fr5yvo81189FDA9/Bb/0fpcCCGEEEIIIYQQV9+znTo/+Vjr1s3aSUMa0khjjZb/zTFX+zeTEEIIIYQQ4t/tt4v+397LcDUHJIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpEH/L540drXnKIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQlxt/ysAAP//KWozhQ==") accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) listen(0xffffffffffffffff, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r2, 0x0, 0x0) close(0xffffffffffffffff) 6.816402403s ago: executing program 6 (id=426): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000007c0)={0x8, &(0x7f0000000800)=[{0x2, 0xff, 0x5, 0x1e4f6f12}, {0x400, 0x2, 0x90, 0x66b7}, {0x0, 0x7f, 0x6, 0x1d52}, {0x2, 0x1, 0x5, 0x7fffffff}, {0x3, 0x2, 0x3, 0x6e57}, {0x8, 0x2, 0x6, 0x3}, {0x4, 0x0, 0x80, 0x9}, {0x77, 0x4, 0x9a, 0x9}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x48) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x2200804, &(0x7f0000000880)=ANY=[@ANYBLOB="74696d655f6f66667365743d30783030303030303030303030362c6e616d65636173653d31ac7379735f74a62c757466382c6f6e74696e75652c006bb27274cb82338169949c41f039c7110cf4062ae6c9739afb00"/96], 0x3, 0x151f, &(0x7f0000001900)="$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") rename(&(0x7f0000000000)='./file0/file0\x00', 0x0) 5.585382496s ago: executing program 6 (id=427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000300), 0x0, &(0x7f0000000380)={0x0, "81ceea4ebf75be2d6313e2c52f9822fa4231ff5a996bb932d3cce1bfcbe856be9024a9ef80779ada519b487f8aed75d873356f0e6138e4f10c6bfc3567326dbb", 0x26}, 0x48, 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x20000000) keyctl$clear(0x7, r3) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)={0x5, 0x0, @b}, 0x48, r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2c060000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c000714"], 0xf) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x7, 0x4, 0x4}, &(0x7f0000000100)=0x14) 4.961425477s ago: executing program 4 (id=428): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x524, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x4f4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x4e8, 0x6, [@m_simple={0x1e8, 0x1f, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_DATA={0x2d, 0x3, '@-^[\xa5&,.\x00pe\xe9\xb9\xf1Q+=\xdf\xacqd\xb4\xd3\rj6\xb4\xa6fz\x91\xa6\xe9\xdfy\xef\xbcY\xbb[a'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x403, 0xfffffffffffffffe, 0x6, 0x2}}, @TCA_DEF_DATA={0x7, 0x3, '\xfc}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x10000000, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0x12d, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x16c, 0x3, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb7e}]}, {0x12d, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xb8, 0xc, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x30a}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x6, 0x7, 0xf64, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4e9}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xee1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x715}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8a7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x3d, 0x6, "eda7d7a535361ed0c9b32a364b522addd6669254402ee3ff325c8cea5004909bdc00830603507c7cc3cb8a9b0bfd1aa374f3d137bd1e7f8b57"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xd8, 0x15, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffff9, 0x5, 0x8, 0x7, 0x4}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6002}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x6, 0x5, 0x3, 0x800}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8703d}]}, {0x59, 0x6, "b785195954bf29eb39a865c5695a7ac46cec065f7db06dbdba2e8cf062693312261bf71915b2d84a074fd931b04b8440933794ba3bc0c3d3302773efdb92a216873b53281af4671231b5fff52cece35cfe0cd79a10"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x524}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@local}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in6=@dev, @in6=@private1, @in6=@rand_addr=' \x01\x00'}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.561001069s ago: executing program 3 (id=429): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4001) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) read(r1, 0x0, 0x0) close(r1) close(r0) 3.560251698s ago: executing program 4 (id=430): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000007c0)={0x8, &(0x7f0000000800)=[{0x2, 0xff, 0x5, 0x1e4f6f12}, {0x400, 0x2, 0x90, 0x66b7}, {0x0, 0x7f, 0x6, 0x1d52}, {0x2, 0x1, 0x5, 0x7fffffff}, {0x3, 0x2, 0x3, 0x6e57}, {0x8, 0x2, 0x6, 0x3}, {0x4, 0x0, 0x80, 0x9}, {0x77, 0x4, 0x9a, 0x9}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x48) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000840)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x2200804, &(0x7f0000000880)=ANY=[@ANYBLOB="74696d655f6f66667365743d30783030303030303030303030362c6e616d65636173653d31ac7379735f74a62c757466382c6f6e74696e75652c006bb27274cb82338169949c41f039c7110cf4062ae6c9739afb00"/96], 0x3, 0x151f, &(0x7f0000001900)="$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") rename(&(0x7f0000000000)='./file0/file0\x00', 0x0) 3.412448589s ago: executing program 6 (id=431): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000007c0)={0x8, &(0x7f0000000800)=[{0x2, 0xff, 0x5, 0x1e4f6f12}, {0x400, 0x2, 0x90, 0x66b7}, {0x0, 0x7f, 0x6, 0x1d52}, {0x2, 0x1, 0x5, 0x7fffffff}, {0x3, 0x2, 0x3, 0x6e57}, {0x8, 0x2, 0x6, 0x3}, {0x4, 0x0, 0x80, 0x9}, {0x77, 0x4, 0x9a, 0x9}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x48) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(r6, &(0x7f0000000840)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x2200804, &(0x7f0000000880)=ANY=[@ANYBLOB="74696d655f6f66667365743d30783030303030303030303030362c6e616d65636173653d31ac7379735f74a62c757466382c6f6e74696e75652c006bb27274cb82338169949c41f039c7110cf4062ae6c9739afb00"/96], 0x3, 0x151f, &(0x7f0000001900)="$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") 2.033996642s ago: executing program 6 (id=432): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(r0, &(0x7f0000000840)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) 950.67381ms ago: executing program 4 (id=433): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xff}]}}]}, 0x38}}, 0x0) mmap(&(0x7f00007ac000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r0, 0x3d571000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) socket$packet(0x11, 0x2, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r4 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r3) close(r4) 882.494258ms ago: executing program 3 (id=434): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000240)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@journal_async_commit}, {@preferred_slot={'preferred_slot', 0x3d, 0xffffffffffff0000}}, {@intr}, {@dir_resv_level}]}, 0x9, 0x442b, &(0x7f0000004480)="$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") open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) 317.687283ms ago: executing program 6 (id=435): syz_mount_image$xfs(&(0x7f000000c740), &(0x7f000000c780)='./file0\x00', 0x0, &(0x7f000000c7c0), 0x1, 0xc704, &(0x7f000000c800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000081"], 0x0) 0s ago: executing program 4 (id=436): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000007c0)={0x8, &(0x7f0000000800)=[{0x2, 0xff, 0x5, 0x1e4f6f12}, {0x400, 0x2, 0x90, 0x66b7}, {0x0, 0x7f, 0x6, 0x1d52}, {0x2, 0x1, 0x5, 0x7fffffff}, {0x3, 0x2, 0x3, 0x6e57}, {0x8, 0x2, 0x6, 0x3}, {0x4, 0x0, 0x80, 0x9}, {0x77, 0x4, 0x9a, 0x9}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x48) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) close(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./bus\x00', 0x2200804, &(0x7f0000000880)=ANY=[@ANYBLOB="74696d655f6f66667365743d30783030303030303030303030362c6e616d65636173653d31ac7379735f74a62c757466382c6f6e74696e75652c006bb27274cb82338169949c41f039c7110cf4062ae6c9739afb00"/96], 0x3, 0x151f, &(0x7f0000001900)="$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") rename(&(0x7f0000000000)='./file0/file0\x00', 0x0) kernel console output (not intermixed with test programs): ng 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.282893][ T3063] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.519310][ T5902] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 139.529078][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.537268][ T5902] usb 5-1: Product: syz [ 139.541493][ T5902] usb 5-1: Manufacturer: syz [ 139.546333][ T5902] usb 5-1: SerialNumber: syz [ 139.601192][ T5902] usb 5-1: config 0 descriptor?? [ 139.675707][ T5902] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 139.718194][ T5902] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 139.769789][ T6391] hsr_slave_0: entered promiscuous mode [ 139.810036][ T6391] hsr_slave_1: entered promiscuous mode [ 139.817660][ T6391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.826767][ T6391] Cannot create hsr debugfs directory [ 139.857800][ T5903] usb 4-1: USB disconnect, device number 3 [ 140.525515][ T5902] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 140.609120][ T5902] em28xx 5-1:0.0: Config register raw data: 0x56 [ 141.238829][ T6391] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 141.301709][ T6610] loop0: detected capacity change from 0 to 32768 [ 141.396233][ T6391] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 141.412790][ T5847] usb 3-1: USB disconnect, device number 2 [ 141.464646][ T5902] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 141.496548][ T5902] em28xx 5-1:0.0: No AC97 audio processor [ 141.533630][ T6391] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 141.539589][ T5902] usb 5-1: USB disconnect, device number 3 [ 141.544964][ T6633] loop3: detected capacity change from 0 to 256 [ 141.547518][ T5902] em28xx 5-1:0.0: Disconnecting em28xx [ 141.599247][ T6391] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 141.629693][ T5902] em28xx 5-1:0.0: Freeing device [ 142.506794][ T6610] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=gzip,reconstruct_alloc,no_data_io [ 142.575195][ T6610] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 142.621780][ T6610] bcachefs (loop0): Version upgrade required: [ 142.621780][ T6610] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 142.621780][ T6610] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 142.621780][ T6610] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 142.745698][ T6391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.806272][ T6391] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.846505][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.853776][ T6161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.938027][ T6610] bcachefs (loop0): dropping and reconstructing all alloc info [ 142.952289][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.959529][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.038766][ T6663] loop2: detected capacity change from 0 to 1024 [ 143.042892][ T6665] loop3: detected capacity change from 0 to 256 [ 143.066875][ T6610] bcachefs (loop0): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 143.114939][ T6610] bcachefs (loop0): bch2_fs_recovery(): error EINTR [ 143.156141][ T6610] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 143.270300][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 143.271080][ T6610] bcachefs (loop0): shutting down [ 143.456902][ T6669] loop5: detected capacity change from 0 to 1024 [ 143.928169][ T6610] bcachefs (loop0): shutdown complete [ 144.761932][ T6679] loop4: detected capacity change from 0 to 64 [ 145.933088][ T3538] hfsplus: b-tree write err: -5, ino 3 [ 146.537738][ T6391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.821269][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.829054][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.836700][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.844354][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.852062][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.859820][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.867511][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.875285][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.882804][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.891668][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.900271][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.908276][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.917439][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.941042][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.948804][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.956430][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.964039][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.971541][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.979305][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.987374][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.995716][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.004199][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.011670][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.019593][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.027124][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.034637][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.042080][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.049766][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.057266][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.065084][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.072634][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.080706][ T5902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 147.237941][ T5902] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.321778][ T6707] kernel read not supported for file /eth0 (pid: 6707 comm: syz.3.172) [ 147.339741][ T29] audit: type=1800 audit(1732046016.325:12): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.172" name="eth0" dev="mqueue" ino=10794 res=0 errno=0 [ 147.483349][ T5903] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 147.613422][ T3063] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 147.679176][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 147.687818][ T6391] veth0_vlan: entered promiscuous mode [ 147.704098][ T5903] usb 6-1: config 0 has no interfaces? [ 147.710808][ T5903] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 147.760504][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.771176][ T6391] veth1_vlan: entered promiscuous mode [ 147.808838][ T6391] veth0_macvtap: entered promiscuous mode [ 147.820443][ T6391] veth1_macvtap: entered promiscuous mode [ 147.839936][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.850718][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.854971][ T5903] usb 6-1: config 0 descriptor?? [ 147.860600][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.876563][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.886712][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.897956][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.908514][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.919386][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.930410][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.942121][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.955404][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.988378][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.004511][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.023673][ T3063] usb 3-1: config 0 has no interfaces? [ 148.029330][ T3063] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 148.047047][ T3063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.073273][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.086275][ T3063] usb 3-1: config 0 descriptor?? [ 148.113247][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.149247][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.173248][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.193453][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.213559][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.233985][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.258183][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.283074][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.329999][ T5903] usb 6-1: USB disconnect, device number 7 [ 148.382690][ T6391] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.402217][ T6391] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.438843][ T6391] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.463371][ T6391] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.805053][ T6161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.888120][ T6161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.108282][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.130092][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.390471][ T5899] usb 3-1: USB disconnect, device number 3 [ 149.427361][ T6746] loop4: detected capacity change from 0 to 1024 [ 150.564059][ T6610] bcachefs: bch2_fs_get_tree() error: EINTR [ 151.434035][ T5899] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 151.600623][ T6749] loop6: detected capacity change from 0 to 32768 [ 151.633387][ T5921] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.633601][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 151.686247][ T1136] hfsplus: b-tree write err: -5, ino 4 [ 151.698608][ T6749] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 151.725920][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.764034][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 151.805257][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 151.817490][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 151.835494][ T5921] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 151.846938][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 151.846985][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 151.865435][ T5899] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 151.920871][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 151.940009][ T6749] XFS (loop6): Ending clean mount [ 151.956406][ T5899] usb 6-1: Product: syz [ 151.960682][ T5899] usb 6-1: Manufacturer: syz [ 151.987662][ T5899] usb 6-1: SerialNumber: syz [ 152.014977][ T5899] usb 6-1: config 0 descriptor?? [ 152.062652][ T6749] XFS (loop6): Quotacheck needed: Please wait. [ 152.187618][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.199036][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.209328][ T5921] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.235150][ T5899] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 152.239964][ T5921] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.307303][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.807384][ T6749] XFS (loop6): Quotacheck: Done. [ 152.884728][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 153.022472][ T5899] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 153.081140][ T5899] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 153.089321][ T5899] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 153.102926][ T5899] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 153.131319][ T5899] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 153.161412][ T5921] usb 3-1: GET_CAPABILITIES returned 0 [ 153.177542][ T5921] usbtmc 3-1:16.0: can't read capabilities [ 153.206876][ T6391] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 153.899239][ T5902] usb 3-1: USB disconnect, device number 4 [ 153.947123][ T5899] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 154.081709][ T5899] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 154.179738][ T6805] loop4: detected capacity change from 0 to 128 [ 154.222870][ T5899] usb 6-1: USB disconnect, device number 8 [ 154.297349][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.305776][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.313876][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.321475][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.329374][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.337214][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.345488][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.350736][ T6805] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.392974][ T6805] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.423548][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.453032][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.485818][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.509552][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.552246][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.581148][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.591332][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.627633][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.643511][ T3063] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.666787][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.698418][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.748058][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.763712][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.771218][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.808978][ T5841] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.825456][ T3063] usb 1-1: config 0 has no interfaces? [ 154.831068][ T3063] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 154.835679][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.874713][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.897682][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.900863][ T3063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.926442][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.938571][ T6827] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 154.945651][ T6827] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.974787][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 155.053901][ T3063] usb 1-1: config 0 descriptor?? [ 155.083317][ T5903] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 155.166367][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 155.192826][ T6827] vhci_hcd vhci_hcd.0: Device attached [ 155.446590][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 155.468984][ T3063] usb 1-1: USB disconnect, device number 5 [ 155.475244][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 155.475281][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 155.632284][ T6828] vhci_hcd: connection closed [ 155.705050][ T3538] vhci_hcd: stop threads [ 155.717620][ T5903] usb 7-1: config 0 has no interfaces? [ 155.723810][ T5903] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 155.743700][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 155.751401][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 155.759001][ T3538] vhci_hcd: release socket [ 155.763649][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.772766][ T3538] vhci_hcd: disconnect device [ 155.784345][ T5903] usb 7-1: config 0 descriptor?? [ 155.791705][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 155.805179][ T5921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 155.821621][ T5921] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.067973][ T5921] usb 7-1: USB disconnect, device number 2 [ 156.229621][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 157.635260][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.210'. [ 157.899582][ T6836] loop3: detected capacity change from 0 to 32768 [ 157.929319][ T6885] loop4: detected capacity change from 0 to 256 [ 158.303952][ T6896] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 158.310633][ T6896] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.372972][ T6896] vhci_hcd vhci_hcd.0: Device attached [ 158.481405][ T6885] syz.4.215: attempt to access beyond end of device [ 158.481405][ T6885] loop4: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 158.541437][ T6897] vhci_hcd: connection closed [ 158.550878][ T6836] JBD2: Ignoring recovery information on journal [ 158.565698][ T35] vhci_hcd: stop threads [ 158.569998][ T35] vhci_hcd: release socket [ 158.592106][ T35] vhci_hcd: disconnect device [ 158.625700][ T6876] loop5: detected capacity change from 0 to 64 [ 158.685076][ T5847] vhci_hcd: vhci_device speed not set [ 159.048234][ T6836] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 159.332585][ T6911] loop4: detected capacity change from 0 to 256 [ 159.378475][ T5853] ocfs2: Unmounting device (7,3) on (node local) [ 159.480892][ T6911] FAT-fs (loop4): Directory bread(block 64) failed [ 159.587484][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.595169][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.602615][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.620610][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.650943][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.660630][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.668579][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.676791][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.684672][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.694621][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.702073][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.752254][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.814416][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.844401][ T6911] FAT-fs (loop4): Directory bread(block 65) failed [ 159.861174][ T6911] FAT-fs (loop4): Directory bread(block 66) failed [ 159.872076][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.879661][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.884434][ T6911] FAT-fs (loop4): Directory bread(block 67) failed [ 159.887400][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.902221][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.910879][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.918469][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.926001][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.933504][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.941017][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.941050][ T6911] FAT-fs (loop4): Directory bread(block 68) failed [ 159.948708][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.948753][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.948779][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.948804][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.948830][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.948857][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.948883][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.948910][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.948936][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 159.948962][ T3063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 160.067946][ T3063] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.143365][ T5899] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.151498][ T5902] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 160.250372][ T6911] FAT-fs (loop4): Directory bread(block 69) failed [ 160.276714][ T6911] FAT-fs (loop4): Directory bread(block 70) failed [ 160.291374][ T6911] FAT-fs (loop4): Directory bread(block 71) failed [ 160.300207][ T6911] FAT-fs (loop4): Directory bread(block 72) failed [ 160.314707][ T6911] FAT-fs (loop4): Directory bread(block 73) failed [ 160.407078][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 160.416546][ T5902] usb 7-1: config 0 has no interfaces? [ 160.422186][ T5902] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 160.691586][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.716764][ T5899] usb 3-1: config 0 has no interfaces? [ 160.722345][ T5899] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 160.731530][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.321401][ T5902] usb 7-1: config 0 descriptor?? [ 161.330511][ T5899] usb 3-1: config 0 descriptor?? [ 161.556292][ T5847] usb 7-1: USB disconnect, device number 3 [ 161.673788][ T1194] usb 3-1: USB disconnect, device number 5 [ 161.708229][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.883411][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 161.897819][ T5921] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.926043][ T5921] usb 5-1: config 1 interface 0 has no altsetting 0 [ 161.975736][ T5921] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.991946][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.000987][ T5921] usb 5-1: Product: syz [ 162.015803][ T5921] usb 5-1: Manufacturer: syz [ 162.038907][ T5921] usb 5-1: SerialNumber: syz [ 162.119940][ T6933] loop3: detected capacity change from 0 to 32768 [ 162.139549][ T6933] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.225 (6933) [ 162.311395][ T5921] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 8 proto 1 vid 0x0525 pid 0xA4A8 [ 162.349180][ T5921] usb 5-1: USB disconnect, device number 4 [ 162.404306][ T5921] usblp0: removed [ 162.639854][ T6949] loop6: detected capacity change from 0 to 512 [ 162.667898][ T6949] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 162.711927][ T6949] EXT4-fs (loop6): invalid journal inode [ 162.738664][ T6949] EXT4-fs (loop6): can't get journal size [ 162.879696][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 162.986476][ T6949] EXT4-fs (loop6): 1 truncate cleaned up [ 162.992939][ T6949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.009329][ T6933] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.032918][ T6933] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 163.087916][ T6933] BTRFS info (device loop3): using free-space-tree [ 163.314714][ T6966] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 163.321304][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.356102][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 163.368908][ T6967] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 163.379379][ T1136] vhci_hcd: stop threads [ 163.387032][ T1136] vhci_hcd: release socket [ 163.391500][ T1136] vhci_hcd: disconnect device [ 163.406230][ T6391] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.645811][ T6933] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 163.648596][ T6933] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 163.705551][ T6933] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 163.765094][ T6933] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 163.774512][ T6933] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 163.784557][ T6933] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 163.794161][ T6933] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 163.804382][ T6933] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 163.814556][ T6933] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 163.824625][ T6933] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 163.836606][ T6933] BTRFS error (device loop3): open_ctree failed [ 164.301715][ T6996] loop2: detected capacity change from 0 to 256 [ 164.615741][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 165.263410][ T5847] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 165.470659][ T5847] usb 7-1: Using ep0 maxpacket: 8 [ 165.482034][ T5847] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.494793][ T5847] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 165.506595][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 165.518029][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 165.531138][ T5847] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 165.571904][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.579785][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.587737][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.595523][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.602931][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.611068][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.618908][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.626790][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.634953][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.642353][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.650647][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.658548][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.666745][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.674446][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.681862][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.689632][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.697472][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.705414][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.712926][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.722093][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.730705][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.739135][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.747117][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.754944][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.762350][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.770241][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.778262][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.786088][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.793676][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.801169][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.808952][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.816810][ T5921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 165.893395][ T5921] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.911439][ T5847] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 165.920935][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 165.929841][ T5847] usb 7-1: Product: syz [ 165.938481][ T5847] usb 7-1: Manufacturer: syz [ 165.944197][ T5847] usb 7-1: SerialNumber: syz [ 165.951304][ T5847] usb 7-1: config 0 descriptor?? [ 165.962081][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 166.078032][ T7017] loop2: detected capacity change from 0 to 512 [ 166.091040][ T7017] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 166.113407][ T7017] EXT4-fs (loop2): invalid journal inode [ 166.120782][ T7017] EXT4-fs (loop2): can't get journal size [ 166.133390][ T5902] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.144386][ T7017] EXT4-fs (loop2): 1 truncate cleaned up [ 166.151497][ T7017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.243035][ T5847] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 166.250151][ T5847] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 166.330809][ T5902] usb 5-1: config 0 has no interfaces? [ 166.389104][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.408054][ T5902] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 166.439212][ T5847] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 166.483573][ T5847] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 166.511142][ T5847] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 166.517473][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.635416][ T5847] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 166.692822][ T5902] usb 5-1: config 0 descriptor?? [ 167.399061][ T5921] usb 5-1: USB disconnect, device number 5 [ 167.853397][ T5847] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 167.862299][ T5847] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 167.892654][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 167.950789][ T5847] usb 7-1: USB disconnect, device number 4 [ 168.433618][ T5921] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 168.600685][ T5921] usb 3-1: config 0 has no interfaces? [ 168.616111][ T5921] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.661938][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.729629][ T5921] usb 3-1: config 0 descriptor?? [ 168.948742][ T5921] usb 3-1: USB disconnect, device number 6 [ 169.283464][ T5847] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 169.458515][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.521298][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.583912][ T5847] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 169.593038][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.697179][ T5847] usb 5-1: config 0 descriptor?? [ 169.738595][ T7059] loop2: detected capacity change from 0 to 256 [ 169.760751][ T7052] loop3: detected capacity change from 0 to 40427 [ 170.009233][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 170.325557][ T7052] F2FS-fs (loop3): invalid crc value [ 170.362756][ T7063] netlink: 40 bytes leftover after parsing attributes in process `syz.6.258'. [ 170.432652][ T7052] F2FS-fs (loop3): Found nat_bits in checkpoint [ 170.661941][ T7052] F2FS-fs (loop3): Start checkpoint disabled! [ 170.690339][ T7052] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 171.646967][ T5847] usbhid 5-1:0.0: can't add hid device: -71 [ 171.655080][ T5847] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 171.674859][ T5847] usb 5-1: USB disconnect, device number 6 [ 171.730466][ T29] audit: type=1800 audit(1732046040.715:13): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.254" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 171.819379][ T7073] overlay: Bad value for 'upperdir' [ 171.853748][ T29] audit: type=1800 audit(1732046040.845:14): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.254" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 171.905912][ T7052] syz.3.254: attempt to access beyond end of device [ 171.905912][ T7052] loop3: rw=2049, sector=77824, nr_sectors = 952 limit=40427 [ 172.372494][ T7074] syz.3.254: attempt to access beyond end of device [ 172.372494][ T7074] loop3: rw=2049, sector=78776, nr_sectors = 40 limit=40427 [ 172.388951][ T7074] syz.3.254: attempt to access beyond end of device [ 172.388951][ T7074] loop3: rw=2049, sector=77824, nr_sectors = 912 limit=40427 [ 172.925700][ T3538] kworker/u8:8: attempt to access beyond end of device [ 172.925700][ T3538] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 173.002509][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.013485][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.022415][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.032448][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.040541][ T5859] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 173.048507][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.098486][ T3538] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.108455][ T3538] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.270467][ T5859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.317525][ T5859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.327181][ T5859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.341886][ T5859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.349995][ T5859] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 173.358008][ T5859] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.977744][ T7107] loop2: detected capacity change from 0 to 32768 [ 174.784106][ T7088] chnl_net:caif_netlink_parms(): no params data found [ 175.217495][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.273'. [ 175.228563][ T7114] loop6: detected capacity change from 0 to 1024 [ 175.235897][ T5859] Bluetooth: hci6: command tx timeout [ 175.293140][ T7113] loop4: detected capacity change from 0 to 32768 [ 175.340833][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.273'. [ 175.499753][ T5859] Bluetooth: hci7: command tx timeout [ 176.394278][ T7114] EXT4-fs: Invalid want_extra_isize 5 [ 176.516895][ T7113] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 176.562341][ T7113] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 176.663060][ T7113] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 176.863573][ T5847] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 176.884988][ T5847] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 177.163703][ T5847] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 278ms [ 177.231604][ T5847] gfs2: fsid=syz:syz.0: jid=0: Done [ 177.254374][ T5859] Bluetooth: hci6: command tx timeout [ 177.263907][ T7113] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 177.573431][ T5859] Bluetooth: hci7: command tx timeout [ 178.563507][ T29] audit: type=1326 audit(1732046046.915:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7141 comm="syz.3.275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5efb7e759 code=0x0 [ 179.336565][ T5859] Bluetooth: hci6: command tx timeout [ 179.663561][ T5859] Bluetooth: hci7: command tx timeout [ 179.739434][ T7161] loop2: detected capacity change from 0 to 256 [ 179.753679][ T57] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 179.984520][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 180.298443][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.363254][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.413870][ T57] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 180.453644][ T5859] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 180.462350][ T5859] Bluetooth: hci4: Injecting HCI hardware error event [ 180.472642][ T5859] Bluetooth: hci4: hardware error 0x00 [ 180.503481][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.521546][ T57] usb 4-1: config 0 descriptor?? [ 180.871069][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.168547][ T57] usbhid 4-1:0.0: can't add hid device: -71 [ 181.181598][ T57] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 181.341919][ T57] usb 4-1: USB disconnect, device number 4 [ 181.416551][ T5851] Bluetooth: hci6: command tx timeout [ 181.420531][ T7172] loop2: detected capacity change from 0 to 512 [ 181.629473][ T7172] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.733351][ T5851] Bluetooth: hci7: command tx timeout [ 181.740233][ T7172] EXT4-fs (loop2): 1 truncate cleaned up [ 181.755600][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.285'. [ 181.801882][ T7172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.848153][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.730933][ T7186] EXT4-fs (loop2): resizing filesystem from 256 to 1 blocks [ 182.738425][ T7186] EXT4-fs warning (device loop2): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 182.926985][ T5859] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 183.193719][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.201604][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.473713][ T7088] bridge_slave_0: entered allmulticast mode [ 183.481073][ T7088] bridge_slave_0: entered promiscuous mode [ 183.509502][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.514639][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.527318][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.534969][ T7088] bridge_slave_1: entered allmulticast mode [ 183.542202][ T7088] bridge_slave_1: entered promiscuous mode [ 185.553969][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.624862][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.663834][ T5847] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 185.815352][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.856027][ T5847] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.865769][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.888103][ T5847] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5679, setting to 1024 [ 185.933236][ T7090] chnl_net:caif_netlink_parms(): no params data found [ 185.937004][ T5847] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 186.184283][ T5847] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.198690][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.407362][ T7208] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.481491][ T5847] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.979082][ T7088] team0: Port device team_slave_0 added [ 187.042197][ T5851] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 187.051447][ T5851] Bluetooth: hci2: Injecting HCI hardware error event [ 187.066910][ T5851] Bluetooth: hci2: hardware error 0x00 [ 187.898316][ T7088] team0: Port device team_slave_1 added [ 188.329106][ T3063] usb 3-1: USB disconnect, device number 7 [ 189.503525][ T5851] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 189.660378][ T7244] loop4: detected capacity change from 0 to 1024 [ 189.668742][ T7244] ext4: Unknown parameter 'fowner<00000000000000000000' [ 189.685340][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.694911][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.756591][ T7243] loop4: detected capacity change from 0 to 128 [ 189.768504][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.800338][ T7243] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙' [ 189.933720][ T5921] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 190.018578][ T7236] loop3: detected capacity change from 0 to 32768 [ 190.031370][ T7236] [ 190.031370][ T7236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.031370][ T7236] [ 190.051157][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.067337][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.151809][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.187995][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.195723][ T7236] [ 190.195723][ T7236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.195723][ T7236] [ 190.203705][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.213521][ T7236] [ 190.213521][ T7236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.213521][ T7236] [ 190.240786][ T5921] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 190.291375][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.471085][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 190.532767][ T7236] [ 190.532767][ T7236] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.532767][ T7236] [ 190.871641][ T5921] usb 7-1: config 0 descriptor?? [ 190.971688][ T110] [ 190.971688][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.971688][ T110] [ 191.038123][ T5853] [ 191.038123][ T5853] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.038123][ T5853] [ 191.068849][ T5853] [ 191.068849][ T5853] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.068849][ T5853] [ 191.152325][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.191396][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.259535][ T7090] bridge_slave_0: entered allmulticast mode [ 191.991943][ T7090] bridge_slave_0: entered promiscuous mode [ 192.045377][ T7088] hsr_slave_0: entered promiscuous mode [ 192.058596][ T7088] hsr_slave_1: entered promiscuous mode [ 192.069277][ T7088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.877400][ T7088] Cannot create hsr debugfs directory [ 192.909246][ T5921] usbhid 7-1:0.0: can't add hid device: -71 [ 192.916982][ T5921] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 192.946097][ T5921] usb 7-1: USB disconnect, device number 5 [ 192.953955][ T35] bridge_slave_1: left allmulticast mode [ 192.959793][ T35] bridge_slave_1: left promiscuous mode [ 192.986389][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.077561][ T35] bridge_slave_0: left allmulticast mode [ 193.089477][ T35] bridge_slave_0: left promiscuous mode [ 193.115160][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.532157][ T7277] loop2: detected capacity change from 0 to 32768 [ 193.544638][ T7277] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.304 (7277) [ 193.570555][ T7277] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.581058][ T7277] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 193.591883][ T7277] BTRFS info (device loop2): using free-space-tree [ 193.876097][ T29] audit: type=1804 audit(1732046062.875:16): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.304" name="/newroot/57/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 194.169128][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.185433][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.213486][ T29] audit: type=1804 audit(1732046064.205:17): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.304" name="/newroot/57/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 195.710757][ T5855] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.899122][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.944113][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.947974][ T35] bond0 (unregistering): Released all slaves [ 195.977404][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.977493][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.977722][ T7090] bridge_slave_1: entered allmulticast mode [ 195.979025][ T7090] bridge_slave_1: entered promiscuous mode [ 196.180429][ T7307] loop3: detected capacity change from 0 to 512 [ 196.242284][ T7307] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 196.318424][ T7310] loop2: detected capacity change from 0 to 128 [ 196.320322][ T7307] EXT4-fs (loop3): invalid journal inode [ 196.320399][ T7307] EXT4-fs (loop3): can't get journal size [ 196.357938][ T7090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.426019][ T7310] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.427631][ T7310] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.442363][ T7307] EXT4-fs (loop3): 1 truncate cleaned up [ 196.444440][ T7307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.537636][ T7310] loop2: detected capacity change from 128 to 64 [ 196.592156][ T7321] syz.2.307: attempt to access beyond end of device [ 196.592156][ T7321] loop2: rw=12288, sector=72, nr_sectors = 2 limit=64 [ 196.599145][ T7321] EXT4-fs error (device loop2): ext4_get_inode_loc:4573: inode #12: block 36: comm syz.2.307: unable to read itable block [ 196.615341][ T7321] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: IO failure [ 196.618774][ T7321] EXT4-fs error (device loop2): ext4_write_end:1328: inode #12: comm syz.2.307: mark_inode_dirty error [ 196.830101][ T5855] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 196.949140][ T5855] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz-executor: mark_inode_dirty error [ 197.069766][ T7090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.117189][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.459966][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 197.467210][ T7342] loop3: detected capacity change from 0 to 1024 [ 197.513908][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 197.518516][ T7346] syz.4.312 uses obsolete (PF_INET,SOCK_PACKET) [ 197.536441][ T7342] ext4: Unknown parameter 'fowner<00000000000000000000' [ 197.536564][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 197.537527][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 197.541654][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 197.606303][ T7342] loop3: detected capacity change from 0 to 128 [ 197.606889][ T7342] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙' [ 197.960536][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 198.490290][ T7090] team0: Port device team_slave_0 added [ 198.617566][ T7090] team0: Port device team_slave_1 added [ 198.823271][ T35] hsr_slave_0: left promiscuous mode [ 198.837913][ T35] hsr_slave_1: left promiscuous mode [ 198.853338][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.853437][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.875485][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.875538][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.921634][ T35] veth1_macvtap: left promiscuous mode [ 198.921748][ T35] veth0_macvtap: left promiscuous mode [ 198.921894][ T35] veth1_vlan: left promiscuous mode [ 198.921997][ T35] veth0_vlan: left promiscuous mode [ 201.547638][ T35] team0 (unregistering): Port device team_slave_1 removed [ 201.554201][ T7375] Zero length message leads to an empty skb [ 201.612002][ T6581] EXT4-fs error: 1537 callbacks suppressed [ 201.612031][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 201.628882][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 201.646173][ T35] team0 (unregistering): Port device team_slave_0 removed [ 201.650182][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 201.680724][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 201.694434][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 201.730439][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 201.748364][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 201.771577][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 201.791968][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 201.813500][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 202.756345][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.786021][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.889913][ T7090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.916156][ T7380] 9pnet_fd: Insufficient options for proto=fd [ 202.927600][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.936646][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.992197][ T7384] loop6: detected capacity change from 0 to 512 [ 203.004742][ T7090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.035203][ T7384] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 203.062689][ T7384] EXT4-fs (loop6): invalid journal inode [ 203.081617][ T7384] EXT4-fs (loop6): can't get journal size [ 203.170206][ T7384] EXT4-fs (loop6): 1 truncate cleaned up [ 203.217774][ T7384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.410328][ T6391] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.451212][ T7090] hsr_slave_0: entered promiscuous mode [ 203.466262][ T7090] hsr_slave_1: entered promiscuous mode [ 203.483620][ T7090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.491404][ T7090] Cannot create hsr debugfs directory [ 204.046672][ T7088] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 204.107221][ T7088] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 204.151280][ T7088] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 204.551015][ T7405] loop6: detected capacity change from 0 to 32768 [ 204.660205][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.703981][ T57] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 204.722275][ T7088] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.774372][ T7405] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 204.883718][ T7090] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 204.891773][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 204.900668][ T57] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.911464][ T57] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.918955][ T57] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 204.928578][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.184500][ T57] usb 4-1: config 0 descriptor?? [ 205.225332][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.296545][ T7090] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 205.491701][ T7421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.574473][ T7421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.672640][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.766968][ T7090] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 205.859543][ T57] usbhid 4-1:0.0: can't add hid device: -71 [ 205.870005][ T57] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 205.887262][ T57] usb 4-1: USB disconnect, device number 5 [ 205.954543][ T6391] ocfs2: Unmounting device (7,6) on (node local) [ 206.006559][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.045720][ T7090] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 206.470668][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.203833][ T7426] loop4: detected capacity change from 0 to 32768 [ 207.244254][ T6581] EXT4-fs error: 1562 callbacks suppressed [ 207.244273][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 207.283566][ T7426] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.328 (7426) [ 207.341332][ T7090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.395922][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.434319][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 207.459611][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 207.469845][ T7426] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 207.483126][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 207.499552][ T7426] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 207.531182][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 207.544532][ T7426] BTRFS info (device loop4): using free-space-tree [ 207.581579][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 207.636473][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 207.646848][ T7426] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 207.650583][ T7426] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 207.710159][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.734846][ T7426] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 207.735245][ T7426] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 207.751231][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 207.802070][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 207.881166][ T7426] BTRFS error (device loop4): open_ctree failed [ 207.902582][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 207.925020][ T5921] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 207.971077][ T7090] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.068098][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.075433][ T6161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.138031][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 208.157779][ T5921] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.175358][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.182646][ T6161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.193639][ T5921] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 208.222529][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 208.275100][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.275209][ T6161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.314544][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 208.327033][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.334238][ T6161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.356019][ T5921] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 208.415083][ T5921] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 208.480380][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 208.518830][ T5921] usb 7-1: Product: syz [ 208.551241][ T5921] usb 7-1: Manufacturer: syz [ 208.571377][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.594579][ T5921] usb 7-1: SerialNumber: syz [ 208.611687][ T5921] usb 7-1: config 0 descriptor?? [ 208.629950][ T7480] loop3: detected capacity change from 0 to 1024 [ 208.676849][ T7480] ext4: Unknown parameter 'fowner<00000000000000000000' [ 208.809206][ T7480] loop3: detected capacity change from 0 to 128 [ 208.835432][ T7480] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙' [ 208.902922][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.936268][ T5921] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 208.944758][ T5921] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 209.286047][ T5921] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 209.304445][ T5921] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 209.320711][ T5921] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 209.438724][ T5921] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 209.803922][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.537122][ T35] bridge_slave_1: left allmulticast mode [ 210.542915][ T35] bridge_slave_1: left promiscuous mode [ 210.634155][ T7490] loop4: detected capacity change from 0 to 4096 [ 210.641215][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.672354][ T7490] ntfs3: Unknown parameter '00000000000000000000003' [ 210.806072][ T35] bridge_slave_0: left allmulticast mode [ 210.811897][ T35] bridge_slave_0: left promiscuous mode [ 210.861953][ T5921] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 210.873671][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.100023][ T5921] usb 7-1: USB disconnect, device number 6 [ 211.716523][ T35] bridge_slave_1: left allmulticast mode [ 211.722318][ T35] bridge_slave_1: left promiscuous mode [ 211.767353][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.880980][ T35] bridge_slave_0: left allmulticast mode [ 211.887017][ T35] bridge_slave_0: left promiscuous mode [ 211.893218][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.265128][ T6581] EXT4-fs error: 742 callbacks suppressed [ 212.265159][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 212.333970][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 212.437510][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 212.953975][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 213.047571][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 213.132598][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 213.148041][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 213.172303][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 213.228882][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 213.278585][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 213.625845][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.832677][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.846458][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.860166][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.879010][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.900534][ T5859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.912129][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.358985][ T7521] loop3: detected capacity change from 0 to 40427 [ 214.395847][ T7521] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 214.422802][ T7521] F2FS-fs (loop3): invalid crc value [ 214.580777][ T7521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 214.656752][ T7521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 215.154168][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.210368][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.249302][ T35] bond0 (unregistering): Released all slaves [ 215.374198][ T7538] loop3: detected capacity change from 0 to 512 [ 215.391840][ T7538] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 215.439139][ T7538] EXT4-fs (loop3): invalid journal inode [ 215.470781][ T7538] EXT4-fs (loop3): can't get journal size [ 215.537777][ T7538] EXT4-fs (loop3): 1 truncate cleaned up [ 215.552113][ T7538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.878777][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.902313][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.920066][ T35] bond0 (unregistering): Released all slaves [ 215.976941][ T5851] Bluetooth: hci1: command tx timeout [ 216.169728][ T7090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.202370][ T7544] loop4: detected capacity change from 0 to 1024 [ 216.226752][ T7544] ext4: Unknown parameter 'fowner<00000000000000000000' [ 216.338072][ T7544] loop4: detected capacity change from 0 to 128 [ 216.367759][ T7544] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙' [ 216.611804][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.652949][ T6581] EXT4-fs error: 1866 callbacks suppressed [ 217.652976][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 217.780863][ T7554] loop6: detected capacity change from 0 to 40427 [ 217.792247][ T7554] F2FS-fs (loop6): Unrecognized mount option "io_bits=00000000000536870917" or missing value [ 217.944771][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 217.984028][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 218.053267][ T5851] Bluetooth: hci1: command tx timeout [ 218.115982][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 218.197903][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 218.253826][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.290721][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 218.353671][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 218.463390][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 218.605194][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 218.673762][ T7565] loop6: detected capacity change from 0 to 128 [ 218.739806][ T7565] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 218.831618][ T7565] sysv_free_block: trying to free block not in datazone [ 218.864674][ T7565] sysv_free_block: trying to free block not in datazone [ 218.909128][ T7565] sysv_free_block: trying to free block not in datazone [ 218.915188][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 218.930371][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.961158][ T7565] sysv_free_block: getblk() failed [ 218.993878][ T7565] sysv_free_block: getblk() failed [ 219.024323][ T7565] sysv_free_block: getblk() failed [ 219.029604][ T7565] sysv_free_block: getblk() failed [ 219.053512][ T7565] sysv_free_block: getblk() failed [ 219.089160][ T7565] sysv_free_block: getblk() failed [ 219.095939][ T7565] sysv_free_block: getblk() failed [ 219.101351][ T7565] sysv_free_block: getblk() failed [ 219.110691][ T7568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.351'. [ 219.154144][ T7565] sysv_free_block: getblk() failed [ 219.159537][ T7565] sysv_free_block: getblk() failed [ 219.207104][ T7565] sysv_free_block: getblk() failed [ 219.274705][ T7565] sysv_free_block: getblk() failed [ 219.280299][ T7565] sysv_free_block: getblk() failed [ 219.329727][ T7565] sysv_free_block: getblk() failed [ 219.368896][ T7585] loop3: detected capacity change from 0 to 512 [ 219.395493][ T7585] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 219.423469][ T7565] sysv_free_block: getblk() failed [ 219.428956][ T7565] sysv_free_block: getblk() failed [ 219.435042][ T7565] sysv_free_block: getblk() failed [ 219.440562][ T7565] sysv_free_block: getblk() failed [ 219.445982][ T7585] UDF-fs: Scanning with blocksize 512 failed [ 219.459671][ T7565] sysv_free_block: getblk() failed [ 219.465235][ T7565] sysv_free_block: getblk() failed [ 219.470583][ T7565] sysv_free_block: getblk() failed [ 219.476014][ T7565] sysv_free_block: getblk() failed [ 219.481302][ T7565] sysv_free_block: getblk() failed [ 219.491413][ T7565] sysv_free_block: getblk() failed [ 219.497298][ T7565] sysv_free_block: getblk() failed [ 219.502704][ T7565] sysv_free_block: getblk() failed [ 219.511709][ T7565] sysv_free_block: getblk() failed [ 219.543564][ T7565] sysv_free_block: getblk() failed [ 219.551418][ T7565] sysv_free_block: getblk() failed [ 219.552109][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 219.557354][ T7565] sysv_free_block: getblk() failed [ 219.569939][ T7585] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 219.600071][ T7565] sysv_free_block: getblk() failed [ 219.603417][ T7585] UDF-fs: Scanning with blocksize 1024 failed [ 219.612766][ T7565] sysv_free_block: getblk() failed [ 219.619001][ T7565] sysv_free_block: getblk() failed [ 219.625792][ T7585] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 219.636400][ T7585] UDF-fs: Scanning with blocksize 2048 failed [ 219.639461][ T7565] sysv_free_block: getblk() failed [ 219.691487][ T7565] sysv_free_block: getblk() failed [ 219.719268][ T7585] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 219.720406][ T7565] sysv_free_block: getblk() failed [ 219.745349][ T7565] sysv_free_block: getblk() failed [ 219.883300][ T7565] sysv_free_block: trying to free block not in datazone [ 219.911503][ T7565] sysv_free_block: trying to free block not in datazone [ 219.918992][ T7585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.935970][ T7565] sysv_free_block: trying to free block not in datazone [ 219.950158][ T7565] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 220.133359][ T5851] Bluetooth: hci1: command tx timeout [ 220.221642][ T7088] veth0_vlan: entered promiscuous mode [ 220.485474][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.495261][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.502910][ T7532] bridge_slave_0: entered allmulticast mode [ 220.514516][ T7598] loop4: detected capacity change from 0 to 40427 [ 220.523933][ T7598] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 220.546924][ T7532] bridge_slave_0: entered promiscuous mode [ 220.550472][ T7598] F2FS-fs (loop4): invalid crc value [ 220.609863][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.635221][ T7598] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.649759][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.676558][ T7532] bridge_slave_1: entered allmulticast mode [ 220.694923][ T7532] bridge_slave_1: entered promiscuous mode [ 220.726621][ T7088] veth1_vlan: entered promiscuous mode [ 220.757309][ T7088] veth0_macvtap: entered promiscuous mode [ 220.767816][ T7088] veth1_macvtap: entered promiscuous mode [ 220.785476][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.799072][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.809606][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.820318][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.830542][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.841467][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.851433][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.862292][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.872805][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.883645][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.897310][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.907811][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.918450][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.928641][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.940501][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.950780][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.961559][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.972001][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.982799][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.992908][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.003603][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.015528][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.027543][ T7088] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.036416][ T7088] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.045465][ T7088] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.054724][ T7088] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.142112][ T7598] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 221.762197][ T35] hsr_slave_0: left promiscuous mode [ 222.113737][ T35] hsr_slave_1: left promiscuous mode [ 222.142574][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.171796][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.210093][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.223773][ T5851] Bluetooth: hci1: command tx timeout [ 222.242927][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.303358][ T35] hsr_slave_0: left promiscuous mode [ 222.319385][ T35] hsr_slave_1: left promiscuous mode [ 222.373062][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.381861][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.675243][ T6581] EXT4-fs error: 654 callbacks suppressed [ 222.675321][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 222.684145][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.692840][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 222.733838][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 222.744448][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 222.774843][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 222.783529][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.849155][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 222.935628][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 223.008481][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 223.052600][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 223.069827][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 223.120559][ T35] veth1_macvtap: left promiscuous mode [ 223.168260][ T35] veth0_macvtap: left promiscuous mode [ 223.253744][ T35] veth1_vlan: left promiscuous mode [ 223.259201][ T35] veth0_vlan: left promiscuous mode [ 223.285663][ T35] veth1_macvtap: left promiscuous mode [ 223.291421][ T35] veth0_macvtap: left promiscuous mode [ 223.307350][ T35] veth1_vlan: left promiscuous mode [ 223.338290][ T35] veth0_vlan: left promiscuous mode [ 223.702964][ T7621] loop3: detected capacity change from 0 to 256 [ 224.099464][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 225.176376][ T5851] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 225.186460][ T5851] Bluetooth: hci0: Injecting HCI hardware error event [ 225.208894][ T5859] Bluetooth: hci0: hardware error 0x00 [ 226.445195][ T35] team0 (unregistering): Port device team_slave_1 removed [ 226.579562][ T35] team0 (unregistering): Port device team_slave_0 removed [ 227.353095][ T5859] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 227.686948][ T6581] EXT4-fs error: 2054 callbacks suppressed [ 227.686969][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 227.703063][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 227.716777][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 227.726917][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 227.746293][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 227.766353][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 227.780167][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 227.803249][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 227.816443][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 227.835235][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 228.810054][ T35] team0 (unregistering): Port device team_slave_1 removed [ 228.906411][ T35] team0 (unregistering): Port device team_slave_0 removed [ 230.090752][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.104081][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.235188][ T7619] ip_vti0: entered promiscuous mode [ 230.255908][ T7619] vlan2: entered promiscuous mode [ 230.265069][ T7619] ip_vti0: left promiscuous mode [ 230.303824][ T7090] veth0_vlan: entered promiscuous mode [ 230.317935][ T7090] veth1_vlan: entered promiscuous mode [ 230.612895][ T7636] loop4: detected capacity change from 0 to 512 [ 230.646242][ T7636] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 230.667845][ T7636] EXT4-fs (loop4): invalid journal inode [ 230.677469][ T7636] EXT4-fs (loop4): can't get journal size [ 230.711645][ T7636] EXT4-fs (loop4): 1 truncate cleaned up [ 230.729829][ T7636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.798205][ T7532] team0: Port device team_slave_0 added [ 230.860456][ T7532] team0: Port device team_slave_1 added [ 231.054142][ T7631] loop3: detected capacity change from 0 to 32768 [ 231.162816][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.251471][ T7613] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 231.258003][ T7613] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 231.360782][ T7090] veth0_macvtap: entered promiscuous mode [ 231.419961][ T7649] loop4: detected capacity change from 0 to 512 [ 231.427018][ T7631] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 231.430779][ T7649] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 231.468719][ T7613] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 231.475147][ T7613] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 231.559376][ T7649] EXT4-fs (loop4): invalid journal inode [ 231.597720][ T7649] EXT4-fs (loop4): can't get journal size [ 231.642971][ T7649] EXT4-fs (loop4): 1 truncate cleaned up [ 231.660692][ T7649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.676605][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.709058][ T7613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.716062][ T7613] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 231.717817][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.717870][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.723014][ T7090] veth1_macvtap: entered promiscuous mode [ 231.816428][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.837306][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.852197][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.940771][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.973866][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.984964][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.002389][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.037922][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.062243][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.304102][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.311354][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.363246][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.388723][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.388764][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.388780][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.388799][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.388815][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.388833][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.388858][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.388876][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.390219][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.438160][ T5853] ocfs2: Unmounting device (7,3) on (node local) [ 232.658478][ T7664] loop3: detected capacity change from 0 to 1024 [ 232.659207][ T7664] ext4: Unknown parameter 'fowner<00000000000000000000' [ 232.667645][ T7664] loop3: detected capacity change from 0 to 128 [ 232.670706][ T7664] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙' [ 232.720903][ T6581] EXT4-fs error: 2726 callbacks suppressed [ 232.720928][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 232.880908][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 232.894368][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 232.909046][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 232.916150][ T7090] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.962465][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 232.989815][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 233.024174][ T7090] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.033063][ T7090] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.060247][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 233.076546][ T7090] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.154480][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 233.179276][ T7532] hsr_slave_0: entered promiscuous mode [ 233.250411][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 233.293775][ T7532] hsr_slave_1: entered promiscuous mode [ 233.373107][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 233.503361][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 234.117511][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.158240][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.173562][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.233563][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.252558][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.265551][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.278133][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.293647][ T5900] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 234.301524][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.322407][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.330837][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 234.339179][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.347212][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 234.383601][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.449946][ T7685] loop4: detected capacity change from 0 to 1024 [ 234.503294][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 234.530796][ T5900] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 234.553796][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 234.564604][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.575140][ T5900] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.589572][ T5900] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.599117][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.862098][ T5900] usb 4-1: GET_CAPABILITIES returned 0 [ 234.868982][ T5900] usbtmc 4-1:16.0: can't read capabilities [ 234.928596][ T7669] loop6: detected capacity change from 0 to 40427 [ 234.956619][ T7669] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1fffff [ 235.075853][ T7669] F2FS-fs (loop6): invalid crc value [ 235.128290][ T7669] F2FS-fs (loop6): Found nat_bits in checkpoint [ 235.142185][ T1194] usb 4-1: USB disconnect, device number 6 [ 235.259495][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.834094][ T7669] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 235.997526][ T6161] hfsplus: b-tree write err: -5, ino 4 [ 236.001139][ T6391] syz-executor: attempt to access beyond end of device [ 236.001139][ T6391] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.076176][ T6391] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 236.077285][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.198038][ T7703] ip_vti0: entered promiscuous mode [ 236.211653][ T7703] vlan2: entered promiscuous mode [ 236.266005][ T7703] ip_vti0: left promiscuous mode [ 236.292313][ T7705] loop4: detected capacity change from 0 to 256 [ 236.457892][ T5851] Bluetooth: hci5: command tx timeout [ 236.537554][ T5851] Bluetooth: hci3: command tx timeout [ 236.761270][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.172509][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.199923][ T7711] loop4: detected capacity change from 0 to 1024 [ 237.532513][ T7678] chnl_net:caif_netlink_parms(): no params data found [ 237.869659][ T7724] hfsplus: xattr searching failed [ 238.059450][ T6581] EXT4-fs error: 602 callbacks suppressed [ 238.059478][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 238.408468][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 238.466409][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.473709][ T953] hfsplus: b-tree write err: -5, ino 3 [ 238.516766][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 238.526610][ T7532] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 238.533581][ T5851] Bluetooth: hci5: command tx timeout [ 238.576361][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 238.613597][ T5851] Bluetooth: hci3: command tx timeout [ 238.632051][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 238.710837][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 238.723926][ T7532] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 238.729799][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 238.742579][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 238.814566][ T7532] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 238.827933][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 238.843889][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 238.896279][ T7532] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 238.963696][ T7730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.066554][ T7730] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 239.867258][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.910360][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.959288][ T7678] bridge_slave_0: entered allmulticast mode [ 240.016336][ T7678] bridge_slave_0: entered promiscuous mode [ 240.036851][ T7730] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 240.045054][ T7730] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 240.081281][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.103917][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.111383][ T7678] bridge_slave_1: entered allmulticast mode [ 240.144609][ T7757] loop6: detected capacity change from 0 to 256 [ 240.185909][ T7678] bridge_slave_1: entered promiscuous mode [ 240.505107][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.085237][ T7681] chnl_net:caif_netlink_parms(): no params data found [ 241.214671][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.230731][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.523569][ T7767] loop6: detected capacity change from 0 to 512 [ 241.547449][ T7767] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 241.661334][ T7767] EXT4-fs (loop6): 1 truncate cleaned up [ 241.668969][ T7767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.018014][ T7766] EXT4-fs (loop6): resizing filesystem from 256 to 1 blocks [ 242.025565][ T7766] EXT4-fs warning (device loop6): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 243.148111][ T6581] EXT4-fs error: 626 callbacks suppressed [ 243.148141][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 243.217016][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 243.324348][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 243.342374][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 243.378438][ T7782] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 243.385163][ T7782] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.394224][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 243.411810][ T7782] vhci_hcd vhci_hcd.0: Device attached [ 243.424349][ T7678] team0: Port device team_slave_0 added [ 243.434298][ T7678] team0: Port device team_slave_1 added [ 243.451009][ T6391] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.453647][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 243.460995][ T5902] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 243.501071][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 243.605011][ T8] vhci_hcd: vhci_device speed not set [ 243.613365][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 243.642633][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 243.654025][ T5902] usb 4-1: device descriptor read/64, error -71 [ 243.661097][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 243.673450][ T8] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 243.738267][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.619644][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.653542][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.680513][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.691269][ T5902] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 244.832227][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.843419][ T5902] usb 4-1: device descriptor read/64, error -71 [ 244.867465][ T7808] loop6: detected capacity change from 0 to 256 [ 244.879810][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.902202][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.955220][ T5902] usb usb4-port1: attempt power cycle [ 244.998322][ T7681] bridge_slave_0: entered allmulticast mode [ 245.086629][ T7681] bridge_slave_0: entered promiscuous mode [ 245.131485][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 245.306451][ T5902] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 245.346412][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.425001][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.669558][ T5902] usb 4-1: device descriptor read/8, error -71 [ 245.676219][ T7789] vhci_hcd: connection reset by peer [ 245.698369][ T71] vhci_hcd: stop threads [ 245.703009][ T71] vhci_hcd: release socket [ 245.710819][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.717012][ T71] vhci_hcd: disconnect device [ 246.114135][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.210576][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.220816][ T7806] loop4: detected capacity change from 0 to 32768 [ 246.306577][ T7806] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 246.322057][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.340297][ T7681] bridge_slave_1: entered allmulticast mode [ 246.341431][ T7681] bridge_slave_1: entered promiscuous mode [ 246.749813][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.826846][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.974330][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.025351][ T7678] hsr_slave_0: entered promiscuous mode [ 247.124472][ T7678] hsr_slave_1: entered promiscuous mode [ 247.138026][ T7678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.149779][ T7678] Cannot create hsr debugfs directory [ 247.196390][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.558150][ T7681] team0: Port device team_slave_0 added [ 247.560401][ T7681] team0: Port device team_slave_1 added [ 247.643671][ T5841] ocfs2: Unmounting device (7,4) on (node local) [ 247.954275][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.954300][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.954333][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.959548][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.031613][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.102978][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.103007][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.103039][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.119218][ T35] bridge_slave_1: left allmulticast mode [ 248.119256][ T35] bridge_slave_1: left promiscuous mode [ 248.119446][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.156889][ T6581] EXT4-fs error: 1294 callbacks suppressed [ 248.156919][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 248.184640][ T35] bridge_slave_0: left allmulticast mode [ 248.184682][ T35] bridge_slave_0: left promiscuous mode [ 248.184901][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.185545][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 248.213588][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 248.234525][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 248.238016][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 248.238736][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 248.244696][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 248.248624][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 248.254356][ T35] bridge_slave_1: left allmulticast mode [ 248.373712][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 248.388984][ T35] bridge_slave_1: left promiscuous mode [ 248.434239][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 248.468643][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.470789][ T35] bridge_slave_0: left allmulticast mode [ 248.470823][ T35] bridge_slave_0: left promiscuous mode [ 248.470974][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.499460][ T7843] loop4: detected capacity change from 0 to 512 [ 248.801856][ T7843] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.287241][ T7843] EXT4-fs (loop4): 1 truncate cleaned up [ 249.288558][ T7843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.323379][ T8] vhci_hcd: vhci_device speed not set [ 249.919648][ T7849] EXT4-fs (loop4): resizing filesystem from 256 to 1 blocks [ 249.927195][ T7849] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 250.433358][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.489685][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.543064][ T7853] loop6: detected capacity change from 0 to 1024 [ 250.598346][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.622614][ T7853] ext4: Unknown parameter 'fowner<00000000000000000000' [ 250.639246][ T7853] loop6: detected capacity change from 0 to 128 [ 250.649011][ T7853] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙' [ 251.300553][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.399'. [ 252.713083][ T7861] loop4: detected capacity change from 0 to 40427 [ 252.752566][ T7861] F2FS-fs (loop4): Unrecognized mount option "io_bits=00000000000536870917" or missing value [ 253.158092][ T7863] loop4: detected capacity change from 0 to 64 [ 253.164853][ T6581] EXT4-fs error: 762 callbacks suppressed [ 253.164875][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 253.190210][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 253.252978][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 253.277380][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 253.290391][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 253.359054][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 253.359720][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 253.360119][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 253.360659][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 253.361053][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 253.535439][ T7865] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 253.535518][ T7865] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 253.535596][ T7865] vhci_hcd vhci_hcd.0: Device attached [ 253.715927][ T8] vhci_hcd: vhci_device speed not set [ 253.813864][ T8] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 253.832125][ T5903] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 253.964209][ T5903] usb 7-1: device descriptor read/64, error -71 [ 254.220100][ T7871] loop4: detected capacity change from 0 to 256 [ 254.226969][ T5903] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 254.403567][ T5903] usb 7-1: device descriptor read/64, error -71 [ 254.578513][ T5903] usb usb7-port1: attempt power cycle [ 255.126761][ T5903] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 255.154723][ T5903] usb 7-1: device descriptor read/8, error -71 [ 255.167185][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.238084][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.264508][ T35] bond0 (unregistering): Released all slaves [ 255.403703][ T5903] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 255.484331][ T5903] usb 7-1: device descriptor read/8, error -71 [ 255.496657][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.503043][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.595320][ T5903] usb usb7-port1: unable to enumerate USB device [ 256.091868][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.113919][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.128736][ T35] bond0 (unregistering): Released all slaves [ 256.556764][ T7866] vhci_hcd: connection reset by peer [ 256.596348][ T11] vhci_hcd: stop threads [ 256.600703][ T11] vhci_hcd: release socket [ 256.643961][ T11] vhci_hcd: disconnect device [ 256.681773][ T7681] hsr_slave_0: entered promiscuous mode [ 256.827741][ T7681] hsr_slave_1: entered promiscuous mode [ 256.904665][ T7888] loop6: detected capacity change from 0 to 512 [ 256.933832][ T7681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.933874][ T7681] Cannot create hsr debugfs directory [ 256.996186][ T7532] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.011037][ T7888] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 257.042065][ T7888] EXT4-fs (loop6): 1 truncate cleaned up [ 257.043095][ T7888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.758820][ T7893] EXT4-fs (loop6): resizing filesystem from 256 to 1 blocks [ 257.758982][ T7893] EXT4-fs warning (device loop6): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 258.173269][ T6581] EXT4-fs error: 1562 callbacks suppressed [ 258.173297][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 258.173746][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 258.174238][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 258.174592][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 258.188089][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 258.192474][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 258.193228][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 258.200279][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 258.201324][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 258.203499][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 258.220209][ T6391] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.242163][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.301290][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.301374][ T7707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.404935][ T35] hsr_slave_0: left promiscuous mode [ 258.506011][ T35] hsr_slave_1: left promiscuous mode [ 258.708569][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.708651][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.709670][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.709710][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.717358][ T35] hsr_slave_0: left promiscuous mode [ 258.718047][ T35] hsr_slave_1: left promiscuous mode [ 258.718908][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.718980][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.719781][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.719822][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.323235][ T8] vhci_hcd: vhci_device speed not set [ 259.379354][ T35] veth1_macvtap: left promiscuous mode [ 259.379447][ T35] veth0_macvtap: left promiscuous mode [ 259.379586][ T35] veth1_vlan: left promiscuous mode [ 259.379690][ T35] veth0_vlan: left promiscuous mode [ 259.394458][ T35] veth1_macvtap: left promiscuous mode [ 259.394564][ T35] veth0_macvtap: left promiscuous mode [ 259.394703][ T35] veth1_vlan: left promiscuous mode [ 259.394830][ T35] veth0_vlan: left promiscuous mode [ 259.592414][ T7907] loop4: detected capacity change from 0 to 64 [ 260.656441][ T7910] loop3: detected capacity change from 0 to 256 [ 260.694811][ T7912] loop4: detected capacity change from 0 to 256 [ 262.726867][ T7923] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 262.733563][ T7923] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 262.748837][ T7923] vhci_hcd vhci_hcd.0: Device attached [ 262.923480][ T5902] vhci_hcd: vhci_device speed not set [ 263.000803][ T5902] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 263.043516][ T57] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 263.173984][ T57] usb 5-1: device descriptor read/64, error -71 [ 263.183273][ T6581] EXT4-fs error: 1477 callbacks suppressed [ 263.183295][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 263.215749][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 263.225849][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 263.238531][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 263.257853][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 263.284056][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 263.294068][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 263.325835][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 263.335977][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 263.348996][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 263.434844][ T35] team0 (unregistering): Port device team_slave_1 removed [ 263.473392][ T57] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 263.558397][ T35] team0 (unregistering): Port device team_slave_0 removed [ 263.623784][ T57] usb 5-1: device descriptor read/64, error -71 [ 263.764179][ T57] usb usb5-port1: attempt power cycle [ 264.124012][ T57] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 264.170344][ T57] usb 5-1: device descriptor read/8, error -71 [ 264.423368][ T57] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 264.468420][ T57] usb 5-1: device descriptor read/8, error -71 [ 264.620720][ T57] usb usb5-port1: unable to enumerate USB device [ 265.676021][ T35] team0 (unregistering): Port device team_slave_1 removed [ 265.742706][ T7924] vhci_hcd: connection reset by peer [ 265.753541][ T6157] vhci_hcd: stop threads [ 265.757889][ T6157] vhci_hcd: release socket [ 265.766079][ T6157] vhci_hcd: disconnect device [ 265.859614][ T35] team0 (unregistering): Port device team_slave_0 removed [ 267.130515][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.137869][ T7707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.355700][ T7931] loop3: detected capacity change from 0 to 1024 [ 267.362818][ T7931] ext4: Unknown parameter 'fowner<00000000000000000000' [ 267.425430][ T7933] loop4: detected capacity change from 0 to 512 [ 267.506291][ T7931] loop3: detected capacity change from 0 to 128 [ 267.515223][ T7931] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙' [ 267.550697][ T7933] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 267.611351][ T7933] EXT4-fs (loop4): 1 truncate cleaned up [ 267.624306][ T7933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.730196][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 268.772297][ T6581] EXT4-fs error: 2979 callbacks suppressed [ 268.772321][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 268.828027][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.837812][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 268.883548][ T5902] vhci_hcd: vhci_device speed not set [ 268.893523][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 268.930414][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 268.943771][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 268.953858][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 268.967792][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 268.979140][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 269.016469][ T7955] loop4: detected capacity change from 0 to 64 [ 269.079812][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 269.113589][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 269.760552][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.424'. [ 269.794517][ T7678] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 269.861859][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.884080][ T57] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 269.974883][ T7678] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 270.075125][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 270.129797][ T7974] loop6: detected capacity change from 0 to 512 [ 270.130758][ T57] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 270.139698][ T7974] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 270.157996][ T7972] loop4: detected capacity change from 0 to 256 [ 270.184273][ T7974] EXT4-fs (loop6): 1 truncate cleaned up [ 270.193875][ T57] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 270.227765][ T7974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.413445][ T7678] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 270.447177][ T57] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.458133][ T57] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.471643][ T57] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.481752][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.970906][ T6391] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.111116][ T7678] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 272.356690][ T57] usb 4-1: usb_control_msg returned -71 [ 272.362601][ T57] usbtmc 4-1:16.0: can't read capabilities [ 272.391721][ T57] usb 4-1: USB disconnect, device number 11 [ 273.493058][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.526118][ T7997] loop6: detected capacity change from 0 to 512 [ 273.555192][ T7678] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.602995][ T7997] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 273.620412][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.627718][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.662641][ T7997] EXT4-fs (loop6): 1 truncate cleaned up [ 273.688184][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.695517][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.716853][ T7997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.729601][ T7995] loop4: detected capacity change from 0 to 512 [ 273.775490][ T6581] EXT4-fs error: 459 callbacks suppressed [ 273.775519][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 273.869946][ T7995] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.014653][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 274.417451][ T8014] EXT4-fs (loop6): resizing filesystem from 256 to 1 blocks [ 274.425222][ T8014] EXT4-fs warning (device loop6): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 274.624574][ T7995] EXT4-fs (loop4): 1 truncate cleaned up [ 274.734372][ T7995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.816207][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 275.021447][ T6391] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.049115][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 275.123658][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 275.721565][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 275.863430][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 275.894977][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.919778][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.945926][ T8021] loop6: detected capacity change from 0 to 512 [ 275.985630][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 276.009369][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 276.013007][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.030190][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 276.030853][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.100771][ T8021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.121806][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.164390][ T5859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.173107][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.218878][ T8021] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.263568][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.289463][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.290556][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.304238][ T8021] EXT4-fs (loop6): resizing filesystem from 128 to 1 blocks [ 276.311567][ T8021] EXT4-fs warning (device loop6): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 276.321922][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.332741][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.342448][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.354318][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.364103][ T7681] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 276.574493][ T6391] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.767817][ T7681] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 276.826387][ T7681] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 276.990540][ T8043] loop4: detected capacity change from 0 to 512 [ 277.063572][ T8043] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 277.088416][ T7681] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 277.099770][ T8030] loop3: detected capacity change from 0 to 32768 [ 277.227077][ T8043] EXT4-fs (loop4): 1 truncate cleaned up [ 277.234461][ T8043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.298890][ T8030] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 278.141850][ T8030] [ 278.144294][ T8030] ====================================================== [ 278.151449][ T8030] WARNING: possible circular locking dependency detected [ 278.158498][ T8030] 6.12.0-syzkaller-00971-g158f238aa69d #0 Not tainted [ 278.165316][ T8030] ------------------------------------------------------ [ 278.172396][ T8030] syz.3.434/8030 is trying to acquire lock: [ 278.178321][ T8030] ffff88805d44dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x397/0x930 [ 278.187723][ T8030] [ 278.187723][ T8030] but task is already holding lock: [ 278.195291][ T8030] ffff88805242c958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 278.204715][ T8030] [ 278.204715][ T8030] which lock already depends on the new lock. [ 278.204715][ T8030] [ 278.215261][ T8030] [ 278.215261][ T8030] the existing dependency chain (in reverse order) is: [ 278.224337][ T8030] [ 278.224337][ T8030] -> #3 (jbd2_handle){++++}-{0:0}: [ 278.231800][ T8030] lock_acquire+0x1ed/0x550 [ 278.237013][ T8030] jbd2_log_wait_commit+0x172/0x4a0 [ 278.242998][ T8030] ocfs2_try_to_free_truncate_log+0x37e/0x410 [ 278.250094][ T8030] ocfs2_reserve_clusters_with_limit+0x4ea/0xb60 [ 278.257064][ T8030] ocfs2_lock_allocators+0x30a/0x630 [ 278.263024][ T8030] ocfs2_extend_allocation+0x4ed/0x1c20 [ 278.269155][ T8030] ocfs2_allocate_unwritten_extents+0x398/0x9f0 [ 278.276155][ T8030] __ocfs2_change_file_space+0x97d/0xfd0 [ 278.282371][ T8030] ocfs2_fallocate+0x2e4/0x350 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.287797][ T8030] vfs_fallocate+0x56b/0x6e0 [ 278.292963][ T8030] __x64_sys_fallocate+0xbc/0x110 [ 278.298876][ T8030] do_syscall_64+0xf3/0x230 [ 278.304371][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.310841][ T8030] [ 278.310841][ T8030] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 278.321657][ T8030] lock_acquire+0x1ed/0x550 [ 278.327075][ T8030] down_write+0x99/0x220 [ 278.331885][ T8030] ocfs2_reserve_suballoc_bits+0x192/0x4eb0 [ 278.338360][ T8030] ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0 [ 278.345301][ T8030] ocfs2_lock_allocators+0x2a9/0x630 [ 278.351287][ T8030] ocfs2_extend_allocation+0x4ed/0x1c20 [ 278.357421][ T8030] ocfs2_allocate_unwritten_extents+0x398/0x9f0 [ 278.364423][ T8030] __ocfs2_change_file_space+0x97d/0xfd0 [ 278.370736][ T8030] ocfs2_fallocate+0x2e4/0x350 [ 278.376086][ T8030] vfs_fallocate+0x56b/0x6e0 [ 278.381263][ T8030] __x64_sys_fallocate+0xbc/0x110 [ 278.387037][ T8030] do_syscall_64+0xf3/0x230 [ 278.392242][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.398717][ T8030] [ 278.398717][ T8030] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 278.407563][ T8030] lock_acquire+0x1ed/0x550 [ 278.412648][ T8030] down_write+0x99/0x220 [ 278.417687][ T8030] ocfs2_try_remove_refcount_tree+0xb6/0x330 [ 278.424423][ T8030] ocfs2_truncate_file+0xe0d/0x1560 [ 278.430202][ T8030] ocfs2_setattr+0x1890/0x1f00 [ 278.435664][ T8030] notify_change+0xbcc/0xe90 [ 278.440920][ T8030] do_truncate+0x220/0x310 [ 278.445894][ T8030] path_openat+0x2e1e/0x3590 [ 278.451392][ T8030] do_filp_open+0x27f/0x4e0 [ 278.455747][ T5851] Bluetooth: hci1: command tx timeout [ 278.456466][ T8030] do_sys_openat2+0x13e/0x1d0 [ 278.467264][ T8030] __x64_sys_open+0x225/0x270 [ 278.472527][ T8030] do_syscall_64+0xf3/0x230 [ 278.477602][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.484075][ T8030] [ 278.484075][ T8030] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 278.491954][ T8030] validate_chain+0x18ef/0x5920 [ 278.497367][ T8030] __lock_acquire+0x1384/0x2050 [ 278.502810][ T8030] lock_acquire+0x1ed/0x550 [ 278.508061][ T8030] down_read+0xb1/0xa40 [ 278.512784][ T8030] ocfs2_init_acl+0x397/0x930 [ 278.518305][ T8030] ocfs2_mknod+0x1c05/0x2b40 [ 278.523585][ T8030] ocfs2_create+0x1ab/0x480 [ 278.528755][ T8030] path_openat+0x1c05/0x3590 [ 278.533990][ T8030] do_filp_open+0x27f/0x4e0 [ 278.539037][ T8030] do_sys_openat2+0x13e/0x1d0 [ 278.544277][ T8030] __x64_sys_open+0x225/0x270 [ 278.549517][ T8030] do_syscall_64+0xf3/0x230 [ 278.554578][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.561116][ T8030] [ 278.561116][ T8030] other info that might help us debug this: [ 278.561116][ T8030] [ 278.571370][ T8030] Chain exists of: [ 278.571370][ T8030] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle [ 278.571370][ T8030] [ 278.587321][ T8030] Possible unsafe locking scenario: [ 278.587321][ T8030] [ 278.594972][ T8030] CPU0 CPU1 [ 278.600365][ T8030] ---- ---- [ 278.605856][ T8030] rlock(jbd2_handle); [ 278.610083][ T8030] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 278.620232][ T8030] lock(jbd2_handle); [ 278.626923][ T8030] rlock(&oi->ip_xattr_sem); [ 278.631661][ T8030] [ 278.631661][ T8030] *** DEADLOCK *** [ 278.631661][ T8030] [ 278.639855][ T8030] 8 locks held by syz.3.434/8030: [ 278.644934][ T8030] #0: ffff888034b52420 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 278.654394][ T8030] #1: ffff88805d44df40 (&type->i_mutex_dir_key#21){++++}-{3:3}, at: path_openat+0x89a/0x3590 [ 278.665034][ T8030] #2: ffff88805d4489c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x192/0x4eb0 [ 278.679652][ T8030] #3: ffff88805d44c2c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x192/0x4eb0 [ 278.693442][ T8030] #4: ffff88805fd09800 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x132/0x2870 [ 278.707560][ T8030] #5: ffff888034b52610 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0x150c/0x2b40 [ 278.717046][ T8030] #6: ffff888026bb78e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3be/0x700 [ 278.727863][ T8030] #7: ffff88805242c958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 278.737641][ T8030] [ 278.737641][ T8030] stack backtrace: [ 278.743555][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.3.434 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 278.753865][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 278.763964][ T8030] Call Trace: [ 278.767263][ T8030] [ 278.770220][ T8030] dump_stack_lvl+0x241/0x360 [ 278.775054][ T8030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.780297][ T8030] ? __pfx__printk+0x10/0x10 [ 278.783615][ T6581] EXT4-fs error: 1139 callbacks suppressed [ 278.783636][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 278.784949][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.791152][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 278.799643][ T8030] print_circular_bug+0x13a/0x1b0 [ 278.799693][ T8030] check_noncircular+0x36a/0x4a0 [ 278.799724][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.799762][ T8030] ? __kernel_text_address+0xd/0x40 [ 278.799802][ T8030] ? __pfx_check_noncircular+0x10/0x10 [ 278.799839][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.799884][ T8030] ? lockdep_lock+0x123/0x2b0 [ 278.813302][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 278.817021][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.822765][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 278.826935][ T8030] ? validate_chain+0x11e/0x5920 [ 278.826980][ T8030] validate_chain+0x18ef/0x5920 [ 278.827010][ T8030] ? __pfx_number+0x10/0x10 [ 278.827066][ T8030] ? __pfx_validate_chain+0x10/0x10 [ 278.827104][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.827154][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.835895][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 278.837959][ T8030] ? __asan_memset+0x23/0x50 [ 278.845184][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 278.849124][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.857641][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 278.862704][ T8030] ? lockdep_init_map_type+0xa1/0x910 [ 278.869144][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 278.879762][ T8030] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 278.879813][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.879852][ T8030] ? mark_lock+0x9a/0x360 [ 278.879888][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.879927][ T8030] ? mark_lock+0x9a/0x360 [ 278.879956][ T8030] __lock_acquire+0x1384/0x2050 [ 278.888637][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 278.889728][ T8030] lock_acquire+0x1ed/0x550 [ 278.894986][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 278.899533][ T8030] ? ocfs2_init_acl+0x397/0x930 [ 279.027965][ T8030] ? __pfx_lock_acquire+0x10/0x10 [ 279.033094][ T8030] ? __pfx___might_resched+0x10/0x10 [ 279.038458][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.047558][ T8030] ? do_raw_spin_unlock+0x13c/0x8b0 [ 279.052801][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.058756][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.064439][ T8030] ? __ocfs2_mknod_locked+0x1037/0x15c0 [ 279.070059][ T8030] down_read+0xb1/0xa40 [ 279.074254][ T8030] ? ocfs2_init_acl+0x397/0x930 [ 279.079153][ T8030] ? __pfx___ocfs2_mknod_locked+0x10/0x10 [ 279.084911][ T8030] ? __pfx_down_read+0x10/0x10 [ 279.089747][ T8030] ? __set_current_blocked+0x310/0x380 [ 279.095277][ T8030] ? __pfx___set_current_blocked+0x10/0x10 [ 279.101215][ T8030] ? rcu_is_watching+0x15/0xb0 [ 279.106045][ T8030] ocfs2_init_acl+0x397/0x930 [ 279.110793][ T8030] ? ocfs2_mknod_locked+0x222/0x3b0 [ 279.116243][ T8030] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 279.121516][ T8030] ? ocfs2_start_trans+0x4e3/0x700 [ 279.126702][ T8030] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 279.132490][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.138241][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.144023][ T8030] ocfs2_mknod+0x1c05/0x2b40 [ 279.148838][ T8030] ? __pfx_validate_chain+0x10/0x10 [ 279.154109][ T8030] ? __pfx_ocfs2_mknod+0x10/0x10 [ 279.159112][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.164814][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.170504][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.176291][ T8030] ? __lock_acquire+0x1384/0x2050 [ 279.181420][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.187114][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.192844][ T8030] ? __pfx_lock_acquire+0x10/0x10 [ 279.197989][ T8030] ? ocfs2_inode_unlock+0xa7/0x150 [ 279.203162][ T8030] ? __pfx_lock_release+0x10/0x10 [ 279.208346][ T8030] ? do_raw_spin_lock+0x14f/0x370 [ 279.213478][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.219255][ T8030] ? do_raw_spin_unlock+0x13c/0x8b0 [ 279.224550][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.230249][ T8030] ? _raw_spin_unlock+0x28/0x50 [ 279.235150][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.240837][ T8030] ? rcu_is_watching+0x15/0xb0 [ 279.245652][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.251343][ T8030] ? ocfs2_lookup+0x503/0xa60 [ 279.256180][ T8030] ocfs2_create+0x1ab/0x480 [ 279.260746][ T8030] ? __pfx_ocfs2_create+0x10/0x10 [ 279.265833][ T8030] ? inode_permission+0xff/0x460 [ 279.270820][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.276681][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.282378][ T8030] ? security_inode_create+0xbe/0x340 [ 279.287838][ T8030] ? __pfx_ocfs2_create+0x10/0x10 [ 279.292913][ T8030] path_openat+0x1c05/0x3590 [ 279.297552][ T8030] ? __pfx_path_openat+0x10/0x10 [ 279.302529][ T8030] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.308209][ T8030] do_filp_open+0x27f/0x4e0 [ 279.312743][ T8030] ? __pfx_do_filp_open+0x10/0x10 [ 279.317802][ T8030] ? do_raw_spin_lock+0x14f/0x370 [ 279.322887][ T8030] do_sys_openat2+0x13e/0x1d0 [ 279.327605][ T8030] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.332851][ T8030] __x64_sys_open+0x225/0x270 [ 279.337569][ T8030] ? __pfx___x64_sys_open+0x10/0x10 [ 279.342813][ T8030] ? do_syscall_64+0x100/0x230 [ 279.347703][ T8030] ? do_syscall_64+0xb6/0x230 [ 279.352420][ T8030] do_syscall_64+0xf3/0x230 [ 279.356962][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.362977][ T8030] RIP: 0033:0x7fc5efb7e759 [ 279.367585][ T8030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.387231][ T8030] RSP: 002b:00007fc5edff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 279.395767][ T8030] RAX: ffffffffffffffda RBX: 00007fc5efd35f80 RCX: 00007fc5efb7e759 [ 279.403761][ T8030] RDX: 0000000000000000 RSI: 0000000000046b42 RDI: 0000000020000040 [ 279.411751][ T8030] RBP: 00007fc5efbf175e R08: 0000000000000000 R09: 0000000000000000 [ 279.419747][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.427742][ T8030] R13: 0000000000000000 R14: 00007fc5efd35f80 R15: 00007ffea4e34f18 [ 279.435771][ T8030] [ 279.462286][ T29] audit: type=1800 audit(1732046148.435:18): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.434" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 279.464453][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.213816][ T8029] ocfs2: Unmounting device (7,3) on (node local) [ 280.222320][ T11] bridge_slave_1: left allmulticast mode [ 280.230303][ T11] bridge_slave_1: left promiscuous mode [ 280.237056][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.266764][ T11] bridge_slave_0: left allmulticast mode [ 280.272488][ T11] bridge_slave_0: left promiscuous mode [ 280.287332][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.422042][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.438646][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.458605][ T11] bond0 (unregistering): Released all slaves [ 280.535266][ T5851] Bluetooth: hci1: command tx timeout [ 280.571722][ T11] hsr_slave_0: left promiscuous mode [ 280.589954][ T11] hsr_slave_1: left promiscuous mode [ 280.618499][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.642440][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.129623][ T11] team0 (unregistering): Port device team_slave_1 removed [ 281.217357][ T11] team0 (unregistering): Port device team_slave_0 removed [ 282.000729][ T3526] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.060648][ T3526] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.101095][ T3526] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.151340][ T3526] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.535466][ T3526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.611129][ T3526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.691007][ T3526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.765103][ T3526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.876415][ T3526] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.947912][ T3526] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.017866][ T3526] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.079950][ T3526] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.210696][ T3526] bridge_slave_1: left allmulticast mode [ 283.225869][ T3526] bridge_slave_1: left promiscuous mode [ 283.238368][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.256897][ T3526] bridge_slave_0: left allmulticast mode [ 283.262732][ T3526] bridge_slave_0: left promiscuous mode [ 283.269095][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.286566][ T3526] bridge_slave_1: left allmulticast mode [ 283.292265][ T3526] bridge_slave_1: left promiscuous mode [ 283.299371][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.311887][ T3526] bridge_slave_0: left allmulticast mode [ 283.319385][ T3526] bridge_slave_0: left promiscuous mode [ 283.326016][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.336129][ T3526] bridge_slave_1: left allmulticast mode [ 283.341823][ T3526] bridge_slave_1: left promiscuous mode [ 283.348136][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.360421][ T3526] bridge_slave_0: left allmulticast mode [ 283.374629][ T3526] bridge_slave_0: left promiscuous mode [ 283.380392][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.411389][ T3526] bridge_slave_1: left allmulticast mode [ 283.421711][ T3526] bridge_slave_1: left promiscuous mode [ 283.441178][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.463800][ T3526] bridge_slave_0: left allmulticast mode [ 283.469487][ T3526] bridge_slave_0: left promiscuous mode [ 283.484971][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.517128][ T3526] bridge_slave_1: left allmulticast mode [ 283.522849][ T3526] bridge_slave_1: left promiscuous mode [ 283.533383][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.545472][ T3526] bridge_slave_0: left allmulticast mode [ 283.551430][ T3526] bridge_slave_0: left promiscuous mode [ 283.557448][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.797227][ T6581] EXT4-fs error: 8176 callbacks suppressed [ 283.797263][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 283.818427][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 283.833988][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 283.848731][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 283.876065][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 283.906384][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 283.938869][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 283.960148][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 283.991000][ T6581] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Out of memory [ 284.016548][ T6581] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm kworker/u8:11: mark_inode_dirty error [ 284.410561][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.422308][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.436239][ T3526] bond0 (unregistering): Released all slaves [ 284.456374][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.476089][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.491567][ T3526] bond0 (unregistering): Released all slaves [ 284.508153][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.521350][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.535593][ T3526] bond0 (unregistering): Released all slaves [ 284.556293][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.569615][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.581865][ T3526] bond0 (unregistering): Released all slaves [ 284.600183][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.617789][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.630752][ T3526] bond0 (unregistering): Released all slaves [ 285.357249][ T3526] hsr_slave_0: left promiscuous mode [ 285.374906][ T3526] hsr_slave_1: left promiscuous mode [ 285.387995][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.395885][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.409353][ T3526] hsr_slave_0: left promiscuous mode [ 285.416703][ T3526] hsr_slave_1: left promiscuous mode [ 285.422847][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.434584][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.442959][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.451001][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.464110][ T3526] hsr_slave_0: left promiscuous mode [ 285.470231][ T3526] hsr_slave_1: left promiscuous mode [ 285.477241][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.487768][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.501470][ T3526] hsr_slave_0: left promiscuous mode [ 285.509665][ T3526] hsr_slave_1: left promiscuous mode [ 285.516213][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.526363][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.535725][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.545917][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.557640][ T3526] hsr_slave_0: left promiscuous mode [ 285.563969][ T3526] hsr_slave_1: left promiscuous mode [ 285.570054][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.578618][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.586948][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.594476][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.610822][ T3526] veth1_macvtap: left promiscuous mode [ 285.616620][ T3526] veth0_macvtap: left promiscuous mode [ 285.622419][ T3526] veth1_vlan: left promiscuous mode [ 285.628219][ T3526] veth0_vlan: left promiscuous mode [ 285.634967][ T3526] veth1_macvtap: left promiscuous mode [ 285.640537][ T3526] veth0_macvtap: left promiscuous mode [ 285.646383][ T3526] veth1_vlan: left promiscuous mode [ 285.651688][ T3526] veth0_vlan: left promiscuous mode [ 285.659658][ T3526] veth1_macvtap: left promiscuous mode [ 285.665582][ T3526] veth0_macvtap: left promiscuous mode [ 285.671387][ T3526] veth1_vlan: left promiscuous mode [ 285.677493][ T3526] veth0_vlan: left promiscuous mode [ 286.217602][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 286.279891][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 286.666746][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 286.686561][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 287.037203][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 287.057080][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 287.476456][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 287.536772][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 287.883475][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 287.937407][ T3526] team0 (unregistering): Port device team_slave_0 removed