last executing test programs: 5m25.917925162s ago: executing program 2 (id=140): r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440088c4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x78) fchdir(r1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x5, 0x81, 0xffffffff}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1) 5m25.550335343s ago: executing program 2 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) 5m23.850769077s ago: executing program 2 (id=147): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r2, 0x1}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, r2, 0x6}, 0xc) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 5m12.301340743s ago: executing program 2 (id=159): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 5m12.278352994s ago: executing program 2 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 5m11.955497314s ago: executing program 2 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m56.593748511s ago: executing program 32 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m57.740029289s ago: executing program 5 (id=895): keyctl$set_reqkey_keyring(0xe, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1m56.806544889s ago: executing program 5 (id=897): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOl0hpYypQVGivD9JGQOc+6h93aG5Nym7dad148LOUvL6RUJxpQERES2RUYkKK6AcwzacVRavZCLg98+/n/r7r0b6UxmckapqfTspZRSanj03ZNncWfY+oBsjjzY+pr6svn35r9bP2cf5S2Vt1SxVFG6mit9ruhzpqEW8lZBU2raNHTLUPmiZZQb+VIjnzNLi4tVpRcXhhKLZcOylF6sqoJRVZWSqpSrKvRQzxeVpmlqKCHoJrsyM6OnD1k87/Nk8JuUy2k9JCLxPZnsSl8mBAAA+qq9/w+K8rP/Xz23URm8vTbs9P/rUa/+//Knxt/a1f/HRMSz/3cf37P/1+v9f1h67f/3dkRny5H6f5wMo9E9pwLNsJ4sp/WE8/9re3l/dcwO6P8BAAAAAAAAAAAAAAAAAAAAAPgTbNdqyVqtlnSP7k89FxOR1t/bhETk6vHPGH7qdP0Hul9/nALND+6Fh0XMV0vZpWzj6AzYEBFTDBmTpPyw7wdHPXY/eaTqRuS9uezULy9lQ3YmnZO8XT8uyYi019dqU9czk+OqYXd9RBKt9SlJyl/e9SnP+qhcON9Sr0lSPsxLSUxZsOfRrH8+rtS1m5m2+rg9DgAAAACA00BTOzz375rWKd+o39lft78+EGrur8c89+dh+S/c37UDAAAAAHBWWNWnBd00jfI+QVy6j2kEkR7GtAfhgww+QOCusNcq970MPk+jt8B98F2pmHPS96clcICnpUMQlMNUjdZXo466Cvdlo05jZHqi51WI+Hkp/3nz9rt/98aVtViXlR4+CO1/A0Sct38BAAAAOEWaTb97ZqK/EwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Aw6ju+36/caAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPiVwAAAP//FZkC4A==") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 1m52.687468961s ago: executing program 5 (id=902): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x67}, @void, @val={0xc, 0x99, {0x5, 0x7b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000084) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x313bdc5ee4003b49, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) 1m51.4798219s ago: executing program 5 (id=904): r0 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000600)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x58, 0x4855}, 0x24000052) 1m50.556991579s ago: executing program 5 (id=906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc090) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m49.016374588s ago: executing program 5 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) io_setup(0x6, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x12d) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x20000108}]) 1m33.9328175s ago: executing program 33 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) io_setup(0x6, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x12d) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x20000108}]) 11.373397997s ago: executing program 0 (id=1181): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x441, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0xe0880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x40, &(0x7f00000024c0)={[{@resgid}, {@nobarrier}, {@alloc_mode_def}, {@checkpoint_diasble}, {@fsync_mode_posix}, {@segment_mode}, {@segment_mode}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@fault_injection={'fault_injection', 0x3d, 0x1}}, {@fault_type={'fault_type', 0x3d, 0xc80a}}]}, 0x3, 0x5507, &(0x7f00000079c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+/eNm4oDAP61fb7SAiIElCEIgcQAC02vpaUbYgBFDPwJSFF6LaFXfrQZaFUhsrChzF0QjAghgcLWmbVzK3UpW4cbisQMss/OuW0krvywr8nnIz2/71mW3/f5pChfv5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQG789jbPisDCJ0+rczXtX14v+1gN94fr27eWiFXHSZtKPhxebH5Kl7hIBAADg4Mjq+j4i7uQ7q0WfLpT1f15fU9T83z49iat6/tcH6/66r2v/ov3y893ndwdamIxT3PTsxmh47OFUev/jNOfaM397Ra988uW7l6z8QtL3tp4b5+XzTL6+ceOdfhkeaiNbAOCfOFr3VVD/PlT0gy4TA+DA6DUK77r+zxa6zQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgDeOteLKOk4hY7k3jwq17V9f36q9v316u26lr17bjy+k9i1vkEXF2YzQ81ups5tuly1fOr41Gw4vtBy9FRFejv1VN//wHM1wc0cnzEfxHQVp92fOSz+MRdPhDCQCAfSmvWlHX38l3VotzyWLEn9/dX/+/2ohjxvr/7oenbjbHatb/g9ZmOP9WNi98unLp8pXXNy6snRueG378xvHBm4MTp0+ePL1SvitZ8cYEAACAf6dftWb9ny4+vP5/JCKyR6z/P/tm8EVzrEz9v6fpol/XmQAAABxsz778x+/JHueTfj8+X9vcvDiYHHc/H58cO0j1kR2qWrP+zxa7zgoAAABow3gruW/9/0wjjhnX/5/6/oUfm/fMIuJwtf5/dP2T0Zn2pjPX2vhz4q7nCAAAQLcOV625/p+X+//T3S0PaUS89sokrv4N4Ez1f/buVz80x2ru/z/R3hTnUro0eR5lvxTRW+o6IwAAAPazJ6pWFPu/5TurH/105P2+/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbfsrAAD//8vPP1o=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x29, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4042806}, 0x84) 8.588194886s ago: executing program 0 (id=1191): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfd, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x0, 0x3, 0x8000, 0x67, 0x1000, 0x4, 0x5e, 0xffff, @broadcast, @rand_addr=0x64010100, {[@ssrr={0x89, 0x3, 0xa2}]}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 7.705380714s ago: executing program 0 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) munlockall() 7.048776485s ago: executing program 1 (id=1197): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x400c0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x2, 0x80805, 0x0) flistxattr(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x40}}, 0x48000) 6.832418852s ago: executing program 6 (id=1199): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 6.744091454s ago: executing program 0 (id=1200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x810) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x3, 0xe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{}, {@nodecompose}, {@nls={'nls', 0x3d, 'euc-jp'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_dev$sndpcmp(0x0, 0x0, 0x6a0301) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 5.482913755s ago: executing program 1 (id=1204): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_dev$usbfs(0x0, 0x101, 0x2801) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r3, 0x0, r3) getxattr(0x0, 0x0, 0x0, 0x0) 3.76215506s ago: executing program 3 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc090) 3.75878773s ago: executing program 4 (id=1206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc090) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.702591532s ago: executing program 6 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) capget(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)={0x4, 0x800, 0xc9d, 0x8, 0x9, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 3.697962052s ago: executing program 1 (id=1208): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.586240175s ago: executing program 3 (id=1209): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800, 0xffffffffffffffff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 3.572213666s ago: executing program 1 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 3.084335881s ago: executing program 4 (id=1211): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) waitid(0x1, r1, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x2010042, &(0x7f0000000380)={[{@subsystem='net_prio'}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r4, 0x10e, 0xc, 0x0, &(0x7f0000000280)) 3.083559521s ago: executing program 6 (id=1212): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) 2.547872939s ago: executing program 3 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket(0xa, 0x1, 0x0) listen(r3, 0x7f) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1.999475776s ago: executing program 4 (id=1214): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.998747556s ago: executing program 1 (id=1215): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000002000)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$evdev(0x0, 0x1, 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) 1.998541786s ago: executing program 6 (id=1216): set_mempolicy(0x4005, &(0x7f0000000080)=0x1, 0x9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c80", 0x69, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.486967553s ago: executing program 3 (id=1217): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 1.485001883s ago: executing program 0 (id=1227): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42, &(0x7f0000020940)={[{@grpquota}, {@discard}]}, 0x1, 0x5b3, &(0x7f0000020f40)="$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") r3 = fcntl$dupfd(r2, 0x406, r2) syz_open_procfs(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) read$FUSE(r3, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x29bb9) fallocate(0xffffffffffffffff, 0x3, 0x46c, 0x8008c61) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, r4, 0x3001, 0x2}}}, 0xffffff03) read$FUSE(r3, &(0x7f0000006100)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0xfbf22000) getresgid(&(0x7f0000002d80), 0x0, 0x0) 1.091670115s ago: executing program 6 (id=1218): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) brk(0x5d555ede6000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) lseek(0xffffffffffffffff, 0x4000000000004, 0x2) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x1, 0x0, 0x0) 1.090621455s ago: executing program 4 (id=1229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800, 0xffffffffffffffff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 137.545065ms ago: executing program 0 (id=1219): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_dev$usbfs(0x0, 0x101, 0x2801) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r3, 0x0, r3) getxattr(0x0, 0x0, 0x0, 0x0) 137.361736ms ago: executing program 1 (id=1220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc090) 137.271265ms ago: executing program 4 (id=1221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket(0xa, 0x1, 0x0) listen(r4, 0x7f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 129.185336ms ago: executing program 6 (id=1222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc090) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 101.330307ms ago: executing program 3 (id=1223): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 36.424029ms ago: executing program 3 (id=1224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) acct(0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20044000) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 0s ago: executing program 4 (id=1225): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "b48ae732e5989d708e75fa97386016e33430644f67a6fe6e56694e715d4de117", "f8c0b4c8d3a47052be83dcc83805aa2f8afdc434b97ca5363cb6390db5dffda8", "7c27914f3cff0bc22456cf5fdec3e32e3b1f772db5a2ffa1e0a392809be0dc85", "8285d297a7681ae66d56e922fbd057ddd644469b4e5af0d164649a4ffd233a02", "d6b48bc595784be95e5ea4de10d0ff700e3ef52ce253f7824d43f30f2ebeaba7", "5441c9b2c2d0271012adab74", 0xfffffff7, 0x2, 0x4, 0x8, 0x1}}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) kernel console output (not intermixed with test programs): ac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.556625][ T4602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 44.654027][ T4600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.664300][ T4600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.687032][ T4612] loop2: detected capacity change from 0 to 256 [ 44.701201][ T4612] FAT-fs (loop2): Directory bread(block 64) failed [ 44.702428][ T4612] FAT-fs (loop2): Directory bread(block 65) failed [ 44.703658][ T4612] FAT-fs (loop2): Directory bread(block 66) failed [ 44.704751][ T4612] FAT-fs (loop2): Directory bread(block 67) failed [ 44.705948][ T4612] FAT-fs (loop2): Directory bread(block 68) failed [ 44.707248][ T4612] FAT-fs (loop2): Directory bread(block 69) failed [ 44.708440][ T4612] FAT-fs (loop2): Directory bread(block 70) failed [ 44.709633][ T4612] FAT-fs (loop2): Directory bread(block 71) failed [ 44.710797][ T4612] FAT-fs (loop2): Directory bread(block 72) failed [ 44.711876][ T4612] FAT-fs (loop2): Directory bread(block 73) failed [ 45.855701][ T4626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.59'. [ 46.470301][ T4639] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.61'. [ 46.751651][ T4644] loop2: detected capacity change from 0 to 16 [ 46.834740][ T4644] erofs: (device loop2): erofs_read_inode: unsupported i_format 31 of nid 36 [ 46.849295][ T4644] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 46.945655][ T4654] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 47.009772][ T4638] syz.0.61 (4638): drop_caches: 2 [ 47.036581][ T4658] binder: 4655:4658 tried to acquire reference to desc 0, got 1 instead [ 47.046022][ T1515] binder: release 4655:4658 transaction 17 out, still active [ 47.437158][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 47.453032][ T4668] loop0: detected capacity change from 0 to 764 [ 47.497286][ T1515] binder: send failed reply for transaction 17, target dead [ 47.500785][ T4320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.181580][ T4675] loop1: detected capacity change from 0 to 256 [ 48.223626][ T4320] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.832546][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 48.841486][ T4698] bond1 (unregistering): Released all slaves [ 49.924464][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.932071][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.295609][ T4743] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 55.040227][ T4786] loop1: detected capacity change from 0 to 1024 [ 55.041827][ T4786] EXT4-fs: Ignoring removed bh option [ 55.042761][ T4786] EXT4-fs: Ignoring removed oldalloc option [ 55.043766][ T4786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.173194][ T4786] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.378795][ T4786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 55.380586][ T4786] System zones: 0-1, 3-36 [ 55.456295][ T4786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.188958][ T4797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.205676][ T4797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.239011][ T4797] loop4: detected capacity change from 0 to 128 [ 56.352731][ T4797] affs: No valid root block on device loop4 [ 56.800491][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 57.164712][ T4817] loop1: detected capacity change from 0 to 2048 [ 57.213718][ T4817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 58.176383][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 59.123842][ T4845] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 59.125817][ T4845] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 59.159695][ T4845] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 59.162722][ T4845] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 59.164395][ T4845] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 59.166211][ T4845] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 59.178901][ T4845] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 59.202037][ T4845] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 59.203914][ T4845] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 59.205738][ T4845] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 59.262147][ T4852] ax25_connect(): syz.0.126 uses autobind, please contact jreuter@yaina.de [ 59.868477][ T4865] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 59.868477][ T4865] The task syz.4.129 (4865) triggered the difference, watch for misbehavior. [ 60.257538][ T4865] binder: 4857:4865 ioctl 4018620d 0 returned -22 [ 61.854040][ T4875] device syzkaller0 entered promiscuous mode [ 62.409513][ T4897] loop4: detected capacity change from 0 to 40427 [ 62.419448][ T4897] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 62.421189][ T4897] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 62.433368][ T4897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.444780][ T4897] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 62.446281][ T4897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.575111][ C0] vcan0: j1939_tp_rxtimer: 0x0000000011d68ab3: rx timeout, send abort [ 62.956543][ T4918] binder: 4917:4918 tried to acquire reference to desc 0, got 1 instead [ 62.959018][ T4918] binder: 4917:4918 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 62.961540][ T4918] binder: 4918 RLIMIT_NICE not set [ 62.962532][ T4918] binder: 4918 RLIMIT_NICE not set [ 62.964006][ T4918] binder: release 4917:4918 transaction 22 out, still active [ 62.965523][ T4918] binder: undelivered TRANSACTION_COMPLETE [ 62.967713][ T4918] binder_alloc: 4917: binder_alloc_buf, no vma [ 62.969326][ T4918] binder: cannot allocate buffer: vma cleared, target dead or dying [ 62.969362][ T4918] binder: 4917:4918 transaction call to 4917:0 failed 29/29189/-3, size 0-0 line 3230 [ 62.988307][ T22] binder: release 4917:4918 transaction 22 in, still active [ 62.989682][ T22] binder: send failed reply for transaction 22, target dead [ 62.991450][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 63.075428][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ef0e88ff: rx timeout, send abort [ 63.113618][ C0] vcan0: j1939_tp_rxtimer: 0x0000000011d68ab3: abort rx timeout. Force session deactivation [ 64.034743][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ef0e88ff: abort rx timeout. Force session deactivation [ 64.095130][ T4931] VFS: Mount too revealing [ 64.502286][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.504067][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.604641][ T24] cfg80211: failed to load regulatory.db [ 75.063830][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 75.160093][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 75.452774][ T4972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.124965][ T4988] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 76.707667][ T4994] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 76.708989][ T4994] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.710701][ T4994] vhci_hcd vhci_hcd.0: Device attached [ 77.106329][ T4995] vhci_hcd: connection closed [ 77.114738][ T4746] vhci_hcd: stop threads [ 77.121310][ T4746] vhci_hcd: release socket [ 77.123300][ T4746] vhci_hcd: disconnect device [ 78.139269][ T5007] Zero length message leads to an empty skb [ 78.299341][ T27] audit: type=1326 audit(78.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.4.170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b77aa8 code=0x7fc00000 [ 78.305124][ T27] audit: type=1326 audit(78.290:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.4.170" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff95b77aa8 code=0x7fc00000 [ 78.334467][ T4966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.956560][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 79.066506][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 79.068311][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 79.070414][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 79.072304][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 79.458627][ T5027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.176'. [ 82.272097][ T5070] sctp: [Deprecated]: syz.1.188 (pid 5070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.272097][ T5070] Use struct sctp_sack_info instead [ 82.429637][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 82.436640][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 82.779340][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 82.781443][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 82.783289][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 84.339470][ T5101] loop4: detected capacity change from 0 to 1024 [ 84.341114][ T5101] EXT4-fs: Ignoring removed bh option [ 84.342119][ T5101] EXT4-fs: Ignoring removed oldalloc option [ 84.343129][ T5101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.351710][ T5101] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.399398][ T5101] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 84.400968][ T5101] System zones: 0-1, 3-36 [ 84.439514][ T5101] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.470213][ T5106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 84.516122][ T5107] loop3: detected capacity change from 0 to 8192 [ 84.519523][ T5107] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 84.589700][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 85.944696][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 86.422226][ T5130] loop0: detected capacity change from 0 to 512 [ 86.583918][ T5130] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.590467][ T5130] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.205: EA inode hash validation failed [ 86.593093][ T5130] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.597028][ T5130] EXT4-fs (loop0): 1 orphan inode deleted [ 86.598167][ T5130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.853248][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 86.871810][ T5135] device team0 entered promiscuous mode [ 86.872884][ T5135] device team_slave_0 entered promiscuous mode [ 86.874146][ T5135] device team_slave_1 entered promiscuous mode [ 86.875853][ T5135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.908423][ T5135] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 86.925571][ T5135] bridge0: port 3(vlan2) entered blocking state [ 86.926929][ T5135] bridge0: port 3(vlan2) entered disabled state [ 86.928533][ T5135] device vlan2 entered promiscuous mode [ 86.929719][ T5135] device bond0 entered promiscuous mode [ 86.930866][ T5135] device bond_slave_0 entered promiscuous mode [ 86.932005][ T5135] device bond_slave_1 entered promiscuous mode [ 86.933218][ T5135] device macvlan2 entered promiscuous mode [ 87.646627][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 87.796494][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 87.798315][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 87.800273][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 87.801972][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 88.177292][ T5158] netlink: 68 bytes leftover after parsing attributes in process `syz.3.213'. [ 88.232120][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 88.233887][ T4328] CPU: 0 PID: 4328 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 88.235113][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 88.236893][ T4328] Workqueue: hci1 hci_rx_work [ 88.237840][ T4328] Call trace: [ 88.238471][ T4328] dump_backtrace+0x1c0/0x1ec [ 88.239391][ T4328] show_stack+0x2c/0x3c [ 88.240221][ T4328] __dump_stack+0x30/0x40 [ 88.241027][ T4328] dump_stack_lvl+0xf4/0x15c [ 88.241867][ T4328] dump_stack+0x1c/0x5c [ 88.242658][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 88.243643][ T4328] kobject_add_internal+0x598/0xb08 [ 88.244646][ T4328] kobject_add+0x140/0x20c [ 88.245494][ T4328] device_add+0x3f0/0xf90 [ 88.246369][ T4328] hci_conn_add_sysfs+0xbc/0x1c8 [ 88.247261][ T4328] le_conn_complete_evt+0xcc8/0x1244 [ 88.248289][ T4328] hci_le_conn_complete_evt+0x114/0x3f4 [ 88.249413][ T4328] hci_le_meta_evt+0x2c0/0x4a0 [ 88.250395][ T4328] hci_event_packet+0x6b8/0xf18 [ 88.251310][ T4328] hci_rx_work+0x328/0xa84 [ 88.252101][ T4328] process_one_work+0x7f8/0x13a4 [ 88.253054][ T4328] worker_thread+0x8c4/0xfec [ 88.253928][ T4328] kthread+0x250/0x2d8 [ 88.254701][ T4328] ret_from_fork+0x10/0x20 [ 88.639785][ T4328] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.642498][ T4328] Bluetooth: hci1: failed to register connection device [ 88.668575][ T5162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.670184][ T5162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.354498][ T5173] loop4: detected capacity change from 0 to 512 [ 89.397387][ T5173] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.216: inode has both inline data and extents flags [ 89.400627][ T5173] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.216: couldn't read orphan inode 15 (err -117) [ 89.403301][ T5173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.837017][ T5176] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 89.997592][ T4328] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 89.999587][ T4328] Bluetooth: hci0: Injecting HCI hardware error event [ 90.002410][ T4331] Bluetooth: hci0: hardware error 0x00 [ 91.271472][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 91.317333][ T5192] capability: warning: `syz.1.221' uses deprecated v2 capabilities in a way that may be insecure [ 92.409741][ T4331] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 92.657766][ T4328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.660105][ T4328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.662120][ T4328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.663776][ T4328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.665467][ T4328] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.668509][ T4328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.969355][ T5229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.972987][ T5229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.826172][ T4328] Bluetooth: hci5: command 0x0409 tx timeout [ 94.826515][ T4333] Bluetooth: hci1: command 0x0406 tx timeout [ 95.098407][ T4704] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.022143][ T5244] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 96.023364][ T5244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.025154][ T5244] vhci_hcd vhci_hcd.0: Device attached [ 96.026498][ T5245] vhci_hcd: connection closed [ 96.027156][ T39] vhci_hcd: stop threads [ 96.032250][ T39] vhci_hcd: release socket [ 96.033612][ T39] vhci_hcd: disconnect device [ 96.459000][ T4704] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.471292][ T5202] chnl_net:caif_netlink_parms(): no params data found [ 96.818126][ T4704] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.896879][ T4328] Bluetooth: hci5: command 0x041b tx timeout [ 97.238146][ T4704] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.266676][ T5202] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.268121][ T5202] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.274727][ T5202] device bridge_slave_0 entered promiscuous mode [ 97.285797][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.289903][ T5202] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.295068][ T5202] device bridge_slave_1 entered promiscuous mode [ 97.307620][ T5202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.310716][ T5202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.319027][ T5202] team0: Port device team_slave_0 added [ 97.321210][ T5202] team0: Port device team_slave_1 added [ 97.328712][ T5202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.330183][ T5202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.334939][ T5202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.337964][ T5202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.339363][ T5202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.344359][ T5202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.418147][ T5202] device hsr_slave_0 entered promiscuous mode [ 97.456672][ T5202] device hsr_slave_1 entered promiscuous mode [ 97.496519][ T5202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.498651][ T5202] Cannot create hsr debugfs directory [ 97.724967][ T5202] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.800534][ T5202] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.915186][ T5202] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.967695][ T5202] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.070688][ T5202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.074914][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.077116][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.081190][ T5202] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.083805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.085760][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.087654][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.088878][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.090447][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.140512][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.142774][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.145020][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.146391][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.155863][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.158027][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.160797][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.163336][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.165155][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.167690][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.169381][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.170974][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.172445][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.174492][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.176129][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.179461][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.271389][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.272964][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.276217][ T5202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.407827][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.409669][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.413676][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.415342][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.417730][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.419521][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.421990][ T5202] device veth0_vlan entered promiscuous mode [ 98.425684][ T5202] device veth1_vlan entered promiscuous mode [ 98.474346][ T5202] device veth0_macvtap entered promiscuous mode [ 98.477821][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.482822][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.484484][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.486273][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.488298][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.491185][ T5202] device veth1_macvtap entered promiscuous mode [ 98.495880][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.498453][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.500194][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.501959][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.503610][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.505419][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.508275][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.510060][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.511768][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.513536][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.516373][ T5202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.518871][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.520607][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.522227][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.525025][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.530345][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.532007][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.533837][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.535497][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.537459][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.541897][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.543743][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.545502][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.550990][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.553451][ T5202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.763863][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.765757][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.769042][ T5202] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.770612][ T5202] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.772325][ T5202] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.773916][ T5202] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.868291][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.871888][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.874460][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.883134][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.884516][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.887224][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.967128][ T4333] Bluetooth: hci5: command 0x040f tx timeout [ 99.407864][ T4704] device hsr_slave_0 left promiscuous mode [ 99.800422][ T4704] device hsr_slave_1 left promiscuous mode [ 99.886701][ T4704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.889035][ T4704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.892386][ T4704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.893950][ T4704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.902360][ T4704] device bridge_slave_1 left promiscuous mode [ 99.905023][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.948140][ T4704] device bridge_slave_0 left promiscuous mode [ 99.949887][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.087347][ T4704] device veth1_macvtap left promiscuous mode [ 100.088853][ T4704] device veth0_macvtap left promiscuous mode [ 100.090117][ T4704] device veth1_vlan left promiscuous mode [ 100.091286][ T4704] device veth0_vlan left promiscuous mode [ 101.246494][ T4333] Bluetooth: hci5: command 0x0419 tx timeout [ 101.673924][ T5400] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 101.675143][ T5400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.676608][ T5400] vhci_hcd vhci_hcd.0: Device attached [ 101.688041][ T5401] vhci_hcd: connection closed [ 101.693645][ T1053] vhci_hcd: stop threads [ 101.695472][ T1053] vhci_hcd: release socket [ 101.696346][ T1053] vhci_hcd: disconnect device [ 103.849657][ T5438] net_ratelimit: 9179 callbacks suppressed [ 103.849672][ T5438] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 103.852396][ T5438] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 103.853883][ T5438] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 103.855301][ T5438] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 103.856794][ T5438] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 103.858146][ T5438] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 103.859633][ T5438] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 103.861084][ T5438] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 103.862450][ T5438] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 103.863796][ T5438] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 105.909613][ T4704] team0 (unregistering): Port device team_slave_1 removed [ 106.067859][ T4704] team0 (unregistering): Port device team_slave_0 removed [ 106.240785][ T4704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.436873][ T4704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.957895][ T4704] bond0 (unregistering): Released all slaves [ 108.410948][ T5448] netlink: 'syz.3.257': attribute type 4 has an invalid length. [ 108.497365][ T5459] netlink: 'syz.3.257': attribute type 17 has an invalid length. [ 108.499886][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 109.618439][ T5496] loop4: detected capacity change from 0 to 128 [ 109.658754][ T5496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.699263][ T5496] EXT4-fs (loop4): shut down requested (2) [ 109.756935][ T5501] syz.5.266 (5501): drop_caches: 2 [ 109.821723][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 109.842206][ T5503] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.266'. [ 109.901676][ T5513] loop4: detected capacity change from 0 to 512 [ 110.020312][ T5519] loop0: detected capacity change from 0 to 2048 [ 110.042946][ T5519] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 110.050802][ T5519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.224035][ T5513] EXT2-fs (loop4): (no)acl options not supported [ 110.354682][ T5453] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.282277][ T5552] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 112.283569][ T5552] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.285473][ T5552] vhci_hcd vhci_hcd.0: Device attached [ 112.379577][ T5553] vhci_hcd: connection closed [ 112.387332][ T1613] vhci_hcd: stop threads [ 112.389130][ T1613] vhci_hcd: release socket [ 112.389981][ T1613] vhci_hcd: disconnect device [ 112.392718][ T5516] Bluetooth: MGMT ver 1.22 [ 113.367230][ T5570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.276'. [ 113.384694][ T5570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.514646][ T5588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.892613][ T5592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.912910][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 113.940176][ T5579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.960139][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 113.993062][ T5601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.994907][ T5601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.004427][ T5601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.006259][ T5601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.302975][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.305036][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.352768][ T5606] net_ratelimit: 5266 callbacks suppressed [ 114.352779][ T5606] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 114.432672][ T5609] loop5: detected capacity change from 0 to 512 [ 114.563925][ T5609] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.287: bad orphan inode 13 [ 114.566012][ T5609] ext4_test_bit(bit=12, block=4) = 1 [ 114.573885][ T5609] is_bad_inode(inode)=0 [ 114.576140][ T5609] NEXT_ORPHAN(inode)=0 [ 114.579833][ T5609] max_ino=32 [ 114.580843][ T5609] i_nlink=1 [ 114.581501][ T5609] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 115.204186][ T5622] loop0: detected capacity change from 0 to 512 [ 115.356997][ T5629] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.287: Hash code is SIPHASH, but hash not in dirent [ 115.359354][ T5629] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.287: Corrupt directory, running e2fsck is recommended [ 115.469394][ T5622] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.738409][ T5638] loop4: detected capacity change from 0 to 128 [ 118.406098][ T5638] syz.4.293: attempt to access beyond end of device [ 118.406098][ T5638] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 118.559262][ T5629] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.287: Hash code is SIPHASH, but hash not in dirent [ 118.617002][ T5629] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.287: Corrupt directory, running e2fsck is recommended [ 118.620600][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 118.988475][ T5629] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.287: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 119.021245][ T5655] loop4: detected capacity change from 0 to 128 [ 119.054611][ T5655] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 119.979974][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 120.146685][ T5676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.213425][ T5676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.220796][ T5676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.264856][ T5202] EXT4-fs (loop5): unmounting filesystem. [ 120.403651][ T5692] netlink: 'syz.5.306': attribute type 11 has an invalid length. [ 120.460932][ T5695] tipc: Started in network mode [ 120.462086][ T5695] tipc: Node identity 7f000001, cluster identity 4711 [ 120.470990][ T5695] tipc: Enabled bearer , priority 10 [ 120.478345][ T5695] netlink: 104 bytes leftover after parsing attributes in process `syz.1.308'. [ 120.491370][ T5695] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 120.493876][ T5695] tipc: Enabled bearer , priority 10 [ 120.511468][ T5700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 121.068625][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 121.536805][ T5739] netlink: 'syz.5.316': attribute type 1 has an invalid length. [ 121.898055][ T4383] tipc: Node number set to 2130706433 [ 124.138681][ T5785] loop5: detected capacity change from 0 to 2048 [ 124.199934][ T5785] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 124.224835][ T5785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.970639][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.972787][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.245552][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 127.224836][ T5853] loop5: detected capacity change from 0 to 512 [ 127.231311][ T5853] EXT4-fs: Ignoring removed nobh option [ 127.236154][ T5855] loop3: detected capacity change from 0 to 64 [ 127.261870][ T5853] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 127.283160][ T5853] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.334: attempt to clear invalid blocks 1 len 1 [ 127.322192][ T5853] EXT4-fs (loop5): Remounting filesystem read-only [ 127.323541][ T5853] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 127.341020][ T5853] EXT4-fs (loop5): Remounting filesystem read-only [ 127.342413][ T5853] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.334: invalid indirect mapped block 1819239214 (level 0) [ 127.366523][ T5853] EXT4-fs (loop5): Remounting filesystem read-only [ 127.367793][ T5853] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.334: invalid indirect mapped block 1819239214 (level 1) [ 127.375761][ T5853] EXT4-fs (loop5): Remounting filesystem read-only [ 127.386621][ T5853] EXT4-fs (loop5): 1 truncate cleaned up [ 127.387708][ T5853] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 127.478594][ T5853] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 127.830529][ T5202] EXT4-fs (loop5): unmounting filesystem. [ 127.900904][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.924463][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.935206][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.940212][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.238702][ T4426] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.556884][ T4426] usb 1-1: Using ep0 maxpacket: 16 [ 128.571365][ T5920] loop3: detected capacity change from 0 to 2048 [ 128.586306][ T5920] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 128.595100][ T5920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.984355][ T4426] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.989093][ T4426] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 128.991743][ T4426] usb 1-1: can't read configurations, error -71 [ 130.165142][ T5937] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 130.949368][ T5949] bond1: (slave gretap1): making interface the new active one [ 130.961745][ T5949] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 130.971322][ T5954] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 131.006242][ T5954] device bond1 entered promiscuous mode [ 131.051906][ T5954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.068434][ T5961] tipc: Started in network mode [ 131.069409][ T5961] tipc: Node identity 7f000001, cluster identity 4711 [ 131.071320][ T5961] tipc: Enabled bearer , priority 10 [ 131.095403][ T5961] netlink: 104 bytes leftover after parsing attributes in process `syz.5.348'. [ 131.107759][ T5937] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 131.696033][ T5961] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 131.698625][ T5961] tipc: Enabled bearer , priority 10 [ 131.703952][ T5971] bond1: (slave bridge1): making interface the new active one [ 131.717100][ T5971] device bridge1 entered promiscuous mode [ 131.725511][ T5971] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 131.751025][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 131.755042][ T5976] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 131.790860][ T5979] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 131.820369][ T5976] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 131.859546][ T5976] bond1 (unregistering): Released all slaves [ 131.968224][ T5991] binder: 5990:5991 tried to acquire reference to desc 0, got 1 instead [ 131.970396][ T5991] binder: release 5990:5991 transaction 34 out, still active [ 132.477266][ T5995] loop4: detected capacity change from 0 to 2048 [ 132.533649][ T5991] binder: undelivered TRANSACTION_COMPLETE [ 132.562411][ T5995] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 132.568908][ T5995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.707871][ T3899] tipc: Node number set to 2130706433 [ 132.826830][ T4621] binder: send failed reply for transaction 34, target dead [ 132.829484][ T5999] loop1: detected capacity change from 0 to 512 [ 132.849114][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.857442][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.878788][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.880457][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.884149][ T5999] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.358: bad orphan inode 13 [ 132.886047][ T5999] ext4_test_bit(bit=12, block=4) = 1 [ 132.890297][ T5999] is_bad_inode(inode)=0 [ 132.891039][ T5999] NEXT_ORPHAN(inode)=0 [ 132.891801][ T5999] max_ino=32 [ 132.892412][ T5999] i_nlink=1 [ 132.893075][ T5999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 133.097947][ T6011] netlink: 'syz.5.370': attribute type 1 has an invalid length. [ 133.173436][ T6016] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.358: Hash code is SIPHASH, but hash not in dirent [ 133.175750][ T6016] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.358: Corrupt directory, running e2fsck is recommended [ 133.178369][ T6016] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.358: Hash code is SIPHASH, but hash not in dirent [ 133.180423][ T6016] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.358: Corrupt directory, running e2fsck is recommended [ 133.183644][ T6016] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.358: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 133.207361][ T6011] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 133.217049][ T6011] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 133.481480][ T6011] bond2 (unregistering): Released all slaves [ 134.071062][ T6027] tipc: Started in network mode [ 134.075272][ T6027] tipc: Node identity 7f000001, cluster identity 4711 [ 134.079225][ T6027] tipc: Enabled bearer , priority 10 [ 134.101563][ T6027] netlink: 104 bytes leftover after parsing attributes in process `syz.4.363'. [ 134.111166][ T6033] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 134.118962][ T6033] device bond1 entered promiscuous mode [ 134.120155][ T6033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.124489][ T6027] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 134.129996][ T6027] tipc: Enabled bearer , priority 10 [ 134.132493][ T6032] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 134.178868][ T6033] bond1: (slave bridge3): making interface the new active one [ 134.200182][ T6033] device bridge3 entered promiscuous mode [ 134.205202][ T6033] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 134.211858][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 134.249120][ T6032] bond1: (slave gretap1): making interface the new active one [ 134.253585][ T6032] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 134.296168][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 134.393149][ T6032] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 134.697906][ T6045] loop0: detected capacity change from 0 to 128 [ 135.144100][ T6047] loop1: detected capacity change from 0 to 2048 [ 135.983806][ T6045] syz.0.367: attempt to access beyond end of device [ 135.983806][ T6045] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 136.064228][ T6047] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 136.073057][ T6047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.494181][ T6061] loop5: detected capacity change from 0 to 128 [ 136.595043][ T6061] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 136.617536][ T4373] tipc: Node number set to 2130706433 [ 136.618862][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 136.637258][ T6063] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.638911][ T6063] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.640516][ T6063] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.642134][ T6063] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.644312][ T6063] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 136.646033][ T6069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.369'. [ 136.650321][ T6069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.965624][ T5202] EXT4-fs (loop5): unmounting filesystem. [ 136.995750][ T6079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.997434][ T6079] IPv6: NLM_F_CREATE should be set when creating new route [ 139.642104][ T6114] loop5: detected capacity change from 0 to 2048 [ 139.673111][ T6114] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 139.679306][ T6114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.096648][ T6127] loop3: detected capacity change from 0 to 128 [ 140.378534][ T6127] syz.3.385: attempt to access beyond end of device [ 140.378534][ T6127] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 141.229097][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.243474][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.067214][ T6123] loop0: detected capacity change from 0 to 131072 [ 142.069813][ T6123] F2FS-fs (loop0): inline encryption not supported [ 142.082825][ T6134] loop3: detected capacity change from 0 to 256 [ 142.084979][ T6134] FAT-fs (loop3): Unrecognized mount option "shortname=win4Bpxlae=1" or missing value [ 142.113721][ T6123] F2FS-fs (loop0): Test dummy encryption mode enabled [ 142.115481][ T6123] F2FS-fs (loop0): invalid crc value [ 142.120547][ T6123] F2FS-fs (loop0): Found nat_bits in checkpoint [ 142.134585][ T6079] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.136424][ T6079] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.138447][ T6079] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.139940][ T6079] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.147564][ T6123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 142.163398][ T6123] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 142.377892][ T6096] tipc: Enabling of bearer rejected, failed to enable media [ 143.044695][ T6151] device syzkaller0 entered promiscuous mode [ 143.155343][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.157837][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.804634][ T6183] loop4: detected capacity change from 0 to 512 [ 144.809299][ T6183] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 144.811032][ T6183] EXT4-fs (loop4): failed to open journal device unknown-block(8,1) -6 [ 145.115148][ T6005] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.490958][ T6217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.492481][ T6217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.493949][ T6217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.495347][ T6217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.496844][ T6217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.498240][ T6217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.499600][ T6217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.501063][ T6217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.502451][ T6217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.503814][ T6217] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.950290][ T6235] loop4: detected capacity change from 0 to 2048 [ 148.499739][ T6235] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 148.507278][ T6235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.150690][ T6269] overlayfs: failed to clone lowerpath [ 150.154869][ T6269] overlayfs: failed to clone lowerpath [ 150.962325][ T6273] loop0: detected capacity change from 0 to 40427 [ 150.970751][ T6273] F2FS-fs (loop0): Invalid Fs Meta Ino: node(2305) meta(2) root(3) [ 150.974219][ T6273] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 150.982091][ T6273] F2FS-fs (loop0): invalid crc value [ 151.025450][ T6273] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.072436][ T6286] Cannot find add_set index 0 as target [ 151.087414][ T6273] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 151.089066][ T6273] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.124827][ T6273] syz.0.423: attempt to access beyond end of device [ 151.124827][ T6273] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.193680][ T6293] loop4: detected capacity change from 0 to 128 [ 151.367272][ T6293] syz.4.427: attempt to access beyond end of device [ 151.367272][ T6293] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 152.264929][ T6300] loop1: detected capacity change from 0 to 512 [ 152.539642][ T6300] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.429: inode #2214592512: comm syz.1.429: iget: illegal inode # [ 152.547699][ T6300] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.429: error while reading EA inode 2214592512 err=-117 [ 152.551223][ T6300] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 152.553563][ T6300] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.429: inode #2214592512: comm syz.1.429: iget: illegal inode # [ 152.558776][ T6300] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.429: error while reading EA inode 2214592512 err=-117 [ 152.562113][ T6300] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.429: inode #1: comm syz.1.429: iget: illegal inode # [ 152.565268][ T6300] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.429: error while reading EA inode 1 err=-117 [ 152.570775][ T6300] EXT4-fs (loop1): 1 orphan inode deleted [ 152.571737][ T6300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 152.645498][ T4332] syz-executor: attempt to access beyond end of device [ 152.645498][ T4332] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 152.822810][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 152.841561][ T6317] binder: 6316:6317 tried to acquire reference to desc 0, got 1 instead [ 152.844470][ T6317] binder: 6316:6317 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 153.175070][ T6317] binder: 6317 RLIMIT_NICE not set [ 153.176097][ T6317] binder: 6317 RLIMIT_NICE not set [ 153.182845][ T3899] binder: release 6316:6317 transaction 39 out, still active [ 153.184362][ T3899] binder: undelivered TRANSACTION_COMPLETE [ 153.203925][ T4373] binder: release 6316:6317 transaction 39 in, still active [ 153.205338][ T4373] binder: send failed reply for transaction 39, target dead [ 154.986793][ T4328] Bluetooth: hci3: command 0x0406 tx timeout [ 154.988090][ T4328] Bluetooth: hci2: command 0x0406 tx timeout [ 154.989265][ T4328] Bluetooth: hci1: command 0x0406 tx timeout [ 155.485289][ T6336] Cannot find add_set index 0 as target [ 156.144944][ T6348] loop0: detected capacity change from 0 to 8 [ 156.181747][ T6348] SQUASHFS error: zlib decompression failed, data probably corrupt [ 156.188469][ T6348] SQUASHFS error: Failed to read block 0x9b: -5 [ 156.194493][ T6348] SQUASHFS error: Unable to read metadata cache entry [99] [ 156.201275][ T6348] SQUASHFS error: Unable to read inode 0x127 [ 157.171634][ T6353] loop1: detected capacity change from 0 to 32768 [ 158.312389][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.315446][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.608455][ T6005] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (6005) [ 159.783833][ T6401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.459'. [ 160.061666][ T6411] loop5: detected capacity change from 0 to 512 [ 160.461903][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 160.506865][ T6411] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 160.508697][ T6411] EXT4-fs (loop5): failed to open journal device unknown-block(8,1) -6 [ 161.538962][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 161.548601][ T6439] device syzkaller0 entered promiscuous mode [ 161.557700][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.559391][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.706132][ T6445] Cannot find add_set index 0 as target [ 161.761732][ T6449] loop4: detected capacity change from 0 to 8 [ 161.777758][ T6449] device syzkaller0 entered promiscuous mode [ 161.991592][ T6454] device syzkaller0 entered promiscuous mode [ 162.462981][ T6466] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 162.538920][ T6469] loop1: detected capacity change from 0 to 512 [ 162.663887][ T6469] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 162.665630][ T6469] EXT4-fs (loop1): failed to open journal device unknown-block(8,1) -6 [ 162.771500][ T6466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.919669][ T6466] device macvlan2 entered promiscuous mode [ 165.429237][ T6005] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.466006][ T6536] loop4: detected capacity change from 0 to 128 [ 168.025070][ T6536] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 168.642037][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 171.448947][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.456237][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.516037][ T6589] xt_CT: No such helper "snmp_trap" [ 171.716100][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'. [ 171.718917][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'. [ 171.721881][ T6602] device syzkaller0 entered promiscuous mode [ 172.085137][ T6597] loop1: detected capacity change from 0 to 32768 [ 172.626366][ T6606] loop0: detected capacity change from 0 to 512 [ 172.686684][ T6606] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 172.688345][ T6606] EXT4-fs (loop0): failed to open journal device unknown-block(8,1) -6 [ 172.750478][ T6614] loop1: detected capacity change from 0 to 128 [ 172.907000][ T6614] syz.1.518: attempt to access beyond end of device [ 172.907000][ T6614] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 173.343709][ T6617] loop5: detected capacity change from 0 to 128 [ 173.883716][ T6625] binder: 6623:6625 tried to acquire reference to desc 0, got 1 instead [ 173.903483][ T6627] tipc: Enabling of bearer rejected, failed to enable media [ 173.939351][ T6630] binder: 6623:6630 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 173.942058][ T6630] binder: 6630 RLIMIT_NICE not set [ 173.942996][ T6630] binder: 6630 RLIMIT_NICE not set [ 174.057768][ T5453] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.041042][ T3899] binder: release 6623:6625 transaction 44 out, still active [ 175.160678][ T6654] loop1: detected capacity change from 0 to 128 [ 175.239022][ T6659] netlink: 84 bytes leftover after parsing attributes in process `syz.5.530'. [ 175.649972][ T3899] binder: undelivered TRANSACTION_COMPLETE [ 175.651424][ T3899] binder: send failed reply for transaction 51 to 6623:6630 [ 175.653743][ T3899] binder: release 6623:6630 transaction 44 in, still active [ 175.655202][ T3899] binder: send failed reply for transaction 44, target dead [ 175.656659][ T3899] binder: undelivered TRANSACTION_COMPLETE [ 175.657827][ T3899] binder: undelivered TRANSACTION_ERROR: 29189 [ 175.846003][ T6654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.504546][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 176.572718][ T6688] loop5: detected capacity change from 0 to 8 [ 176.594623][ T6688] SQUASHFS error: zlib decompression failed, data probably corrupt [ 176.596330][ T6688] SQUASHFS error: Failed to read block 0x9b: -5 [ 176.598051][ T6688] SQUASHFS error: Unable to read metadata cache entry [99] [ 176.599638][ T6688] SQUASHFS error: Unable to read inode 0x127 [ 178.943060][ T6722] loop0: detected capacity change from 0 to 128 [ 179.342017][ T6722] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 179.844906][ T6740] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.846908][ T6740] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.848497][ T6740] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.850015][ T6740] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.883365][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 179.887173][ T6740] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 181.040936][ T6760] xt_CT: No such helper "snmp_trap" [ 182.515032][ T6784] loop5: detected capacity change from 0 to 256 [ 183.857792][ T6803] loop5: detected capacity change from 0 to 128 [ 184.376199][ T6803] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 185.324720][ T5202] EXT4-fs (loop5): unmounting filesystem. [ 185.816269][ T6833] device syzkaller0 entered promiscuous mode [ 188.143313][ T6859] loop0: detected capacity change from 0 to 128 [ 188.417057][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.418392][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.710879][ T6859] syz.0.582: attempt to access beyond end of device [ 188.710879][ T6859] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 190.440271][ T6888] fuse: Bad value for 'fd' [ 190.474465][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 190.481437][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 190.522581][ T6890] bridge2: port 1(erspan0) entered blocking state [ 190.524150][ T6890] bridge2: port 1(erspan0) entered disabled state [ 190.525893][ T6890] device erspan0 entered promiscuous mode [ 190.528386][ T6890] bridge2: port 1(erspan0) entered blocking state [ 190.529587][ T6890] bridge2: port 1(erspan0) entered forwarding state [ 190.559888][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 190.561802][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.595'. [ 194.572031][ T6943] tipc: Started in network mode [ 194.573003][ T6943] tipc: Node identity 4246, cluster identity 4711 [ 194.574264][ T6943] tipc: Node number set to 16966 [ 194.578816][ T6946] binder: 6945:6946 tried to acquire reference to desc 0, got 1 instead [ 194.654552][ T6946] binder: 6945:6946 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 194.667707][ T6946] binder_alloc: 6945: binder_alloc_buf, no vma [ 194.677638][ T6946] binder: cannot allocate buffer: vma cleared, target dead or dying [ 194.677674][ T6946] binder: 6945:6946 transaction reply to 6945:6952 failed 57/29189/-3, size 0-0 line 3230 [ 195.025719][ T6946] binder: send failed reply for transaction 56 to 6945:6952 [ 195.046774][ T6952] binder: 6945:6952 ioctl c0306201 0 returned -14 [ 195.056986][ T4373] binder: undelivered TRANSACTION_COMPLETE [ 195.064524][ T4373] binder: undelivered TRANSACTION_ERROR: 29189 [ 195.094997][ T4373] binder: undelivered TRANSACTION_ERROR: 29190 [ 195.222277][ T6957] loop4: detected capacity change from 0 to 2048 [ 195.710040][ T6960] loop5: detected capacity change from 0 to 1024 [ 195.713650][ T6957] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 195.724647][ T6957] UDF-fs: Scanning with blocksize 512 failed [ 195.762437][ T6957] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 195.764092][ T6957] UDF-fs: Scanning with blocksize 1024 failed [ 195.796368][ T6957] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=515, location=515 [ 195.811495][ T6957] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 195.812891][ T6957] UDF-fs: Scanning with blocksize 2048 failed [ 195.824662][ T6957] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=259, location=259 [ 195.838321][ T6957] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=515, location=515 [ 195.857012][ T6957] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 195.860981][ T6957] UDF-fs: Scanning with blocksize 4096 failed [ 195.862216][ T6957] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 195.938494][ T6969] loop1: detected capacity change from 0 to 256 [ 197.757442][ T6985] device syzkaller0 entered promiscuous mode [ 200.565206][ T7017] netlink: 1355 bytes leftover after parsing attributes in process `syz.0.631'. [ 200.896279][ T7017] loop0: detected capacity change from 0 to 131072 [ 201.008942][ T7017] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 150994945) [ 201.010599][ T7017] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 201.013746][ T7017] F2FS-fs (loop0): invalid crc value [ 201.022520][ T7017] F2FS-fs (loop0): Found nat_bits in checkpoint [ 201.031717][ T7017] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 201.033109][ T7017] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 201.128629][ T7031] loop4: detected capacity change from 0 to 256 [ 201.775221][ T7038] fuse: Bad value for 'fd' [ 201.815526][ T7040] loop1: detected capacity change from 0 to 512 [ 201.834812][ T7040] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 201.849289][ T7040] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.019939][ T7040] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.638: inode has both inline data and extents flags [ 202.022496][ T7040] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.638: couldn't read orphan inode 15 (err -117) [ 202.024747][ T7040] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.413741][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 203.004620][ T7063] loop5: detected capacity change from 0 to 128 [ 203.029439][ T7055] loop0: detected capacity change from 0 to 1764 [ 203.042515][ T7063] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 203.896272][ T5202] EXT4-fs (loop5): unmounting filesystem. [ 205.788538][ T7102] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 205.790203][ T7102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.652'. [ 208.385579][ T7133] binder: 7132:7133 tried to acquire reference to desc 0, got 1 instead [ 208.393193][ T7133] binder: 7132:7133 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 208.400149][ T7133] binder: 7133 RLIMIT_NICE not set [ 208.401075][ T7133] binder: 7133 RLIMIT_NICE not set [ 208.422492][ T1515] binder: release 7132:7133 transaction 62 out, still active [ 208.459446][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 208.460515][ T1515] binder: send failed reply for transaction 69 to 7132:7133 [ 208.461942][ T1515] binder: release 7132:7133 transaction 62 in, still active [ 208.463758][ T1515] binder: send failed reply for transaction 62, target dead [ 208.465082][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 208.466161][ T1515] binder: undelivered TRANSACTION_ERROR: 29189 [ 208.505448][ T7143] binder: 7142:7143 tried to acquire reference to desc 0, got 1 instead [ 208.515080][ T7143] binder: 7142:7143 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 208.517811][ T7143] binder: 7143 RLIMIT_NICE not set [ 208.518700][ T7143] binder: 7143 RLIMIT_NICE not set [ 208.536962][ T1515] binder: release 7142:7143 transaction 74 out, still active [ 208.538340][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 208.539316][ T1515] binder: send failed reply for transaction 81 to 7142:7143 [ 209.410951][ T7154] loop0: detected capacity change from 0 to 128 [ 209.459322][ T6005] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.164106][ T7165] loop5: detected capacity change from 0 to 256 [ 213.096069][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.105708][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.114102][ T7175] loop0: detected capacity change from 0 to 40427 [ 213.118543][ T7175] F2FS-fs (loop0): invalid crc value [ 213.121489][ T7175] F2FS-fs (loop0): Found nat_bits in checkpoint [ 214.080275][ T7200] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 214.100679][ T7200] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.110947][ T27] audit: type=1326 audit(214.100:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.5.675" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8af77aa8 code=0x0 [ 214.116231][ T7200] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.119121][ T7200] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.120739][ T7200] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.123770][ T7200] bond2: (slave geneve2): making interface the new active one [ 214.125661][ T7200] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 214.134863][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.679'. [ 214.138783][ T7200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.056756][ T4328] Bluetooth: hci5: command 0x0406 tx timeout [ 215.371377][ T7216] loop0: detected capacity change from 0 to 512 [ 215.382831][ T7216] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.392211][ T7216] EXT4-fs (loop0): orphan cleanup on readonly fs [ 215.393620][ T7216] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.683: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 215.398538][ T7216] EXT4-fs error (device loop0): ext4_quota_enable:7052: comm syz.0.683: Bad quota inode: 3, type: 0 [ 215.400774][ T7216] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 215.403629][ T7216] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 215.404971][ T7216] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.463739][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 217.744031][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 217.934977][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.989499][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 218.081363][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 218.100446][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 218.108650][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.112646][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.117658][ T24] usb 1-1: Product: syz [ 218.118435][ T24] usb 1-1: Manufacturer: syz [ 218.120557][ T24] usb 1-1: SerialNumber: syz [ 218.144199][ T7234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.167098][ T24] cdc_mbim 1-1:1.0: skipping garbage [ 219.011870][ T7234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.013297][ T7234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.607871][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 219.969030][ T7272] binder: 7271:7272 tried to acquire reference to desc 0, got 1 instead [ 220.074139][ T7277] binder: 7271:7277 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 220.087073][ T7277] binder: 7277 RLIMIT_NICE not set [ 220.088086][ T7277] binder: 7277 RLIMIT_NICE not set [ 220.096154][ T7277] binder: 7277 RLIMIT_NICE not set [ 220.113333][ T3899] binder_debug: 4 callbacks suppressed [ 220.113350][ T3899] binder: undelivered TRANSACTION_COMPLETE [ 220.676289][ T7234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 220.873901][ T7234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 220.925477][ T24] cdc_mbim 1-1:1.0: setting tx_max = 48 [ 221.043212][ T24] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 221.075200][ T24] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 2e:59:3f:51:39:43 [ 221.085168][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.699'. [ 221.111877][ T7288] loop4: detected capacity change from 0 to 512 [ 221.124827][ T7288] EXT4-fs (loop4): can't read group descriptor 0 [ 221.467013][ T3899] usb 1-1: USB disconnect, device number 4 [ 221.468785][ T3899] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 221.572199][ T7304] loop1: detected capacity change from 0 to 40427 [ 221.576383][ T7304] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 221.604183][ T7288] netlink: 'syz.4.702': attribute type 13 has an invalid length. [ 221.609101][ T7288] Bluetooth: MGMT ver 1.22 [ 222.016296][ T7312] binder: 7311:7312 tried to acquire reference to desc 0, got 1 instead [ 222.031506][ T7312] binder: 7311:7312 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 222.034186][ T7312] binder: 7312 RLIMIT_NICE not set [ 222.035075][ T7312] binder: 7312 RLIMIT_NICE not set [ 222.051824][ T7312] binder: release 7311:7312 transaction 92 out, still active [ 222.054060][ T7312] binder: undelivered TRANSACTION_COMPLETE [ 222.062681][ T7312] binder: send failed reply for transaction 99 to 7311:7312 [ 222.090304][ T4376] binder: release 7311:7312 transaction 92 in, still active [ 222.091786][ T4376] binder: send failed reply for transaction 92, target dead [ 222.093215][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 222.094305][ T4376] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.162121][ T7346] usb usb8: usbfs: process 7346 (syz.4.713) did not claim interface 0 before use [ 223.269742][ T7362] loop1: detected capacity change from 0 to 512 [ 223.275833][ T7362] EXT4-fs (loop1): can't read group descriptor 0 [ 223.285088][ T7363] binder: 7359:7363 tried to acquire reference to desc 0, got 1 instead [ 223.399893][ T7362] netlink: 'syz.1.718': attribute type 13 has an invalid length. [ 223.791719][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.721'. [ 224.068609][ T7381] loop0: detected capacity change from 0 to 2048 [ 224.092053][ T7381] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 224.108176][ T3899] binder: undelivered TRANSACTION_COMPLETE [ 224.146998][ T3899] binder: undelivered TRANSACTION_COMPLETE [ 224.182677][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 224.674124][ T7397] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 225.830245][ T7412] process 'syz.3.732' launched '/dev/fd/4' with NULL argv: empty string added [ 225.852740][ T7414] loop5: detected capacity change from 0 to 512 [ 226.162601][ T7414] EXT4-fs (loop5): can't read group descriptor 0 [ 226.214709][ T7414] netlink: 'syz.5.731': attribute type 13 has an invalid length. [ 228.633816][ T7441] loop4: detected capacity change from 0 to 32768 [ 228.664837][ T7441] XFS (loop4): Mounting V5 Filesystem [ 228.713824][ T7441] XFS (loop4): Ending clean mount [ 228.829970][ T7464] tipc: Enabled bearer , priority 0 [ 228.831986][ T7464] device syzkaller0 entered promiscuous mode [ 229.205776][ T7464] tipc: Resetting bearer [ 229.230430][ T7463] tipc: Resetting bearer [ 229.243462][ T4326] XFS (loop4): Unmounting Filesystem [ 229.520981][ T7480] loop1: detected capacity change from 0 to 128 [ 230.137132][ T7463] tipc: Disabling bearer [ 230.804801][ T4416] kworker/u4:6: attempt to access beyond end of device [ 230.804801][ T4416] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 230.853714][ T7488] tipc: Enabled bearer , priority 0 [ 230.859255][ T7488] device syzkaller0 entered promiscuous mode [ 231.302057][ T7488] tipc: Resetting bearer [ 231.836840][ T7487] tipc: Resetting bearer [ 231.957227][ T7487] tipc: Disabling bearer [ 232.768618][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 233.480988][ T7516] loop0: detected capacity change from 0 to 256 [ 235.924676][ T7534] tipc: Enabled bearer , priority 0 [ 235.926491][ T7530] netlink: 'syz.0.760': attribute type 1 has an invalid length. [ 236.025324][ T7534] device syzkaller0 entered promiscuous mode [ 236.031932][ T7537] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.033552][ T7537] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.038766][ T7537] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.040354][ T7537] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.042597][ T7537] bond3: (slave geneve2): making interface the new active one [ 236.045377][ T7537] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 236.048094][ T7539] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 236.327846][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.760'. [ 236.331421][ T7530] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.335085][ T7539] tipc: Resetting bearer [ 236.375274][ T7533] tipc: Resetting bearer [ 236.687183][ T7533] tipc: Disabling bearer [ 236.893197][ T7554] device syzkaller0 entered promiscuous mode [ 236.900951][ T7551] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 236.921648][ T7551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'. [ 236.924870][ T7551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.712615][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.5.776'. [ 241.044085][ T7591] loop5: detected capacity change from 0 to 1024 [ 241.047526][ T7591] EXT4-fs: Ignoring removed orlov option [ 241.068540][ T7591] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 241.138799][ T7589] bridge0: port 4(vlan3) entered blocking state [ 241.139985][ T7589] bridge0: port 4(vlan3) entered disabled state [ 241.141549][ T7589] device vlan3 entered promiscuous mode [ 241.168742][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.170223][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.172287][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.252101][ T7589] device bridge_slave_1 left promiscuous mode [ 241.490005][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.537889][ T7589] bond0: (slave bond_slave_0): Releasing backup interface [ 241.574882][ T7601] loop4: detected capacity change from 0 to 32768 [ 241.577268][ T7589] device bond_slave_0 left promiscuous mode [ 241.582325][ T7601] jfs: Unrecognized mount option "x[og>E!M9&6-BTrȸU ( " or missing value [ 241.585127][ T7589] bond0: (slave bond_slave_1): Releasing backup interface [ 241.626835][ T7589] device bond_slave_1 left promiscuous mode [ 241.635555][ T7589] device team_slave_0 left promiscuous mode [ 241.663010][ T7589] team0: Port device team_slave_0 removed [ 241.664529][ T7589] device team_slave_1 left promiscuous mode [ 241.677236][ T7589] team0: Port device team_slave_1 removed [ 241.679027][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.680500][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.688207][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.689652][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.700262][ T7589] bond0: (slave macvlan2): Releasing backup interface [ 241.729930][ T7601] loop4: detected capacity change from 0 to 32768 [ 241.738087][ T7589] device macvlan2 left promiscuous mode [ 241.743221][ T7589] device team0 left promiscuous mode [ 241.750698][ T7601] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 241.752930][ T7601] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 241.754786][ T7601] BTRFS info (device loop4): use zlib compression, level 3 [ 241.756109][ T7601] BTRFS info (device loop4): using free space tree [ 241.759250][ T7589] device vlan2 left promiscuous mode [ 241.761797][ T7589] device bond0 left promiscuous mode [ 241.762800][ T7589] bridge0: port 3(vlan2) entered disabled state [ 241.790865][ T7589] bond1: (slave gretap1): Releasing active interface [ 241.822612][ T7601] BTRFS info (device loop4): enabling ssd optimizations [ 241.840381][ T7589] bond2: (slave geneve2): Releasing active interface [ 241.881740][ T5202] EXT4-fs (loop5): unmounting filesystem. [ 241.910159][ T7589] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 241.911946][ T7589] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 241.913587][ T7589] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 241.915375][ T7589] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 241.959360][ T7589] device vlan3 left promiscuous mode [ 241.962265][ T7589] device bridge_slave_0 left promiscuous mode [ 241.963660][ T7589] bridge0: port 4(vlan3) entered disabled state [ 242.917751][ T4326] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 242.933154][ T7637] netlink: 'syz.5.787': attribute type 1 has an invalid length. [ 242.965650][ T7637] device bond2 entered promiscuous mode [ 242.973991][ T7637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.045061][ T7637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.787'. [ 243.056009][ T7637] bond2: (slave bridge2): making interface the new active one [ 243.058010][ T7637] device bridge2 entered promiscuous mode [ 243.060301][ T7637] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 243.063538][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 243.105051][ T7646] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 243.212885][ T7651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.790'. [ 243.219655][ T7651] bond4: (slave bridge4): making interface the new active one [ 243.221732][ T7651] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 243.558399][ T7646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.790'. [ 243.563320][ T7646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.696513][ T4328] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 245.910965][ T7686] loop4: detected capacity change from 0 to 128 [ 247.348002][ T1613] kworker/u4:4: attempt to access beyond end of device [ 247.348002][ T1613] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 248.978746][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.981495][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.794241][ T7749] netlink: 14 bytes leftover after parsing attributes in process `syz.4.820'. [ 251.761970][ T7780] Soft offlining pfn 0x13e2d0 at process virtual address 0x20000000 [ 251.766973][ T7780] Soft offlining pfn 0x13e2d1 at process virtual address 0x20001000 [ 251.768577][ T7780] Soft offlining pfn 0x13e2d2 at process virtual address 0x20002000 [ 251.770231][ T7780] Soft offlining pfn 0x13e2d3 at process virtual address 0x20003000 [ 251.771739][ T7780] Soft offlining pfn 0x13e2d4 at process virtual address 0x20004000 [ 251.773195][ T7780] Soft offlining pfn 0x13e2d5 at process virtual address 0x20005000 [ 251.774720][ T7780] Soft offlining pfn 0x13e2d6 at process virtual address 0x20006000 [ 251.776222][ T7780] Soft offlining pfn 0x13e2d7 at process virtual address 0x20007000 [ 251.777957][ T7780] Soft offlining pfn 0x13fda8 at process virtual address 0x20008000 [ 251.779500][ T7780] Soft offlining pfn 0x14ac77 at process virtual address 0x20009000 [ 251.781008][ T7780] Soft offlining pfn 0x13fda9 at process virtual address 0x2000a000 [ 251.782555][ T7780] Soft offlining pfn 0x13fdaa at process virtual address 0x2000b000 [ 251.784093][ T7780] Soft offlining pfn 0x13fdab at process virtual address 0x2000c000 [ 251.785587][ T7780] Soft offlining pfn 0x13fdac at process virtual address 0x2000d000 [ 251.787196][ T7780] Soft offlining pfn 0x13fdad at process virtual address 0x2000e000 [ 251.788721][ T7780] Soft offlining pfn 0x140309 at process virtual address 0x2000f000 [ 251.790246][ T7780] Soft offlining pfn 0x140bac at process virtual address 0x20010000 [ 251.791869][ T7780] Soft offlining pfn 0x140bad at process virtual address 0x20011000 [ 253.650395][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.836'. [ 254.082681][ T7809] overlayfs: './file0' not a directory [ 256.120270][ T7851] tipc: Enabled bearer , priority 0 [ 256.126039][ T7851] device syzkaller0 entered promiscuous mode [ 256.247379][ T7856] tipc: Resetting bearer [ 256.254152][ T7850] tipc: Resetting bearer [ 257.207041][ T7850] tipc: Disabling bearer [ 258.558146][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 258.562502][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.563819][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.655576][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.660621][ T4333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.662603][ T4333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.664851][ T4333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.667320][ T4333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 258.668951][ T4333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.272501][ T4416] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.387954][ T4416] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.410923][ T7900] loop1: detected capacity change from 0 to 512 [ 259.461800][ T7900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.479332][ T4416] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.536022][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 259.655923][ T4416] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.770708][ T7910] netlink: 'syz.0.867': attribute type 13 has an invalid length. [ 259.786122][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.911974][ T7900] netlink: 14 bytes leftover after parsing attributes in process `syz.1.866'. [ 260.024055][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.025455][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.030208][ T7884] device bridge_slave_0 entered promiscuous mode [ 260.059992][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.061451][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.063208][ T7884] device bridge_slave_1 entered promiscuous mode [ 260.133436][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 260.180350][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.207112][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.215460][ T7884] team0: Port device team_slave_0 added [ 260.520691][ T7884] team0: Port device team_slave_1 added [ 260.539108][ T7929] device syzkaller0 entered promiscuous mode [ 260.551078][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.554491][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.569229][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.678714][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.680222][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.686199][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.716767][ T4328] Bluetooth: hci3: command 0x0409 tx timeout [ 260.851796][ T7879] net_ratelimit: 5266 callbacks suppressed [ 260.851806][ T7879] Set syz1 is full, maxelem 65536 reached [ 262.797500][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 262.811778][ T7884] device hsr_slave_0 entered promiscuous mode [ 262.867895][ T7884] device hsr_slave_1 entered promiscuous mode [ 262.926701][ T7884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.940049][ T7884] Cannot create hsr debugfs directory [ 263.263849][ T7972] PKCS7: Unknown OID: [4] 0.0 [ 263.265874][ T7972] PKCS7: Only support pkcs7_signedData type [ 263.339111][ T7966] device syzkaller0 entered promiscuous mode [ 265.764578][ T4333] Bluetooth: hci3: command 0x040f tx timeout [ 268.072437][ T4328] Bluetooth: hci3: command 0x0419 tx timeout [ 269.744287][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.890'. [ 273.217723][ T8112] loop5: detected capacity change from 0 to 128 [ 274.498149][ T7884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.121837][ T7884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.134888][ T8119] loop1: detected capacity change from 0 to 8 [ 275.254217][ T6049] kworker/u4:17: attempt to access beyond end of device [ 275.254217][ T6049] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 275.809902][ T7884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.842690][ T8129] device macvtap1 entered promiscuous mode [ 275.844169][ T8129] device syz_tun entered promiscuous mode [ 275.848116][ T8129] device syz_tun left promiscuous mode [ 278.112728][ T8175] tipc: Enabled bearer , priority 0 [ 278.120053][ T8175] device syzkaller0 entered promiscuous mode [ 278.436867][ T7884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.537414][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'. [ 278.545092][ T8182] device bond_slave_0 entered promiscuous mode [ 278.546574][ T8182] device bond_slave_1 entered promiscuous mode [ 278.548388][ T8182] device macvtap1 entered promiscuous mode [ 278.549643][ T8182] device bond0 entered promiscuous mode [ 278.551473][ T8182] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 278.556308][ T8179] tipc: Resetting bearer [ 278.597638][ T8189] device bond0 left promiscuous mode [ 278.598903][ T8189] device bond_slave_0 left promiscuous mode [ 278.599923][ T8189] device bond_slave_1 left promiscuous mode [ 278.626572][ T8189] device macvtap1 left promiscuous mode [ 278.632584][ T8172] tipc: Resetting bearer [ 278.744061][ T8172] tipc: Disabling bearer [ 278.750689][ T4416] device hsr_slave_0 left promiscuous mode [ 278.808097][ T4416] device hsr_slave_1 left promiscuous mode [ 280.659015][ T8219] loop5: detected capacity change from 0 to 128 [ 280.941811][ T8219] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 282.407408][ T4416] device veth1_macvtap left promiscuous mode [ 282.560503][ T4416] device veth0_macvtap left promiscuous mode [ 282.561811][ T4416] device veth1_vlan left promiscuous mode [ 282.564080][ T4416] device veth0_vlan left promiscuous mode [ 285.307588][ T4416] bond2 (unregistering): Released all slaves [ 285.379982][ T4416] bond1 (unregistering): Released all slaves [ 290.120380][ T8305] Soft offlining pfn 0x14cad4 at process virtual address 0x20000000 [ 290.123185][ T8305] Soft offlining pfn 0x14cad5 at process virtual address 0x20001000 [ 290.124743][ T8305] Soft offlining pfn 0x14cad6 at process virtual address 0x20002000 [ 290.126155][ T8305] Soft offlining pfn 0x14cad7 at process virtual address 0x20003000 [ 290.127777][ T8305] Soft offlining pfn 0x14a940 at process virtual address 0x20004000 [ 290.129228][ T8305] Soft offlining pfn 0x14a941 at process virtual address 0x20005000 [ 290.130780][ T8305] Soft offlining pfn 0x14a942 at process virtual address 0x20006000 [ 290.132400][ T8305] Soft offlining pfn 0x14c5e5 at process virtual address 0x20007000 [ 290.133939][ T8305] Soft offlining pfn 0x14c5e6 at process virtual address 0x20008000 [ 290.135468][ T8305] Soft offlining pfn 0x14c5e7 at process virtual address 0x20009000 [ 290.136994][ T8305] Soft offlining pfn 0x122390 at process virtual address 0x2000a000 [ 290.138590][ T8305] Soft offlining pfn 0x122391 at process virtual address 0x2000b000 [ 290.140101][ T8305] Soft offlining pfn 0x122392 at process virtual address 0x2000c000 [ 290.141586][ T8305] Soft offlining pfn 0x122393 at process virtual address 0x2000d000 [ 290.143031][ T8305] Soft offlining pfn 0x122394 at process virtual address 0x2000e000 [ 290.144649][ T8305] Soft offlining pfn 0x122395 at process virtual address 0x2000f000 [ 290.146134][ T8305] Soft offlining pfn 0x122396 at process virtual address 0x20010000 [ 290.147739][ T8305] Soft offlining pfn 0x122397 at process virtual address 0x20011000 [ 292.463768][ T8323] netlink: 68 bytes leftover after parsing attributes in process `syz.4.936'. [ 292.511518][ T8324] overlayfs: failed to clone lowerpath [ 293.991116][ T4328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.993657][ T4328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.995441][ T4328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.005033][ T4328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.007552][ T4328] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.009752][ T4328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.305031][ T8348] PKCS7: Unknown OID: [4] 0.0 [ 294.306013][ T8348] PKCS7: Only support pkcs7_signedData type [ 295.598170][ T4416] bond0 (unregistering): Released all slaves [ 295.932043][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.960055][ T8218] EXT4-fs (loop5): unmounting filesystem. [ 295.963837][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.965600][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.973534][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.981922][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.983697][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.985287][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.986656][ T4704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.991720][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.999554][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.002835][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.005021][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.006338][ T4704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.016612][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.024441][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.034206][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.038097][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.039943][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.046191][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.048624][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.056124][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.057989][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.061585][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.063315][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.066150][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.076697][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 296.090965][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 296.174062][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.175445][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.177977][ T8335] device bridge_slave_0 entered promiscuous mode [ 296.181295][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.182768][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.184378][ T8335] device bridge_slave_1 entered promiscuous mode [ 296.192564][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.195486][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.201051][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.202498][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.211888][ T8335] team0: Port device team_slave_0 added [ 296.214748][ T8335] team0: Port device team_slave_1 added [ 296.217745][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.225922][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.227641][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.232613][ T8335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.235346][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.237569][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.242446][ T8335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.307946][ T8335] device hsr_slave_0 entered promiscuous mode [ 296.356912][ T8335] device hsr_slave_1 entered promiscuous mode [ 296.397025][ T8335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.398312][ T8335] Cannot create hsr debugfs directory [ 296.413864][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.415988][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.435669][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.438684][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.440693][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.442544][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.445204][ T7884] device veth0_vlan entered promiscuous mode [ 296.466221][ T7884] device veth1_vlan entered promiscuous mode [ 296.480773][ T8335] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.519980][ T8335] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.559082][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.560953][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.562541][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.564251][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.567308][ T7884] device veth0_macvtap entered promiscuous mode [ 296.568944][ T8335] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.624655][ T8335] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.660213][ T7884] device veth1_macvtap entered promiscuous mode [ 296.718555][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.720485][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.722200][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.724087][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.725744][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.728489][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.730959][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.732638][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.734402][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.735960][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.738003][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.740838][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.742704][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.744437][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.746233][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.750073][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.751956][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.754416][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.757863][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.760714][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.777365][ T7884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.778951][ T7884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.780560][ T7884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.782198][ T7884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.829979][ T8335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.834069][ T4697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.835546][ T4697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.838663][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.843213][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.849145][ T4697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.850503][ T4697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.852487][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.989474][ T8375] loop3: detected capacity change from 0 to 32768 [ 296.991095][ T8375] jfs: Unrecognized mount option "x[og>E!M9&6-BTrȸU ( " or missing value [ 297.039883][ T8336] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.159094][ T4416] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.164254][ T8335] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.173053][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.174909][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.176270][ T4697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.178210][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.189794][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.190913][ T8375] loop3: detected capacity change from 0 to 32768 [ 297.191605][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.201400][ T8375] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.861 (8375) [ 297.203099][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.205148][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.209316][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.211113][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.212926][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.214834][ T8375] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 297.220802][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.221235][ T8375] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 297.222811][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.225618][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.226973][ T8375] BTRFS info (device loop3): use zlib compression, level 3 [ 297.228572][ T8375] BTRFS info (device loop3): using free space tree [ 297.230061][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.258910][ T4416] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.263129][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.264770][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.271750][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.273575][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.276288][ T8335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.278038][ T8375] BTRFS info (device loop3): enabling ssd optimizations [ 297.324432][ T7884] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 297.427831][ T4416] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.549783][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 299.052768][ T4416] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.221324][ T8277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.223154][ T8277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.311201][ T8335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.680267][ T4328] Bluetooth: hci4: command 0x040f tx timeout [ 300.787628][ T8454] loop3: detected capacity change from 0 to 64 [ 300.794114][ T4416] tipc: Disabling bearer [ 300.796139][ T4416] tipc: Disabling bearer [ 300.803322][ T4416] tipc: Left network mode [ 301.394291][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.396128][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.414828][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.423872][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.430644][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.445746][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.449232][ T8335] device veth0_vlan entered promiscuous mode [ 301.453358][ T8335] device veth1_vlan entered promiscuous mode [ 301.477949][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.479784][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.483184][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.485067][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.489544][ T8335] device veth0_macvtap entered promiscuous mode [ 301.704039][ T8335] device veth1_macvtap entered promiscuous mode [ 301.717093][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.719123][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.720971][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.722939][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.724775][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.727752][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.729507][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.731383][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.734096][ T8335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.735644][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.740863][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.743191][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.745470][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.093603][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 303.404517][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.406653][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.408795][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.410572][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.412289][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.414052][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.415902][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.420571][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.424029][ T8335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.427137][ T8506] loop1: detected capacity change from 0 to 1024 [ 303.434764][ T8335] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.436398][ T8335] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.438890][ T8335] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.791456][ T8335] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.799064][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.800986][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.839191][ T8336] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.355941][ T4746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.359641][ T4746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.826623][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.834215][ T4748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.835614][ T4748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.837485][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.950864][ T8529] device syzkaller0 entered promiscuous mode [ 305.441920][ T8540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.257087][ T51] block nbd1: Attempted send on invalid socket [ 308.258523][ T51] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 308.261557][ T8567] exFAT-fs (nbd1): unable to read boot sector [ 308.262927][ T8567] exFAT-fs (nbd1): failed to read boot sector [ 308.263973][ T8567] exFAT-fs (nbd1): failed to recognize exfat type [ 308.400234][ T8580] lo: Caught tx_queue_len zero misconfig [ 310.238490][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.241013][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.336626][ T4333] Bluetooth: unknown link type 41 [ 313.015287][ T4328] Bluetooth: hci2: command 0x0409 tx timeout [ 314.324148][ T8689] device syzkaller0 entered promiscuous mode [ 314.337038][ T8645] device syzkaller0 entered promiscuous mode [ 314.899201][ T8688] tipc: Enabled bearer , priority 0 [ 316.204994][ T8682] tipc: Resetting bearer [ 316.230390][ T8663] tipc: Resetting bearer [ 316.290382][ T8663] tipc: Disabling bearer [ 318.467347][ T8731] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 319.109282][ T4416] device hsr_slave_0 left promiscuous mode [ 319.324616][ T4416] device hsr_slave_1 left promiscuous mode [ 319.666667][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.668719][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.947357][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.949454][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.992066][ T4416] device bridge_slave_1 left promiscuous mode [ 319.993341][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.048580][ T4416] device bridge_slave_0 left promiscuous mode [ 320.049814][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.206666][ T4416] device veth1_macvtap left promiscuous mode [ 320.207858][ T4416] device veth0_macvtap left promiscuous mode [ 320.209047][ T4416] device veth1_vlan left promiscuous mode [ 320.210194][ T4416] device veth0_vlan left promiscuous mode [ 320.478640][ T4416] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 320.480135][ T4416] device bridge2 left promiscuous mode [ 321.459896][ T4416] bond2 (unregistering): Released all slaves [ 322.518312][ T4416] bond1 (unregistering): Released all slaves [ 324.552621][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 324.728713][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 324.887420][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.087004][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.628433][ T4416] bond0 (unregistering): Released all slaves [ 326.936091][ T8754] tipc: Enabling of bearer rejected, failed to enable media [ 329.915488][ T8853] loop1: detected capacity change from 0 to 1024 [ 332.899221][ T8879] loop6: detected capacity change from 0 to 256 [ 333.163163][ T8879] FAT-fs (loop6): Directory bread(block 64) failed [ 333.164586][ T8879] FAT-fs (loop6): Directory bread(block 65) failed [ 333.165904][ T8879] FAT-fs (loop6): Directory bread(block 66) failed [ 333.167097][ T8879] FAT-fs (loop6): Directory bread(block 67) failed [ 333.168217][ T8879] FAT-fs (loop6): Directory bread(block 68) failed [ 333.169323][ T8879] FAT-fs (loop6): Directory bread(block 69) failed [ 333.170546][ T8879] FAT-fs (loop6): Directory bread(block 70) failed [ 333.171746][ T8879] FAT-fs (loop6): Directory bread(block 71) failed [ 333.172948][ T8879] FAT-fs (loop6): Directory bread(block 72) failed [ 333.174214][ T8879] FAT-fs (loop6): Directory bread(block 73) failed [ 334.528998][ T8911] loop1: detected capacity change from 0 to 64 [ 334.819711][ T8904] loop6: detected capacity change from 0 to 512 [ 334.845564][ T8904] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 334.885810][ T8904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 334.887718][ T8904] System zones: 1-12 [ 334.904681][ T8904] EXT4-fs (loop6): 1 truncate cleaned up [ 334.905952][ T8904] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 336.793254][ T8959] loop3: detected capacity change from 0 to 128 [ 336.815926][ T8959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 337.536208][ T8335] EXT4-fs (loop6): unmounting filesystem. [ 338.766507][ T8985] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 339.021260][ T7884] EXT4-fs (loop3): unmounting filesystem. [ 339.754298][ T9006] loop3: detected capacity change from 0 to 128 [ 339.931760][ T9006] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 341.119439][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'. [ 341.128374][ T9015] loop1: detected capacity change from 0 to 32768 [ 341.134266][ T7884] EXT4-fs (loop3): unmounting filesystem. [ 341.202295][ T9015] XFS (loop1): Mounting V5 Filesystem [ 342.018278][ T9015] XFS (loop1): Ending clean mount [ 342.101418][ T9015] XFS (loop1): Quotacheck needed: Please wait. [ 342.504349][ T9015] XFS (loop1): Quotacheck: Done. [ 343.373951][ T4327] XFS (loop1): Unmounting Filesystem [ 343.769623][ T9098] tipc: Enabling of bearer rejected, failed to enable media [ 344.965735][ T9132] loop3: detected capacity change from 0 to 512 [ 344.980202][ T9132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 344.989708][ T9132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 344.991348][ T9132] System zones: 1-12 [ 345.877962][ T9132] EXT4-fs (loop3): 1 truncate cleaned up [ 345.879087][ T9132] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 346.305430][ T9154] loop6: detected capacity change from 0 to 128 [ 346.332874][ T9154] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 346.337892][ T9154] EXT4-fs (loop6): unmounting filesystem. [ 346.342601][ T9156] veth0_macvtap: Caught tx_queue_len zero misconfig [ 346.605470][ T7884] EXT4-fs (loop3): unmounting filesystem. [ 346.833243][ T9165] loop3: detected capacity change from 0 to 4096 [ 346.881144][ T9165] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 347.538549][ T9176] loop1: detected capacity change from 0 to 8 [ 347.594802][ T9176] SQUASHFS error: zlib decompression failed, data probably corrupt [ 347.596467][ T9176] SQUASHFS error: Failed to read block 0x9b: -5 [ 347.597645][ T9176] SQUASHFS error: Unable to read metadata cache entry [99] [ 347.598974][ T9176] SQUASHFS error: Unable to read inode 0x127 [ 348.730039][ T9179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.265150][ T9196] loop1: detected capacity change from 0 to 32768 [ 350.286717][ T9196] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1092 (9196) [ 350.293943][ T9196] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 350.296191][ T9196] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 350.300999][ T9196] BTRFS info (device loop1): using free space tree [ 350.745750][ T9196] BTRFS info (device loop1): enabling ssd optimizations [ 351.648812][ T4327] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 351.778080][ T9249] netlink: 'syz.4.1099': attribute type 10 has an invalid length. [ 351.782641][ T9249] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 352.243715][ T9269] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 352.253158][ T9269] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 353.352109][ T9278] tipc: Started in network mode [ 353.353221][ T9278] tipc: Node identity c6ecf0d31557, cluster identity 4711 [ 353.375679][ T9278] tipc: Enabled bearer , priority 0 [ 353.397447][ T9278] device syzkaller0 entered promiscuous mode [ 353.429624][ T9278] tipc: Resetting bearer [ 353.471741][ T9287] binder_user_error: 4 callbacks suppressed [ 353.471749][ T9287] binder: 9286:9287 tried to acquire reference to desc 0, got 1 instead [ 353.474942][ T9287] binder: 9286:9287 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 353.896405][ T9287] binder: 9287 RLIMIT_NICE not set [ 353.904953][ T9276] tipc: Resetting bearer [ 353.909839][ T9287] binder: 9287 RLIMIT_NICE not set [ 353.928579][ T4373] binder_debug: 1 callbacks suppressed [ 353.928592][ T4373] binder: release 9286:9287 transaction 110 out, still active [ 353.931149][ T4373] binder: undelivered TRANSACTION_COMPLETE [ 353.932302][ T4373] binder: release 9286:9290 transaction 111 out, still active [ 353.933677][ T4373] binder: undelivered TRANSACTION_COMPLETE [ 353.952226][ T4373] binder: release 9286:9287 transaction 110 in, still active [ 353.953885][ T4373] binder: send failed reply for transaction 110, target dead [ 353.955331][ T4373] binder: send failed reply for transaction 111, target dead [ 354.223134][ T9297] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 354.708095][ T9276] tipc: Disabling bearer [ 354.807974][ T4373] tipc: Node number set to 3552309459 [ 355.143371][ T9312] loop3: detected capacity change from 0 to 512 [ 355.150752][ T9312] EXT4-fs: Ignoring removed oldalloc option [ 355.152149][ T9312] EXT4-fs: Ignoring removed bh option [ 355.944526][ T9312] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 355.990192][ T9312] EXT4-fs (loop3): 1 truncate cleaned up [ 355.991338][ T9312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 356.183901][ T9323] loop6: detected capacity change from 0 to 32768 [ 356.225287][ T7884] EXT4-fs (loop3): unmounting filesystem. [ 356.642679][ T9323] XFS (loop6): Mounting V5 Filesystem [ 356.870370][ T9323] XFS (loop6): Ending clean mount [ 356.874303][ T9323] XFS (loop6): Quotacheck needed: Please wait. [ 356.906292][ T9323] XFS (loop6): Quotacheck: Done. [ 357.582453][ T8335] XFS (loop6): Unmounting Filesystem [ 358.255239][ T9380] netlink: 'syz.0.1125': attribute type 10 has an invalid length. [ 358.261327][ T9380] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 359.896622][ T9417] siw: device registration error -23 [ 361.662732][ T9427] netlink: 'syz.6.1133': attribute type 1 has an invalid length. [ 361.754902][ T9436] loop1: detected capacity change from 0 to 32768 [ 362.119261][ T9427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.131308][ T9447] device macvlan2 entered promiscuous mode [ 362.141333][ T9436] XFS (loop1): Mounting V5 Filesystem [ 362.149641][ T9447] device bond1 entered promiscuous mode [ 362.151393][ T9447] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 362.154277][ T9447] team0: Port device macvlan2 added [ 362.223824][ T9436] XFS (loop1): Ending clean mount [ 362.226596][ T9436] XFS (loop1): Quotacheck needed: Please wait. [ 362.229415][ T9427] bond1: (slave ip6gretap1): making interface the new active one [ 362.235131][ T9427] device ip6gretap1 entered promiscuous mode [ 362.251347][ T9436] XFS (loop1): Quotacheck: Done. [ 362.253458][ T9427] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 362.255129][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 362.256853][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 363.699191][ T4327] XFS (loop1): Unmounting Filesystem [ 364.357593][ T9487] tipc: Enabling of bearer rejected, failed to enable media [ 365.090851][ T9502] netlink: 'syz.1.1138': attribute type 10 has an invalid length. [ 365.101365][ T9502] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 365.224926][ T9532] siw: device registration error -23 [ 365.640588][ T9538] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 366.022401][ T9538] 8021q: adding VLAN 0 to HW filter on device bond5 [ 366.409890][ T9553] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 366.729796][ T9538] bond5: (slave gretap1): making interface the new active one [ 366.744997][ T9538] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 366.751178][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 366.817700][ T9562] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1148'. [ 366.820333][ T9562] IPVS: sed: FWM 3 0x00000003 - no destination available [ 366.869592][ T9567] tipc: Enabled bearer , priority 0 [ 366.874645][ T9567] device syzkaller0 entered promiscuous mode [ 367.327900][ T9567] tipc: Resetting bearer [ 367.343976][ T9565] tipc: Resetting bearer [ 367.497156][ T9565] tipc: Disabling bearer [ 370.208263][ T9596] loop1: detected capacity change from 0 to 164 [ 371.296392][ T9614] siw: device registration error -23 [ 371.467640][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.469048][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.028486][ T9620] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 374.275316][ T9654] loop1: detected capacity change from 0 to 512 [ 374.317689][ T9654] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1170: bad orphan inode 15 [ 374.322259][ T9654] ext4_test_bit(bit=14, block=18) = 1 [ 374.323188][ T9654] is_bad_inode(inode)=0 [ 374.323954][ T9654] NEXT_ORPHAN(inode)=1023 [ 374.324914][ T9654] max_ino=32 [ 374.325709][ T9654] i_nlink=0 [ 374.665473][ T9654] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2916: inode #15: comm syz.1.1170: corrupted xattr block 19 [ 374.674678][ T9654] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 374.676572][ T9654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 374.946626][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 375.065707][ T9658] netlink: 'syz.3.1169': attribute type 4 has an invalid length. [ 375.126093][ T9661] tipc: Enabled bearer , priority 0 [ 375.127526][ T9669] tipc: Enabling of bearer rejected, failed to enable media [ 375.133061][ T9663] netlink: 'syz.6.1173': attribute type 1 has an invalid length. [ 375.210811][ T9663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.215651][ T9661] device syzkaller0 entered promiscuous mode [ 375.221744][ T9670] bond2: (slave gretap1): making interface the new active one [ 375.228508][ T9670] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 375.232426][ T9661] tipc: Resetting bearer [ 375.234021][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 375.236703][ T9660] tipc: Resetting bearer [ 375.544188][ T9660] tipc: Disabling bearer [ 376.264026][ T9692] siw: device registration error -23 [ 376.688543][ T9700] siw: device registration error -23 [ 378.067670][ T9699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.216264][ T9727] tipc: Enabling of bearer rejected, failed to enable media [ 379.273798][ T9730] tipc: Enabled bearer , priority 0 [ 379.283112][ T9730] device syzkaller0 entered promiscuous mode [ 379.308853][ T9722] tipc: Resetting bearer [ 379.697734][ T9722] tipc: Disabling bearer [ 381.879420][ T9778] device geneve3 entered promiscuous mode [ 382.747113][ T9790] overlayfs: failed to clone upperpath [ 384.066070][ T4328] Bluetooth: hci3: command 0x0406 tx timeout [ 384.126843][ T9801] tipc: Enabling of bearer rejected, failed to enable media [ 384.130664][ T9800] tipc: Enabling of bearer rejected, failed to enable media [ 385.362410][ T3086] block nbd6: Attempted send on invalid socket [ 385.363839][ T3086] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 385.365623][ T9832] exFAT-fs (nbd6): unable to read boot sector [ 385.366783][ T9832] exFAT-fs (nbd6): failed to read boot sector [ 385.368095][ T9832] exFAT-fs (nbd6): failed to recognize exfat type [ 387.782227][ T9863] tipc: Enabled bearer , priority 0 [ 387.793543][ T9867] tipc: Enabled bearer , priority 0 [ 387.878340][ T9867] device syzkaller0 entered promiscuous mode [ 388.812855][ C1] ------------[ cut here ]------------ [ 388.814086][ C1] WARNING: CPU: 1 PID: 21 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0xf60/0x12bc [ 388.815918][ C1] Modules linked in: [ 388.816656][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 388.818050][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 388.819846][ C1] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 388.821230][ C1] pc : __ieee80211_beacon_get+0xf60/0x12bc [ 388.822242][ C1] lr : __ieee80211_beacon_get+0xf60/0x12bc [ 388.823293][ C1] sp : ffff80001caa7850 [ 388.824023][ C1] x29: ffff80001caa7890 x28: ffffffffffffe520 x27: 0000000000000001 [ 388.825600][ C1] x26: 0000000000000041 x25: ffff0000d0f69000 x24: 0000000000000000 [ 388.827153][ C1] x23: ffff0000c3080e80 x22: ffff80001caa78fc x21: ffff0000d4682228 [ 388.828583][ C1] x20: dfff800000000000 x19: ffff0000d4682760 x18: ffff800011babf60 [ 388.830134][ C1] x17: 1fffe00033ea817e x16: ffff8000082d7ed4 x15: 0000000000000000 [ 388.831680][ C1] x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 388.833181][ C1] x11: ff008000113247bc x10: 0000000000000000 x9 : ffff8000113247bc [ 388.834755][ C1] x8 : ffff0000c0a51bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 388.836343][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800011323ab4 [ 388.837886][ C1] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 388.839315][ C1] Call trace: [ 388.839908][ C1] __ieee80211_beacon_get+0xf60/0x12bc [ 388.840930][ C1] ieee80211_beacon_get_tim+0x70/0x44c [ 388.841940][ C1] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 388.842990][ C1] __iterate_interfaces+0x204/0x484 [ 388.843974][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 388.845327][ C1] mac80211_hwsim_beacon+0xc8/0x1b8 [ 388.846328][ C1] __hrtimer_run_queues+0x438/0xc3c [ 388.847345][ C1] hrtimer_run_softirq+0x160/0x400 [ 388.848321][ C1] handle_softirqs+0x318/0xc60 [ 388.849199][ C1] run_ksoftirqd+0x7c/0x2ac [ 388.850079][ C1] smpboot_thread_fn+0x4b0/0x964 [ 388.851022][ C1] kthread+0x250/0x2d8 [ 388.851802][ C1] ret_from_fork+0x10/0x20 [ 388.852626][ C1] irq event stamp: 1796001 [ 388.853421][ C1] hardirqs last enabled at (1796000): [] exit_to_kernel_mode+0xcc/0xfc [ 388.855168][ C1] hardirqs last disabled at (1796001): [] el1_dbg+0x24/0x80 [ 388.856750][ C1] softirqs last enabled at (1795990): [] handle_softirqs+0xaec/0xc60 [ 388.858495][ C1] softirqs last disabled at (1795995): [] run_ksoftirqd+0x7c/0x2ac [ 388.860261][ C1] ---[ end trace 0000000000000000 ]--- [ 389.269246][ T9862] tipc: Disabling bearer [ 389.273019][ T9867] tipc: Resetting bearer [ 389.275821][ T9889] device vlan0 entered promiscuous mode [ 389.277298][ T9864] tipc: Resetting bearer [ 389.593682][ T9864] tipc: Disabling bearer