last executing test programs: 32.000425121s ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) 31.769057973s ago: executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x34}}, 0x0) 31.60469246s ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={0x0}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 31.43161379s ago: executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r0, 0x81000000) syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') 31.357150132s ago: executing program 3: r0 = fsopen(&(0x7f0000000b00)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000c00)=0x6) poll(&(0x7f0000000200)=[{r1}], 0x1, 0x101) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x504f8c10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffffffffffff]}) 31.232372125s ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@deltclass={0x50, 0x29, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_WEIGHT={0x8}]}}]}, 0x50}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/196, 0xc4, 0x0, &(0x7f00000005c0)=""/185, 0xb9}, &(0x7f0000000440)=0x40) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x6acf, &(0x7f0000000940), &(0x7f00000009c0), &(0x7f00000003c0)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x14) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001c80)={0x26b0, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/17, 0x11}], &(0x7f0000001c40)}, 0x20) 31.014360346s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000007, &(0x7f0000000100)="05ff03076844268cb89e14f00800fee0ffff00febabec44277fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 30.910142269s ago: executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0xffffffff, @name="f4e06b0a1e730e142a5c1e8623218cb8167a99b19faf6797ae55586411baebc8"}) 30.859156961s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.797019295s ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20204b, 0x4) 30.742606035s ago: executing program 4: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x38, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) accept(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_enter(r0, 0x64e7, 0x0, 0x0, 0x0, 0x0) 30.632552673s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x35, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) syz_open_procfs(r3, &(0x7f00000001c0)='net/ip_mr_cache\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xfffe, 0x0, 0x0, 0xbdff, 0x0, "ec28a1ba80a20507"}) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x13, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x100}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) r7 = dup3(r6, r5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) process_vm_readv(0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000001700)=""/208, 0xd0}, {0x0}, {&(0x7f00000005c0)=""/83, 0x53}, {&(0x7f0000001600)=""/253, 0xfd}, {&(0x7f00000003c0)=""/89, 0x59}], 0x6, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/110, 0x6e}, {&(0x7f0000000840)=""/65, 0x41}, {&(0x7f0000000f40)=""/135, 0x87}, {&(0x7f0000000980)=""/197, 0xc5}, {&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f00000004c0)=""/9, 0x9}], 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={0x0, r8}, 0x10) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x28) 29.818510776s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)='E', 0x1}], 0x1}}], 0x1, 0x0) 29.650467252s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x54f8, &(0x7f0000005980)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) pwrite64(r0, &(0x7f0000000000)='+', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus\x00', 0x0) 29.611393447s ago: executing program 2: r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x11, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x0, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) 29.508219884s ago: executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r0, 0x81000000) syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') 29.377504613s ago: executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0xffffffff, @name="f4e06b0a1e730e142a5c1e8623218cb8167a99b19faf6797ae55586411baebc8"}) 29.250268946s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 29.006772891s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2$9p(&(0x7f00000010c0), 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="10008100", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @broadcast}}) 28.781777763s ago: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000080)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 28.598544613s ago: executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) 28.431897451s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4bd, &(0x7f0000001000)="$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") 28.256825426s ago: executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x35, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) syz_open_procfs(r3, &(0x7f00000001c0)='net/ip_mr_cache\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xfffe, 0x0, 0x0, 0xbdff, 0x0, "ec28a1ba80a20507"}) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x13, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x100}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) r7 = dup3(r6, r5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) process_vm_readv(0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000001700)=""/208, 0xd0}, {0x0}, {&(0x7f00000005c0)=""/83, 0x53}, {&(0x7f0000001600)=""/253, 0xfd}, {&(0x7f00000003c0)=""/89, 0x59}], 0x6, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/110, 0x6e}, {&(0x7f0000000840)=""/65, 0x41}, {&(0x7f0000000f40)=""/135, 0x87}, {&(0x7f0000000980)=""/197, 0xc5}, {&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f00000004c0)=""/9, 0x9}], 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={0x0, r8}, 0x10) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x28) 28.119577166s ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0010}]}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxselin\x05x\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, 0x0) pread64(r0, 0x0, 0x0, 0x0) 27.988577685s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x35, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000180)) r3 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) syz_open_procfs(r3, &(0x7f00000001c0)='net/ip_mr_cache\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xfffe, 0x0, 0x0, 0xbdff, 0x0, "ec28a1ba80a20507"}) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x13, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x100}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) r7 = dup3(r6, r5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) process_vm_readv(0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000001700)=""/208, 0xd0}, {0x0}, {&(0x7f00000005c0)=""/83, 0x53}, {&(0x7f0000001600)=""/253, 0xfd}, {&(0x7f00000003c0)=""/89, 0x59}], 0x6, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/110, 0x6e}, {&(0x7f0000000840)=""/65, 0x41}, {&(0x7f0000000f40)=""/135, 0x87}, {&(0x7f0000000980)=""/197, 0xc5}, {&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f00000004c0)=""/9, 0x9}], 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={0x0, r8}, 0x10) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x28) 2.865552875s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff00000000007ffff000000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 2.638769905s ago: executing program 1: syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000340), 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=") r0 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.019435548s ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)='E', 0x1}], 0x1}}], 0x1, 0x0) 270.340321ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) 0s ago: executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) kernel console output (not intermixed with test programs): 74.478899][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.486308][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.494314][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.502631][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.524780][ T11] hsr_slave_0: left promiscuous mode [ 374.530736][ T11] hsr_slave_1: left promiscuous mode [ 374.536833][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.545401][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.554070][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.561485][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.646769][ T11] veth1_macvtap: left promiscuous mode [ 374.652327][ T11] veth0_macvtap: left promiscuous mode [ 374.658296][ T11] veth1_vlan: left promiscuous mode [ 374.663566][ T11] veth0_vlan: left promiscuous mode [ 374.672166][ T11] veth1_macvtap: left promiscuous mode [ 374.677883][ T11] veth0_macvtap: left promiscuous mode [ 374.683740][ T11] veth1_vlan: left promiscuous mode [ 374.689018][ T11] veth0_vlan: left promiscuous mode [ 374.696045][ T11] veth1_macvtap: left promiscuous mode [ 374.701795][ T11] veth0_macvtap: left promiscuous mode [ 374.707377][ T11] veth1_vlan: left promiscuous mode [ 374.712772][ T11] veth0_vlan: left promiscuous mode [ 374.719030][ T11] veth1_macvtap: left promiscuous mode [ 374.724723][ T11] veth0_macvtap: left promiscuous mode [ 374.730910][ T11] veth1_vlan: left promiscuous mode [ 374.736226][ T11] veth0_vlan: left promiscuous mode [ 375.625929][ T11] team0 (unregistering): Port device team_slave_1 removed [ 375.677864][ T11] team0 (unregistering): Port device team_slave_0 removed [ 376.669119][ T11] team0 (unregistering): Port device team_slave_1 removed [ 376.723551][ T11] team0 (unregistering): Port device team_slave_0 removed [ 377.350878][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.359247][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.701444][ T11] team0 (unregistering): Port device team_slave_1 removed [ 377.763562][ T11] team0 (unregistering): Port device team_slave_0 removed [ 378.751430][ T11] team0 (unregistering): Port device team_slave_1 removed [ 378.810325][ T11] team0 (unregistering): Port device team_slave_0 removed [ 379.411644][T16991] veth1_vlan: entered promiscuous mode [ 379.420487][T17277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.444504][T17277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.508689][T17277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 379.546313][T16983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.557647][T16983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.601914][T17277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 379.691515][T16922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.781735][T16922] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.840431][T16991] veth0_macvtap: entered promiscuous mode [ 379.850846][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.858084][ T5197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.868924][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.876076][ T5197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.892809][T16991] veth1_macvtap: entered promiscuous mode [ 380.020608][T16991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.033256][T16991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.062852][T16991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.078026][T16983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.219177][T16991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.230993][T16991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.243394][T16991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.339245][T16991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.352543][T16991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.361341][T16991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.370124][T16991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.470825][T17397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.491203][T17397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.563203][T17397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.605163][T17397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.782761][T16983] veth0_vlan: entered promiscuous mode [ 380.828988][T17277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.865017][ T6788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.875100][ T6788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.894707][T16983] veth1_vlan: entered promiscuous mode [ 380.923580][T17277] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.976352][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.983477][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.033971][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.041170][ T2529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.061472][T16922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.081075][ T2461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.090090][ T2461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.209278][T16983] veth0_macvtap: entered promiscuous mode [ 381.294054][T16983] veth1_macvtap: entered promiscuous mode [ 381.324030][T16922] veth0_vlan: entered promiscuous mode [ 381.362621][T16922] veth1_vlan: entered promiscuous mode [ 381.392988][T17397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.435722][T16983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.467608][T16983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.478555][T16983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.490002][T16983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.501327][T16983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.555416][T16983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.584888][T16983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.602416][T16983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.613417][T16983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.625283][T16983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.661694][T17397] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.674823][T16983] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.685527][T16983] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.695589][T16983] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.704571][T16983] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.735137][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.742365][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.755897][T16922] veth0_macvtap: entered promiscuous mode [ 381.783611][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.790906][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.835673][T16922] veth1_macvtap: entered promiscuous mode [ 381.905835][T17277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.959517][ T7476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.973638][T16922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.981440][ T7476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.994704][T16922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.006323][T16922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.017986][T16922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.030011][T16922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.040831][T16922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.052265][T16922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.099416][T16922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.120988][T16922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.131088][T16922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.141728][T16922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.151608][T16922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.162116][T16922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.173814][T16922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.198630][ T2480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.212499][ T2480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.218614][T16922] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.228689][T16922] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.240379][T16922] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.270463][T16922] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.377416][T17277] veth0_vlan: entered promiscuous mode [ 382.421619][T17277] veth1_vlan: entered promiscuous mode [ 382.667196][T17277] veth0_macvtap: entered promiscuous mode [ 382.707115][T17277] veth1_macvtap: entered promiscuous mode [ 382.726267][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.740898][T18842] loop0: detected capacity change from 0 to 2048 [ 382.752592][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.762674][T18842] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x52 != 0x00 [ 382.784172][T18842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.787459][T18846] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 382.813511][T18846] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 382.860440][T17277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.880159][T17277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.893141][T17277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.918298][T17277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.922473][T18851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.928255][T17277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.959899][T17277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.977280][T17277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.992488][T17277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.009359][T17277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.081059][T17277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.081686][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.106852][T17277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.118022][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.134315][T17277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.173500][T17277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.192541][T17277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.214496][T17277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.235858][T17277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.262542][T17277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.275271][T17277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.325298][T17397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.349161][T17277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.360275][T17277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.375321][T17277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.385014][T17277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.660660][T18851] loop4: detected capacity change from 0 to 32768 [ 383.689938][T17397] veth0_vlan: entered promiscuous mode [ 383.771110][T17397] veth1_vlan: entered promiscuous mode [ 383.815052][ T5114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.834960][ T5114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.950315][T18851] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 383.969525][T18851] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 383.987627][ T2480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.996108][ T2480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.048055][T17397] veth0_macvtap: entered promiscuous mode [ 384.057823][T18851] bcachefs (loop4): alloc_read... done [ 384.071697][T18851] bcachefs (loop4): stripes_read... done [ 384.077996][T18851] bcachefs (loop4): snapshots_read... done [ 384.095718][T18851] bcachefs (loop4): journal_replay... done [ 384.110989][T17397] veth1_macvtap: entered promiscuous mode [ 384.136444][T18851] bcachefs (loop4): resume_logged_ops... done [ 384.192338][T18851] bcachefs (loop4): going read-write [ 384.202023][T18851] bcachefs (loop4): done starting filesystem [ 384.230087][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.264718][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.277993][T18855] loop0: detected capacity change from 0 to 32768 [ 384.306339][T18855] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (18855) [ 384.317739][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.336719][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.353173][T18855] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 384.363238][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.377506][T18855] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 384.401060][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.407155][T18855] BTRFS info (device loop0): using free-space-tree [ 384.468738][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.506678][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.552629][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.558264][T18890] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 384.579313][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.592315][T17397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.620480][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 384.637154][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.720745][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.771439][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.804564][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.833560][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.853001][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.872142][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.900783][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.916999][T17397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.936070][T17397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.958960][T17397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.008574][T16983] bcachefs (loop4): shutting down [ 385.046239][T17397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.060808][T16983] bcachefs (loop4): going read-only [ 385.092644][T16983] bcachefs (loop4): finished waiting for writes to stop [ 385.114270][T17397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.152819][T17397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.195619][T17397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.221488][T16983] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 385.237223][ T29] audit: type=1804 audit(1716922794.129:139): pid=18914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3764172406/syzkaller.GkfWJt/5/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 385.355326][T16983] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 385.401899][T16983] bcachefs (loop4): shutdown complete, journal seq 15 [ 385.428607][T16983] bcachefs (loop4): marking filesystem clean [ 385.514200][T16983] bcachefs (loop4): shutdown complete [ 385.558409][ T5148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.590125][ T5148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.678506][T16991] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 385.726532][ T2480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.770873][ T2480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.772059][T18916] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 385.829621][ T29] audit: type=1326 audit(1716922794.784:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18930 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe93fe7cee9 code=0x0 [ 386.302446][T18946] loop1: detected capacity change from 0 to 2048 [ 386.347465][T18946] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x52 != 0x00 [ 386.389482][T18946] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.809087][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 386.988251][ T45] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 387.014704][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 387.042939][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.248609][T18982] sch_fq: defrate 0 ignored. [ 387.283357][ T45] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 387.316141][ T45] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input10 [ 387.444924][ T29] audit: type=1326 audit(1716922796.522:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18987 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93fe7cee9 code=0x7ffc0000 [ 387.517964][ T45] usb 1-1: USB disconnect, device number 9 [ 387.523858][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 387.572330][ T29] audit: type=1326 audit(1716922796.522:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18987 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93fe7cee9 code=0x7ffc0000 [ 387.596720][T18943] loop3: detected capacity change from 0 to 32768 [ 387.676698][ T29] audit: type=1326 audit(1716922796.522:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18987 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe93fe7cee9 code=0x7ffc0000 [ 387.748987][T18943] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 387.805186][ T29] audit: type=1326 audit(1716922796.522:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18987 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93fe7cee9 code=0x7ffc0000 [ 387.871196][ T29] audit: type=1326 audit(1716922796.565:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18987 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe93fe7cee9 code=0x7ffc0000 [ 387.939041][T18943] XFS (loop3): Ending clean mount [ 388.043305][ T29] audit: type=1326 audit(1716922797.165:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18987 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93fe7cee9 code=0x7ffc0000 [ 388.120787][ T29] audit: type=1326 audit(1716922797.176:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18987 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93fe7cee9 code=0x7ffc0000 [ 388.226240][ T29] audit: type=1326 audit(1716922797.219:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18987 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fe93fe7cee9 code=0x7ffc0000 [ 388.315392][T17397] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 388.862963][T19023] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 388.903503][T19023] bridge_slave_0: left allmulticast mode [ 388.915276][T19023] bridge_slave_0: left promiscuous mode [ 388.936839][T19023] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.091112][T19038] sch_fq: defrate 0 ignored. [ 389.298187][T19016] loop4: detected capacity change from 0 to 32768 [ 389.334645][T19016] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (19016) [ 389.397409][T19016] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 389.422674][T19016] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 389.442304][T19016] BTRFS info (device loop4): using free-space-tree [ 389.961754][T16983] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 390.785638][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 390.804660][T19098] loop1: detected capacity change from 0 to 32768 [ 390.867908][T19098] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.884236][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 390.884255][ T29] audit: type=1326 audit(1716922800.212:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19112 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35af47cee9 code=0x0 [ 390.988618][T19098] XFS (loop1): Ending clean mount [ 391.004779][T19098] XFS (loop1): Quotacheck needed: Please wait. [ 391.073316][T19098] XFS (loop1): Quotacheck: Done. [ 391.266768][T16922] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 391.517266][T19128] loop4: detected capacity change from 0 to 32768 [ 391.527451][T19128] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (19128) [ 391.545825][T19128] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 391.556131][T19128] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 391.566120][T19128] BTRFS info (device loop4): using free-space-tree [ 391.695266][ T29] audit: type=1804 audit(1716922801.082:153): pid=19128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir651076232/syzkaller.I5cRy0/15/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 391.771748][T16983] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 391.802273][T19149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.819174][T19149] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 391.827801][T19149] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.849236][T19149] loop0: detected capacity change from 0 to 512 [ 391.893435][T19149] EXT4-fs (loop0): Test dummy encryption mode enabled [ 391.952177][T19149] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #17: comm syz-executor.0: iget: bogus i_mode (0) [ 391.973195][T19149] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 391.999110][T19149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.082997][T19149] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 7: invalid block bitmap [ 392.113359][T19157] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 392.124553][T19157] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 392.132989][T19157] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 392.164845][T19157] loop4: detected capacity change from 0 to 512 [ 392.181029][T19157] EXT4-fs (loop4): Test dummy encryption mode enabled [ 392.199462][T19157] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #17: comm syz-executor.4: iget: bogus i_mode (0) [ 392.211687][T19157] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 17 (err -117) [ 392.229688][T16991] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.230141][T19157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.281876][T19157] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 7: invalid block bitmap [ 392.438099][T16983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.621622][T19177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.632339][T19177] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 392.640677][T19177] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.667424][T19177] loop1: detected capacity change from 0 to 512 [ 392.699392][T19177] EXT4-fs (loop1): Test dummy encryption mode enabled [ 392.730655][T19177] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #17: comm syz-executor.1: iget: bogus i_mode (0) [ 392.746705][T19177] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 17 (err -117) [ 392.761409][T19177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.814368][T19177] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 7: invalid block bitmap [ 392.859103][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 392.926241][T16922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.058246][T19190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 393.304635][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 393.354699][T19200] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 393.355482][T19202] Bluetooth: MGMT ver 1.22 [ 393.398736][T19204] loop0: detected capacity change from 0 to 512 [ 393.413270][T19204] EXT4-fs (loop0): Test dummy encryption mode enabled [ 393.441827][T19204] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #17: comm syz-executor.0: iget: bogus i_mode (0) [ 393.485092][T19204] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 393.526881][T19204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.589428][T19200] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 7: invalid block bitmap [ 393.784484][T16991] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.175528][T19215] loop4: detected capacity change from 0 to 32768 [ 394.199265][T19215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (19215) [ 394.219573][T19215] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 394.230066][T19215] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 394.241611][T19215] BTRFS info (device loop4): using free-space-tree [ 394.534517][T16983] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 395.199990][ T29] audit: type=1326 audit(1716922804.837:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 395.266639][ T29] audit: type=1326 audit(1716922804.837:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 395.298959][ T29] audit: type=1326 audit(1716922804.869:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 395.330849][ T29] audit: type=1326 audit(1716922804.869:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 395.353663][ T29] audit: type=1326 audit(1716922804.869:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 395.401977][ T29] audit: type=1326 audit(1716922804.869:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 395.577342][ T29] audit: type=1326 audit(1716922805.244:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 395.635108][ T29] audit: type=1326 audit(1716922805.244:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 395.736369][ T29] audit: type=1326 audit(1716922805.405:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 395.819493][ T29] audit: type=1326 audit(1716922805.437:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 395.905033][ T29] audit: type=1326 audit(1716922805.437:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 396.075914][T19302] __nla_validate_parse: 2 callbacks suppressed [ 396.075937][T19302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 396.093137][T19295] loop0: detected capacity change from 0 to 32768 [ 396.102337][T19302] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 396.117970][T19302] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 396.143872][T19306] loop1: detected capacity change from 0 to 512 [ 396.162855][T19295] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 396.183624][T19306] EXT4-fs (loop1): Test dummy encryption mode enabled [ 396.201179][T19306] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #17: comm syz-executor.1: iget: bogus i_mode (0) [ 396.214070][T19306] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 17 (err -117) [ 396.228978][T19306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.262675][T19295] XFS (loop0): Ending clean mount [ 396.267438][T19302] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 7: invalid block bitmap [ 396.286743][T19295] XFS (loop0): Quotacheck needed: Please wait. [ 396.374009][T19295] XFS (loop0): Quotacheck: Done. [ 396.398399][T16922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.532952][T16991] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 397.182547][ T5197] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 397.368570][ T5197] usb 1-1: Using ep0 maxpacket: 8 [ 397.386720][ T5197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 397.410553][ T5197] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 397.440453][ T5197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.456890][ T5197] usb 1-1: config 0 descriptor?? [ 397.470085][ T5197] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 397.484059][ T5197] usb 1-1: Detected SIO [ 397.488700][ T5197] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 397.498041][ T5197] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 397.687675][T19345] loop4: detected capacity change from 0 to 32768 [ 397.700762][ T5148] usb 1-1: USB disconnect, device number 10 [ 397.703059][T19345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (19345) [ 397.725203][ T5148] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 397.747269][ T5148] ftdi_sio 1-1:0.0: device disconnected [ 397.753182][T19345] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 397.753267][T19345] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 397.791362][T19345] BTRFS info (device loop4): using free-space-tree [ 398.027079][T16983] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 398.477750][T19389] loop0: detected capacity change from 0 to 4096 [ 398.505530][T19389] ntfs3: loop0: Failed to load $MFT. [ 399.197535][T19405] loop0: detected capacity change from 0 to 32768 [ 399.210940][T19405] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (19405) [ 399.229698][T19405] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 399.240457][T19405] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 399.249231][T19405] BTRFS info (device loop0): using free-space-tree [ 399.417301][ T29] audit: type=1804 audit(1716922809.364:165): pid=19425 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3764172406/syzkaller.GkfWJt/46/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 399.629077][ T29] audit: type=1326 audit(1716922809.590:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19434 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4182e7cee9 code=0x7ffc0000 [ 399.671192][T16991] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 399.674369][ T29] audit: type=1326 audit(1716922809.622:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19434 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4182e7cee9 code=0x7ffc0000 [ 399.776946][ T29] audit: type=1326 audit(1716922809.622:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19434 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4182e7cee9 code=0x7ffc0000 [ 399.823767][ T29] audit: type=1326 audit(1716922809.622:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19434 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4182e7cee9 code=0x7ffc0000 [ 400.433632][T19437] loop4: detected capacity change from 0 to 32768 [ 400.451880][T19437] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (19437) [ 400.479839][T19437] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 400.490952][T19437] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 400.560241][T19437] BTRFS info (device loop4): rebuilding free space tree [ 400.581674][T19437] BTRFS info (device loop4): disabling free space tree [ 400.588992][T19437] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 400.598921][T19437] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 400.713512][T16983] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 401.209584][T19484] loop0: detected capacity change from 0 to 4096 [ 401.218939][T19484] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 401.230554][T19484] ntfs3: loop0: It is recommened to use chkdsk. [ 403.047349][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 403.047367][ T29] audit: type=1326 audit(1716922813.259:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19514 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 403.131028][ T29] audit: type=1326 audit(1716922813.291:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19514 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 403.251514][ T29] audit: type=1326 audit(1716922813.291:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19514 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 403.305574][ T29] audit: type=1326 audit(1716922813.291:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19514 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 403.364213][ T29] audit: type=1326 audit(1716922813.291:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19514 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 403.412819][ T29] audit: type=1326 audit(1716922813.291:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19514 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff000a7cee9 code=0x7ffc0000 [ 403.474359][ T29] audit: type=1326 audit(1716922813.291:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19514 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff000a7a667 code=0x7ffc0000 [ 403.539324][ T29] audit: type=1326 audit(1716922813.291:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19514 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff000a40329 code=0x7ffc0000 [ 403.567399][ T29] audit: type=1326 audit(1716922813.291:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19514 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff000a7a667 code=0x7ffc0000 [ 403.591676][ T29] audit: type=1326 audit(1716922813.291:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19514 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff000a40329 code=0x7ffc0000 [ 404.173631][T19541] loop4: detected capacity change from 0 to 32768 [ 404.183924][T19541] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (19541) [ 404.210506][T19541] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 404.221359][T19541] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 404.262029][T19541] BTRFS info (device loop4): rebuilding free space tree [ 404.284445][T19541] BTRFS info (device loop4): disabling free space tree [ 404.291606][T19541] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 404.301559][T19541] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 404.398362][T16983] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 404.802548][T19580] loop4: detected capacity change from 0 to 4096 [ 404.811400][T19580] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 404.820873][T19580] ntfs3: loop4: It is recommened to use chkdsk. [ 404.995776][T19584] loop4: detected capacity change from 0 to 4096 [ 405.004468][T19584] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 405.038547][T19584] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 405.085136][T16983] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 405.094770][T16983] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 407.758988][T19600] binder: Bad value for 'stats' [ 408.012587][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 408.012608][ T29] audit: type=1326 audit(1716922818.570:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35af47cee9 code=0x7ffc0000 [ 408.058524][ T29] audit: type=1326 audit(1716922818.581:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f35af47cee9 code=0x7ffc0000 [ 408.101338][ T29] audit: type=1326 audit(1716922818.581:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35af47cee9 code=0x7ffc0000 [ 408.136343][T19612] loop1: detected capacity change from 0 to 1764 [ 408.146254][ T29] audit: type=1326 audit(1716922818.581:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35af47cee9 code=0x7ffc0000 [ 409.616216][T19631] binder: Bad value for 'stats' [ 409.672259][T19633] ALSA: mixer_oss: invalid OSS volume '2òB×°ŠlüÓNNYÆsÚ‹t”óÆi±¹•ùÙe' [ 409.732016][T19635] loop1: detected capacity change from 0 to 512 [ 409.782704][T19635] EXT4-fs (loop1): 1 truncate cleaned up [ 409.801806][T19635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.828292][T19619] loop0: detected capacity change from 0 to 32768 [ 409.849262][T19619] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (19619) [ 409.866238][T19635] EXT4-fs error (device loop1): make_indexed_dir:2261: inode #2: comm syz-executor.1: invalid rec_len for '..' [ 409.913343][T19619] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 409.914092][T19635] EXT4-fs (loop1): Remounting filesystem read-only [ 409.943589][T19644] loop4: detected capacity change from 0 to 512 [ 409.952317][T19619] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 409.967866][T19644] EXT4-fs (loop4): 1 truncate cleaned up [ 409.975039][T19644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.993137][T16922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.039369][T19644] EXT4-fs error (device loop4): make_indexed_dir:2261: inode #2: comm syz-executor.4: invalid rec_len for '..' [ 410.058093][T19644] EXT4-fs (loop4): Remounting filesystem read-only [ 410.091706][T19662] ALSA: mixer_oss: invalid OSS volume '2òB×°ŠlüÓNNYÆsÚ‹t”óÆi±¹•ùÙe' [ 410.105871][T19619] BTRFS info (device loop0): rebuilding free space tree [ 410.125938][T16983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.166870][T19619] BTRFS info (device loop0): disabling free space tree [ 410.173944][T19619] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 410.192898][T19619] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 410.245446][T19666] loop1: detected capacity change from 0 to 256 [ 410.284429][T19666] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 410.285839][T19672] loop4: detected capacity change from 0 to 256 [ 410.324863][T19672] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 410.356704][T16991] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 411.498700][T19699] binder: Bad value for 'stats' [ 412.689946][ T29] audit: type=1800 audit(1716922823.591:221): pid=19706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1942 res=0 errno=0 [ 412.789141][T19708] loop1: detected capacity change from 0 to 512 [ 412.829620][T19708] EXT4-fs (loop1): 1 truncate cleaned up [ 412.897416][T19708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.947680][T19718] loop0: detected capacity change from 0 to 512 [ 412.967638][T19718] EXT4-fs (loop0): 1 truncate cleaned up [ 412.974944][T19718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.981748][T19708] EXT4-fs error (device loop1): make_indexed_dir:2261: inode #2: comm syz-executor.1: invalid rec_len for '..' [ 413.019873][T19718] EXT4-fs error (device loop0): make_indexed_dir:2261: inode #2: comm syz-executor.0: invalid rec_len for '..' [ 413.040776][T19718] EXT4-fs (loop0): Remounting filesystem read-only [ 413.060800][T19708] EXT4-fs (loop1): Remounting filesystem read-only [ 413.097018][T16991] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.133209][T16922] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.232948][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 413.259411][T19736] loop0: detected capacity change from 0 to 256 [ 413.275576][T19736] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 413.438748][ T8] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 413.448636][T19740] loop1: detected capacity change from 0 to 4096 [ 413.471780][T19740] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 413.477448][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 413.501643][ T2480] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.517471][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.599708][T19740] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 413.772417][T16922] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 413.782349][T16922] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 413.792173][ T8] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 413.823486][ T8] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input11 [ 413.825174][ T2480] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.903960][ T8] usb 5-1: USB disconnect, device number 10 [ 413.904030][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 414.106841][ T2480] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.159511][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.172341][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.185934][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.197546][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.205910][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 414.213548][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.328580][ T2480] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.835900][ T2480] bridge_slave_1: left allmulticast mode [ 414.841604][ T2480] bridge_slave_1: left promiscuous mode [ 414.891208][ T29] audit: type=1804 audit(1716922825.951:222): pid=19833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir651076232/syzkaller.I5cRy0/60/bus" dev="sda1" ino=1951 res=1 errno=0 [ 414.902337][ T2480] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.975792][ T29] audit: type=1804 audit(1716922825.951:223): pid=19833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir651076232/syzkaller.I5cRy0/60/bus" dev="sda1" ino=1951 res=1 errno=0 [ 415.027016][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.050917][ T2480] bridge_slave_0: left allmulticast mode [ 415.060227][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.069686][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.077188][ T2480] bridge_slave_0: left promiscuous mode [ 415.087541][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.097570][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 415.108146][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.129267][ T2480] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.639534][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.654770][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.663816][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.712731][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.741295][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 415.748912][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 416.005528][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.016418][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.024899][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.033885][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.041560][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 416.048997][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.166810][T19846] loop4: detected capacity change from 0 to 32768 [ 416.196948][ T5112] Bluetooth: hci1: command tx timeout [ 416.229696][T19846] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 416.388750][T19846] XFS (loop4): Ending clean mount [ 416.404783][T19846] XFS (loop4): Quotacheck needed: Please wait. [ 416.448457][ T2480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.463544][ T2480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.483492][ T2480] bond0 (unregistering): Released all slaves [ 416.493947][T19846] XFS (loop4): Quotacheck: Done. [ 416.754787][T16983] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 417.009358][ T5112] Bluetooth: hci2: command tx timeout [ 417.236240][T19771] chnl_net:caif_netlink_parms(): no params data found [ 417.286648][ T2480] hsr_slave_0: left promiscuous mode [ 417.297529][ T2480] hsr_slave_1: left promiscuous mode [ 417.306625][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.314069][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.329642][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.340560][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.377447][ T2480] veth1_macvtap: left promiscuous mode [ 417.388716][ T2480] veth0_macvtap: left promiscuous mode [ 417.394559][ T2480] veth1_vlan: left promiscuous mode [ 417.399984][ T2480] veth0_vlan: left promiscuous mode [ 417.684085][ T5112] Bluetooth: hci0: command tx timeout [ 417.982132][ T5112] Bluetooth: hci4: command tx timeout [ 418.096503][ T2480] team0 (unregistering): Port device team_slave_1 removed [ 418.128937][ T5112] Bluetooth: hci1: command tx timeout [ 418.202750][ T2480] team0 (unregistering): Port device team_slave_0 removed [ 418.544966][T20046] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 418.946914][ T5112] Bluetooth: hci2: command tx timeout [ 419.157196][ T29] audit: type=1804 audit(1716922830.543:224): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir651076232/syzkaller.I5cRy0/70/bus" dev="sda1" ino=1947 res=1 errno=0 [ 419.186519][ T29] audit: type=1804 audit(1716922830.576:225): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir651076232/syzkaller.I5cRy0/70/bus" dev="sda1" ino=1947 res=1 errno=0 [ 419.304429][T19771] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.348402][T19771] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.358438][T19771] bridge_slave_0: entered allmulticast mode [ 419.367575][T19771] bridge_slave_0: entered promiscuous mode [ 419.407593][T19771] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.428304][T19771] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.442070][T19771] bridge_slave_1: entered allmulticast mode [ 419.449328][T19771] bridge_slave_1: entered promiscuous mode [ 419.617589][ T5112] Bluetooth: hci0: command tx timeout [ 419.711837][T19771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.797366][T19771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.808830][T19862] chnl_net:caif_netlink_parms(): no params data found [ 419.915980][ T5112] Bluetooth: hci4: command tx timeout [ 419.947218][T19852] chnl_net:caif_netlink_parms(): no params data found [ 420.020952][T19835] chnl_net:caif_netlink_parms(): no params data found [ 420.051124][T19771] team0: Port device team_slave_0 added [ 420.073557][ T5112] Bluetooth: hci1: command tx timeout [ 420.136883][T19771] team0: Port device team_slave_1 added [ 420.283853][T19862] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.297626][T19862] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.304871][T19862] bridge_slave_0: entered allmulticast mode [ 420.314313][T19862] bridge_slave_0: entered promiscuous mode [ 420.356750][T19771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.364846][T19771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.397416][T19771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.410419][T19771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.421346][T19771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.447745][T19771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.459355][T19862] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.466979][T19862] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.474247][T19862] bridge_slave_1: entered allmulticast mode [ 420.482017][T19862] bridge_slave_1: entered promiscuous mode [ 420.508623][T20534] netlink: 212936 bytes leftover after parsing attributes in process `syz-executor.4'. [ 420.599161][ T2480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.660269][T19862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.799944][ T2480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.821632][T19862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.893768][ T5112] Bluetooth: hci2: command tx timeout [ 420.986439][T19835] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.002840][T19835] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.010289][T19835] bridge_slave_0: entered allmulticast mode [ 421.026184][T19835] bridge_slave_0: entered promiscuous mode [ 421.079538][ T2480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.107500][T19771] hsr_slave_0: entered promiscuous mode [ 421.119319][ T29] audit: type=1804 audit(1716922832.646:226): pid=20673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir651076232/syzkaller.I5cRy0/79/bus" dev="sda1" ino=1947 res=1 errno=0 [ 421.145432][ T29] audit: type=1804 audit(1716922832.646:227): pid=20673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir651076232/syzkaller.I5cRy0/79/bus" dev="sda1" ino=1947 res=1 errno=0 [ 421.173026][T19771] hsr_slave_1: entered promiscuous mode [ 421.181568][T19771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.189388][T19771] Cannot create hsr debugfs directory [ 421.195402][T19852] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.207402][T19852] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.216326][T19852] bridge_slave_0: entered allmulticast mode [ 421.232693][T19852] bridge_slave_0: entered promiscuous mode [ 421.272375][T19862] team0: Port device team_slave_0 added [ 421.281356][T19835] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.289618][T19835] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.297088][T19835] bridge_slave_1: entered allmulticast mode [ 421.315207][T19835] bridge_slave_1: entered promiscuous mode [ 421.366567][ T29] audit: type=1800 audit(1716922832.914:228): pid=20678 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1946 res=0 errno=0 [ 421.397870][ T2480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.464065][T19852] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.471240][T19852] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.478994][T19852] bridge_slave_1: entered allmulticast mode [ 421.494757][T19852] bridge_slave_1: entered promiscuous mode [ 421.503986][T19862] team0: Port device team_slave_1 added [ 421.555754][ T5112] Bluetooth: hci0: command tx timeout [ 421.712962][T19835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.743025][T19835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.768196][T19852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.782277][T19852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.792123][T19862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.807448][T19862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.848774][T19862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.853581][ T5112] Bluetooth: hci4: command tx timeout [ 421.975746][T19862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.982738][T19862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.008169][T20680] loop4: detected capacity change from 0 to 32768 [ 422.017933][ T5112] Bluetooth: hci1: command tx timeout [ 422.026048][T19862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.032757][T20680] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (20680) [ 422.067803][T20680] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 422.075014][T19835] team0: Port device team_slave_0 added [ 422.090142][T20680] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 422.092376][T19852] team0: Port device team_slave_0 added [ 422.099287][T20680] BTRFS info (device loop4): using free-space-tree [ 422.146397][T19835] team0: Port device team_slave_1 added [ 422.181603][T19852] team0: Port device team_slave_1 added [ 422.205035][T20680] BTRFS info (device loop4): rebuilding free space tree [ 422.275682][T16983] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 422.358295][T19835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.365290][T19835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.395096][T19835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.411403][T19835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.418525][T19835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.470170][T19835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.622726][T19862] hsr_slave_0: entered promiscuous mode [ 422.650125][T19862] hsr_slave_1: entered promiscuous mode [ 422.657588][T20929] netlink: 212936 bytes leftover after parsing attributes in process `syz-executor.4'. [ 422.669089][T19862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.682704][T19862] Cannot create hsr debugfs directory [ 422.826870][ T5112] Bluetooth: hci2: command tx timeout [ 422.840759][ T2480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.889529][T19852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.896529][T19852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.928748][T19852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.014971][ T2480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.036248][T19852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.044535][T19852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.075040][T19852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.284123][ T29] audit: type=1804 audit(1716922834.974:229): pid=21040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir651076232/syzkaller.I5cRy0/89/bus" dev="sda1" ino=1947 res=1 errno=0 [ 423.293155][ T2480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.319502][ T29] audit: type=1804 audit(1716922835.007:230): pid=21040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir651076232/syzkaller.I5cRy0/89/bus" dev="sda1" ino=1947 res=1 errno=0 [ 423.361466][T19835] hsr_slave_0: entered promiscuous mode [ 423.368272][T19835] hsr_slave_1: entered promiscuous mode [ 423.374880][T19835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.382496][T19835] Cannot create hsr debugfs directory [ 423.411693][ T2480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.495406][ T5112] Bluetooth: hci0: command tx timeout [ 423.550395][ T29] audit: type=1800 audit(1716922835.253:231): pid=21068 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1946 res=0 errno=0 [ 423.705897][T19852] hsr_slave_0: entered promiscuous mode [ 423.722758][T19852] hsr_slave_1: entered promiscuous mode [ 423.741723][T19852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.756291][T19852] Cannot create hsr debugfs directory [ 423.792845][ T5112] Bluetooth: hci4: command tx timeout [ 424.133919][T21086] loop4: detected capacity change from 0 to 32768 [ 424.249330][T21086] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,str_hash=crc64,nojournal_transaction_names [ 424.266444][T21086] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 424.325130][T21086] bcachefs (loop4): alloc_read... done [ 424.330695][T21086] bcachefs (loop4): stripes_read... done [ 424.331111][ T2480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.345009][T21086] bcachefs (loop4): snapshots_read... done [ 424.356158][T21086] bcachefs (loop4): journal_replay... done [ 424.362601][T21086] bcachefs (loop4): resume_logged_ops... done [ 424.368881][T21086] bcachefs (loop4): going read-write [ 424.382808][T21086] bcachefs (loop4): done starting filesystem [ 424.550723][ T2480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.652063][T16983] bcachefs (loop4): shutting down [ 424.664382][T16983] bcachefs (loop4): going read-only [ 424.670071][T16983] bcachefs (loop4): finished waiting for writes to stop [ 424.679766][ T2480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.691490][T16983] bcachefs (loop4): flushing journal and stopping allocators, journal seq 19 [ 424.726201][T16983] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 21 [ 424.740832][T16983] bcachefs (loop4): shutdown complete, journal seq 22 [ 424.748876][T16983] bcachefs (loop4): marking filesystem clean [ 424.798864][ T2480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.813632][T16983] bcachefs (loop4): shutdown complete [ 424.951797][T19771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 424.973656][T19771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 425.081184][T19771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 425.103827][T19771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 425.266126][ T2480] bridge_slave_1: left allmulticast mode [ 425.271828][ T2480] bridge_slave_1: left promiscuous mode [ 425.288344][ T2480] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.311008][ T2480] bridge_slave_1: left allmulticast mode [ 425.327823][ T2480] bridge_slave_1: left promiscuous mode [ 425.336046][ T2480] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.346418][ T2480] bridge_slave_0: left allmulticast mode [ 425.356613][ T2480] bridge_slave_0: left promiscuous mode [ 425.366918][ T2480] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.390957][ T2480] bridge_slave_1: left allmulticast mode [ 425.396982][ T2480] bridge_slave_1: left promiscuous mode [ 425.402736][ T2480] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.413622][ T2480] bridge_slave_0: left allmulticast mode [ 425.420531][ T2480] bridge_slave_0: left promiscuous mode [ 425.426719][ T2480] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.511675][T21304] loop4: detected capacity change from 0 to 256 [ 425.527925][T21304] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 425.579508][T21304] exFAT-fs (loop4): IO charset iso885D-15 not found [ 425.808334][ T46] nci: nci_rx_work: unknown MT 0x6 [ 426.404746][T21317] loop4: detected capacity change from 0 to 256 [ 426.420376][T21317] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 426.463753][T21317] exFAT-fs (loop4): IO charset iso885D-15 not found [ 426.654847][ T2480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.678355][ T2480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.700007][ T2480] bond0 (unregistering): Released all slaves [ 426.896375][ T2480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.916050][ T2480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.938349][ T2480] bond0 (unregistering): Released all slaves [ 427.126856][ T2480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.138036][ T2480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.150503][ T2480] bond0 (unregistering): Released all slaves [ 427.241955][ T2529] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 427.407451][T19771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.444944][ T2529] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 427.476352][ T2529] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 427.488913][T19771] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.496608][ T2529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.532359][ T2529] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 427.539344][ T2529] usb 5-1: No valid video chain found. [ 427.596681][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.603851][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.649497][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.656689][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.749875][T19852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 427.760230][ T5197] usb 5-1: USB disconnect, device number 11 [ 427.808519][T19852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.897123][T19852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.925754][T19852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.373345][ T29] audit: type=1800 audit(1716922840.435:232): pid=21399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1946 res=0 errno=0 [ 428.436704][ T2480] hsr_slave_0: left promiscuous mode [ 428.453683][ T2480] hsr_slave_1: left promiscuous mode [ 428.463619][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.472313][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.484284][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.493292][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.523466][ T2480] hsr_slave_0: left promiscuous mode [ 428.535745][ T2480] hsr_slave_1: left promiscuous mode [ 428.549289][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.561462][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.578738][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.592026][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.617116][ T2480] hsr_slave_0: left promiscuous mode [ 428.629806][ T2480] hsr_slave_1: left promiscuous mode [ 428.649586][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.657073][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.675333][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.685420][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.819685][ T2480] veth1_macvtap: left promiscuous mode [ 428.825269][ T2480] veth0_macvtap: left promiscuous mode [ 428.841616][ T2480] veth1_vlan: left promiscuous mode [ 428.850102][ T2480] veth0_vlan: left promiscuous mode [ 428.863804][ T2480] veth1_macvtap: left promiscuous mode [ 428.869371][ T2480] veth0_macvtap: left promiscuous mode [ 428.885686][ T2480] veth1_vlan: left promiscuous mode [ 428.891051][ T2480] veth0_vlan: left promiscuous mode [ 428.898466][ T2480] veth1_macvtap: left promiscuous mode [ 428.910651][ T2480] veth0_macvtap: left promiscuous mode [ 428.916323][ T2480] veth1_vlan: left promiscuous mode [ 428.932181][ T2480] veth0_vlan: left promiscuous mode [ 429.808483][T21412] loop4: detected capacity change from 0 to 32768 [ 429.819085][T21412] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (21412) [ 429.856993][T21412] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 429.872885][T21412] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 429.882195][T21412] BTRFS info (device loop4): using free-space-tree [ 430.016074][T21412] BTRFS info (device loop4): rebuilding free space tree [ 430.139026][T16983] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 430.203651][ T2480] team0 (unregistering): Port device team_slave_1 removed [ 430.376748][ T2480] team0 (unregistering): Port device team_slave_0 removed [ 430.449521][T21433] loop4: detected capacity change from 0 to 256 [ 430.464487][T21433] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 430.523264][T21433] exFAT-fs (loop4): IO charset iso885D-15 not found [ 430.711743][ T2461] nci: nci_rx_work: unknown MT 0x6 [ 431.506360][T21451] loop4: detected capacity change from 0 to 1024 [ 431.519070][T21451] EXT4-fs: Ignoring removed orlov option [ 431.524911][T21451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.558411][T21451] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 431.566860][T21451] System zones: 0-1, 3-36 [ 431.576775][T21451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.711267][ T2480] team0 (unregistering): Port device team_slave_1 removed [ 431.768704][ T2480] team0 (unregistering): Port device team_slave_0 removed [ 432.789392][ T2480] team0 (unregistering): Port device team_slave_1 removed [ 432.847147][ T2480] team0 (unregistering): Port device team_slave_0 removed [ 433.395750][T19771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.422551][T19852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.514778][T16983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.528003][T19852] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.604886][T19862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 433.639495][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.646696][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.675236][T19862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 433.688145][T19862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 433.707062][T19862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 433.769096][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.776245][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.867538][T19771] veth0_vlan: entered promiscuous mode [ 433.961691][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 433.976774][T19835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 433.998665][T19835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 434.024781][T19835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 434.055583][T19835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.078196][T19771] veth1_vlan: entered promiscuous mode [ 434.166626][ T9] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 434.241123][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 434.250268][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.304288][ T9] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 434.332966][T19771] veth0_macvtap: entered promiscuous mode [ 434.349291][ T9] usb 5-1: No valid video chain found. [ 434.444802][T19862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.458366][T19771] veth1_macvtap: entered promiscuous mode [ 434.554926][T19862] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.573508][ T45] usb 5-1: USB disconnect, device number 12 [ 434.594151][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.612133][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.618817][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.620202][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.640067][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.651638][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.677016][T19771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.709840][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.717032][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.741303][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.748495][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.770135][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.780695][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.791734][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.802389][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.814843][T19771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.830425][T19852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.854499][T19771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.863999][T19771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.874315][T19771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.885806][T19771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.917578][T19835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.058385][T19835] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.166049][T19852] veth0_vlan: entered promiscuous mode [ 435.177100][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.183135][ T5154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.184313][ T7476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.210093][ T5154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.260658][T19852] veth1_vlan: entered promiscuous mode [ 435.327717][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.334975][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.406307][ T5154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.414208][ T5154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.488672][T19852] veth0_macvtap: entered promiscuous mode [ 435.547600][T19852] veth1_macvtap: entered promiscuous mode [ 435.626312][T19862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.674768][T19852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.690720][T19852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.709078][T19852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.748388][T19852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.775780][T19852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.792701][T19852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.817502][T19852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.847946][T19852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.867367][T19852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.892206][T19852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.908568][T19852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.925438][T19852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.936757][T19852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.960829][T19852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.052294][T19852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.062040][T19852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.080326][T19852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.088149][T21508] loop4: detected capacity change from 0 to 32768 [ 436.107242][T21508] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (21508) [ 436.110004][T19852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.144361][T21508] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 436.180394][T21508] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 436.202964][T21508] BTRFS info (device loop4): using free-space-tree [ 436.360749][T19835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.392216][T19862] veth0_vlan: entered promiscuous mode [ 436.452016][T16983] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 436.467840][T21515] loop3: detected capacity change from 0 to 32768 [ 436.468134][T16424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.501875][T16424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.560585][T19862] veth1_vlan: entered promiscuous mode [ 436.640304][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.650971][T21515] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,str_hash=crc64,nojournal_transaction_names [ 436.664405][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.678944][T21515] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 436.746640][T19862] veth0_macvtap: entered promiscuous mode [ 436.749211][T21515] bcachefs (loop3): alloc_read... done [ 436.788916][T21515] bcachefs (loop3): stripes_read... done [ 436.794703][T21515] bcachefs (loop3): snapshots_read... [ 436.801888][T19862] veth1_macvtap: entered promiscuous mode [ 436.833785][T21515] done [ 436.839389][T21515] bcachefs (loop3): journal_replay... done [ 436.848551][T21515] bcachefs (loop3): resume_logged_ops... done [ 436.873363][T19835] veth0_vlan: entered promiscuous mode [ 436.880458][T21515] bcachefs (loop3): going read-write [ 436.912543][T19835] veth1_vlan: entered promiscuous mode [ 436.921599][T21515] bcachefs (loop3): done starting filesystem [ 437.025256][T19862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.048923][T19862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.061128][T19862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.086927][T19862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.118211][T19862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.131113][T19862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.143341][T19862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.159490][T19862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.184706][T19862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.202029][T21567] loop1: detected capacity change from 0 to 256 [ 437.240915][T19835] veth0_macvtap: entered promiscuous mode [ 437.267790][T19862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.291724][T19862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.310737][T19862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.322329][T19862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.339653][T19862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.353161][T19862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.366855][T19862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.386083][T19862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.398310][T19862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.414659][T19862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.421113][T19771] bcachefs (loop3): shutting down [ 437.424885][T19862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.429016][T19771] bcachefs (loop3): going read-only [ 437.443658][T19771] bcachefs (loop3): finished waiting for writes to stop [ 437.465855][T19862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.482505][T19862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.506677][T19835] veth1_macvtap: entered promiscuous mode [ 437.514992][T19771] bcachefs (loop3): flushing journal and stopping allocators, journal seq 14 [ 437.547075][T19771] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 15 [ 437.651260][T19771] bcachefs (loop3): shutdown complete, journal seq 16 [ 437.681885][T19771] bcachefs (loop3): marking filesystem clean [ 437.697899][T21577] loop1: detected capacity change from 0 to 64 [ 437.710930][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.737797][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.757281][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.784018][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.801628][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.813788][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.832564][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.845390][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.863640][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.875410][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.898428][T19771] bcachefs (loop3): shutdown complete [ 437.916478][T19835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.924364][T21585] Trying to free block not in datazone [ 437.984890][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.007097][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.020703][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.046170][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.056320][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.068525][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.079539][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.090398][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.102878][T19835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.125215][T19835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.147813][T19835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.196654][T19835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.231645][T19835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.255295][T19835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.286338][T19835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.335311][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.360489][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.437681][T21592] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 438.444943][T21592] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 438.454254][ T2480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.480840][ T2480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.795083][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.815810][T21612] loop0: detected capacity change from 0 to 1024 [ 438.827408][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.865505][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.875232][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.944076][T21612] hfsplus: failed to load root directory [ 439.024683][T21625] loop2: detected capacity change from 0 to 1764 [ 439.048183][T21627] loop4: detected capacity change from 0 to 256 [ 439.361768][T21636] loop3: detected capacity change from 0 to 256 [ 439.430427][T21636] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 439.561710][T21636] exFAT-fs (loop3): IO charset iso885D-15 not found [ 439.771330][ T2440] nci: nci_rx_work: unknown MT 0x6 [ 439.987210][T21670] loop0: detected capacity change from 0 to 1024 [ 440.034787][T21673] loop1: detected capacity change from 0 to 1024 [ 440.059828][T21673] EXT4-fs: Ignoring removed oldalloc option [ 440.110590][T21673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.303754][T19852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.428689][T21687] loop0: detected capacity change from 0 to 1024 [ 440.465750][T21687] EXT4-fs: Ignoring removed oldalloc option [ 440.473838][T21643] loop2: detected capacity change from 0 to 32768 [ 440.476012][T21689] loop1: detected capacity change from 0 to 256 [ 440.502251][ T5112] Bluetooth: hci5: sending frame failed (-49) [ 440.513879][ T4476] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 440.530012][T21687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.553409][T21643] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 440.643366][T21643] XFS (loop2): Quotacheck needed: Please wait. [ 440.705679][T19862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.740525][ T5152] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 440.808266][ T5152] XFS (loop2): Unmount and run xfs_repair [ 440.819369][ T5152] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 440.826951][ T5152] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 440.838149][ T5152] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 440.853782][ T5152] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 440.882986][ T5152] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 440.912242][ T5152] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 440.935838][ T5152] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 440.969771][ T5152] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 440.998149][ T5152] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 441.022177][ T2480] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 441.079598][ T2480] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 441.126675][T21727] loop4: detected capacity change from 0 to 1024 [ 441.135012][ T2480] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 441.137407][T21727] EXT4-fs: Ignoring removed oldalloc option [ 441.204823][T21643] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 441.226599][T21727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.335444][T21736] loop1: detected capacity change from 0 to 1024 [ 441.342993][T21736] EXT4-fs: Ignoring removed oldalloc option [ 441.380775][T19835] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 441.427407][T21736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.431647][T16983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.549128][ T2440] Bluetooth: hci5: Frame reassembly failed (-84) [ 441.652295][T19852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.749415][T21750] loop4: detected capacity change from 0 to 64 [ 441.895677][T21756] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 441.937858][T21756] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 441.982606][T21716] loop3: detected capacity change from 0 to 32768 [ 442.049303][T21716] find_entry called with index = 0 [ 442.094852][T21716] read_mapping_page failed! [ 442.111382][T21716] ERROR: (device loop3): txCommit: [ 442.111382][T21716] [ 442.204288][T19771] ERROR: (device loop3): diFree: numfree > numinos [ 442.204288][T19771] [ 442.659039][T21785] loop4: detected capacity change from 0 to 64 [ 442.757057][T21787] loop3: detected capacity change from 0 to 1024 [ 442.786531][T21787] EXT4-fs: Ignoring removed oldalloc option [ 442.829439][T21787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.953570][T19771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.089920][T21798] loop4: detected capacity change from 0 to 64 [ 443.129528][T21779] loop1: detected capacity change from 0 to 40427 [ 443.148314][T21779] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 443.163495][T21800] loop3: detected capacity change from 0 to 64 [ 443.173464][T21779] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 443.206820][T21779] F2FS-fs (loop1): invalid crc value [ 443.231143][T21779] F2FS-fs (loop1): Found nat_bits in checkpoint [ 443.288400][T21774] loop2: detected capacity change from 0 to 32768 [ 443.358750][T21774] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 443.394711][T21774] XFS (loop2): Quotacheck needed: Please wait. [ 443.403069][ T4476] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 443.443888][T21779] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 443.489159][ T5154] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 443.506906][T21779] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 443.526409][ T5154] XFS (loop2): Unmount and run xfs_repair [ 443.542473][ T5154] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 443.577013][ T5154] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 443.595650][ T5154] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 443.604791][ T5154] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 443.620407][ T5154] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 443.633791][ T5154] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 443.658062][ T5154] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 443.673504][ T5154] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 443.688434][T21831] loop4: detected capacity change from 0 to 64 [ 443.710564][ T5154] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 443.725296][ T2440] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 443.756563][ T2440] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 443.774051][ T2440] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 443.787303][T21774] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 443.906871][T19835] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 444.263464][T21840] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 444.270011][T21840] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 444.279198][T21844] loop0: detected capacity change from 0 to 64 [ 444.579297][T21849] binder: BINDER_SET_CONTEXT_MGR already set [ 444.585363][T21849] binder: 21847:21849 ioctl 4018620d 20000040 returned -16 [ 444.963235][T21830] loop3: detected capacity change from 0 to 32768 [ 445.006482][T21830] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (21830) [ 445.096161][T21830] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 445.136923][T21830] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 445.165372][T21830] BTRFS info (device loop3): using free-space-tree [ 445.376907][ T29] audit: type=1804 audit(1716922858.675:233): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3524410986/syzkaller.wVxF5U/8/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 445.425377][ T5114] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 445.480524][ T29] audit: type=1804 audit(1716922858.675:234): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3524410986/syzkaller.wVxF5U/8/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 445.559131][ T29] audit: type=1804 audit(1716922858.675:235): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3524410986/syzkaller.wVxF5U/8/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 445.630313][ T5114] usb 2-1: Using ep0 maxpacket: 32 [ 445.659810][ T5114] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 445.693772][ T5114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.720068][ T5114] usb 2-1: Product: syz [ 445.731555][T19771] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 445.732487][ T5114] usb 2-1: Manufacturer: syz [ 445.787754][ T5114] usb 2-1: SerialNumber: syz [ 445.824074][ T5114] usb 2-1: config 0 descriptor?? [ 446.145469][ T5114] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 011 [ 446.189254][T21850] loop2: detected capacity change from 0 to 32768 [ 446.322538][T21902] loop3: detected capacity change from 0 to 64 [ 446.361528][ T5114] usb 2-1: USB disconnect, device number 11 [ 446.402503][T21850] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 446.403381][T21875] loop4: detected capacity change from 0 to 32768 [ 446.424286][T21850] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 446.492001][T21867] loop0: detected capacity change from 0 to 40427 [ 446.503890][T21850] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 446.506069][T21867] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 446.512477][T21875] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 446.540044][T21867] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 446.566470][T21875] XFS (loop4): Quotacheck needed: Please wait. [ 446.570213][T21867] F2FS-fs (loop0): invalid crc value [ 446.603705][T21867] F2FS-fs (loop0): Found nat_bits in checkpoint [ 446.608339][ T2480] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 446.654578][ T2480] XFS (loop4): Unmount and run xfs_repair [ 446.671963][ T2480] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 446.684817][ T2480] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 446.695552][ T2480] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 446.704703][T21867] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 446.712013][T21867] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 446.721991][ T2480] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 446.748335][ T2480] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 446.776653][ T2480] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 446.800262][ T2480] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 446.819288][T21850] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 446.827825][ T2480] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 446.827851][ T2480] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 446.827880][ T2480] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 446.868023][ T2480] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 446.898064][ T2480] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 446.923902][T21875] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 447.047085][T21937] loop1: detected capacity change from 0 to 256 [ 447.075889][T21937] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 447.184329][T16983] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 447.829261][T21954] loop4: detected capacity change from 0 to 64 [ 447.848498][T21954] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 447.886822][T21954] MINIX-fs: bad superblock or unable to read bitmaps [ 448.023476][T21964] loop1: detected capacity change from 0 to 64 [ 448.234860][T21929] loop3: detected capacity change from 0 to 40427 [ 448.254291][T21929] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 448.277913][T21929] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 448.317647][T21929] F2FS-fs (loop3): invalid crc value [ 448.344629][T21929] F2FS-fs (loop3): Found nat_bits in checkpoint [ 448.473284][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 448.516873][T21929] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 448.528780][T21929] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 448.659925][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 448.706484][ T9] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 448.715580][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.764987][ T9] usb 1-1: Product: syz [ 448.785316][ T9] usb 1-1: Manufacturer: syz [ 448.801253][ T9] usb 1-1: SerialNumber: syz [ 448.833677][ T9] usb 1-1: config 0 descriptor?? [ 448.899446][T21952] loop2: detected capacity change from 0 to 32768 [ 448.973414][T21952] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 449.089614][ T9] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 011 [ 449.124458][T21952] XFS (loop2): Ending clean mount [ 449.146325][T21952] XFS (loop2): Quotacheck needed: Please wait. [ 449.243225][T21952] XFS (loop2): Quotacheck: Done. [ 449.301646][T21968] loop4: detected capacity change from 0 to 40427 [ 449.342125][T21968] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 449.351522][ T5114] usb 1-1: USB disconnect, device number 11 [ 449.378382][T19835] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 449.387279][T21968] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 449.468944][T21968] F2FS-fs (loop4): invalid crc value [ 449.546786][T21968] F2FS-fs (loop4): Found nat_bits in checkpoint [ 449.575749][T22015] loop3: detected capacity change from 0 to 64 [ 449.719097][T21968] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 449.736540][T21968] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 449.919971][T21980] loop1: detected capacity change from 0 to 32768 [ 449.957049][T21980] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 449.983165][T21980] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 450.018693][T22024] loop2: detected capacity change from 0 to 64 [ 450.032288][T21980] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 450.196973][T22032] loop3: detected capacity change from 0 to 64 [ 450.230117][T22032] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 450.240683][T21980] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 450.248139][T22032] MINIX-fs: bad superblock or unable to read bitmaps [ 450.918993][T22055] loop4: detected capacity change from 0 to 256 [ 450.941425][T22055] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 451.160212][T22027] loop0: detected capacity change from 0 to 32768 [ 451.230738][T22027] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 451.300674][T22027] XFS (loop0): Quotacheck needed: Please wait. [ 451.367891][ T8] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 451.398093][ T8] XFS (loop0): Unmount and run xfs_repair [ 451.427674][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 451.442369][ T8] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 451.460442][ T8] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 451.491458][ T8] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 451.520651][ T8] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 451.540081][ T8] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 451.568167][ T8] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 451.577063][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 451.633336][ T8] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 451.645713][ T2480] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 451.728852][ T2480] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 451.770502][T22076] loop4: detected capacity change from 0 to 16 [ 451.796025][T22076] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 451.805481][ T2480] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 451.857162][T22046] loop3: detected capacity change from 0 to 40427 [ 451.875620][T22027] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 451.876015][T22046] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 451.908025][T22046] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 451.941773][T22046] F2FS-fs (loop3): invalid crc value [ 451.983153][T22046] F2FS-fs (loop3): Found nat_bits in checkpoint [ 452.039770][T19862] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 452.167864][T22084] loop4: detected capacity change from 0 to 16 [ 452.193965][T22084] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 452.227071][T22046] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 452.252463][T22046] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 452.386389][T22067] loop1: detected capacity change from 0 to 32768 [ 452.442265][T22067] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 452.461161][T22072] loop2: detected capacity change from 0 to 32768 [ 452.486467][T22072] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (22072) [ 452.528992][T22072] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 452.570967][T22067] XFS (loop1): Ending clean mount [ 452.587321][T22072] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 452.618156][T22072] BTRFS info (device loop2): using free-space-tree [ 452.630492][T22067] XFS (loop1): Quotacheck needed: Please wait. [ 452.714121][T22067] XFS (loop1): Quotacheck: Done. [ 452.892644][ T29] audit: type=1804 audit(1716922866.743:236): pid=22072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1711546186/syzkaller.9xuNqq/11/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 452.950349][T19852] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 453.020307][ T29] audit: type=1804 audit(1716922866.764:237): pid=22072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1711546186/syzkaller.9xuNqq/11/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 453.105950][ T29] audit: type=1804 audit(1716922866.764:238): pid=22072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1711546186/syzkaller.9xuNqq/11/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 453.261871][T22140] loop3: detected capacity change from 0 to 16 [ 453.302309][T22140] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 453.426912][T19835] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 453.428828][ T5114] kernel write not supported for file bpf-prog (pid: 5114 comm: kworker/1:3) [ 453.850685][T22160] loop1: detected capacity change from 0 to 164 [ 453.996442][T22160] Unsupported NM flag settings (8) [ 454.270750][T22179] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎ¼§6 [ 454.510377][T22190] loop1: detected capacity change from 0 to 16 [ 454.522545][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 454.540987][T22190] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 454.785232][T22200] loop0: detected capacity change from 0 to 164 [ 454.815452][T22200] Unsupported NM flag settings (8) [ 455.020363][T22215] loop2: detected capacity change from 0 to 64 [ 455.039051][T22215] hfs: session requires an argument [ 455.052443][T22215] hfs: unable to parse mount options [ 455.102073][T22217] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎ¼§6 [ 455.161410][T22164] loop4: detected capacity change from 0 to 32768 [ 455.215908][T22164] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 455.242236][T22230] loop1: detected capacity change from 0 to 16 [ 455.255538][T22230] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 455.378828][T22164] XFS (loop4): Ending clean mount [ 455.404507][T22164] XFS (loop4): Quotacheck needed: Please wait. [ 455.573804][T22164] XFS (loop4): Quotacheck: Done. [ 455.731868][T16983] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 456.496835][T22215] loop2: detected capacity change from 0 to 40427 [ 456.522542][T22215] F2FS-fs (loop2): invalid crc value [ 456.541764][T22215] F2FS-fs (loop2): Found nat_bits in checkpoint [ 456.776421][T22215] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 456.997640][T19835] syz-executor.2: attempt to access beyond end of device [ 456.997640][T19835] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 457.031048][T19835] syz-executor.2: attempt to access beyond end of device [ 457.031048][T19835] loop2: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 457.072297][T19835] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 457.089807][T19835] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 457.093453][T22243] loop0: detected capacity change from 0 to 32768 [ 457.128453][T22243] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 457.142419][T22243] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 457.177045][T22243] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 457.510004][T22243] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 457.748004][T22297] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎ¼§6 [ 458.138785][ T29] audit: type=1804 audit(1716922872.365:239): pid=22310 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1143876993/syzkaller.XBJyuj/35/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 458.252860][ T5197] IPVS: starting estimator thread 0... [ 458.343741][T22313] IPVS: using max 18 ests per chain, 43200 per kthread [ 458.781532][T22324] usb usb9: usbfs: process 22324 (syz-executor.0) did not claim interface 0 before use [ 458.879657][T22302] loop4: detected capacity change from 0 to 40427 [ 458.890938][T22302] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 458.902802][T22302] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 458.921936][T22302] F2FS-fs (loop4): invalid crc value [ 458.939182][T22302] F2FS-fs (loop4): Found nat_bits in checkpoint [ 459.075714][T22302] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 459.086275][T22302] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 459.123824][T22331] loop0: detected capacity change from 0 to 512 [ 459.154708][T22331] EXT4-fs error (device loop0): ext4_quota_enable:7030: comm syz-executor.0: Bad quota inum: 2, type: 2 [ 459.173877][T22331] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 459.198647][T22331] EXT4-fs (loop0): mount failed [ 459.233376][T16983] syz-executor.4: attempt to access beyond end of device [ 459.233376][T16983] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 459.266720][T16983] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 479.492475][ T4476] Bluetooth: hci3: command 0x0406 tx timeout [ 485.280647][ T4476] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.295074][ T4476] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.312538][ T4476] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.322169][ T5105] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 485.335931][ T5105] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 485.348160][ T4476] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.362873][ T5105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 485.363301][ T4476] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 485.372857][ T5105] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 485.377777][ T4476] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.388910][ T5105] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 485.404631][ T5105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 486.725831][ T5112] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 486.738779][ T5112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 486.747997][ T5112] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 486.762207][ T5112] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 486.778446][ T5112] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 486.786070][ T5112] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 487.321845][ T5112] Bluetooth: hci6: command tx timeout [ 487.328985][ T5112] Bluetooth: hci5: command tx timeout [ 487.499222][ T5107] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 487.510837][ T5107] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 487.520798][ T5107] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 487.531207][ T5107] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 487.540353][ T5107] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 487.570775][ T5107] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 487.827805][ T5112] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 487.839056][ T5112] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 487.848302][ T5112] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 487.858741][ T5112] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 487.872693][ T5112] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 487.880086][ T5112] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 488.663983][ T5112] Bluetooth: hci7: command tx timeout [ 489.260295][ T5107] Bluetooth: hci6: command tx timeout [ 489.269433][ T5112] Bluetooth: hci5: command tx timeout [ 489.494610][ T5112] Bluetooth: hci8: command tx timeout [ 489.782436][ T5112] Bluetooth: hci9: command tx timeout [ 490.602514][ T5112] Bluetooth: hci7: command tx timeout [ 491.199083][ T5112] Bluetooth: hci5: command tx timeout [ 491.204553][ T5112] Bluetooth: hci6: command tx timeout [ 491.422952][ T5112] Bluetooth: hci8: command tx timeout [ 491.720926][ T5112] Bluetooth: hci9: command tx timeout [ 491.886123][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 491.892705][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 492.546615][ T5112] Bluetooth: hci7: command tx timeout [ 493.137641][ T5112] Bluetooth: hci6: command tx timeout [ 493.137846][ T5107] Bluetooth: hci5: command tx timeout [ 493.361474][ T5107] Bluetooth: hci8: command tx timeout [ 493.662012][ T5107] Bluetooth: hci9: command tx timeout [ 494.479909][ T5107] Bluetooth: hci7: command tx timeout [ 495.300114][ T5107] Bluetooth: hci8: command tx timeout [ 495.607625][ T5107] Bluetooth: hci9: command tx timeout [ 531.994124][T22359] Bluetooth: hci2: command 0x0406 tx timeout [ 532.000826][T22359] Bluetooth: hci0: command 0x0406 tx timeout [ 532.010551][T22359] Bluetooth: hci1: command 0x0406 tx timeout [ 532.017706][T22359] Bluetooth: hci4: command 0x0406 tx timeout [ 546.209888][ T5105] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 546.222927][ T5105] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 546.231985][ T5105] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 546.242358][ T5105] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 546.250428][ T5105] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 546.258965][ T5105] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 546.315029][ T5112] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 546.327307][ T5112] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 546.336561][ T5112] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 546.348243][ T5112] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 546.356224][ T5112] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 546.363949][ T5112] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 547.436121][ T5112] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 547.463113][ T5112] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 547.475697][ T5112] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 547.484955][ T5112] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 547.493053][ T5112] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 547.500756][ T5112] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 548.166254][ T5105] Bluetooth: hci10: command tx timeout [ 548.173838][ T5105] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 548.189745][ T5105] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 548.214285][ T5105] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 548.225557][ T5105] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 548.234808][ T5105] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 548.242359][ T5105] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 548.315748][ T5112] Bluetooth: hci11: command tx timeout [ 548.557031][ T5105] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 548.581346][ T5105] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 548.595289][ T5105] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 548.606999][ T5105] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 548.623596][ T5105] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 548.644597][ T5105] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 549.161898][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 549.169054][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 549.433850][ T5105] Bluetooth: hci12: command tx timeout [ 550.104968][ T5105] Bluetooth: hci10: command tx timeout [ 550.179627][ T5105] Bluetooth: hci13: command tx timeout [ 550.254080][ T5105] Bluetooth: hci11: command tx timeout [ 550.557859][ T5105] Bluetooth: hci14: command tx timeout [ 551.381636][ T5105] Bluetooth: hci12: command tx timeout [ 552.043530][ T5105] Bluetooth: hci10: command tx timeout [ 552.127368][ T5105] Bluetooth: hci13: command tx timeout [ 552.201827][ T5105] Bluetooth: hci11: command tx timeout [ 552.500102][ T5105] Bluetooth: hci14: command tx timeout [ 553.320590][ T5105] Bluetooth: hci12: command tx timeout [ 553.982199][ T5105] Bluetooth: hci10: command tx timeout [ 554.062001][ T5105] Bluetooth: hci13: command tx timeout [ 554.131396][ T5105] Bluetooth: hci11: command tx timeout [ 554.429988][ T5105] Bluetooth: hci14: command tx timeout [ 555.259549][ T5105] Bluetooth: hci12: command tx timeout [ 556.003458][ T5105] Bluetooth: hci13: command tx timeout [ 556.368424][ T5105] Bluetooth: hci14: command tx timeout [ 603.423055][ T30] INFO: task syz-executor.1:22283 blocked for more than 143 seconds. [ 603.434362][ T30] Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 603.449569][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/05/28 19:03:48 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 603.469890][ T30] task:syz-executor.1 state:D stack:24504 pid:22283 tgid:22282 ppid:19852 flags:0x00000006 [ 603.487950][ T30] Call Trace: [ 603.491312][ T30] [ 603.519999][ T30] __schedule+0x1796/0x49d0 [ 603.529617][ T30] ? __pfx___schedule+0x10/0x10 [ 603.534571][ T30] ? __pfx_lock_release+0x10/0x10 [ 603.557860][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 603.563419][ T30] ? schedule+0x90/0x320 [ 603.576475][T22388] Bluetooth: hci7: command 0x0406 tx timeout [ 603.582572][T22388] Bluetooth: hci6: command 0x0406 tx timeout [ 603.589558][T22388] Bluetooth: hci5: command 0x0406 tx timeout [ 603.595717][T22388] Bluetooth: hci9: command 0x0406 tx timeout [ 603.602696][T22388] Bluetooth: hci8: command 0x0406 tx timeout [ 603.634794][ T30] schedule+0x14b/0x320 [ 603.651092][ T30] schedule_preempt_disabled+0x13/0x30 [ 603.657249][ T30] __mutex_lock+0x6a4/0xd70 [ 603.678991][ T30] ? __mutex_lock+0x527/0xd70 [ 603.683777][ T30] ? __tun_chr_ioctl+0x48f/0x2400 [ 603.706956][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 603.712077][ T30] ? __might_fault+0xc6/0x120 [ 603.744649][ T30] __tun_chr_ioctl+0x48f/0x2400 [ 603.749598][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 603.762775][ T30] ? __fget_files+0x3f6/0x470 [ 603.767502][ T30] ? __fget_files+0x29/0x470 [ 603.772131][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 603.799979][ T30] ? security_file_ioctl+0x87/0xb0 [ 603.805155][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 603.831649][ T30] __se_sys_ioctl+0xfc/0x170 [ 603.836428][ T30] do_syscall_64+0xf3/0x230 [ 603.856191][ T30] ? clear_bhb_loop+0x35/0x90 [ 603.861042][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.900270][ T30] RIP: 0033:0x7f20d787cee9 [ 603.911833][ T30] RSP: 002b:00007f20d73ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.920308][ T30] RAX: ffffffffffffffda RBX: 00007f20d79b3fa0 RCX: 00007f20d787cee9 [ 603.938970][ T30] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 603.949256][ T30] RBP: 00007f20d78c947f R08: 0000000000000000 R09: 0000000000000000 [ 603.957276][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.972186][ T30] R13: 000000000000000b R14: 00007f20d79b3fa0 R15: 00007ffd976fbf88 [ 603.980372][ T30] [ 603.986085][ T30] INFO: task syz-executor.1:22285 blocked for more than 143 seconds. [ 604.035531][ T30] Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 604.056118][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.079894][ T30] task:syz-executor.1 state:D stack:28960 pid:22285 tgid:22282 ppid:19852 flags:0x00004006 [ 604.102161][ T30] Call Trace: [ 604.105517][ T30] [ 604.116880][ T30] __schedule+0x1796/0x49d0 [ 604.121490][ T30] ? __pfx___schedule+0x10/0x10 [ 604.135790][ T30] ? __pfx_lock_release+0x10/0x10 [ 604.140904][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 604.163679][ T30] ? schedule+0x90/0x320 [ 604.168003][ T30] schedule+0x14b/0x320 [ 604.172191][ T30] schedule_preempt_disabled+0x13/0x30 [ 604.191709][ T30] __mutex_lock+0x6a4/0xd70 [ 604.196305][ T30] ? __mutex_lock+0x527/0xd70 [ 604.211465][ T30] ? __tun_chr_ioctl+0x48f/0x2400 [ 604.216592][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 604.228753][ T30] ? smk_access+0x4ab/0x4e0 [ 604.233357][ T30] __tun_chr_ioctl+0x48f/0x2400 [