last executing test programs: 2m14.432062177s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0}) 1m53.421711832s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0}) 1m34.161140468s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0}) 1m15.3803044s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0}) 48.023314426s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0}) 23.365120818s ago: executing program 1 (id=1914): timer_create(0x3, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {r1}}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0}) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {r2}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) 22.261473989s ago: executing program 2 (id=1917): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0}) 20.593970686s ago: executing program 1 (id=1920): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x48f00) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) getrandom(0x0, 0x0, 0x0) 19.806409644s ago: executing program 2 (id=1926): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000700)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0xd2, 0x0, &(0x7f0000000080)) 15.62562925s ago: executing program 2 (id=1931): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) clock_gettime(0x9, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0xffffff85, 0x0, 0x0, 0xfffffffffffffca9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x20100000, &(0x7f0000000000)="d8e89838b600581c905387c8dc1c0644f9aa526589945c200d5eaaa6876bd440d2bb5c603ad1df669d8cef16355f7b1978f8f1a39d76418415559ac87302ce35df8e4772d8", 0x45, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)="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") 15.515465977s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0}) 13.098023575s ago: executing program 1 (id=1934): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x805800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x800, 0x69b23e0) ioctl$VIDIOC_EXPBUF(r1, 0x2, &(0x7f0000000140)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe935d51924cdfd93}, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) unshare(0x60600) syz_clone(0x41080, 0x0, 0x0, 0x0, 0x0, 0x0) 12.474573037s ago: executing program 1 (id=1937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0xffffc740, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x2}, 0x90) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_free_blocks\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) 11.333536159s ago: executing program 1 (id=1938): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)="1886026bea75afbd6d73c6295080581b9e8c85c6279573c530ad441af699ef4cbb48af20e6d7cf", &(0x7f0000001280), 0x3, r5}, 0x38) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40082104, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000000)={[{@nogrpid}, {@usrquota}, {@auto_da_alloc}]}, 0x1, 0x55b, &(0x7f0000000940)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000400)=')', 0x1, 0x0) 10.510607974s ago: executing program 2 (id=1941): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x100}, 0x0) r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000340)=0x2) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x0, 0x0}) 10.292591242s ago: executing program 0 (id=1943): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 9.41571491s ago: executing program 1 (id=1944): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c8300a00060001000102"], 0xf) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f0000000080)='+', 0x1}], 0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex, 0xffffffffffffffff, 0x37, 0x0, 0xffffffffffffffff, @link_id}, 0x20) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x3, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) listen(r5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8000c1908000100"], 0x11) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}) getrandom(0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 9.35333909s ago: executing program 0 (id=1945): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x48f00) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) getrandom(0x0, 0x0, 0x0) 7.101477382s ago: executing program 4 (id=1946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000500)={0x4, 0x9, 0x0, 0x4, '\x00', '\x00', '\x00', 0x76053208, 0x1, 0x5, 0xe000000, "7477e50f31828fb1552eccdcb7923b58"}) 6.93596347s ago: executing program 4 (id=1947): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x8, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80000001}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7ff}, @TCA_CODEL_TARGET={0x8, 0x1, 0xad}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98091a, 0x0, '\x00', @ptr=0x5}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 5.632986401s ago: executing program 4 (id=1948): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000700)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, &(0x7f0000000080)) 5.517757976s ago: executing program 4 (id=1949): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000800), 0x10, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 5.4699994s ago: executing program 4 (id=1950): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) 5.131733586s ago: executing program 2 (id=1951): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0}, 0x90) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/14, 0xe) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 4.95473825s ago: executing program 2 (id=1952): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) clock_gettime(0x9, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0xffffff85, 0x0, 0x0, 0xfffffffffffffca9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x20100000, &(0x7f0000000000)="d8e89838b600581c905387c8dc1c0644f9aa526589945c200d5eaaa6876bd440d2bb5c603ad1df669d8cef16355f7b1978f8f1a39d76418415559ac87302ce35df8e4772d8", 0x45, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)="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") 4.581696618s ago: executing program 0 (id=1953): timer_create(0x3, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {r1}}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0}) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {r2}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x0, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) 4.44847355s ago: executing program 4 (id=1954): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)="1886026bea75afbd6d73c6295080581b9e8c85c6279573c530ad441af699ef4cbb48af20e6d7cf", &(0x7f0000001280), 0x3, r5}, 0x38) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40082104, 0x0) r7 = open(&(0x7f00000003c0)='./file1\x00', 0x14927e, 0x0) pwrite64(r7, &(0x7f0000000400)=')', 0x1, 0x0) 4.350012885s ago: executing program 0 (id=1955): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.433275134s ago: executing program 0 (id=1956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup(r1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socket$packet(0x11, 0x0, 0x300) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000040)="800037bb", 0x4, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000000a00), 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000500)={0x4, 0x9, 0x0, 0x4, '\x00', '\x00', '\x00', 0x76053208, 0x1, 0x5, 0xe000000, "7477e50f31828fb1552eccdcb7923b58"}) kernel console output (not intermixed with test programs): erface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.630610][T11044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.706315][T11044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.734904][T11044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.803122][T11044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.955611][T11044] hsr_slave_0: entered promiscuous mode [ 427.017902][T11044] hsr_slave_1: entered promiscuous mode [ 427.057453][T11044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.104621][T11044] Cannot create hsr debugfs directory [ 429.331628][T11044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.518479][T11044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.675454][T11044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.846427][T11044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.169279][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 430.374016][ T25] usb 1-1: device descriptor read/64, error -71 [ 430.582739][T11231] loop4: detected capacity change from 0 to 512 [ 430.635390][T11231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 430.655185][T11231] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.714432][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 430.734663][T11236] team0: Port device macvlan1 added [ 430.790950][T11044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.823304][T10402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 430.883593][ T25] usb 1-1: device descriptor read/64, error -71 [ 430.901340][T11044] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.954724][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.962233][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.017052][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.023643][ T25] usb usb1-port1: attempt power cycle [ 431.024206][ T5308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.055480][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 431.171194][T11044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.473188][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 431.514225][ T25] usb 1-1: device descriptor read/8, error -71 [ 431.584094][T11044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.703790][T11044] veth0_vlan: entered promiscuous mode [ 431.726253][T11044] veth1_vlan: entered promiscuous mode [ 431.803881][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 431.826293][T11044] veth0_macvtap: entered promiscuous mode [ 431.846042][ T25] usb 1-1: device descriptor read/8, error -71 [ 431.846789][T11044] veth1_macvtap: entered promiscuous mode [ 431.905827][T11044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.922733][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.940534][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.954163][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.964942][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.975141][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.975341][ T25] usb usb1-port1: unable to enumerate USB device [ 431.993660][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.027493][T11044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.049621][T11044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.086444][T11044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.120263][T11044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.142245][T11044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.174893][T11044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.190316][T11044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.219562][T11260] infiniband syz1: set active [ 432.342475][T11260] infiniband syz1: added bond_slave_1 [ 433.553771][T11260] RDS/IB: syz1: added [ 433.639154][T11260] smc: adding ib device syz1 with port count 1 [ 433.722811][T11260] smc: ib device syz1 port 1 has pnetid [ 433.974392][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.105663][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.117495][T11277] team0: Port device macvlan1 added [ 435.236221][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 435.274366][ T6042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.282232][ T6042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.113638][ T6042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.414014][ T6042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.569259][ T6042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.809229][ T6042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.909809][T11303] loop1: detected capacity change from 0 to 2048 [ 437.178093][T11303] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1351: bad orphan inode 8192 [ 437.490292][ T6042] bridge_slave_1: left allmulticast mode [ 437.507730][T11303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.549758][ T6042] bridge_slave_1: left promiscuous mode [ 437.584486][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.921166][ T6042] bridge_slave_0: left allmulticast mode [ 437.959375][ T6042] bridge_slave_0: left promiscuous mode [ 437.994183][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.212849][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.234667][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.244342][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.257221][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.265734][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 438.274356][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.276761][T10400] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.826698][ T6042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.839205][ T6042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.852136][ T6042] bond0 (unregistering): Released all slaves [ 438.867353][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 438.933432][ T5275] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 439.154959][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.195952][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.222187][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.260142][ T5275] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.287620][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.327608][ T5275] usb 3-1: config 0 descriptor?? [ 439.598926][ T5275] usbhid 3-1:0.0: can't add hid device: -71 [ 439.608658][ T5275] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 439.659671][T11334] loop4: detected capacity change from 0 to 32768 [ 439.669851][ T5275] usb 3-1: USB disconnect, device number 11 [ 439.727303][T11334] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1362 (11334) [ 439.814729][T11334] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 439.838244][T11334] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 439.868778][T11334] BTRFS info (device loop4): using free-space-tree [ 439.942456][ T6042] hsr_slave_0: left promiscuous mode [ 439.959490][ T6042] hsr_slave_1: left promiscuous mode [ 439.968808][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.009970][ T6042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.049889][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.060796][ T6042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.176296][ T6042] veth1_macvtap: left promiscuous mode [ 440.234023][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.242678][ T6042] veth0_macvtap: left promiscuous mode [ 440.267567][ T6042] veth1_vlan: left promiscuous mode [ 440.272954][ T6042] veth0_vlan: left promiscuous mode [ 440.307049][T11359] Process accounting resumed [ 440.383298][ T5238] Bluetooth: hci1: command tx timeout [ 440.557132][T10402] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 440.566326][ T1057] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 441.627088][ T6042] team0 (unregistering): Port device team_slave_1 removed [ 441.688513][ T6042] team0 (unregistering): Port device team_slave_0 removed [ 442.463203][ T5238] Bluetooth: hci1: command tx timeout [ 442.561806][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 442.734367][T11318] chnl_net:caif_netlink_parms(): no params data found [ 443.433628][ T5354] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 443.814760][ T5354] usb 3-1: Using ep0 maxpacket: 32 [ 443.825286][ T5354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.844605][ T5354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.856397][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 443.863438][ T5354] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 443.876656][T11318] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.883956][T11318] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.891131][T11318] bridge_slave_0: entered allmulticast mode [ 443.897219][ T5354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.908185][ T5354] usb 3-1: config 0 descriptor?? [ 443.914985][T11318] bridge_slave_0: entered promiscuous mode [ 443.947540][T11318] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.960529][T11318] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.976945][T11318] bridge_slave_1: entered allmulticast mode [ 443.984973][T11318] bridge_slave_1: entered promiscuous mode [ 444.076370][T11318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.110138][T11318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.380623][T11318] team0: Port device team_slave_0 added [ 444.396374][T11318] team0: Port device team_slave_1 added [ 444.440179][ T5354] viewsonic 0003:2133:0018.0007: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.2-1/input0 [ 444.465903][T11318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.489755][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.538106][T11318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.553372][ T5238] Bluetooth: hci1: command tx timeout [ 444.567844][T11318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.588485][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.719954][T11318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.753116][ T5275] usb 3-1: USB disconnect, device number 12 [ 445.017242][T11318] hsr_slave_0: entered promiscuous mode [ 445.058013][T11318] hsr_slave_1: entered promiscuous mode [ 445.083328][T11318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.090912][T11318] Cannot create hsr debugfs directory [ 445.100071][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 445.154288][T11482] loop4: detected capacity change from 0 to 128 [ 445.900173][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'. [ 446.056057][T11518] loop2: detected capacity change from 0 to 128 [ 446.127623][T11318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.181116][T11318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.207269][T11318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.267200][T11318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.623683][ T5238] Bluetooth: hci1: command tx timeout [ 446.731704][T11318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.815326][T11318] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.848424][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.855620][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.956514][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.963759][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.076087][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 447.118105][T11318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.450151][T11563] sysfs: cannot create duplicate filename '/class/ieee80211/!0xffffffffffffffff' [ 447.465948][T11563] CPU: 1 UID: 0 PID: 11563 Comm: syz.0.1434 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 447.476227][T11563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 447.486320][T11563] Call Trace: [ 447.489613][T11563] [ 447.492578][T11563] dump_stack_lvl+0x241/0x360 [ 447.497286][T11563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.502518][T11563] ? __pfx__printk+0x10/0x10 [ 447.507144][T11563] ? sysfs_warn_dup+0x51/0xa0 [ 447.511855][T11563] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 447.517453][T11563] sysfs_warn_dup+0x8e/0xa0 [ 447.521976][T11563] sysfs_do_create_link_sd+0xbe/0x110 [ 447.527401][T11563] device_add_class_symlinks+0x1c5/0x250 [ 447.533063][T11563] device_add+0x553/0xbf0 [ 447.537425][T11563] wiphy_register+0x1d3f/0x2b30 [ 447.542307][T11563] ? __pfx_wiphy_register+0x10/0x10 [ 447.547507][T11563] ? minstrel_ht_alloc+0x72b/0x860 [ 447.552671][T11563] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 447.558794][T11563] ieee80211_register_hw+0x30fb/0x3e10 [ 447.564302][T11563] ? ieee80211_register_hw+0x14f1/0x3e10 [ 447.569968][T11563] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 447.575811][T11563] ? __asan_memset+0x23/0x50 [ 447.580424][T11563] ? __hrtimer_init+0x170/0x250 [ 447.585301][T11563] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 447.591060][T11563] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 447.597136][T11563] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 447.603734][T11563] ? kstrndup+0x5c/0xb0 [ 447.607892][T11563] ? __asan_memcpy+0x40/0x70 [ 447.612475][T11563] hwsim_new_radio_nl+0xece/0x2290 [ 447.617613][T11563] ? __pfx___nla_validate_parse+0x10/0x10 [ 447.623362][T11563] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 447.628963][T11563] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 447.635321][T11563] genl_rcv_msg+0xb14/0xec0 [ 447.639841][T11563] ? mark_lock+0x9a/0x360 [ 447.644186][T11563] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.649200][T11563] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 447.655103][T11563] ? __pfx_lock_acquire+0x10/0x10 [ 447.660123][T11563] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 447.665674][T11563] ? __pfx___might_resched+0x10/0x10 [ 447.670958][T11563] netlink_rcv_skb+0x1e3/0x430 [ 447.675724][T11563] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.680766][T11563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.686048][T11563] ? __netlink_deliver_tap+0x77e/0x7c0 [ 447.691503][T11563] genl_rcv+0x28/0x40 [ 447.695484][T11563] netlink_unicast+0x7f6/0x990 [ 447.700251][T11563] ? __pfx_netlink_unicast+0x10/0x10 [ 447.705555][T11563] ? __virt_addr_valid+0x183/0x530 [ 447.710704][T11563] ? __check_object_size+0x49c/0x900 [ 447.715978][T11563] ? bpf_lsm_netlink_send+0x9/0x10 [ 447.721086][T11563] netlink_sendmsg+0x8e4/0xcb0 [ 447.725867][T11563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.731165][T11563] ? __import_iovec+0x536/0x820 [ 447.736010][T11563] ? aa_sock_msg_perm+0x91/0x160 [ 447.740939][T11563] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 447.746217][T11563] ? security_socket_sendmsg+0x87/0xb0 [ 447.751667][T11563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.756938][T11563] __sock_sendmsg+0x221/0x270 [ 447.761613][T11563] ____sys_sendmsg+0x525/0x7d0 [ 447.766378][T11563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.771664][T11563] __sys_sendmsg+0x2b0/0x3a0 [ 447.776263][T11563] ? __pfx___sys_sendmsg+0x10/0x10 [ 447.781429][T11563] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.787751][T11563] ? do_syscall_64+0x100/0x230 [ 447.792519][T11563] ? do_syscall_64+0xb6/0x230 [ 447.797193][T11563] do_syscall_64+0xf3/0x230 [ 447.801684][T11563] ? clear_bhb_loop+0x35/0x90 [ 447.806353][T11563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.812233][T11563] RIP: 0033:0x7fab2bf779f9 [ 447.816634][T11563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.836228][T11563] RSP: 002b:00007fab2cc61048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.844645][T11563] RAX: ffffffffffffffda RBX: 00007fab2c105f80 RCX: 00007fab2bf779f9 [ 447.852605][T11563] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 447.860566][T11563] RBP: 00007fab2bfe58ee R08: 0000000000000000 R09: 0000000000000000 [ 447.868566][T11563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.876535][T11563] R13: 000000000000000b R14: 00007fab2c105f80 R15: 00007ffee936e5e8 [ 447.884524][T11563] [ 447.930705][T11318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.030436][T11318] veth0_vlan: entered promiscuous mode [ 448.091998][T11318] veth1_vlan: entered promiscuous mode [ 448.172037][T11318] veth0_macvtap: entered promiscuous mode [ 448.202472][T11318] veth1_macvtap: entered promiscuous mode [ 448.294511][T11318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.337414][T11318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.369819][T11318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.419417][T11318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.448191][T11318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.489375][T11318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.511074][T11318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.533100][T11318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.563174][T11318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.605556][T11318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.646018][T11318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.673349][ T5275] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 448.680745][T11318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.703158][T11318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.711877][T11318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.861808][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.873592][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 448.886807][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.902447][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.921296][ T5275] usb 2-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.935926][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.947487][ T5275] usb 2-1: config 0 interface 0 has no altsetting 0 [ 448.955604][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.977842][ T5275] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 448.992691][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.026745][ T5275] usb 2-1: config 0 descriptor?? [ 449.073302][ T5275] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 451.240724][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 451.406452][ T5280] usb 2-1: USB disconnect, device number 5 [ 452.209555][T11657] bridge0: port 3(netdevsim0) entered blocking state [ 452.221712][T11657] bridge0: port 3(netdevsim0) entered disabled state [ 452.235179][T11657] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 452.260073][T11657] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 452.279068][T11657] bridge0: port 3(netdevsim0) entered blocking state [ 452.286382][T11657] bridge0: port 3(netdevsim0) entered forwarding state [ 452.650996][T11666] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 452.990334][ T2545] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.003215][ T5280] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 453.032878][T11677] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1476'. [ 453.233349][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 453.242873][ T5280] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.253411][ T5280] usb 3-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.267380][ T5280] usb 3-1: config 0 interface 0 has no altsetting 0 [ 453.274407][ T5280] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 453.283595][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.294967][ T5280] usb 3-1: config 0 descriptor?? [ 453.302163][ T5280] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 453.832020][T11694] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 454.078529][T11701] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.172125][ T2545] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.216838][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.230263][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.243763][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.253994][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.262176][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 454.270108][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.325153][ T2545] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.452193][ T2545] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.698477][ T2545] bridge_slave_1: left allmulticast mode [ 454.707894][ T2545] bridge_slave_1: left promiscuous mode [ 454.715122][ T2545] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.726095][ T2545] bridge_slave_0: left allmulticast mode [ 454.731753][ T2545] bridge_slave_0: left promiscuous mode [ 454.738820][ T2545] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.151554][ T2545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.162607][ T2545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.178341][ T2545] bond0 (unregistering): Released all slaves [ 455.279456][T11720] bridge0: port 3(netdevsim0) entered blocking state [ 455.302333][T11720] bridge0: port 3(netdevsim0) entered disabled state [ 455.315836][T11720] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 455.327771][T11720] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 455.337024][T11720] bridge0: port 3(netdevsim0) entered blocking state [ 455.343867][T11720] bridge0: port 3(netdevsim0) entered forwarding state [ 455.533414][T11704] chnl_net:caif_netlink_parms(): no params data found [ 455.820009][ T5280] usb 3-1: USB disconnect, device number 13 [ 455.879402][T11704] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.906769][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.918278][T11704] bridge_slave_0: entered allmulticast mode [ 455.949063][T11704] bridge_slave_0: entered promiscuous mode [ 455.997042][ T2545] hsr_slave_0: left promiscuous mode [ 456.016452][ T2545] hsr_slave_1: left promiscuous mode [ 456.032630][ T2545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.040592][ T2545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.049214][ T2545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.057949][ T2545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.099508][ T2545] veth1_macvtap: left promiscuous mode [ 456.107803][ T2545] veth0_macvtap: left promiscuous mode [ 456.113758][ T2545] veth1_vlan: left promiscuous mode [ 456.120301][ T2545] veth0_vlan: left promiscuous mode [ 456.313230][ T5238] Bluetooth: hci1: command tx timeout [ 457.040517][ T2545] team0 (unregistering): Port device team_slave_1 removed [ 457.110145][ T2545] team0 (unregistering): Port device team_slave_0 removed [ 457.608685][T11704] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.618323][T11704] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.626150][T11704] bridge_slave_1: entered allmulticast mode [ 457.634739][T11704] bridge_slave_1: entered promiscuous mode [ 457.762694][T11704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.801211][ C1] eth0: bad gso: type: 1, size: 1408 [ 457.807453][T11704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.186659][T11704] team0: Port device team_slave_0 added [ 458.201062][T11704] team0: Port device team_slave_1 added [ 458.383182][ T5238] Bluetooth: hci1: command tx timeout [ 459.289006][T11704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.308771][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.359080][T11704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.373973][T11704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.380934][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.470966][T11704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.649967][T11704] hsr_slave_0: entered promiscuous mode [ 459.675698][T11704] hsr_slave_1: entered promiscuous mode [ 459.692540][T11704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.825326][T11704] Cannot create hsr debugfs directory [ 460.463277][ T5238] Bluetooth: hci1: command tx timeout [ 462.545076][ T5238] Bluetooth: hci1: command tx timeout [ 462.582306][ C1] eth0: bad gso: type: 1, size: 1408 [ 462.908151][T11704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.937516][T11704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.948818][T11704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.961679][T11704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.079171][T11704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.110070][T11704] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.126618][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.133965][ T5308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.156219][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.163481][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.389909][T11861] loop1: detected capacity change from 0 to 40427 [ 463.397709][T11861] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 463.405195][T11704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.412649][T11861] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 463.427606][T11861] F2FS-fs (loop1): invalid crc value [ 463.439883][T11861] F2FS-fs (loop1): Found nat_bits in checkpoint [ 463.471841][T11704] veth0_vlan: entered promiscuous mode [ 463.491395][T11704] veth1_vlan: entered promiscuous mode [ 463.532037][T11861] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 463.536899][T11704] veth0_macvtap: entered promiscuous mode [ 463.541199][T11861] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 463.559594][T11704] veth1_macvtap: entered promiscuous mode [ 463.623652][T10400] syz-executor: attempt to access beyond end of device [ 463.623652][T10400] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 463.638343][T10400] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 463.639295][T11704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.674349][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.686523][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.698581][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.716240][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.874667][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.899383][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.034999][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.082742][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.131070][T11704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.262880][T11704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.320675][T11704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.369315][T11704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.407575][T11704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.770082][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.843390][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.923989][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.971475][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.474687][ T5354] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 465.663975][ T5354] usb 3-1: no configurations [ 465.668624][ T5354] usb 3-1: can't read configurations, error -22 [ 465.947085][ T5354] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 466.146086][ T5354] usb 3-1: no configurations [ 466.182914][ T5354] usb 3-1: can't read configurations, error -22 [ 466.228636][ T5354] usb usb3-port1: attempt power cycle [ 466.693522][ T5354] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 466.796928][ T5354] usb 3-1: no configurations [ 466.839595][ T5354] usb 3-1: can't read configurations, error -22 [ 467.068781][ T5354] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 467.139615][ T5354] usb 3-1: no configurations [ 467.177419][ T5354] usb 3-1: can't read configurations, error -22 [ 467.248674][ T5354] usb usb3-port1: unable to enumerate USB device [ 468.028628][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1566'. [ 468.043229][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1566'. [ 473.854989][T12035] overlayfs: failed to resolve './file1': -2 [ 474.700078][ T6041] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.969589][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.993392][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.003492][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.012884][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.023388][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 476.031120][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.437066][ T6041] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.684090][ T6041] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.035306][ T6041] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.437949][T12069] chnl_net:caif_netlink_parms(): no params data found [ 477.863665][ T6041] bridge_slave_1: left allmulticast mode [ 477.886485][ T6041] bridge_slave_1: left promiscuous mode [ 477.915652][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.993669][ T6041] bridge_slave_0: left allmulticast mode [ 477.999348][ T6041] bridge_slave_0: left promiscuous mode [ 478.065732][ T5239] Bluetooth: hci1: command tx timeout [ 478.075938][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.153928][ T5239] Bluetooth: hci4: command 0x0406 tx timeout [ 479.619835][T12123] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 480.213078][ T5238] Bluetooth: hci1: command tx timeout [ 481.773530][ T6041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.793509][ T6041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.815764][ T6041] bond0 (unregistering): Released all slaves [ 482.047926][T12069] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.055306][T12069] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.064068][T12069] bridge_slave_0: entered allmulticast mode [ 482.071856][T12069] bridge_slave_0: entered promiscuous mode [ 482.105121][T12069] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.113757][T12069] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.121281][T12069] bridge_slave_1: entered allmulticast mode [ 482.129778][T12069] bridge_slave_1: entered promiscuous mode [ 482.228188][ T5238] Bluetooth: hci1: command tx timeout [ 482.274080][T12069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.421042][T12069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.708800][T12069] team0: Port device team_slave_0 added [ 482.760272][ T6041] hsr_slave_0: left promiscuous mode [ 482.819913][T12170] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 482.827539][ T6041] hsr_slave_1: left promiscuous mode [ 482.847181][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.860952][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.879716][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.898385][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.948458][ T6041] veth1_macvtap: left promiscuous mode [ 482.960213][ T6041] veth0_macvtap: left promiscuous mode [ 482.967407][ T6041] veth1_vlan: left promiscuous mode [ 482.979912][ T6041] veth0_vlan: left promiscuous mode [ 484.305075][ T5238] Bluetooth: hci1: command tx timeout [ 484.354918][ T6041] team0 (unregistering): Port device team_slave_1 removed [ 484.462840][ T6041] team0 (unregistering): Port device team_slave_0 removed [ 484.933673][T12202] tmpfs: Unknown parameter 'fd' [ 485.521342][T12069] team0: Port device team_slave_1 added [ 485.713329][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.737621][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.812252][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.845817][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.867612][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.001155][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.237384][T12069] hsr_slave_0: entered promiscuous mode [ 486.267708][T12069] hsr_slave_1: entered promiscuous mode [ 486.287690][T12069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.334342][T12069] Cannot create hsr debugfs directory [ 487.335618][T12069] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 487.358792][T12069] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 487.378856][T12069] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 487.398202][T12069] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 487.704109][T12069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.747723][T12069] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.785410][T12265] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.805293][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.812418][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.852032][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.859231][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.388412][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 488.394619][ T5233] Bluetooth: hci3: command 0x0406 tx timeout [ 488.635774][T12069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.401672][T12069] veth0_vlan: entered promiscuous mode [ 489.430416][T12069] veth1_vlan: entered promiscuous mode [ 489.556463][T12069] veth0_macvtap: entered promiscuous mode [ 489.606883][T12069] veth1_macvtap: entered promiscuous mode [ 489.668393][T12069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.705543][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.727322][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.743637][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.754793][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.765058][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.776137][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.787733][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.820532][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.841739][T12069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.888323][T12069] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.903996][T12069] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.917157][T12069] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.926486][T12069] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.152211][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.167826][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.244841][ T2545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.270132][ T2545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.897407][T12330] loop1: detected capacity change from 0 to 128 [ 491.154270][T12330] 9pnet_fd: p9_fd_create_tcp (12330): problem connecting socket to 127.0.0.1 [ 491.522082][T10400] syz-executor (10400) used greatest stack depth: 19152 bytes left [ 491.747400][ T3030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.946283][ T3030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.127856][ T3030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.269944][ T3030] bridge0: port 3(netdevsim0) entered disabled state [ 492.354116][ T3030] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 492.362671][ T3030] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 492.413257][ T3030] bridge0: port 3(netdevsim0) entered disabled state [ 492.474706][ T3030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.538942][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.554603][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.573542][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.597475][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.611122][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 492.619083][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.780419][ T3030] bridge_slave_1: left allmulticast mode [ 492.806795][ T3030] bridge_slave_1: left promiscuous mode [ 492.815591][ T3030] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.838852][ T3030] bridge_slave_0: left allmulticast mode [ 492.858717][ T3030] bridge_slave_0: left promiscuous mode [ 492.877358][ T3030] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.005856][ T3030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.027093][ T3030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.052865][ T3030] bond0 (unregistering): Released all slaves [ 494.703217][ T5239] Bluetooth: hci1: command tx timeout [ 494.746928][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 494.770978][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 494.779244][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 494.788828][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 494.800617][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 494.808621][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 495.015229][ T3030] hsr_slave_0: left promiscuous mode [ 495.032957][ T3030] hsr_slave_1: left promiscuous mode [ 495.041493][ T3030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.060744][ T3030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.071327][ T3030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.158663][ T3030] veth1_macvtap: left promiscuous mode [ 495.168576][ T3030] veth0_macvtap: left promiscuous mode [ 495.182665][ T3030] veth1_vlan: left promiscuous mode [ 495.213315][ T3030] veth0_vlan: left promiscuous mode [ 495.699720][ T3030] team0 (unregistering): Port device macvlan1 removed [ 496.054998][ T3030] team0 (unregistering): Port device team_slave_1 removed [ 496.105008][ T3030] team0 (unregistering): Port device team_slave_0 removed [ 496.606135][T12350] chnl_net:caif_netlink_parms(): no params data found [ 496.783234][ T5238] Bluetooth: hci1: command tx timeout [ 496.869165][ T5238] Bluetooth: hci2: command tx timeout [ 497.001149][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.031515][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.062425][T12350] bridge_slave_0: entered allmulticast mode [ 497.080429][T12350] bridge_slave_0: entered promiscuous mode [ 497.340097][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.364472][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.371782][T12350] bridge_slave_1: entered allmulticast mode [ 497.386248][T12350] bridge_slave_1: entered promiscuous mode [ 497.607561][T12350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.709792][T12350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.744949][T12362] chnl_net:caif_netlink_parms(): no params data found [ 497.861096][T12350] team0: Port device team_slave_0 added [ 497.892252][T12350] team0: Port device team_slave_1 added [ 497.964554][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.980150][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.036502][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.160656][ T3030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.229819][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.237484][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.267018][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.332441][ T3030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.415807][T12350] hsr_slave_0: entered promiscuous mode [ 498.443402][T12350] hsr_slave_1: entered promiscuous mode [ 498.488695][T12350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.499365][T12350] Cannot create hsr debugfs directory [ 498.663798][ T3030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.844024][T12362] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.851698][T12362] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.864647][ T5238] Bluetooth: hci1: command tx timeout [ 498.879017][T12362] bridge_slave_0: entered allmulticast mode [ 498.889350][T12362] bridge_slave_0: entered promiscuous mode [ 498.906797][T12362] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.919227][T12362] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.929407][T12362] bridge_slave_1: entered allmulticast mode [ 498.945662][ T5238] Bluetooth: hci2: command tx timeout [ 498.968029][T12362] bridge_slave_1: entered promiscuous mode [ 499.069363][ T3030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.386507][T12362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.488114][T12362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.515997][T12362] team0: Port device team_slave_0 added [ 500.747779][T12362] team0: Port device team_slave_1 added [ 500.781490][ T3030] bridge_slave_1: left allmulticast mode [ 500.791545][ T3030] bridge_slave_1: left promiscuous mode [ 500.797796][ T3030] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.808608][ T3030] bridge_slave_0: left allmulticast mode [ 500.815161][ T3030] bridge_slave_0: left promiscuous mode [ 500.820984][ T3030] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.945205][ T5238] Bluetooth: hci1: command tx timeout [ 501.033568][ T5238] Bluetooth: hci2: command tx timeout [ 501.586635][ T3030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.614400][ T3030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.632541][ T3030] bond0 (unregistering): Released all slaves [ 501.668114][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.769997][T12362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.796492][T12362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.871245][T12362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.014173][T12362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.038284][T12362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.072142][T12362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.365756][T12362] hsr_slave_0: entered promiscuous mode [ 502.379386][T12362] hsr_slave_1: entered promiscuous mode [ 502.389909][T12362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.419021][T12362] Cannot create hsr debugfs directory [ 502.934124][ T3030] hsr_slave_0: left promiscuous mode [ 502.954973][ T3030] hsr_slave_1: left promiscuous mode [ 502.964931][ T3030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.982491][ T3030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.008122][ T3030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.019233][ T3030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.095134][ T3030] veth1_macvtap: left promiscuous mode [ 503.103848][ T5238] Bluetooth: hci2: command tx timeout [ 503.124531][ T3030] veth0_macvtap: left promiscuous mode [ 503.135229][ T3030] veth1_vlan: left promiscuous mode [ 503.141908][ T3030] veth0_vlan: left promiscuous mode [ 503.638390][ T3030] team0 (unregistering): Port device team_slave_1 removed [ 503.688035][ T3030] team0 (unregistering): Port device team_slave_0 removed [ 504.859936][T12350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.004668][T12350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.041060][T12350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 505.063938][T12350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 505.376268][T12350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.442607][T12350] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.484811][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.491966][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.527622][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.534839][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.700554][T12362] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 505.712556][T12362] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 505.741412][T12362] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 505.780729][T12362] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 506.054002][T12362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.110842][T12362] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.167375][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.174575][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.195106][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.202239][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.311655][T12350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.347648][T12587] fuse: Bad value for 'fd' [ 506.613896][T12350] veth0_vlan: entered promiscuous mode [ 506.686817][T12350] veth1_vlan: entered promiscuous mode [ 506.722629][T12350] veth0_macvtap: entered promiscuous mode [ 506.733987][T12350] veth1_macvtap: entered promiscuous mode [ 506.810879][T12350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.855973][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.903122][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.952355][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.986044][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.037009][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.068738][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.101152][T12350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.145652][T12350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.174421][T12350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.194307][T12350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.216786][T12350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.277557][T12362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.569492][T12362] veth0_vlan: entered promiscuous mode [ 507.627497][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.650669][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.680914][T12362] veth1_vlan: entered promiscuous mode [ 507.812325][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.833078][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.909819][T12362] veth0_macvtap: entered promiscuous mode [ 507.966405][T12362] veth1_macvtap: entered promiscuous mode [ 508.054195][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.090091][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.138803][T12362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.194061][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.248510][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.278260][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.327790][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.353460][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.389987][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.413599][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.431567][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.467230][T12362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.526052][T12362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.546504][T12362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.569023][T12362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.709522][T12362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.789788][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.817709][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.898065][ T2545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.928317][T12635] sit0: entered promiscuous mode [ 509.936559][T12635] sit0: entered allmulticast mode [ 509.943698][ T2545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.231323][T12644] loop1: detected capacity change from 0 to 256 [ 510.263704][T12644] msdos: Bad value for 'gid' [ 510.268361][T12644] msdos: Bad value for 'gid' [ 510.560980][T12651] loop1: detected capacity change from 0 to 128 [ 510.589415][T12651] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 510.901523][T12655] loop1: detected capacity change from 0 to 128 [ 511.321117][T12658] 9pnet_fd: p9_fd_create_tcp (12658): problem connecting socket to 127.0.0.1 [ 512.040540][ T5238] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 512.049017][ T5238] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 512.110127][ T2545] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.355643][ T2545] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.486904][ T2545] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.659067][ T2545] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.941493][T12676] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1806'. [ 512.972658][ T2545] bridge_slave_1: left allmulticast mode [ 512.993529][ T2545] bridge_slave_1: left promiscuous mode [ 513.000683][ T2545] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.101655][ T2545] bridge_slave_0: left allmulticast mode [ 513.123026][ T2545] bridge_slave_0: left promiscuous mode [ 513.146491][ T2545] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.363142][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 513.401402][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 513.433232][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 513.441382][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 513.450463][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 513.463805][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 513.473505][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 513.544550][T12691] netlink: 392 bytes leftover after parsing attributes in process `syz.0.1813'. [ 513.583470][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 513.594977][ T25] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.618027][ T25] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.629236][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 513.663406][ T25] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 513.682659][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.710500][ T25] usb 3-1: config 0 descriptor?? [ 513.996180][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 514.007135][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 514.016364][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 514.031609][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 514.039919][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 514.047623][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 514.135202][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 514.144399][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 514.181369][ T25] usb 3-1: USB disconnect, device number 18 [ 514.296130][ T2545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.316896][ T2545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.335791][ T2545] bond0 (unregistering): Released all slaves [ 514.390770][T12693] veth1_virt_wifi: entered allmulticast mode [ 515.111915][T12712] loop2: detected capacity change from 0 to 16 [ 515.451956][T12712] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0xd248270d, 0x02d6543f expected [ 515.476655][T12712] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1820'. [ 515.504597][T12712] loop2: detected capacity change from 0 to 1024 [ 516.843158][ T5239] Bluetooth: hci1: command tx timeout [ 516.843791][ T5238] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 516.849907][ T5239] Bluetooth: hci2: command tx timeout [ 516.858432][ T5238] Bluetooth: hci4: Injecting HCI hardware error event [ 516.874051][ T5238] Bluetooth: hci4: hardware error 0x00 [ 518.863209][ T5239] Bluetooth: hci1: command tx timeout [ 519.524754][ T5239] Bluetooth: hci2: command tx timeout [ 519.593560][T12712] fscrypt: Error allocating hmac(sha512): -2 [ 520.172662][T12685] chnl_net:caif_netlink_parms(): no params data found [ 520.655013][T12685] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.674934][T12685] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.682132][T12685] bridge_slave_0: entered allmulticast mode [ 520.702735][T12685] bridge_slave_0: entered promiscuous mode [ 520.762514][T12685] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.771735][T12685] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.790742][T12685] bridge_slave_1: entered allmulticast mode [ 520.798855][T12685] bridge_slave_1: entered promiscuous mode [ 520.906326][ T2545] hsr_slave_0: left promiscuous mode [ 520.923510][ T2545] hsr_slave_1: left promiscuous mode [ 520.930260][ T2545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.939549][ T2545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.949150][ T5239] Bluetooth: hci1: command tx timeout [ 520.994020][ T2545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.001436][ T2545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.054544][ T2545] veth1_macvtap: left promiscuous mode [ 521.066367][ T2545] veth0_macvtap: left promiscuous mode [ 521.071991][ T2545] veth1_vlan: left promiscuous mode [ 521.089667][ T2545] veth0_vlan: left promiscuous mode [ 521.586583][ T5239] Bluetooth: hci2: command tx timeout [ 521.707446][ T2545] team0 (unregistering): Port device team_slave_1 removed [ 521.750885][ T2545] team0 (unregistering): Port device team_slave_0 removed [ 521.753690][ T5238] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 522.405524][T12685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.418667][T12685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.642022][T12685] team0: Port device team_slave_0 added [ 522.651544][T12685] team0: Port device team_slave_1 added [ 523.024887][ T5238] Bluetooth: hci1: command tx timeout [ 523.085018][T12685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.091998][T12685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.157990][T12685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.186548][T12685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.203151][T12685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.261444][T12685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.409510][T12685] hsr_slave_0: entered promiscuous mode [ 523.423633][T12685] hsr_slave_1: entered promiscuous mode [ 523.443479][T12685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.451099][T12685] Cannot create hsr debugfs directory [ 523.569674][T12699] chnl_net:caif_netlink_parms(): no params data found [ 523.663094][ T5238] Bluetooth: hci2: command tx timeout [ 523.769164][ T2545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.939943][T12771] loop4: detected capacity change from 0 to 512 [ 523.959015][T12771] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 523.961775][ T2545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.979338][T12773] loop2: detected capacity change from 0 to 512 [ 524.029738][T12773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.044035][T12777] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 524.044035][T12777] The task syz.4.1836 (12777) triggered the difference, watch for misbehavior. [ 524.050322][T12773] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.109763][ T2545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.262534][ T2545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.331873][T12699] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.342833][T12699] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.357155][T12699] bridge_slave_0: entered allmulticast mode [ 524.367507][T12699] bridge_slave_0: entered promiscuous mode [ 524.547243][T12699] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.676283][T12699] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.854805][T12699] bridge_slave_1: entered allmulticast mode [ 524.880626][T12699] bridge_slave_1: entered promiscuous mode [ 525.039380][T10274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.181628][T12699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.194390][T12794] syz1: rxe_newlink: already configured on bond_slave_1 [ 525.257385][T12699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.453127][ T5354] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 525.493464][T12699] team0: Port device team_slave_0 added [ 525.511149][T12699] team0: Port device team_slave_1 added [ 525.675342][ T5354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 525.690563][ T2545] bridge_slave_1: left allmulticast mode [ 525.704304][ T2545] bridge_slave_1: left promiscuous mode [ 525.710136][ T2545] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.713419][ T5354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 525.736549][ T5354] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.743861][ T2545] bridge_slave_0: left allmulticast mode [ 525.753037][ T5354] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.762409][ T2545] bridge_slave_0: left promiscuous mode [ 525.771158][ T5354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.771485][ T2545] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.800360][ T5354] usb 1-1: config 0 descriptor?? [ 525.811461][T12792] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.266287][ T5354] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 526.314536][ T5354] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 526.600935][ T2545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.619659][ T2545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.638970][ T2545] bond0 (unregistering): Released all slaves [ 526.653423][T12699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.673154][T12699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.699825][T12699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.775925][T12699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.784098][T12699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.811997][T12699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.905274][T12811] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 526.913058][T12811] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 527.990708][T12699] hsr_slave_0: entered promiscuous mode [ 528.006741][T12699] hsr_slave_1: entered promiscuous mode [ 528.019112][T12699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.028463][T12699] Cannot create hsr debugfs directory [ 528.197650][T12685] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 528.399812][T12685] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 528.743813][ T2545] hsr_slave_0: left promiscuous mode [ 528.802021][T12823] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 528.827646][ T2545] hsr_slave_1: left promiscuous mode [ 528.896987][ T2545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.120585][ T2545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.150019][ T2545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.165493][ T2545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.198494][ T2545] veth1_macvtap: left promiscuous mode [ 529.223275][ T2545] veth0_macvtap: left promiscuous mode [ 529.229046][ T2545] veth1_vlan: left promiscuous mode [ 529.235043][ T2545] veth0_vlan: left promiscuous mode [ 530.622366][ T2545] team0 (unregistering): Port device team_slave_1 removed [ 530.718852][ T2545] team0 (unregistering): Port device team_slave_0 removed [ 531.428296][T12685] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.465173][T12835] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 531.531380][T12685] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.645403][T12840] loop2: detected capacity change from 0 to 16 [ 531.654138][ T5308] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 531.663336][T12840] erofs: (device loop2): mounted with root inode @ nid 36. [ 532.601612][T12685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.655345][ T5308] usb 1-1: device reset changed ep0 maxpacket size! [ 532.702482][T12685] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.760435][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.767617][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.782105][ T8] usb 1-1: USB disconnect, device number 15 [ 532.811564][T10274] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 532.833468][T10274] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 532.862309][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.869524][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.983933][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 533.151744][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.205220][T12699] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 533.227092][T12699] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 533.367801][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.401536][T12853] fuse: Bad value for 'fd' [ 533.412139][T12699] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 533.446564][T12699] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 533.555707][T12846] loop4: detected capacity change from 0 to 32768 [ 533.574333][T12846] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1861 (12846) [ 533.600462][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.630267][T12846] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 533.654144][T12846] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 533.662819][T12846] BTRFS info (device loop4): using free-space-tree [ 533.763848][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 533.853194][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 533.876482][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 533.903239][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 533.945729][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.028526][T10402] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 534.056112][T12685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.106585][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 534.156556][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 534.165850][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 534.180794][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 534.213740][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 534.222198][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 534.376034][T12685] veth0_vlan: entered promiscuous mode [ 534.434950][T12880] loop4: detected capacity change from 0 to 1024 [ 534.494044][T12880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.511725][T12699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.625005][T12685] veth1_vlan: entered promiscuous mode [ 534.682918][ T12] bridge_slave_1: left allmulticast mode [ 534.698870][ T12] bridge_slave_1: left promiscuous mode [ 534.719267][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.741583][ T12] bridge_slave_0: left allmulticast mode [ 534.761097][ T12] bridge_slave_0: left promiscuous mode [ 534.767921][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.312275][ T5239] Bluetooth: hci4: command tx timeout [ 536.657257][T10402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.176290][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.249605][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.323212][ T12] infiniband syz1: set down [ 537.332910][ T12] bond0 (unregistering): Released all slaves [ 537.409532][T12685] veth0_macvtap: entered promiscuous mode [ 537.481824][T12699] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.569714][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.576929][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.680697][T12699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 537.697406][T12699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.711649][T12685] veth1_macvtap: entered promiscuous mode [ 537.745697][T12685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.760974][T12685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.772840][T12685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.791909][T12685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.808924][T12685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.822668][T12685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.833444][T12685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.844425][T12685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.911248][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.918443][ T5354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.974863][T12685] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.996842][T12685] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.015642][T12685] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.030474][T12685] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.154281][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.180558][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.221767][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.232905][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.385418][ T5239] Bluetooth: hci4: command tx timeout [ 539.464216][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 539.702215][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 539.734346][ T8] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.763694][ T8] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.783044][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 539.794691][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 539.813109][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.856480][ T8] usb 1-1: config 0 descriptor?? [ 539.916934][ T12] hsr_slave_0: left promiscuous mode [ 539.929754][ T12] hsr_slave_1: left promiscuous mode [ 539.937517][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.945972][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.954542][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.975494][ T12] veth1_macvtap: left promiscuous mode [ 539.981009][ T12] veth0_macvtap: left promiscuous mode [ 539.986788][ T12] veth1_vlan: left promiscuous mode [ 539.992086][ T12] veth0_vlan: left promiscuous mode [ 540.166443][ T12] team0 (unregistering): Port device macvlan1 removed [ 540.281452][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 540.289078][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 540.302021][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 540.308823][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 540.324383][ T8] usb 1-1: USB disconnect, device number 17 [ 540.463859][ T5239] Bluetooth: hci4: command tx timeout [ 540.498564][ T5239] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 540.689056][ T12] team0 (unregistering): Port device team_slave_1 removed [ 540.771223][ T12] team0 (unregistering): Port device team_slave_0 removed [ 540.781279][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 540.804219][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 540.812309][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 540.820547][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 540.828384][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 540.917716][ T1057] smc: removing ib device syz1 [ 540.928224][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 541.189711][T12917] fuse: Bad value for 'fd' [ 542.543568][ T5239] Bluetooth: hci4: command tx timeout [ 543.027150][ T5239] Bluetooth: hci1: command tx timeout [ 543.763199][T12699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.770438][T12877] chnl_net:caif_netlink_parms(): no params data found [ 544.222949][T12932] bridge0: port 3(netdevsim0) entered blocking state [ 544.245012][T12932] bridge0: port 3(netdevsim0) entered disabled state [ 544.251908][T12932] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 544.272437][T12932] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 544.282701][T12932] bridge0: port 3(netdevsim0) entered blocking state [ 544.289557][T12932] bridge0: port 3(netdevsim0) entered forwarding state [ 544.433502][T12877] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.440800][T12877] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.448157][T12877] bridge_slave_0: entered allmulticast mode [ 544.455702][T12877] bridge_slave_0: entered promiscuous mode [ 544.483808][T12699] veth0_vlan: entered promiscuous mode [ 544.497507][T12699] veth1_vlan: entered promiscuous mode [ 544.528961][T12699] veth0_macvtap: entered promiscuous mode [ 544.540830][T12699] veth1_macvtap: entered promiscuous mode [ 544.578915][T12877] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.595945][T12877] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.605755][T12877] bridge_slave_1: entered allmulticast mode [ 544.617617][T12877] bridge_slave_1: entered promiscuous mode [ 544.677112][ T12] IPVS: stop unused estimator thread 0... [ 544.719970][T12877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.104582][ T5239] Bluetooth: hci1: command tx timeout [ 545.265613][T12877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.411619][T12699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.429351][T12699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.470837][T12699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.520330][T12877] team0: Port device team_slave_0 added [ 545.578480][T12699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.590404][T12699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.600685][T12699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.613901][T12699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.624026][T12699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.635603][T12699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.647609][T12699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.708425][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.736346][T12877] team0: Port device team_slave_1 added [ 545.808220][T12877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.819219][T12877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.852857][T12877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.899022][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.919396][T12699] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.928595][T12699] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.939353][T12699] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.948692][T12699] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.975813][T12877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.989170][T12877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.019170][T12877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.075909][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.131724][T12913] chnl_net:caif_netlink_parms(): no params data found [ 546.185511][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.249234][T12877] hsr_slave_0: entered promiscuous mode [ 546.259356][T12877] hsr_slave_1: entered promiscuous mode [ 546.515459][T12913] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.523476][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.533238][T12913] bridge_slave_0: entered allmulticast mode [ 546.545625][T12913] bridge_slave_0: entered promiscuous mode [ 546.559091][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.686931][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.695274][T12913] bridge_slave_1: entered allmulticast mode [ 546.702201][T12913] bridge_slave_1: entered promiscuous mode [ 547.183430][ T5239] Bluetooth: hci1: command tx timeout [ 548.039334][ T12] bridge_slave_1: left allmulticast mode [ 548.045747][ T12] bridge_slave_1: left promiscuous mode [ 548.051662][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.072525][ T12] bridge_slave_0: left allmulticast mode [ 548.078414][ T12] bridge_slave_0: left promiscuous mode [ 548.085513][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.882593][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.895455][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.899134][T12970] loop4: detected capacity change from 0 to 32768 [ 548.913325][T12970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1888 (12970) [ 548.914119][ T12] bond0 (unregistering): Released all slaves [ 548.937580][T12970] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 548.948145][T12970] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 548.957213][T12970] BTRFS info (device loop4): using free-space-tree [ 548.996699][T12913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.057025][T12913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.101277][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.112714][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.150986][T10402] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 549.187381][T12913] team0: Port device team_slave_0 added [ 549.273298][ T5239] Bluetooth: hci1: command tx timeout [ 549.348190][T12913] team0: Port device team_slave_1 added [ 549.512914][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.530649][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.632903][T12913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.642324][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.674238][T12913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.763735][T12913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.770710][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.804159][T12913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.955567][ T12] hsr_slave_0: left promiscuous mode [ 549.994190][ T12] hsr_slave_1: left promiscuous mode [ 550.021084][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.039364][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.049317][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.064559][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.118228][ T12] veth1_macvtap: left promiscuous mode [ 550.129754][ T12] veth0_macvtap: left promiscuous mode [ 550.139115][ T12] veth1_vlan: left promiscuous mode [ 550.151788][ T12] veth0_vlan: left promiscuous mode [ 551.019773][ T12] team0 (unregistering): Port device team_slave_1 removed [ 551.104215][ T12] team0 (unregistering): Port device team_slave_0 removed [ 553.837255][T12913] hsr_slave_0: entered promiscuous mode [ 553.870143][T12913] hsr_slave_1: entered promiscuous mode [ 553.890160][T12913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.906805][T12913] Cannot create hsr debugfs directory [ 554.898306][T13011] loop1: detected capacity change from 0 to 512 [ 554.950695][T13011] EXT4-fs: Ignoring removed bh option [ 554.998339][T13011] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.058254][T13011] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.179546][T13010] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 555.220867][T13010] EXT4-fs (loop1): Remounting filesystem read-only [ 555.353719][T12699] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 555.365312][T12877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 555.388459][ T2915] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 555.419162][T12877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 555.426019][ T2915] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 555.459887][T12877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 555.478814][T13030] loop4: detected capacity change from 0 to 1024 [ 555.536612][T12877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 556.018416][T13030] EXT4-fs: Ignoring removed orlov option [ 556.123326][T13030] EXT4-fs (loop4): Test dummy encryption mode enabled [ 556.132693][T13030] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 556.209400][T13030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.407777][T12913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 556.540900][T13030] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 556.581316][T12877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.612096][T12913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 556.681284][T12913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 558.447683][T12913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 558.469459][T10402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.555756][T12877] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.600980][T12877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 558.611464][T12877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.747616][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.754828][ T5308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.785174][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.792357][ T5308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.060530][ C1] eth0: bad gso: type: 1, size: 1408 [ 560.086032][T13065] loop4: detected capacity change from 0 to 512 [ 560.134799][T12913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.170938][T12913] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.236473][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.243689][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.260308][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.267518][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.311038][T12877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.437792][T13065] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 560.455301][ T5276] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 560.470500][T12877] veth0_vlan: entered promiscuous mode [ 561.060051][ T5276] usb 1-1: Using ep0 maxpacket: 32 [ 561.157923][T12877] veth1_vlan: entered promiscuous mode [ 561.166430][ T5276] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 561.194668][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.288432][ T5276] usb 1-1: Product: syz [ 561.309061][ T5276] usb 1-1: Manufacturer: syz [ 561.330345][T12877] veth0_macvtap: entered promiscuous mode [ 561.344097][ T5276] usb 1-1: SerialNumber: syz [ 561.362844][ T5276] usb 1-1: config 0 descriptor?? [ 561.386205][T12877] veth1_macvtap: entered promiscuous mode [ 561.469161][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.523014][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.558248][T12877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.611193][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.632574][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.645927][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.664173][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.680464][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.692432][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.710065][T12877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.750008][T12877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.778851][T12877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.796170][T12877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.812180][T12877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.825428][ T5276] airspy 1-1:0.0: Board ID: 00 [ 561.830229][ T5276] airspy 1-1:0.0: Firmware version: [ 561.915253][T12913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.068090][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.100110][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.212236][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.253098][T12913] veth0_vlan: entered promiscuous mode [ 562.258784][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.301648][T12913] veth1_vlan: entered promiscuous mode [ 562.436959][T13080] loop1: detected capacity change from 0 to 131072 [ 562.437971][ T5276] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 562.453225][T13080] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 562.462655][T13080] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 562.478741][T13080] F2FS-fs (loop1): invalid crc value [ 562.481088][T12913] veth0_macvtap: entered promiscuous mode [ 562.546993][T13080] F2FS-fs (loop1): Found nat_bits in checkpoint [ 562.555921][ T5276] airspy 1-1:0.0: Registered as swradio16 [ 562.587808][T12913] veth1_macvtap: entered promiscuous mode [ 562.618101][ T5276] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 562.635313][T13080] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 562.642388][T13080] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 562.688566][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.704378][ T5276] usb 1-1: USB disconnect, device number 18 [ 562.775623][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.785690][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.796413][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.812811][T12913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.838636][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.896777][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.952803][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.965020][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.974899][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.985372][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.995591][T12913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.006233][T12913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.023300][T12913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.459247][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.626254][T13100] F2FS-fs (loop1): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 563.680510][T13100] F2FS-fs (loop1): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 563.828479][T12913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.867458][T12913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.886568][T12913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.943452][T12913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.956975][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.004480][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.215971][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.252909][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.211113][T13126] loop4: detected capacity change from 0 to 764 [ 566.885910][T13114] loop2: detected capacity change from 0 to 32768 [ 566.948434][T13114] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1917 (13114) [ 566.991752][T13139] loop4: detected capacity change from 0 to 4096 [ 567.041002][T13114] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 567.130821][T13114] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 567.140973][T13114] BTRFS info (device loop2): using free-space-tree [ 567.285956][T13154] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 567.508316][T12877] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 568.442878][T13167] overlayfs: invalid redirect (./file1) [ 569.816570][T13171] evm: overlay not supported [ 571.865473][T13186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.828671][ T2545] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.256706][ T2545] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.461886][ T2545] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.622554][ T2545] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.825038][ T2545] bridge_slave_1: left allmulticast mode [ 573.830733][ T2545] bridge_slave_1: left promiscuous mode [ 573.852537][ T2545] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.864015][ T2545] bridge_slave_0: left allmulticast mode [ 573.869684][ T2545] bridge_slave_0: left promiscuous mode [ 573.877292][ T2545] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.345141][T13206] loop1: detected capacity change from 0 to 1024 [ 574.374059][T13206] EXT4-fs: Ignoring removed orlov option [ 574.435927][T13206] EXT4-fs (loop1): Test dummy encryption mode enabled [ 574.453146][T13206] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 574.494798][T13212] loop4: detected capacity change from 0 to 512 [ 574.526698][T13212] EXT4-fs: Ignoring removed bh option [ 574.564531][T13206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.611131][T13212] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.681208][T13212] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.835394][T13212] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 574.859479][T12699] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.891009][T13212] EXT4-fs (loop4): Remounting filesystem read-only [ 574.980977][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.999472][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 575.008948][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 575.029986][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 575.051906][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 575.059584][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.519949][ T2545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.650936][ T2545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.750609][ T2545] bond0 (unregistering): Released all slaves [ 576.234274][T10402] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 576.258699][ T35] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 576.323132][ T35] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 576.346213][ T29] audit: type=1326 audit(1722638251.386:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.1.1938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03719779f9 code=0x0 [ 576.412506][T13231] loop1: detected capacity change from 0 to 1024 [ 576.584695][T13231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.597369][T13231] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.977644][T13219] chnl_net:caif_netlink_parms(): no params data found [ 577.103338][ T5239] Bluetooth: hci1: command tx timeout [ 577.952463][T12699] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.403517][ T5239] Bluetooth: hci1: command tx timeout [ 579.778755][ T5239] Bluetooth: hci2: link tx timeout [ 579.784630][ T5239] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.253541][ T2545] hsr_slave_0: left promiscuous mode [ 580.281613][ T2545] hsr_slave_1: left promiscuous mode [ 580.341785][ T2545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.368831][ T2545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.401275][ T2545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.428132][ T2545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.457635][T13269] overlayfs: invalid redirect (./file1) [ 580.607881][ T2545] veth1_macvtap: left promiscuous mode [ 580.618026][ T2545] veth0_macvtap: left promiscuous mode [ 580.624437][ T2545] veth1_vlan: left promiscuous mode [ 580.629922][ T2545] veth0_vlan: left promiscuous mode [ 581.423211][ T5239] Bluetooth: hci1: command tx timeout [ 581.823093][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 583.680933][ T5238] Bluetooth: hci1: command tx timeout [ 584.383007][ C0] DEBUG: waiting rtnl_mutex for 501 jiffies. [ 584.389040][ C0] task:kworker/0:6 state:D stack:21360 pid:5279 tgid:5279 ppid:2 flags:0x00004000 [ 584.399284][ C0] Workqueue: events linkwatch_event [ 584.404552][ C0] Call Trace: [ 584.407841][ C0] [ 584.410787][ C0] __schedule+0x1800/0x4a60 [ 584.415375][ C0] ? __pfx___schedule+0x10/0x10 [ 584.420250][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 584.426298][ C0] ? __pfx_lock_release+0x10/0x10 [ 584.431346][ C0] ? kick_pool+0x1bd/0x620 [ 584.435828][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.441050][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 584.446304][ C0] ? schedule+0x90/0x320 [ 584.450568][ C0] schedule+0x14b/0x320 [ 584.454787][ C0] schedule_preempt_disabled+0x13/0x30 [ 584.460275][ C0] __mutex_lock+0x6a4/0xd70 [ 584.464838][ C0] ? __mutex_lock+0x527/0xd70 [ 584.469540][ C0] ? linkwatch_event+0xe/0x60 [ 584.474275][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 584.479326][ C0] ? get_rtnl_holder+0x144/0x190 [ 584.484314][ C0] ? process_scheduled_works+0x945/0x1830 [ 584.490076][ C0] linkwatch_event+0xe/0x60 [ 584.494633][ C0] process_scheduled_works+0xa2c/0x1830 [ 584.500235][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.506285][ C0] ? assign_work+0x364/0x3d0 [ 584.510900][ C0] worker_thread+0x86d/0xd40 [ 584.515564][ C0] ? __kthread_parkme+0x169/0x1d0 [ 584.520617][ C0] ? __pfx_worker_thread+0x10/0x10 [ 584.525782][ C0] kthread+0x2f0/0x390 [ 584.529866][ C0] ? __pfx_worker_thread+0x10/0x10 [ 584.535032][ C0] ? __pfx_kthread+0x10/0x10 [ 584.539643][ C0] ret_from_fork+0x4b/0x80 [ 584.544131][ C0] ? __pfx_kthread+0x10/0x10 [ 584.548746][ C0] ret_from_fork_asm+0x1a/0x30 [ 584.553578][ C0] [ 584.556629][ C0] DEBUG: holding rtnl_mutex for 503 jiffies. [ 584.562615][ C0] task:kworker/u8:7 state:R running task stack:20248 pid:2545 tgid:2545 ppid:2 flags:0x00004000 [ 584.574423][ C0] Workqueue: netns cleanup_net [ 584.579219][ C0] Call Trace: [ 584.582510][ C0] [ 584.585494][ C0] __schedule+0x1800/0x4a60 [ 584.590040][ C0] ? __pfx_qdisc_free_cb+0x10/0x10 [ 584.595217][ C0] ? stack_depot_save_flags+0x29/0x830 [ 584.600704][ C0] ? __pfx___schedule+0x10/0x10 [ 584.605617][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 584.611618][ C0] ? unregister_netdevice_many_notify+0x97b/0x1c40 [ 584.618177][ C0] ? default_device_exit_batch+0xa0f/0xa90 [ 584.624053][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 584.629365][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 584.634536][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 584.640291][ C0] irqentry_exit+0x5e/0x90 [ 584.644767][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 584.650775][ C0] RIP: 0010:synchronize_rcu+0x0/0x360 [ 584.656210][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 65 38 81 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 584.675879][ C0] RSP: 0018:ffffc90009aaf5d8 EFLAGS: 00000206 [ 584.681969][ C0] RAX: dffffc0000000000 RBX: 1ffff92001355ec4 RCX: ffffffff94f2f903 [ 584.689995][ C0] RDX: 0000000000000001 RSI: ffffffff8c0ae240 RDI: ffffffff8c607c40 [ 584.698014][ C0] RBP: ffffc90009aaf6b8 R08: ffffffff94f253f7 R09: 1ffffffff29e4a7e [ 584.706029][ C0] R10: dffffc0000000000 R11: fffffbfff29e4a7f R12: ffffffff94f22ec8 [ 584.714046][ C0] R13: 1ffff92001355ec0 R14: 0000000000000206 R15: ffffc90009aaf620 [ 584.722051][ C0] lockdep_unregister_key+0x4b7/0x540 [ 584.727485][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 584.733458][ C0] ? rcu_is_watching+0x15/0xb0 [ 584.738247][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 584.742861][ C0] __qdisc_destroy+0x165/0x410 [ 584.747684][ C0] dev_shutdown+0x357/0x450 [ 584.752207][ C0] unregister_netdevice_many_notify+0x97b/0x1c40 [ 584.758615][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 584.765454][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 584.771380][ C0] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 584.777601][ C0] default_device_exit_batch+0xa0f/0xa90 [ 584.783300][ C0] ? __pfx___might_resched+0x10/0x10 [ 584.788608][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 584.794816][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 584.800121][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 584.806319][ C0] cleanup_net+0x89d/0xcc0 [ 584.810760][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 584.815754][ C0] ? process_scheduled_works+0x945/0x1830 [ 584.821491][ C0] process_scheduled_works+0xa2c/0x1830 [ 584.827124][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.833161][ C0] ? assign_work+0x364/0x3d0 [ 584.837778][ C0] worker_thread+0x86d/0xd40 [ 584.842421][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 584.848397][ C0] ? __kthread_parkme+0x169/0x1d0 [ 584.853495][ C0] ? __pfx_worker_thread+0x10/0x10 [ 584.858627][ C0] kthread+0x2f0/0x390 [ 584.862712][ C0] ? __pfx_worker_thread+0x10/0x10 [ 584.867877][ C0] ? __pfx_kthread+0x10/0x10 [ 584.872495][ C0] ret_from_fork+0x4b/0x80 [ 584.876971][ C0] ? __pfx_kthread+0x10/0x10 [ 584.881581][ C0] ret_from_fork_asm+0x1a/0x30 [ 584.886420][ C0] [ 584.889449][ C0] DEBUG: waiting rtnl_mutex for 518 jiffies. [ 584.895473][ C0] task:syz.1.1944 state:D stack:25584 pid:13261 tgid:13252 ppid:12699 flags:0x00004004 [ 584.905689][ C0] Call Trace: [ 584.908977][ C0] [ 584.911921][ C0] __schedule+0x1800/0x4a60 [ 584.916503][ C0] ? __pfx___schedule+0x10/0x10 [ 584.921388][ C0] ? __pfx_lock_release+0x10/0x10 [ 584.926471][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 584.931953][ C0] ? schedule+0x90/0x320 [ 584.936243][ C0] schedule+0x14b/0x320 [ 584.940425][ C0] schedule_preempt_disabled+0x13/0x30 [ 584.945934][ C0] __mutex_lock+0x6a4/0xd70 [ 584.950458][ C0] ? __mutex_lock+0x527/0xd70 [ 584.955181][ C0] ? __tun_chr_ioctl+0x48f/0x2400 [ 584.960243][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 584.965325][ C0] ? get_rtnl_holder+0x144/0x190 [ 584.970281][ C0] __tun_chr_ioctl+0x48f/0x2400 [ 584.975199][ C0] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 584.980507][ C0] ? hook_file_ioctl+0x134/0x2d0 [ 584.985495][ C0] ? __sanitizer_cov_trace_pc+0x43/0x70 [ 584.991070][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 584.996056][ C0] ? security_file_ioctl+0x87/0xb0 [ 585.001181][ C0] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 585.006338][ C0] __se_sys_ioctl+0xfc/0x170 [ 585.010950][ C0] do_syscall_64+0xf3/0x230 [ 585.015509][ C0] ? clear_bhb_loop+0x35/0x90 [ 585.020208][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.026158][ C0] RIP: 0033:0x7f03719779f9 [ 585.030584][ C0] RSP: 002b:00007f03713ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.039044][ C0] RAX: ffffffffffffffda RBX: 00007f0371b06208 RCX: 00007f03719779f9 [ 585.047059][ C0] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000008 [ 585.055072][ C0] RBP: 00007f03719e58ee R08: 0000000000000000 R09: 0000000000000000 [ 585.063084][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.071065][ C0] R13: 000000000000006e R14: 00007f0371b06208 R15: 00007ffc6bd50358 [ 585.079107][ C0] [ 585.082169][ C0] DEBUG: waiting rtnl_mutex for 530 jiffies. [ 585.088182][ C0] task:syz.1.1944 state:D stack:26256 pid:13262 tgid:13252 ppid:12699 flags:0x00004004 [ 585.098411][ C0] Call Trace: [ 585.101705][ C0] [ 585.104678][ C0] __schedule+0x1800/0x4a60 [ 585.109228][ C0] ? __pfx___schedule+0x10/0x10 [ 585.114134][ C0] ? __pfx_lock_release+0x10/0x10 [ 585.119182][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 585.124698][ C0] ? schedule+0x90/0x320 [ 585.128957][ C0] schedule+0x14b/0x320 [ 585.133166][ C0] schedule_preempt_disabled+0x13/0x30 [ 585.138643][ C0] __mutex_lock+0x6a4/0xd70 [ 585.143191][ C0] ? __mutex_lock+0x527/0xd70 [ 585.147880][ C0] ? __tun_chr_ioctl+0x48f/0x2400 [ 585.152922][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 585.158004][ C0] ? get_rtnl_holder+0x144/0x190 [ 585.163008][ C0] __tun_chr_ioctl+0x48f/0x2400 [ 585.167881][ C0] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 585.173219][ C0] ? __fget_files+0x3f6/0x470 [ 585.177906][ C0] ? __fget_files+0x29/0x470 [ 585.182517][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 585.187505][ C0] ? security_file_ioctl+0x87/0xb0 [ 585.192629][ C0] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 585.197786][ C0] __se_sys_ioctl+0xfc/0x170 [ 585.202404][ C0] do_syscall_64+0xf3/0x230 [ 585.206950][ C0] ? clear_bhb_loop+0x35/0x90 [ 585.211644][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.217583][ C0] RIP: 0033:0x7f03719779f9 [ 585.222010][ C0] RSP: 002b:00007f03713de048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.230479][ C0] RAX: ffffffffffffffda RBX: 00007f0371b062e0 RCX: 00007f03719779f9 [ 585.238493][ C0] RDX: 0000000020000340 RSI: 00000000401054d5 RDI: 0000000000000008 [ 585.246504][ C0] RBP: 00007f03719e58ee R08: 0000000000000000 R09: 0000000000000000 [ 585.254514][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.262491][ C0] R13: 000000000000006e R14: 00007f0371b062e0 R15: 00007ffc6bd50358 [ 585.270522][ C0] [ 585.273583][ C0] DEBUG: waiting rtnl_mutex for 543 jiffies. [ 585.279563][ C0] task:syz.1.1944 state:D stack:26128 pid:13263 tgid:13252 ppid:12699 flags:0x00004004 [ 585.289781][ C0] Call Trace: [ 585.293100][ C0] [ 585.296060][ C0] __schedule+0x1800/0x4a60 [ 585.300611][ C0] ? __pfx___schedule+0x10/0x10 [ 585.305513][ C0] ? __pfx_lock_release+0x10/0x10 [ 585.310559][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 585.316077][ C0] ? schedule+0x90/0x320 [ 585.320337][ C0] schedule+0x14b/0x320 [ 585.324548][ C0] schedule_preempt_disabled+0x13/0x30 [ 585.330025][ C0] __mutex_lock+0x6a4/0xd70 [ 585.334573][ C0] ? __mutex_lock+0x527/0xd70 [ 585.339268][ C0] ? __tun_chr_ioctl+0x41c/0x2400 [ 585.344346][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 585.349408][ C0] ? get_rtnl_holder+0x144/0x190 [ 585.354398][ C0] __tun_chr_ioctl+0x41c/0x2400 [ 585.359278][ C0] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 585.364630][ C0] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 585.369754][ C0] ? do_vfs_ioctl+0x155/0x2e50 [ 585.374572][ C0] ? __se_sys_ioctl+0x8f/0x170 [ 585.379352][ C0] ? __se_sys_ioctl+0xed/0x170 [ 585.384174][ C0] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 585.389301][ C0] __se_sys_ioctl+0xfc/0x170 [ 585.393952][ C0] do_syscall_64+0xf3/0x230 [ 585.398468][ C0] ? clear_bhb_loop+0x35/0x90 [ 585.403194][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.409101][ C0] RIP: 0033:0x7f03719779f9 [ 585.413557][ C0] RSP: 002b:00007f03713bd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.421985][ C0] RAX: ffffffffffffffda RBX: 00007f0371b063b8 RCX: 00007f03719779f9 [ 585.430007][ C0] RDX: 0000000020000000 RSI: 00000000400454d9 RDI: 0000000000000008 [ 585.438021][ C0] RBP: 00007f03719e58ee R08: 0000000000000000 R09: 0000000000000000 [ 585.446031][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.454042][ C0] R13: 000000000000006e R14: 00007f0371b063b8 R15: 00007ffc6bd50358 [ 585.462039][ C0] [ 585.465093][ C0] DEBUG: waiting rtnl_mutex for 527 jiffies. [ 585.471074][ C0] task:syz-executor state:D stack:21728 pid:13219 tgid:13219 ppid:13200 flags:0x00000000 [ 585.481281][ C0] Call Trace: [ 585.484597][ C0] [ 585.487545][ C0] __schedule+0x1800/0x4a60 [ 585.492093][ C0] ? __pfx___schedule+0x10/0x10 [ 585.497008][ C0] ? __pfx_lock_release+0x10/0x10 [ 585.502057][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 585.507568][ C0] ? schedule+0x90/0x320 [ 585.511827][ C0] schedule+0x14b/0x320 [ 585.516038][ C0] schedule_preempt_disabled+0x13/0x30 [ 585.521517][ C0] __mutex_lock+0x6a4/0xd70 [ 585.526067][ C0] ? __mutex_lock+0x527/0xd70 [ 585.530756][ C0] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 585.535923][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 585.540969][ C0] ? get_rtnl_holder+0x144/0x190 [ 585.545952][ C0] rtnetlink_rcv_msg+0x6eb/0xd00 [ 585.550909][ C0] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 585.556077][ C0] ? __lock_acquire+0x1384/0x2050 [ 585.561124][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 585.566658][ C0] netlink_rcv_skb+0x1e3/0x430 [ 585.571439][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 585.576951][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.582274][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.587520][ C0] netlink_unicast+0x7f6/0x990 [ 585.592321][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 585.597664][ C0] ? __virt_addr_valid+0x183/0x530 [ 585.602793][ C0] ? __check_object_size+0x49c/0x900 [ 585.608126][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 585.613293][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 585.618084][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.623417][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 585.628379][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 585.633711][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 585.639183][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.644510][ C0] __sock_sendmsg+0x221/0x270 [ 585.649212][ C0] __sys_sendto+0x3a4/0x4f0 [ 585.653770][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 585.658823][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.664067][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 585.670154][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 585.676205][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 585.682576][ C0] __x64_sys_sendto+0xde/0x100 [ 585.687403][ C0] do_syscall_64+0xf3/0x230 [ 585.691924][ C0] ? clear_bhb_loop+0x35/0x90 [ 585.696670][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.702581][ C0] RIP: 0033:0x7fb55a97978c [ 585.707040][ C0] RSP: 002b:00007ffca7993910 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 585.715509][ C0] RAX: ffffffffffffffda RBX: 00007fb55b634620 RCX: 00007fb55a97978c [ 585.723527][ C0] RDX: 000000000000006c RSI: 00007fb55b634670 RDI: 0000000000000003 [ 585.731510][ C0] RBP: 0000000000000000 R08: 00007ffca7993964 R09: 000000000000000c [ 585.739523][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 585.747534][ C0] R13: 0000000000000000 R14: 00007fb55b634670 R15: 0000000000000000 [ 585.755571][ C0] [ 585.758603][ C0] [ 585.758603][ C0] Showing all locks held in the system: [ 585.766401][ C0] 4 locks held by kworker/u8:7/2545: [ 585.771700][ C0] 2 locks held by getty/4981: [ 585.776418][ C0] #0: ffff88802b25f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 585.786253][ C0] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 585.796438][ C0] 3 locks held by kworker/0:6/5279: [ 585.801640][ C0] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 585.812686][ C0] #1: ffffc900037f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 585.823732][ C0] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 585.832766][ C0] 1 lock held by syz-executor/13219: [ 585.838088][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 585.847573][ C0] 1 lock held by syz.1.1944/13261: [ 585.852687][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 585.862074][ C0] 1 lock held by syz.1.1944/13262: [ 585.867240][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 585.876664][ C0] 1 lock held by syz.1.1944/13263: [ 585.881781][ C0] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x41c/0x2400 [ 585.891178][ C0] 1 lock held by syz.2.1952/13287: [ 585.896336][ C0] 3 locks held by syz.4.1954/13292: [ 585.901562][ C0] #0: ffff888065032580 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x246/0x12f0 [ 585.911397][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 585.921571][ C0] #2: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 585.931492][ C0] 3 locks held by syz.2.1952/13295: [ 585.936729][ C0] 2 locks held by syz.0.1956/13298: [ 585.941934][ C0] [ 585.944295][ C0] ============================================= [ 585.944295][ C0] [ 587.023021][ C0] DEBUG: waiting rtnl_mutex for 765 jiffies. [ 587.029039][ C0] task:kworker/0:6 state:D stack:21360 pid:5279 tgid:5279 ppid:2 flags:0x00004000 [ 587.039289][ C0] Workqueue: events linkwatch_event [ 587.044549][ C0] Call Trace: [ 587.047837][ C0] [ 587.050779][ C0] __schedule+0x1800/0x4a60 [ 587.055361][ C0] ? __pfx___schedule+0x10/0x10 [ 587.060233][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 587.066274][ C0] ? __pfx_lock_release+0x10/0x10 [ 587.071316][ C0] ? kick_pool+0x1bd/0x620 [ 587.075793][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 587.081038][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 587.086290][ C0] ? schedule+0x90/0x320 [ 587.090552][ C0] schedule+0x14b/0x320 [ 587.094762][ C0] schedule_preempt_disabled+0x13/0x30 [ 587.100240][ C0] __mutex_lock+0x6a4/0xd70 [ 587.104793][ C0] ? __mutex_lock+0x527/0xd70 [ 587.109505][ C0] ? linkwatch_event+0xe/0x60 [ 587.114234][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 587.119294][ C0] ? get_rtnl_holder+0x144/0x190 [ 587.124280][ C0] ? process_scheduled_works+0x945/0x1830 [ 587.130033][ C0] linkwatch_event+0xe/0x60 [ 587.134585][ C0] process_scheduled_works+0xa2c/0x1830 [ 587.140182][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 587.146218][ C0] ? assign_work+0x364/0x3d0 [ 587.150841][ C0] worker_thread+0x86d/0xd40 [ 587.155503][ C0] ? __kthread_parkme+0x169/0x1d0 [ 587.160571][ C0] ? __pfx_worker_thread+0x10/0x10 [ 587.165753][ C0] kthread+0x2f0/0x390 [ 587.169841][ C0] ? __pfx_worker_thread+0x10/0x10 [ 587.175017][ C0] ? __pfx_kthread+0x10/0x10 [ 587.179626][ C0] ret_from_fork+0x4b/0x80 [ 587.184101][ C0] ? __pfx_kthread+0x10/0x10 [ 587.188709][ C0] ret_from_fork_asm+0x1a/0x30 [ 587.193550][ C0] [ 587.196582][ C0] DEBUG: holding rtnl_mutex for 767 jiffies. [ 587.202562][ C0] task:kworker/u8:7 state:R running task stack:20248 pid:2545 tgid:2545 ppid:2 flags:0x00004000 [ 587.214359][ C0] Workqueue: netns cleanup_net [ 587.219146][ C0] Call Trace: [ 587.222432][ C0] [ 587.225414][ C0] __schedule+0x1800/0x4a60 [ 587.229961][ C0] ? __pfx_qdisc_free_cb+0x10/0x10 [ 587.235136][ C0] ? stack_depot_save_flags+0x29/0x830 [ 587.240642][ C0] ? __pfx___schedule+0x10/0x10 [ 587.245558][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 587.251569][ C0] ? unregister_netdevice_many_notify+0x97b/0x1c40 [ 587.258141][ C0] ? default_device_exit_batch+0xa0f/0xa90 [ 587.264027][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 587.266485][ T29] audit: type=1326 audit(1722638261.596:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.4.1954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb791d779f9 code=0x0 [ 587.269327][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 587.269399][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 587.302092][ C0] irqentry_exit+0x5e/0x90 [ 587.306585][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 587.312614][ C0] RIP: 0010:synchronize_rcu+0x0/0x360 [ 587.318057][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 65 38 81 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 587.337717][ C0] RSP: 0018:ffffc90009aaf5d8 EFLAGS: 00000206 [ 587.343852][ C0] RAX: dffffc0000000000 RBX: 1ffff92001355ec4 RCX: ffffffff94f2f903 [ 587.351850][ C0] RDX: 0000000000000001 RSI: ffffffff8c0ae240 RDI: ffffffff8c607c40 [ 587.359899][ C0] ================================================================== [ 587.367963][ C0] BUG: KASAN: stack-out-of-bounds in __show_regs+0x172/0x610 [ 587.375348][ C0] Read of size 8 at addr ffffc90009aaf548 by task syz.4.1954/13292 [ 587.383248][ C0] [ 587.385582][ C0] CPU: 0 UID: 0 PID: 13292 Comm: syz.4.1954 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 587.395834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 587.405897][ C0] Call Trace: [ 587.409190][ C0] [ 587.412044][ C0] dump_stack_lvl+0x241/0x360 [ 587.416744][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 587.421955][ C0] ? __pfx__printk+0x10/0x10 [ 587.426571][ C0] ? _printk+0xd5/0x120 [ 587.430752][ C0] print_report+0x169/0x550 [ 587.435275][ C0] ? __virt_addr_valid+0xbd/0x530 [ 587.440322][ C0] ? __show_regs+0x172/0x610 [ 587.444932][ C0] kasan_report+0x143/0x180 [ 587.449446][ C0] ? show_opcodes+0x148/0x170 [ 587.454141][ C0] ? __show_regs+0x172/0x610 [ 587.458754][ C0] __show_regs+0x172/0x610 [ 587.463183][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 587.469352][ C0] ? wq_watchdog_touch+0xef/0x180 [ 587.474373][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 587.480519][ C0] show_trace_log_lvl+0x3d4/0x520 [ 587.485545][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 587.490823][ C0] sched_show_task+0x506/0x6d0 [ 587.495574][ C0] ? report_rtnl_holders+0x2a5/0x400 [ 587.500848][ C0] ? __pfx__printk+0x10/0x10 [ 587.505430][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 587.510702][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 587.516589][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 587.522911][ C0] report_rtnl_holders+0x327/0x400 [ 587.528017][ C0] call_timer_fn+0x18e/0x650 [ 587.532591][ C0] ? call_timer_fn+0xc0/0x650 [ 587.537256][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 587.542877][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 587.547976][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 587.553601][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 587.559221][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 587.564844][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 587.570033][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 587.575222][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 587.580847][ C0] __run_timer_base+0x66a/0x8e0 [ 587.585693][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 587.591058][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 587.597379][ C0] run_timer_softirq+0xb7/0x170 [ 587.602222][ C0] handle_softirqs+0x2c4/0x970 [ 587.606984][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 587.611737][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 587.617013][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 587.622202][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 587.626786][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 587.631976][ C0] irq_exit_rcu+0x9/0x30 [ 587.636206][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 587.641837][ C0] [ 587.644754][ C0] [ 587.647668][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 587.653640][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 587.660148][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ae 9f 37 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 03 30 9f f5 65 8b 05 44 26 40 74 85 c0 74 43 48 c7 04 24 0e 36 [ 587.679755][ C0] RSP: 0018:ffffc9000437f600 EFLAGS: 00000206 [ 587.685815][ C0] RAX: 3db3698c6a3e6400 RBX: 1ffff9200086fec4 RCX: ffffffff817022ea [ 587.693776][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ad560 RDI: 0000000000000001 [ 587.701733][ C0] RBP: ffffc9000437f690 R08: ffffffff937378af R09: 1ffffffff26e6f15 [ 587.709691][ C0] R10: dffffc0000000000 R11: fffffbfff26e6f16 R12: dffffc0000000000 [ 587.717650][ C0] R13: 1ffff9200086fec0 R14: ffffc9000437f620 R15: 0000000000000246 [ 587.725614][ C0] ? mark_lock+0x9a/0x360 [ 587.729943][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 587.736269][ C0] ? autoremove_wake_function+0x37/0x110 [ 587.741907][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 587.747202][ C0] __unix_dgram_recvmsg+0x5f4/0x12f0 [ 587.752495][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 587.758209][ C0] ? __pfx___might_resched+0x10/0x10 [ 587.763489][ C0] ? iovec_from_user+0x61/0x240 [ 587.768331][ C0] ? unix_dgram_recvmsg+0xb6/0xe0 [ 587.773342][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 587.778874][ C0] sock_recvmsg_nosec+0x18e/0x1d0 [ 587.783895][ C0] ____sys_recvmsg+0x3c0/0x470 [ 587.788653][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 587.793935][ C0] ? __might_fault+0xaa/0x120 [ 587.798599][ C0] do_recvmmsg+0x474/0xae0 [ 587.803013][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 587.807937][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 587.813916][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 587.819112][ C0] ? finish_task_switch+0x1ea/0x870 [ 587.824295][ C0] ? finish_task_switch+0x1e5/0x870 [ 587.829482][ C0] ? __schedule+0x1808/0x4a60 [ 587.834164][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 587.839182][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 587.844727][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 587.851074][ C0] ? do_syscall_64+0xb6/0x230 [ 587.855742][ C0] do_syscall_64+0xf3/0x230 [ 587.860233][ C0] ? clear_bhb_loop+0x35/0x90 [ 587.864902][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.870783][ C0] RIP: 0033:0x7fb791d779f9 [ 587.875186][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.894780][ C0] RSP: 002b:00007fb792add048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 587.903182][ C0] RAX: ffffffffffffffda RBX: 00007fb791f06058 RCX: 00007fb791d779f9 [ 587.911137][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 587.919091][ C0] RBP: 00007fb791de58ee R08: 0000000000000000 R09: 0000000000000000 [ 587.927047][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 587.935000][ C0] R13: 000000000000006e R14: 00007fb791f06058 R15: 00007ffd9d135c98 [ 587.942961][ C0] [ 587.945972][ C0] [ 587.948281][ C0] The buggy address belongs to the virtual mapping at [ 587.948281][ C0] [ffffc90009aa8000, ffffc90009ab1000) created by: [ 587.948281][ C0] copy_process+0x5d1/0x3d90 [ 587.965890][ C0] [ 587.968198][ C0] The buggy address belongs to the physical page: [ 587.974598][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x296ff [ 587.983346][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 587.990444][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 587.999015][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 588.007573][ C0] page dumped because: kasan: bad access detected [ 588.013969][ C0] page_owner tracks the page as allocated [ 588.019663][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 10299526646, free_ts 0 [ 588.037096][ C0] post_alloc_hook+0x1f3/0x230 [ 588.041850][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 588.047383][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 588.052566][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 588.058011][ C0] __vmalloc_node_range_noprof+0x971/0x1460 [ 588.063893][ C0] dup_task_struct+0x444/0x8c0 [ 588.068647][ C0] copy_process+0x5d1/0x3d90 [ 588.073230][ C0] kernel_clone+0x226/0x8f0 [ 588.077725][ C0] kernel_thread+0x1bc/0x240 [ 588.082301][ C0] kthreadd+0x60d/0x810 [ 588.086447][ C0] ret_from_fork+0x4b/0x80 [ 588.090851][ C0] ret_from_fork_asm+0x1a/0x30 [ 588.095605][ C0] page_owner free stack trace missing [ 588.100949][ C0] [ 588.103258][ C0] Memory state around the buggy address: [ 588.108866][ C0] ffffc90009aaf400: f2 f2 00 00 00 00 00 00 f2 f2 f2 f2 00 00 00 00 [ 588.116909][ C0] ffffc90009aaf480: 00 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 588.124951][ C0] >ffffc90009aaf500: 00 00 00 00 f1 f1 f1 f1 00 f2 f2 f2 00 f3 f3 f3 [ 588.132991][ C0] ^ [ 588.139382][ C0] ffffc90009aaf580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 588.147423][ C0] ffffc90009aaf600: f1 f1 f1 f1 00 f2 f2 f2 00 f3 f3 f3 00 00 00 00 [ 588.155469][ C0] ================================================================== [ 588.163588][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 588.170788][ C0] CPU: 0 UID: 0 PID: 13292 Comm: syz.4.1954 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 588.181038][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 588.191099][ C0] Call Trace: [ 588.194389][ C0] [ 588.197241][ C0] dump_stack_lvl+0x241/0x360 [ 588.201925][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.207139][ C0] ? __pfx__printk+0x10/0x10 [ 588.211748][ C0] ? vscnprintf+0x5d/0x90 [ 588.216073][ C0] panic+0x349/0x870 [ 588.219964][ C0] ? check_panic_on_warn+0x21/0xb0 [ 588.225065][ C0] ? __pfx_panic+0x10/0x10 [ 588.229473][ C0] ? mark_lock+0x9a/0x360 [ 588.233795][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 588.239680][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 588.245563][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 588.251882][ C0] ? print_report+0x502/0x550 [ 588.256553][ C0] check_panic_on_warn+0x86/0xb0 [ 588.261483][ C0] ? __show_regs+0x172/0x610 [ 588.266149][ C0] end_report+0x77/0x160 [ 588.270382][ C0] kasan_report+0x154/0x180 [ 588.274871][ C0] ? show_opcodes+0x148/0x170 [ 588.279539][ C0] ? __show_regs+0x172/0x610 [ 588.284120][ C0] __show_regs+0x172/0x610 [ 588.288522][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.294665][ C0] ? wq_watchdog_touch+0xef/0x180 [ 588.299678][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.305817][ C0] show_trace_log_lvl+0x3d4/0x520 [ 588.310838][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 588.316112][ C0] sched_show_task+0x506/0x6d0 [ 588.320865][ C0] ? report_rtnl_holders+0x2a5/0x400 [ 588.326140][ C0] ? __pfx__printk+0x10/0x10 [ 588.330719][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 588.335989][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 588.341871][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 588.348189][ C0] report_rtnl_holders+0x327/0x400 [ 588.353295][ C0] call_timer_fn+0x18e/0x650 [ 588.357876][ C0] ? call_timer_fn+0xc0/0x650 [ 588.362537][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 588.368163][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 588.373265][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 588.378887][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 588.384509][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 588.390127][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.395319][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 588.400509][ C0] ? __pfx_report_rtnl_holders+0x10/0x10 [ 588.406132][ C0] __run_timer_base+0x66a/0x8e0 [ 588.410980][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 588.416345][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.422668][ C0] run_timer_softirq+0xb7/0x170 [ 588.427506][ C0] handle_softirqs+0x2c4/0x970 [ 588.432261][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 588.437015][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 588.442290][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 588.447478][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 588.452059][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 588.457250][ C0] irq_exit_rcu+0x9/0x30 [ 588.461479][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 588.467104][ C0] [ 588.470024][ C0] [ 588.472938][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.478911][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 588.485408][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ae 9f 37 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 03 30 9f f5 65 8b 05 44 26 40 74 85 c0 74 43 48 c7 04 24 0e 36 [ 588.505003][ C0] RSP: 0018:ffffc9000437f600 EFLAGS: 00000206 [ 588.511057][ C0] RAX: 3db3698c6a3e6400 RBX: 1ffff9200086fec4 RCX: ffffffff817022ea [ 588.519013][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ad560 RDI: 0000000000000001 [ 588.526970][ C0] RBP: ffffc9000437f690 R08: ffffffff937378af R09: 1ffffffff26e6f15 [ 588.534926][ C0] R10: dffffc0000000000 R11: fffffbfff26e6f16 R12: dffffc0000000000 [ 588.542885][ C0] R13: 1ffff9200086fec0 R14: ffffc9000437f620 R15: 0000000000000246 [ 588.550845][ C0] ? mark_lock+0x9a/0x360 [ 588.555171][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 588.561490][ C0] ? autoremove_wake_function+0x37/0x110 [ 588.567116][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 588.572397][ C0] __unix_dgram_recvmsg+0x5f4/0x12f0 [ 588.577685][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 588.583399][ C0] ? __pfx___might_resched+0x10/0x10 [ 588.588675][ C0] ? iovec_from_user+0x61/0x240 [ 588.593518][ C0] ? unix_dgram_recvmsg+0xb6/0xe0 [ 588.598523][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 588.604053][ C0] sock_recvmsg_nosec+0x18e/0x1d0 [ 588.609069][ C0] ____sys_recvmsg+0x3c0/0x470 [ 588.613826][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 588.619105][ C0] ? __might_fault+0xaa/0x120 [ 588.623769][ C0] do_recvmmsg+0x474/0xae0 [ 588.628179][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 588.633101][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.639086][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 588.644281][ C0] ? finish_task_switch+0x1ea/0x870 [ 588.649463][ C0] ? finish_task_switch+0x1e5/0x870 [ 588.654650][ C0] ? __schedule+0x1808/0x4a60 [ 588.659328][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 588.664345][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 588.669881][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.676200][ C0] ? do_syscall_64+0xb6/0x230 [ 588.680862][ C0] do_syscall_64+0xf3/0x230 [ 588.685350][ C0] ? clear_bhb_loop+0x35/0x90 [ 588.690014][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.695897][ C0] RIP: 0033:0x7fb791d779f9 [ 588.700294][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.719888][ C0] RSP: 002b:00007fb792add048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 588.728290][ C0] RAX: ffffffffffffffda RBX: 00007fb791f06058 RCX: 00007fb791d779f9 [ 588.736247][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 588.744205][ C0] RBP: 00007fb791de58ee R08: 0000000000000000 R09: 0000000000000000 [ 588.752158][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 588.760115][ C0] R13: 000000000000006e R14: 00007fb791f06058 R15: 00007ffd9d135c98 [ 588.768080][ C0] [ 588.771302][ C0] Kernel Offset: disabled [ 588.775607][ C0] Rebooting in 86400 seconds..