last executing test programs: 1m22.952885369s ago: executing program 4 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 1m22.91081598s ago: executing program 4 (id=431): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000400)) 1m22.776806931s ago: executing program 4 (id=433): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000009000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) 1m22.738877221s ago: executing program 4 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m22.605033362s ago: executing program 4 (id=436): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r3 = getpid() syz_io_uring_setup(0x6c93, &(0x7f0000000080)={0x0, 0x0, 0x11900, 0x3}, &(0x7f0000000300), &(0x7f00000001c0)) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0xffff0000, @ipv4={'\x00', '\xff\xff', @dev}, 0x8}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m21.60080489s ago: executing program 4 (id=438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) add_key$user(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000740)="5192", 0x2, 0xfffffffffffffffe) 1m21.196439302s ago: executing program 32 (id=438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) add_key$user(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000740)="5192", 0x2, 0xfffffffffffffffe) 1m11.076777827s ago: executing program 3 (id=513): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) pwrite64(r0, 0x0, 0x0, 0x9000) 1m9.745621927s ago: executing program 3 (id=520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000380050800800030002ac0f00110001"], 0x60}}, 0x0) 1m9.468816959s ago: executing program 3 (id=522): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8], 0x0, 0x7fff, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}, {0xffffffffffffffff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m8.980733632s ago: executing program 3 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1c80a, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES32], 0x51, 0x5fbc, &(0x7f00000090c0)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4Alm1UkCIVq+hy7ptzjHseeru45v580rvr6dE1/5f/UdPdUVVcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPG97/74ZC8iLv463XAw4jMxiOhHrNb1kahnzuf7DyPiUGwNx3MRMViOqJff+ueZiDMR8dGBiDt3b6zXN5/aZR9nT1y/+sn3v/OP3/3p1qGfvvmTD9rjP/rs6Q9/fzPi4A9f+/CTm09m3QEAAKAUVVVVvfQ2/3B6f9/vuikAYCby83+V5NvVarVa/UTrP/bnq5/d1ysxX/2oH6tuqia72SwiYrO5TP2awe54AFgwm/Fx1y3QIfkXbRgRT3XdBDDXel03wJ64c/fGei/l22s+HxwZj+e/U27Lf7N37/yOnabTtI8xmdXP160YxLM79LM6ox7mSc6/387/4nh8lO631/nPyk75j8anPhUn5z9o59+yLf8/R8TC5t+fmH+pcv7DR8l/c7DA27/8AQAAAADY//Lf/w92vP93+fFXZVcetv/3yIx6AAAAAAAAAIAn7XGv/3eP6/8BAADA3Krfq9f+cuD+bc1j/dvzF3oRT7fuDxQmnSyz1nUfAAAAAAAAAAAAAFCS4fgY3gu9iKWIeHptraqq+qupXT+qx11+0ZW+/lCyrn/JAwDA2EcHWufy9yJWIuJC+qy/pbW1tapaWV2r1qrV5fx6drS8Uq023tfmaX3b8mgXL4iHo6r+ZiuN5ZqmvV+eNt7+fvVjjarBLhqbjQ4DB4CIGD8b3fGMtM9U1TPR9ascFoPtf/+x/bMbXf+cAgAAAHuvqqqqlz7O+3Da59/vuikAYBZW8vN/e7+AWq1Wq9Xq/Vc3VZPdbBYRsdlcpn7N4HL8ALBgNuPjrlugQ/Iv2jAiDnXdBDDXel03wJ64c/fGei/l22s+H6Tru+djQbblv9nbWi4vP2k6TfsYk1n9fN2KQTy7Qz/PzaiHeZLz77fzvzgeH6X77XX+s7JT/vV6Huygn67l/Aft/Fv2T/79ifmXKuc/fKT8B/IHAAAAAIA5lv/+f9D+37zKAAAAAAAAALBw7ty9sZ7Pe837/z8/4X695pzzP/eNnH9v1/k7/3c/yfn32/m3DsgZNOZvv3E//3/fvbH+wfV/fS5P5z7/pcGofuylXn8wTMf8VEtvxeW4Ehtx4oH7D7eNn3xgfGnb+Kkp46cfGB/V46t5/Fisxy/iSrx5b3x5yoFRK1PGqynjOf+B7b9IOf9h46vOfy2N91rT2u33+w9s983ppMc5/7f/vvjg1jV7t2Jwb92a6vU72kE/W/8nT43iV9c2rh77zaXr16+ejDTZduupSJMnLOe/lL5y/i+9MB7Pv/eb2+vt90ePnP+8uBXDHfN/oTFfr+/LM+6tCzn/UfrK+ednoMnb/yLnv/P2/0oH/QAAAAAAAAAAAAAAAMDDVFW1dYro+Yg4l87/6ercTABgpv7wgzRTJaEe172Yr37UarVarX4CdVM12evNIla2L3MuIn476ZsBAPPsfxHxz66boDPyL1j+vL96+oWumwFm6tq77/3s0pUrG1evdd0JAAAAAAAAAPBp5et/Hmlc/3nrOKDWdaO3Xf/1jTiysNf/7I8GW9c6Tyv0fDz8+t9H4+HX/x5OebylKeOjKePLU8ZXpoxPPNGjIef/fMo45384rVhJ1399qYN+upbzP5qu9Zzz/1Lrfs38q78ucv79bfkfv/7OL49fe/e9Vy+/c+ntjbc3fn7yxLkzp8+eOX327PG3Ll/ZODH+t8OO91bOP1/72nGgZcn558zlX5ac/xdTLf+y5PxfTLX8y5Lzz6/35F+WnH9+7yP/suT8X061/MuS8/9yquVflpz/K6mWf1ly/l9JtfzLkvN/NdXyL0vO/1iq5V+WnP/xVMu/LDn/vIdL/mXJ+ecjG+Rflpz/qVTLvyw5/9Opln9Zcv5nUi3/suT8z6Za/mXJ+Z9LtfzLkvP/aqrlX5ac/9dSLf+y5PxfS7X8y5Lz/3qq5V+WnP83Ui3/suT8v5lq+Zcl5/+tVMu/LDn/b6da/mXJ+b+eavmX5f7n/5uZ8cx//h4xB22YMTNppuvfTAAAAAAAAAAAAABA2ywOJ+56HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/swMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1djFxnfT/ws69eO4H4T0IIwZC14wRDNt5dvyUmGMzrPw0tTQOhpYU6xl6/gN/qXUOCULM0aRtEpEZtL9KLUkAUIbVVIoRUKqUoUpHau+YKlBvUSpFqqUllIqhES7LVmfM8z87Mzs7s2t74zDmfTxT/vDtnZp45c2Z2vmt9ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLb5AzN/PJBlWf5/44+NWXZ1/vf12f78y/k9V3qFAAAAwKV6pfHn316TvrF/BWdq2uaf3/av31tYWFjIPvPy+Vf/bGEhnTCeZUPrsqxxWvQvv/j5QvM2wSPZ2MBg09eDPa5+qMfpwz1OH+lx+miP09f1OH2sx+lLdsAS64vfxzQubGvjrxuLXZpdl400Ttva4VyPDKwbHIy/y2kYaJxnYeRIdjw7kc1kU0vOM9D4L8ue2Zxf191ZvK7BpuvalGXZhZ9+6VBcw0DYx1uzlitraL7vXnpfNv7yT7906NtzL7650+y5G5asNMu2bcnX+WiWLf66KhvI1qV9Etc52LTOTR3WOdSyzoHG+fK/t6/zwgrXGW/3WFjnc13WuSl878Gbsyybz5bdpt0j2WC2oe1a0/4eK46I/DLyu/IN2fCqjpPNKzhO8vO8cHPrcdJ+TMb9vznsk+Fl1tB8d7z05dEl+/1ij5P8VpfhWM0v+978SsfGmn+12nKs5tt86Zblj4GO912HYyAdy03HwJZex8Dg6FDjGBhcXPOWlmNgesl5BrOBxnWdv6X7MTA5d/LM5OxDX7z9+MmDR2eOzpyantqza+fuXTt37548cvzEzFTx5+p2aR/ZkA2mY3BLeK6Jx+Db27ZtPiQXvnH5HgdjJXkc5Lf947fmC7p6MFvmGM+3eXTbpT8O0s/9psfBcNPjoONzaofHwfAKHgf5Nhe2rexn5nDT/53WsFbPhRubjoEr+fMwv85PvWP558JNYV2PvXO1Pw+HlhwD8WYNhMde/p30em/szrBflh4XN+YnXDXaeG23/cGDc3Nnp7MwXhPXNt1X7cfLhqbblC05XgZXfbzs/5tf3npjh+9vDPtq7Lbu91W+za6J7vdV49n9qtHs3OzM2bA/R7Nif7Z8d0cWxmX2Wu/PTj/N8v2ZskSX/Zlv8+jtl/5aMOWSpue/kV7Pf0Mjw8Xz31DaGyMtz39L75qhxsqy7MLtK3v+Gwn/v9bPf9eV5Pkv31ef2t79GMi3eWxytcfAcNfnv5vDHAjreUdIDGNNuf/VxunzxWHadF/2PG6Gh0fCcTMcr7H1uNm55Dz5peXXvW3q4o6bbTe33lctr1tWftz0+vVBaY6bfF/9+VT34ybf5tnpS3/uWB//2vTcMdrrGBgZGs3XO5IOguL5bmF9PAa2Z4ey09mJ7HA6T34v59c1sWNlx8Bo+P+1fu64oSTHQL6vntzR/RjIt/nhzsv72mlb+E7apum1U/vvF5bL/DcOL15e+2673Jk/X+cHf/TR9L1OGSLf5sVdq80Z3ffTbeE7V3XYT+2Pn+WO6cPZa7OfbgjrPLG7+++m8m2u27PC42l/lmXPTz/f+H1X+P3ud8/96Hstv/ft9Dvl56efv2fyvh+vZv0AAFy8Vxt/zo8WrzWb/sV6Jf/+DwAAAPSFmPsHw0zkfwAAAKiMmPuHwkzkfwAAAKiMmPuHw0xqkv+P3bn3qVceztK7AS4E8fS4G+59T7Fd7HjPh6/HFxbl33//t0ae+srDK7vuwSzLfnnPWzpuf+w9cV2FM3Gd72r9/hI33LSi63/g/sXtmt8/4cLe4vLj7VnpYRC7ys9M7mhc7vhD04357D1ZY943/9gjxeUXX8ftz+8stv/L8KYl+48MtJx/W1jP1jDHw3vK3Lt/cT/kM57vqU1v+6drP7F4ffF8A1te37iZT/5+cbnxPaKeuLbYPt7u5db/j1/9zlP59g/e0nn9Dw92Xv/5cLkvhPmLfcX2zfv8K03r/8Ow/nh98Xzbv/mDjut/+k3F9k+H4+LrYbav/31/8tZXOt1f8Xr231WcL17/1H/vapwvXl68/Pb1jz083bI/2i//2ZeLy9n3+Z8NNW8fvx+vJ3rgrtbjeyDcvy098izLvvNHWct+zt5dnO8f2tYfL+/MXZ3Xf1vbOs8M3NQ4/+Lt2dhyu7721zs63t64nv1/t7Hl9jzxobD/Xp78YX655+8Lx2M4/X+eKy6v/c1Inv5Q6/NN3P7rG4vHbby8ybb1P9G2/vmb8n3Xe/13v1ys/+n3rmtZ//4Ph+Pp7mL2Wv/Rv7qm5fzf+HZxf5z9wsSp07Pnjh9u2qvNj+N1Y+s3XHX1615/TXgubf/6wOm5YzNnx6fGp7JsvA/fMnCt1//NMP+rGPOX/xoKP/5Zcdw9/pHi59bbf158/UT4/gPh/ow/H7/2FyMtx2v7/T7/3mJe6vrfGdaxUm/66r/ftKINz3/6mXN//wcvtr8uiLfnzBvHGrfvyc3XN04beLY4vf35qpd/e2Pr4/onw1ON+f2wXxfCOzNvub64vvbLj+9N8vjHisdvfCUXz5+1vZ/IxqHW23Gp6/9JeB3zgxtan//i8fH9h9vezXljNpAvYT48P2Tzxelxq7i/H79wfcfri+/Dk82/eTXLXNbsQ7OTJ46fOvfg5NzM7Nzk7ENfPHDy9LlTcwca71164LO9zr/4+N7QeHwfntmzK2s82k8XY41d6fWfuf/Q4Tumbj08c+TguSNz95+ZOXv00OzsoZnDs7cePHJk5gu9zn/88L7pHXt33rFj4ujxw/vu3Lt3596J46dO58soFtXDnqnPTZw6e6Bxltl9u/ZO7969a2ri5OnDM/vumJqaONfr/I2fTRP5uT8/cXbmxMG54ydnJmaPf3Fm3/TePXt29Hz3x5NnjsyOT549d2ry3OzM2cnitozPNb6d/+zrdX7qYfZ0eL5rMxBenX/ytj3p/XFz3/ryshdVbNL68jR7KbwXVPz51uvrmPtHwkxqkv8BAACgDmLuD2/8v3iC/A8AAACVEXP/ujAT+R8AAAAqI+b+IvmPpY9/r0v+v1z9/y/r/zfo/+v/Z/r/if6//n+m/6//34P+fyn6/8f0//X/9f9ZK2Xr/4fcn63PMv/+DwAAABUVc/+GMBP5HwAAACoj5v6rwkzkfwAAAKiMmPuvDjOpSf73+f/6//r/3fr/cVv9/0z/vwz9/63/qf+/hP6//n+m/3/RrnR/vt/XX8L+/3r9f8qmbP3/mPtfF2ZSk/wPAAAAdRBz/+vDTOR/AAAAKLV1q9g25v5rwkzkfwAAAKiMmPs3hpnUJP9fuf7/qP6//n9Dufv/Pv+/mf7/Fe//+/z/DvT/9f+z2vT/ixcL+v/lWf/a9///tOv5ff4//aBs/f+Y+/9fmElN8j8AAADUQcz9bwgzkf8BAACgMmLuvzbMRP4HAACAyoi5/7owk5rk/3p+/v8LWZbp/2f6//r/bevU/9f/Xwv6//r/3VzZ/n/+2qef+v8+/79s6y/h5//r/1M6Zev/x9z/xjCTmuR/AAAAqIOY+68PM5H/AQAAoDJi7n9TmIn8DwAAAJURc/8NYSY1yf/17P/7/H/9/8Ia9P8HhvX/E/1//f9M/1//vwef/6//38/r1//X/6e3svX/Y+5/c5hJTfI/AAAA1EHM/TeGmcj/AAAAUBkx978lzET+BwAAgMqIuX9TmElN8r/+v/6//r/P/9f/1/9fS/3V/x9c9hT9/4L+f6vL1/+fX1yA/n/frF//X/+f3srW/4+5/61hJjXJ/wAAAFAHMfe/LcxE/gcAAIDKiLn/pjAT+R8AAAAqI+b+8TCTmuR//X/9f/1//X/9f/3/tdRf/f/l6f8X9P9b+fx//X/9f/1/uitb/z/m/s1hJjXJ/wAAAFAHMfdvCTOR/wEAAKAyYu6/OcxE/gcAAIDKiLl/a5hJTfK//r/+v/6//r/+v/7/WtL/1//vRv9f/7+f16//r/9Pb2Xr/8fcf0uYSU3yPwAAANRBzP23hpnI/wAAAFAZMfe/PcxE/gcAAIDKiLl/W5hJTfK//r/+v/5/H/f/h/T/M/3/0uux/v9t+7Gzavr/+v+Z/v9Fu9L9+X5fv/6//j+9la3/H3P/O8JMapL/AQAAoA5i7n9nmIn8DwAAAJURc/9tYSbyPwAAAFRGzP0TYSY1yf8V7/+/+B/LbKb/X9D/7/P+v8//b1m//n85+fx//f9u9P/1//t5/fr/+v/0Vrb+f8z9t4eZ1CT/AwAAQB3E3L89zET+BwAAgMqIuX8yzET+BwAAgMqIuX8qzKQm+b/i/f9l6f8X9P/1/zP9f/3/Nab/r//fjf6//n8/r1//X/+f3srW/4+5fzrMpCb5HwAAAOog5v4dYSbyPwAAAFRGzP07w0zkfwAAAKiMmPt3hZnUJP/3Sf9/eypA6f/r/+v/6//r//cV/f+K9v/zJxL9f/3/03NpB+v/6//r/zPY4Xtl6//H3L87zKQm+R8AAADqIOb+PWEm8j8AAABURsz9d4SZyP8AAABQGTH33xlmUpP83yf9f5//r/+v/99E/1//v5/o/1e0/+/z/xv0/33+v/6//j/dla3/H3P/3jCTmuR/AAAAqIOY+98VZiL/AwAAQGXE3H9XmIn8DwAAAH2l0+cQRjH3vzvMpCb5X/+/6v3/hXX6//r/+v/d16//v7b0//X/u9H/1//v5/Xr/+v/01vZ+v8x9+8LM6lJ/gcAAIA6iLn/PWEm8j8AAABURsz97w0zkf8BAACgMmLu3x9mUpP8r/9f9f6/z//X/9f/77V+/f+1pf+v/99NJfv/66rf/w8vW/T/S9T/z48h/X/KqGz9/5j73xdmUpP8DwAAAHUQc//7w0zkfwAAAKiMmPs/EGYi/wMAAEBlxNz/wTCTmuR//X/9f/1//X/9f/3/taT/v2b9/8ZTof5/oVT9f5//r//v8//1/0nK1v+Puf9DYSY1yf8AAABQBzH3fzjMRP4HAACAyoi5//+Hmcj/AAAAUBkx998dZlKT/K//r/+v/6//r/+v/7+W9P99/n83+v/6//28fv1//X96K1v/P+b+XwkzqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6PhJnI/wAAANBnRpc9Jeb+Xw0zqUn+77/+/3hf9v8H0+Xr/+v/6//r/+v/X076//r/mf7/RbvS/fl+X7/+v/4/vZWt/x9z/6+FmdQk/wMAAEAdxNz/0TAT+R8AAAAqI+b+Xw8zkf8BAACgMmLuvzfMpCb5/3L3/9vP343P/9f/z/T/9f/1//X/L5H+v/5/pv9/0a50f77f16//r/9Pb2Xr/8fc/xthJjXJ/wAAAFAHMfffF2Yi/wMAAEBJHVv1OWLu/1iYifwPAAAAlRFz/8fDTGqS//vv8//1//X/9f/1//X/+4n+v/5/N/r/+v/9vH79f/1/eitb/z/m/vvDTGqS/wEAAKAOYu7/RJiJ/A8AAACVEXP/b4aZyP8AAABQGTH3/1aYSU3yv/6//r/+v/6//r/+/1rS/1/a/8+fw/T/C/r/+v/9vH79f/1/eitb/z/m/k+GmdQk/wMAAEAdxNz/22Em8j8AAABURsz9vxNmIv8DAABAZcTc/6kwk5rkf/1//X/9f/1//X/9/7Wk/+/z/7vR/9f/7+f16//r/9Nb2fr/Mfd/OsykJvkfAAAA6iDm/t8NM5H/AQAAoDJi7j8QZiL/AwAAQGXE3P9AmElN8r/+v/6//r/+v/6//v9a0v/X/+9G/1//v5/Xr/+v/09vZev/x9x/MMxkf+vVAAAAAP0r5v7PhJnU5N//AQAAoA5i7j8UZiL/AwAAQGXE3H84zKQm+V//X/9f/1//X/9f/38t6f/r/3ej/6//38/r1//X/6e3svX/Y+6fCTOpSf4HAACAOoi5/0iYifwPAAAAlRFz/9EwE/kfAAAAKiPm/mNhJjXJ//r/+v/6/7Xt/z/33bZ16v/r/68F/X/9/270//X/+3n9+v/6//RWtv5/zP3Hw0xqkv8BAACgDmLu/2yYifwPAAAAlRFz/+fCTOR/AAAAqIyY+0+EmdQk/+v/6//r/9e2/7+yz/9fv3i9+v/6/xdD/1//vxv9f/3/fl6//r/+P72Vrf8fc//JMJOa5H8AAACog5j7T4WZyP8AAABQGTH3nw4zkf8BAACgMmLuPxNmUpP8r/+/uv7/wDLdQP3/zuvX/69A/7+J/r/+/8XQ/9f/70b/X/+/n9ev/6//T29l6//H3P97YSY1yf8AAABQBzH3nw0zkf8BAACgMmLunw0zkf8BAACgMmLun/s/9u47WbOy2uP4e5vbfZu65RyYgiNwCI7BKqdgTmAEs2LOCXPCrJhzzjnnjGKOVVp0r7WgD332Pk2ft8+zn/X5/MGSAxYPgmX9Cr+145Ym+1//7/v/+n/9v/5f/79P+n/9/xL9v/5/y+/X/+v/WTda/5+7/35xS5P9DwAAAB3k7r9/3GL/AwAAwDRy9z8gbrH/AQAAYBq5+x8YtzTZ//p//b/+X/+v/9f/75P+f6P9/26n/z8C/b/+X/+v/2fZaP1/7v4HxS1N9j8AAAB0kLv/wXGL/Q8AAADTyN3/kLjF/gcAAIBp5O5/aNzSZP/r//X/+n/9v/5f/79P+v+N9v++/38k+n/9v/5f/8+y0fr/3P0Pi1ua7H8AAADoIHf/w+MW+x8AAACmkbv/EXGL/Q8AAADTyN1/bdzSZP/r//X/+v8N9v//q//X/2+H/l//v0T/r//f8vv1//p/1o3W/+fuvy5uabL/AQAAoIPc/Y+MW+x/AAAAmEbu/kfFLfY/AAAATCN3/6Pjlib7X/+v/9f/b7D/9/1//f+G6P/1/0v0//r/Lb9f/6//Z91o/X/u/sfELU32PwAAAHSQu/+xcYv9DwAAANPI3f+4uMX+BwAAgGnk7r8+bmmy//X/+n/9v/5f/6//3yf9v/5/if5f/7/l9+v/9f+s23v/f+8bzt2j9v+5+2+IW5rsfwAAAOggd//j4xb7HwAAAKaRu/8JcYv9DwAAANPI3f/EuKXJ/tf/6//v6P//8z/6f/2//v+On+v/j4f+X/+/RP+v/9/y+/X/+n/W7b3/X+n9D/567v4nxS1N9j8AAAB0kLv/yXGL/Q8AAADTyN3/lLjF/gcAAIDhnT3i75e7/6kH/11N9r/+X//v+//6f/2//n+f9P/D9v8H/6t3of31/2fu/Cv6f/3/lt+/1P/f6wjv1//TwWj9f+7+p8UtTfY/AAAAdJC7/+lxi/0PAAAA08jdf2PcYv8DAADANHL3PyNuabL/9f/6f/2//v/C/v9Uy/7/9p/p//dD/z9s/7/M9/+PRP+v//f9f/0/y0br/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAmEbu/mfHLfY/AAAATCN3/3Pilib7X/+v/9f/6/8v6/v/V83R//v+//7o//X/S/T/+v8tv1//r/9n3Wj9f+7+58YtTfY/AAAATO/Urnb/8+IW+x8AAACmkbv/+XGL/Q8AAADTyN3/grilyf7X/+v/9f/6/8vq/yf5/r/+f3/0//r/JUft/3f6//pzOdn+//QFv6b/1//r/1kzWv+fu/+FcUuT/Q8AAADzuf4uP8nd/6K4xf4HAACAaeTuf3HcYv8DAADANHL3vyRuabL/9f/6f/2//l//r//fJ/2//n+J7/9vrf+/kP5f/6//Z81o/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3HJw/5+6kq+6ck60/892Q/+v/9f/n6P/j7+u+n/9/yXQ/+v/dxP2/2cP+ePp/8d6v/5f/8+60fr/3P03xS3++T8AAABMI3f/K+MW+x8AAACmkbv/VXGL/Q8AAADTyN3/6rilyf4/rP+/7f/P/3bf/z8a/f/F36//1//r//X/+v/j6/8v9j9v+v/zZuv/ff9/G+/X/+v/WTda/5+7/zVxS5P9DwAAAB3k7n9t3GL/AwAAwDRy978ubrH/AQAAYBq5+18ftzTZ/8f//f9rTqL/vyOu0//r//X/+v/4+WH9/0H6//3S//v+/xL9v/5/y+/X/+v/WTda/5+7/w1xS5P9DwAAAB3k7n9j3GL/AwAAwDRy978pbrH/AQAAYBq5+98ctzTZ/8ff//v+v/7/Evv/U/r/pP+Pv66+/6//vwT6f/3/Tv9/t510P7/19+v/9f+sG63/z91/87mp12//AwAAQAc3n/vl2d1b4hb7HwAAAKaRu/+tcYv9DwAAANPI3f+2uKXJ/tf/6/9PvP/3/f+i/4+/rvp//f8l0P/r/3f6/7vtpPv5rb9f/6//Z91o/X/u/rfHLU32PwAAAHSQu/8dcYv9DwAAANOI3X/+//xu/wMAAMCU3nnul2d374pbmuz/xv3/NZfb/199p3+t/7/4+/X/x9L/33zw7z39v/5/S/T/+v8l+n/9/5bfP07/Hz+4Vv/PeEbr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAmEbu/lviFvsfAAAAppG7/71xS5P937j/n+T7//e5NV6g/5+3//f9/7j6f/3/xej/9f87/f/ddtL9/NbfP07/7/v/jGu0/j93//vilib7HwAAADrI3f/+uMX+BwAAgGnk7v9A3GL/AwAAwDRy938wbmmy//X/W+//ff9f/6//1/+PTf+v/1+i/9f/b/n9+n/9P+tG6/9z938obmmy/wEAAKCD3P0fjlvsfwAAAJhG7v6PxC32PwAAAEwjd/9H45Ym+1//r//fV/9/+x9E/9+k/79O/7/T/x9K/6//X6L/1/9v+f36f/0/60br/3P3fyxuabL/AQAAoIPc/R+PW+x/AAAAmEbu/k/ELfY/AAAATCN3/yfjhnve4+SedLxOH/Lz6M31//p/3//X//v+v/5/n/T/+v8l+n/9/5bfr//X/7NutP4/d/+n4hb//B8AAACmkbv/03GL/Q8AAADTyN3/mbjF/gcAAIBp5O7/bNzSZP/r//X/+v/N9v9X6/8vfL/+f0z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/c3FLk/0PAAAAHeTu/3zcYv8DAADANHL3fyFusf8BAABgGrn7vxi3NNn/+n/9v/5/s/2/7/8feL/+f0z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/S3FLk/0PAAAAHeTu/3LcYv8DAADANHL3fyVusf8BAABgGrn7vxq3NNn/+n/9v/5f/6//1//v0xXv/08d/x9jp//X/x9C/6//1//r/1k2Wv+fu/9rcUuT/Q8AAAAd5O7/etxi/wMAAMA0cvd/I26x/wEAAGAaufu/Gbc02f8z9/9Lv5v+/zz9v/5/p/8/2P+fyZ/r/4+H7//r/5fo/yfu/88cyxNP7v36f/0/x2K0/j93/7filib7HwAAADrI3f/tuMX+BwAAgGnk7v9O3GL/AwAAwDRy9383bmmy/2fu/5fo/8/T/+v/d/p/3//fM/2//n+J/n/i/t/3//X/cHL9/+ndIf1/7v7vxS1N9j8AAAB0kLv/+3GL/Q8AAADTyN3/g7jF/gcAAIBp5O7/Ydwyz/6/7y0Lv1H/f+z9/7m/ifT/+v+d/l//r/8/R/+v/1+i/9f/b/n9+n/9P+tG+/5/7v4fxS3z7H8AAABoL3f/j+MW+x8AAACmkbv/J3GL/Q8AAADTyN3/07ilyf7X//v+v/6/Vf9/1e5I/X/+J6z/1/9fPv2//n+J/l//v+X36//1/6wbrf/P3f+zuKXJ/gcAAIAOcvf/PG6x/wEAAGAauft/EbfY/wAAADCN3P2/jFua7H/9v/5f/9+q//f9f/3/Faf/1/8v0f/r/7f8/uz/8+87/b/+n7sarf/P3f+ruKXJ/gcAAIAOcvf/Om6x/wEAAGAauft/E7fY/wAAADCN3P2/jVua7H/9v/5f/6//1//r//dJ/6//X6L/1/9v+f2+/6//Z91o/X/u/lvjlib7HwAAADrI3f+7uMX+BwAAgGnk7v993GL/AwAAwDRy998WtzTZ//p//f+U/f//6f/1//r/Uej/9f9L9P/6/y2/X/+v/2fdaP1/7v4/xC1N9j8AAAB0kLv/j3GL/Q8AAADTyN3/p7jF/gcAAIBp5O7/c9zSZP/r//X/l97/n64/72H7f9//1//r/4cxb/9/Rv+v/7/s/v/Gm87/WP+/zffr//X/rBut/8/d/5e4pcn+BwAAgA5y9/81brH/AQAAYBq5+/8Wt9j/AAAAMI3c/X+PW5rsf/2//n/K7//r//X/+v9hzNv/+/6//t/3//X/+n/9P2tG6/9z9/8jbmmy/wEAAKCD3P3/jFvsfwAAAJhG7v5/xS32PwAAAEwjd/+/45Ym+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z9/w0AAP//pQEwbw==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r1 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x3, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r0, 0x0, 0x80000000) 1m8.444917066s ago: executing program 3 (id=528): sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m6.696874499s ago: executing program 3 (id=535): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x51c5, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x3, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m6.50599754s ago: executing program 33 (id=535): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x51c5, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x3, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 31.21063444s ago: executing program 6 (id=873): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r3 = getpid() syz_io_uring_setup(0x6c93, &(0x7f0000000080)={0x0, 0x0, 0x11900, 0x3}, 0x0, &(0x7f00000001c0)) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0xffff0000, @ipv4={'\x00', '\xff\xff', @dev}, 0x8}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 31.129872231s ago: executing program 6 (id=876): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000170000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r3, 0x1, 0x20, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c) 30.231117107s ago: executing program 6 (id=885): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) 29.86090504s ago: executing program 6 (id=889): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c000a80", @ANYRES16=r2, @ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) 29.80811736s ago: executing program 6 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x24}}, 0x8000) 29.664756841s ago: executing program 6 (id=893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@val={0x2000, 0x6000}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}}, {0x600, 0x0, 0x29, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb03"}}}}}}}, 0x53) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@end, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@remote}]}]}}}}}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r4, 0x8b20, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x6c, r6, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) 14.637926772s ago: executing program 34 (id=893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@val={0x2000, 0x6000}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}}, {0x600, 0x0, 0x29, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb03"}}}}}}}, 0x53) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@end, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@remote}]}]}}}}}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r4, 0x8b20, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x6c, r6, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) 3.925300951s ago: executing program 5 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008000}, 0x4040000) connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x24, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.361020375s ago: executing program 5 (id=1101): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3.226824766s ago: executing program 5 (id=1103): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x40, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000001780)="b4d6231d99", 0x0}, 0x20) 3.156418317s ago: executing program 5 (id=1104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001a80)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES32=r1], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001440)={'sit0\x00', 0x0, 0x20, 0x40, 0x80000000, 0x3, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x67, 0x3, 0x4, 0x29, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x14, 0x1f, 0x3, 0x1, [{@multicast2, 0x4}, {@local}]}]}}}}}) 3.039648257s ago: executing program 5 (id=1106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x240100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0100000007ff"}) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000500)=ANY=[], 0x3, 0x224, &(0x7f0000001c40)="$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") 2.970017608s ago: executing program 1 (id=1107): unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) 2.69280065s ago: executing program 0 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e6572000000480002800800024000000084080003400000000a080004400000000f080001400000000024000580090001006d6574610000000014000280020001400000000e08000240000000010900010073797a30000000000900020073797a320000000014000000"], 0xb0}}, 0x0) 2.144739724s ago: executing program 0 (id=1117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001a80)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES32=r1], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001440)={'sit0\x00', 0x0, 0x20, 0x40, 0x80000000, 0x3, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x67, 0x3, 0x4, 0x29, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x14, 0x1f, 0x3, 0x1, [{@multicast2, 0x4}, {@local}]}]}}}}}) 2.080204065s ago: executing program 7 (id=1118): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @broadcast, @remote}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x20000001) 2.052353235s ago: executing program 0 (id=1119): open(0x0, 0x80ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e61}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 1.860795346s ago: executing program 1 (id=1120): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x6020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.860550136s ago: executing program 7 (id=1121): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) 1.111204311s ago: executing program 2 (id=1128): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bind$can_raw(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 1.105680291s ago: executing program 0 (id=1129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001a80)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES32=r1], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001440)={'sit0\x00', 0x0, 0x20, 0x40, 0x80000000, 0x3, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x67, 0x3, 0x4, 0x29, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x14, 0x1f, 0x3, 0x1, [{@multicast2, 0x4}, {@local}]}]}}}}}) 993.092422ms ago: executing program 0 (id=1130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x44011, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xb}, &(0x7f0000000080)=0x8) 884.743413ms ago: executing program 1 (id=1131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000100), 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$inet_mptcp(0x2, 0x1, 0x106) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x22, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x800, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 805.023844ms ago: executing program 7 (id=1132): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0xfffffffc, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22", 0xd}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 797.118894ms ago: executing program 2 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a320000000044000580080002400000000208000140000000ff0800014000000088080001400000000d0800024000000003"], 0x2d4}}, 0x4048010) 712.784954ms ago: executing program 1 (id=1134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r2, 0x0, 0x10000000000000}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xa86}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x23}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="12cfac62c60148451adb6760", @ANYBLOB="501f904af7744dbe26c19028968f4c98ae8744961ee204774b89f2479822afe7a236c53fecdb6872092b828a7e8a738eacf11d5ab24d3288c82d0697d3e21920ca518079f5c43309abdf67187e110fe457bbb4264ba0b5dbc3e4fe18ead13781bd80574e775e4702dedd6c1c5ced532e62a3daccb144d1d7c2ed94759e3a82d97b3f9e4475df610284eaaddd91f4f165c312a2428be889dd848be0d98da5396d3cc7a1a48d98630afe9fb24dcdbc8a82a68f010716b29acb40224d800a4e9045138a843ade10b7df66dbc8ce643a2be57a05c44bc9d817e0bdd94e93383acc1425", @ANYRES8=r1], 0x44}}, 0x44000) 696.426425ms ago: executing program 7 (id=1135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xf, &(0x7f0000002280)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 642.741015ms ago: executing program 2 (id=1136): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) 622.651005ms ago: executing program 7 (id=1137): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 528.874366ms ago: executing program 1 (id=1138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) 528.654586ms ago: executing program 2 (id=1139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000004000128008000100767469003400028008000500e00000010800050064010100080005007f000001080004007f000001088b290394b8a13989b5", @ANYRES32=0x0, @ANYBLOB="0800020080000000"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000380)={{}, [@netrom, @default, @null, @default, @null, @rose, @bcast, @rose]}, &(0x7f0000000280)=0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(ccm(tnepres))\x00'}, 0x58) 484.374086ms ago: executing program 7 (id=1140): open(0x0, 0x80ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e61}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 396.167497ms ago: executing program 2 (id=1141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 284.772798ms ago: executing program 2 (id=1142): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r0, &(0x7f0000000580), 0x0, 0x200040c0, &(0x7f0000000700)={0x11, 0x9, r2, 0x1, 0x6, 0x6, @remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r2, {0x0, 0x8}, {0x5, 0xfff3}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) 284.639908ms ago: executing program 5 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 231.146498ms ago: executing program 1 (id=1144): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) unshare(0x600) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x30bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 0s ago: executing program 0 (id=1145): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) kernel console output (not intermixed with test programs): iled to find a fallback [ 58.600164][ T226] block nbd3: shutting down sockets [ 58.601702][ T226] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.604702][ T226] Buffer I/O error on dev nbd3, logical block 0, async page read [ 58.624500][ T226] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.627359][ T226] Buffer I/O error on dev nbd3, logical block 0, async page read [ 58.636334][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.639074][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 58.641369][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.644081][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 58.646271][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.648949][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 58.651452][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.654261][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 58.656908][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.659627][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 58.661707][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.664333][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 58.668706][ T4020] ldm_validate_partition_table(): Disk read failed. [ 58.670653][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.673441][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 58.686398][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.689021][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 58.691509][ T4020] Dev nbd3: unable to read RDB block 0 [ 58.693475][ T4020] nbd3: unable to read partition table [ 58.756638][ T4290] udc-core: couldn't find an available UDC or it's busy [ 58.758561][ T4290] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.799335][ T4290] netlink: 'syz.4.50': attribute type 39 has an invalid length. [ 58.887377][ T4020] ldm_validate_partition_table(): Disk read failed. [ 58.902171][ T4020] Dev nbd3: unable to read RDB block 0 [ 58.908022][ T4020] nbd3: unable to read partition table [ 59.098137][ T4296] loop4: detected capacity change from 0 to 32768 [ 59.196440][ T4296] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 59.230877][ T4296] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 59.295905][ T4307] loop0: detected capacity change from 0 to 128 [ 59.766143][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.861467][ T4042] ocfs2: Unmounting device (7,4) on (node local) [ 60.047524][ T4311] udc-core: couldn't find an available UDC or it's busy [ 60.051160][ T4311] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.079259][ T4308] loop3: detected capacity change from 0 to 40427 [ 60.166323][ T25] usb 1-1: config index 0 descriptor too short (expected 27833, got 441) [ 60.168704][ T25] usb 1-1: config 48 has too many interfaces: 61, using maximum allowed: 32 [ 60.170771][ T25] usb 1-1: config 48 has an invalid descriptor of length 92, skipping remainder of the config [ 60.186917][ T25] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 61 [ 60.189035][ T25] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 60.191182][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.234026][ T4308] F2FS-fs (loop3): Found nat_bits in checkpoint [ 60.283609][ T4308] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 60.471421][ T4318] loop4: detected capacity change from 0 to 32768 [ 60.518075][ T25] usb 1-1: string descriptor 0 read error: -71 [ 60.536235][ T25] usb 1-1: USB disconnect, device number 2 [ 60.547608][ T4318] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 60.649772][ T4318] (syz.4.57,4318,1):ocfs2_clear_journal_error:1063 ERROR: File system error 117440512 recorded in journal 0. [ 60.652785][ T4318] (syz.4.57,4318,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop4 needs checking. [ 60.658708][ T4318] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 60.753256][ T4042] ocfs2: Unmounting device (7,4) on (node local) [ 60.781508][ T4325] udc-core: couldn't find an available UDC or it's busy [ 60.783358][ T4325] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.836465][ T4327] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.844433][ T4329] udc-core: couldn't find an available UDC or it's busy [ 60.847039][ T4329] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.065624][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 61.068955][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 61.145708][ T4340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'. [ 61.607167][ T4352] loop0: detected capacity change from 0 to 32768 [ 61.805783][ T4356] loop2: detected capacity change from 0 to 32768 [ 61.881124][ T4356] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 61.936189][ T4356] (syz.2.71,4356,1):ocfs2_clear_journal_error:1063 ERROR: File system error 117440512 recorded in journal 0. [ 61.939200][ T4356] (syz.2.71,4356,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop2 needs checking. [ 61.942806][ T4356] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 62.185682][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 62.225108][ T4355] loop3: detected capacity change from 0 to 32768 [ 62.609123][ T4355] XFS (loop3): Mounting V5 Filesystem [ 62.855706][ T4355] XFS (loop3): Ending clean mount [ 62.864571][ T4355] XFS (loop3): Quotacheck needed: Please wait. [ 62.950654][ T4355] XFS (loop3): Quotacheck: Done. [ 63.010786][ T4383] loop2: detected capacity change from 0 to 1024 [ 63.087252][ T4383] EXT4-fs (loop2): Mount option "delalloc" incompatible with ext3 [ 63.095039][ T4029] XFS (loop3): Unmounting Filesystem [ 63.637542][ T4408] loop2: detected capacity change from 0 to 32768 [ 63.983976][ T4415] loop0: detected capacity change from 0 to 2048 [ 64.017466][ T4415] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 64.068635][ T4419] nbd3: detected capacity change from 0 to 72456 [ 64.073138][ T149] block nbd3: Send control failed (result -89) [ 64.074739][ T149] block nbd3: Request send failed, requeueing [ 64.076924][ T144] block nbd3: Receive control failed (result -32) [ 64.076968][ T149] block nbd3: Dead connection, failed to find a fallback [ 64.080380][ T149] block nbd3: shutting down sockets [ 64.081765][ T149] print_req_error: 24 callbacks suppressed [ 64.081777][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.086245][ T149] buffer_io_error: 23 callbacks suppressed [ 64.086258][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 64.096371][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.099141][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 64.101325][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.104033][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 64.106711][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.109592][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 64.111709][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.114489][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 64.116924][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.119703][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 64.121922][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.124556][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 64.126849][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.129707][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 64.131726][ T4419] ldm_validate_partition_table(): Disk read failed. [ 64.133629][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.136339][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 64.138426][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.141666][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 64.145477][ T4419] Dev nbd3: unable to read RDB block 0 [ 64.148218][ T4419] nbd3: unable to read partition table [ 64.201588][ T4425] netlink: 36 bytes leftover after parsing attributes in process `syz.1.91'. [ 64.223314][ T4415] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,nodiscard,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000003,grpjquota=,bsddf,. Quota mode: none. [ 64.449330][ T4423] loop3: detected capacity change from 0 to 32768 [ 64.613439][ T4430] loop4: detected capacity change from 0 to 32768 [ 64.634406][ T4432] loop1: detected capacity change from 0 to 1024 [ 64.640471][ T4430] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.94 (4430) [ 64.673946][ T4423] XFS (loop3): Mounting V5 Filesystem [ 64.704955][ T4432] EXT4-fs (loop1): Mount option "delalloc" incompatible with ext3 [ 64.718088][ T4430] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 64.720374][ T4430] BTRFS info (device loop4): enabling auto defrag [ 64.722016][ T4430] BTRFS info (device loop4): doing ref verification [ 64.723737][ T4430] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 64.726245][ T4430] BTRFS info (device loop4): force zstd compression, level 3 [ 64.728065][ T4430] BTRFS info (device loop4): max_inline at 4096 [ 64.729785][ T4430] BTRFS info (device loop4): enabling ssd optimizations [ 64.731606][ T4430] BTRFS info (device loop4): using spread ssd allocation scheme [ 64.733425][ T4430] BTRFS info (device loop4): using free space tree [ 64.735134][ T4430] BTRFS info (device loop4): has skinny extents [ 64.785686][ T4423] XFS (loop3): Ending clean mount [ 64.800966][ T4423] XFS (loop3): Quotacheck needed: Please wait. [ 64.824723][ T4452] loop0: detected capacity change from 0 to 64 [ 64.871229][ T4423] XFS (loop3): Quotacheck: Done. [ 64.920307][ T4029] XFS (loop3): Unmounting Filesystem [ 65.111229][ T4460] loop1: detected capacity change from 0 to 32768 [ 65.148399][ T4460] (syz.1.97,4460,1):ocfs2_sb_probe:756 ERROR: incompatible version: 2.33686018 [ 65.150630][ T4460] (syz.1.97,4460,1):ocfs2_sb_probe:769 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2 [ 65.153944][ T4460] (syz.1.97,4460,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 65.156080][ T4460] (syz.1.97,4460,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 65.359064][ T4470] loop0: detected capacity change from 0 to 2048 [ 65.417480][ T4474] udc-core: couldn't find an available UDC or it's busy [ 65.420548][ T4474] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.425652][ T4470] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.109803][ T4486] loop0: detected capacity change from 0 to 32768 [ 66.244269][ T4486] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.106 (4486) [ 66.296839][ T4486] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 66.299266][ T4486] BTRFS info (device loop0): force clearing of disk cache [ 66.301101][ T4486] BTRFS info (device loop0): setting nodatacow, compression disabled [ 66.303134][ T4486] BTRFS info (device loop0): turning off barriers [ 66.304678][ T4486] BTRFS info (device loop0): enabling auto defrag [ 66.306664][ T4486] BTRFS info (device loop0): turning on sync discard [ 66.308520][ T4486] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 66.311097][ T4486] BTRFS info (device loop0): trying to use backup root at mount time [ 66.312910][ T4486] BTRFS info (device loop0): enabling ssd optimizations [ 66.314624][ T4486] BTRFS info (device loop0): using spread ssd allocation scheme [ 66.316623][ T4486] BTRFS info (device loop0): using free space tree [ 66.318258][ T4486] BTRFS info (device loop0): has skinny extents [ 66.618324][ T1664] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 66.621547][ T4486] BTRFS warning (device loop0): couldn't read tree root [ 66.639307][ T533] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 66.642202][ T4486] BTRFS warning (device loop0): couldn't read tree root [ 66.644762][ T4486] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 66.648002][ T4486] BTRFS warning (device loop0): couldn't read tree root [ 66.710727][ T4486] BTRFS info (device loop0): clearing free space tree [ 66.712533][ T4486] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 66.715093][ T4486] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 66.726326][ T4486] BTRFS info (device loop0): creating free space tree [ 66.728922][ T4486] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 66.732064][ T4486] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 66.745660][ T4515] loop1: detected capacity change from 0 to 1024 [ 66.781770][ T4518] loop2: detected capacity change from 0 to 256 [ 66.796605][ T4518] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.799648][ T4518] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 66.835866][ T4518] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 66.839458][ T4515] EXT4-fs (loop1): Mount option "delalloc" incompatible with ext3 [ 66.926188][ T4520] loop4: detected capacity change from 0 to 2048 [ 67.060742][ T4520] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 67.358513][ T4534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.116'. [ 67.638143][ T4536] loop1: detected capacity change from 0 to 32768 [ 67.728980][ T4536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.117 (4536) [ 67.737181][ T4536] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 67.739412][ T4536] BTRFS info (device loop1): using free space tree [ 67.741244][ T4536] BTRFS info (device loop1): has skinny extents [ 67.754089][ T4541] exFAT-fs (loop2): hint_cluster is invalid (17) [ 68.031360][ T4536] BTRFS info (device loop1): enabling ssd optimizations [ 68.096831][ T4538] loop4: detected capacity change from 0 to 40427 [ 68.120500][ T4536] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 68.122327][ T4536] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 68.170694][ T4538] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 68.172702][ T4538] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 68.186532][ T4538] F2FS-fs (loop4): invalid crc value [ 68.217606][ T4538] F2FS-fs (loop4): Found nat_bits in checkpoint [ 68.253919][ T4538] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 68.255607][ T4538] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.584645][ T4571] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 68.715675][ T4573] loop1: detected capacity change from 0 to 1024 [ 68.846148][ T4573] hfsplus: bad catalog entry type [ 69.290883][ T4582] loop4: detected capacity change from 0 to 256 [ 69.461106][ T4582] FAT-fs (loop4): Directory bread(block 64) failed [ 69.463013][ T4582] FAT-fs (loop4): Directory bread(block 65) failed [ 69.480335][ T4582] FAT-fs (loop4): Directory bread(block 66) failed [ 69.490559][ T4582] FAT-fs (loop4): Directory bread(block 67) failed [ 69.492755][ T4582] FAT-fs (loop4): Directory bread(block 68) failed [ 69.494403][ T4582] FAT-fs (loop4): Directory bread(block 69) failed [ 69.502952][ T4582] FAT-fs (loop4): Directory bread(block 70) failed [ 69.504674][ T4582] FAT-fs (loop4): Directory bread(block 71) failed [ 69.516423][ T4582] FAT-fs (loop4): Directory bread(block 72) failed [ 69.518070][ T4582] FAT-fs (loop4): Directory bread(block 73) failed [ 69.639788][ T1534] cfg80211: failed to load regulatory.db [ 69.643568][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.645484][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.650960][ T4586] loop3: detected capacity change from 0 to 32768 [ 69.680036][ T4590] syz.1.129 uses obsolete (PF_INET,SOCK_PACKET) [ 69.708950][ T7] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 69.711451][ T7] Bluetooth: hci1: Injecting HCI hardware error event [ 69.715023][ T144] Bluetooth: hci1: hardware error 0x00 [ 69.802050][ T4586] XFS (loop3): Mounting V5 Filesystem [ 69.994120][ T1534] XFS (loop3): Metadata corruption detected at xfs_inode_buf_verify+0x3c0/0x500, xfs_inode block 0x4880 xfs_inode_buf_verify [ 70.014159][ T4601] loop1: detected capacity change from 0 to 512 [ 70.025276][ T1534] XFS (loop3): Unmount and run xfs_repair [ 70.144447][ T4601] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.131: bad orphan inode 13 [ 70.148789][ T4601] ext4_test_bit(bit=12, block=4) = 1 [ 70.181390][ T1534] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 70.183275][ T1534] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 70.185602][ T1534] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.188437][ T4601] is_bad_inode(inode)=0 [ 70.189489][ T4601] NEXT_ORPHAN(inode)=0 [ 70.190490][ T4601] max_ino=32 [ 70.191271][ T4601] i_nlink=1 [ 70.192072][ T4601] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.285632][ T4608] loop0: detected capacity change from 0 to 512 [ 70.346305][ T4608] EXT4-fs (loop0): Ignoring removed nobh option [ 70.391835][ T4608] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none. [ 70.433439][ T4604] loop2: detected capacity change from 0 to 40427 [ 70.435404][ T1534] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.443157][ T1534] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.445460][ T1534] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.453564][ T1534] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.457294][ T1534] 00000060: ff 07 00 ff 9f 72 34 75 00 00 00 00 00 00 00 00 .....r4u........ [ 70.462439][ T1534] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.480043][ T4586] XFS (loop3): metadata I/O error in "xfs_imap_to_bp+0x12c/0x194" at daddr 0x4880 len 64 error 117 [ 70.482840][ T4586] XFS (loop3): Failed to read root inode 0x2440, error 117 [ 70.515911][ T4604] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 70.518144][ T4604] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 70.530328][ T4604] F2FS-fs (loop2): invalid crc value [ 70.654884][ T4604] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.722984][ T4604] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 70.724907][ T4604] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.157047][ T4628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.138'. [ 71.440140][ T4636] loop2: detected capacity change from 0 to 512 [ 71.468395][ T4636] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 71.477463][ T4636] EXT4-fs (loop2): 1 truncate cleaned up [ 71.482143][ T4636] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 72.005744][ T4654] udc-core: couldn't find an available UDC or it's busy [ 72.026246][ T4654] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.609514][ T4662] loop4: detected capacity change from 0 to 256 [ 72.667620][ T4664] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.731561][ T4652] loop1: detected capacity change from 0 to 40427 [ 72.772115][ T4652] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 72.774004][ T4652] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 72.786647][ T4652] F2FS-fs (loop1): invalid crc value [ 72.842364][ T4652] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.854412][ T4677] loop2: detected capacity change from 0 to 512 [ 72.885715][ T4672] loop4: detected capacity change from 0 to 64 [ 72.897532][ T4652] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.899234][ T4652] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.912094][ T4677] EXT4-fs (loop2): Ignoring removed bh option [ 72.913812][ T4677] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 72.915757][ T4677] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 73.227531][ T4036] Bluetooth: hci2: hardware error 0x05 [ 73.889883][ T4703] udc-core: couldn't find an available UDC or it's busy [ 73.891695][ T4703] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 73.985906][ T4705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.167'. [ 73.997318][ T4705] netlink: 52 bytes leftover after parsing attributes in process `syz.3.167'. [ 75.053568][ T4725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.288761][ T4730] loop2: detected capacity change from 0 to 4096 [ 75.496788][ T4730] NILFS (loop2): invalid segment: Checksum error in segment payload [ 75.498950][ T4730] NILFS (loop2): trying rollback from an earlier position [ 75.621860][ T4730] NILFS (loop2): recovery complete [ 75.646804][ T4736] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.061878][ T4740] loop2: detected capacity change from 0 to 512 [ 76.137134][ T4743] loop1: detected capacity change from 0 to 64 [ 76.145938][ T4740] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,dioread_lock,errors=remount-ro,max_batch_time=0x0000000000000080,. Quota mode: writeback. [ 76.789486][ T4740] EXT4-fs (loop2): Ignoring removed orlov option [ 76.971332][ T4740] EXT4-fs (loop2): can't enable nombcache during remount [ 77.290881][ T4753] loop3: detected capacity change from 0 to 1024 [ 77.296310][ T4740] EXT4-fs (loop2): Ignoring removed orlov option [ 77.298050][ T4740] EXT4-fs (loop2): can't enable nombcache during remount [ 77.336486][ T4753] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 77.360984][ T4753] hfsplus: bad catalog entry used to create inode [ 77.444384][ T4755] loop1: detected capacity change from 0 to 4096 [ 77.485309][ T4753] udc-core: couldn't find an available UDC or it's busy [ 77.494378][ T4753] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.562896][ T4765] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.567311][ T4755] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 77.616787][ T4755] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 77.645899][ T4755] ntfs3: loop1: Failed to load $Extend. [ 78.646173][ T4211] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.733340][ T4784] loop3: detected capacity change from 0 to 1024 [ 78.827090][ T4784] EXT4-fs (loop3): Mount option "delalloc" incompatible with ext3 [ 79.566387][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 79.673635][ T4791] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 79.847896][ T4795] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 79.877042][ T4795] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 79.895168][ T4795] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 79.902796][ T4795] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 79.920295][ T4795] bond1: (slave geneve2): making interface the new active one [ 79.932462][ T4795] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 79.936855][ T4780] loop1: detected capacity change from 0 to 40427 [ 79.955161][ T4797] loop2: detected capacity change from 0 to 512 [ 80.000220][ T4780] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 80.002299][ T4780] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 80.011415][ T4780] F2FS-fs (loop1): invalid crc value [ 80.033800][ T4797] EXT4-fs (loop2): Ignoring removed oldalloc option [ 80.076406][ T4797] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.079099][ T4780] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.083804][ T4797] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 80.086316][ T4211] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 80.088879][ T4211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.090845][ T4211] usb 1-1: Product: syz [ 80.091805][ T4211] usb 1-1: Manufacturer: syz [ 80.092910][ T4211] usb 1-1: SerialNumber: syz [ 80.097972][ T4797] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 80.100300][ T4797] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.198: Failed to acquire dquot type 1 [ 80.113737][ T4797] EXT4-fs (loop2): 1 truncate cleaned up [ 80.123804][ T4211] usb 1-1: config 0 descriptor?? [ 80.145573][ T4780] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 80.147528][ T4780] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.165425][ T4797] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue. Quota mode: writeback. [ 80.186482][ T4211] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 80.234759][ T4780] attempt to access beyond end of device [ 80.234759][ T4780] loop1: rw=2049, want=78344, limit=40427 [ 80.430005][ T4812] loop4: detected capacity change from 0 to 1024 [ 80.586148][ T4211] gspca_sunplus: reg_r err -71 [ 80.587413][ T4211] sunplus: probe of 1-1:0.0 failed with error -71 [ 80.591974][ T4211] usb 1-1: USB disconnect, device number 3 [ 82.459920][ T4834] loop0: detected capacity change from 0 to 1024 [ 82.576305][ T4834] EXT4-fs (loop0): Mount option "delalloc" incompatible with ext3 [ 82.580534][ T4842] loop4: detected capacity change from 0 to 256 [ 82.705767][ T4842] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.709499][ T4842] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 82.733757][ T4842] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 83.102058][ T4854] exFAT-fs (loop4): hint_cluster is invalid (17) [ 83.412026][ T4846] loop1: detected capacity change from 0 to 32768 [ 83.531474][ T4846] XFS (loop1): Mounting V5 Filesystem [ 83.627470][ T4846] XFS (loop1): Ending clean mount [ 83.650130][ T4846] XFS (loop1): Quotacheck needed: Please wait. [ 83.701885][ T4846] XFS (loop1): Quotacheck: Done. [ 83.778009][ T4028] XFS (loop1): Unmounting Filesystem [ 84.527028][ T4888] loop3: detected capacity change from 0 to 1024 [ 84.560576][ T4888] EXT4-fs (loop3): Mount option "delalloc" incompatible with ext3 [ 84.764572][ T26] audit: type=1326 audit(84.720:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb12b8d28 code=0x7ffc0000 [ 84.774016][ T26] audit: type=1326 audit(84.720:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffb12b8d28 code=0x7ffc0000 [ 84.796617][ T26] audit: type=1326 audit(84.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb12b8d28 code=0x7ffc0000 [ 84.801962][ T26] audit: type=1326 audit(84.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb12b8d28 code=0x7ffc0000 [ 84.824722][ T26] audit: type=1326 audit(84.720:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb12b8d28 code=0x7ffc0000 [ 84.843107][ T26] audit: type=1326 audit(84.730:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffffb12b8d28 code=0x7ffc0000 [ 84.870113][ T26] audit: type=1326 audit(84.770:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb12b8d28 code=0x7ffc0000 [ 84.875732][ T26] audit: type=1326 audit(84.780:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb12e3448 code=0x7ffc0000 [ 84.940068][ T4904] udc-core: couldn't find an available UDC or it's busy [ 84.941938][ T4904] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.319834][ T4918] netlink: 596 bytes leftover after parsing attributes in process `syz.2.234'. [ 85.508815][ T4915] loop1: detected capacity change from 0 to 40427 [ 85.534193][ T4900] loop3: detected capacity change from 0 to 32768 [ 85.560058][ T4915] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 85.562193][ T4915] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 85.567015][ T4915] F2FS-fs (loop1): invalid crc value [ 85.621433][ T4915] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.644726][ T4915] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 85.646644][ T4915] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.652447][ T4900] XFS (loop3): Mounting V5 Filesystem [ 85.671658][ T4924] loop4: detected capacity change from 0 to 2048 [ 85.735824][ T4924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.749298][ T4028] attempt to access beyond end of device [ 85.749298][ T4028] loop1: rw=2049, want=40968, limit=40427 [ 85.805722][ T4900] XFS (loop3): Ending clean mount [ 85.842735][ T4900] XFS (loop3): Quotacheck needed: Please wait. [ 85.927214][ T4900] XFS (loop3): Quotacheck: Done. [ 85.960941][ T4029] XFS (loop3): Unmounting Filesystem [ 85.982972][ T4937] loop2: detected capacity change from 0 to 256 [ 86.087962][ T4937] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.090483][ T4937] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 86.139728][ T4941] loop4: detected capacity change from 0 to 256 [ 86.161168][ T4937] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 86.180618][ T4941] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.183599][ T4941] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 86.203340][ T4941] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 86.496176][ T4945] exFAT-fs (loop2): hint_cluster is invalid (17) [ 86.943940][ T4967] udc-core: couldn't find an available UDC or it's busy [ 86.945756][ T4967] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.961589][ T4964] loop1: detected capacity change from 0 to 512 [ 87.044160][ T4964] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.047987][ T4964] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.081085][ T4964] EXT4-fs (loop1): 1 truncate cleaned up [ 87.082758][ T4964] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,discard,stripe=0x0000000000000009,,errors=continue. Quota mode: none. [ 87.398725][ T4977] loop0: detected capacity change from 0 to 32768 [ 87.517690][ T4977] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 87.621363][ T4040] (syz-executor,4040,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 87.624939][ T4040] ocfs2: Unmounting device (7,0) on (node local) [ 87.904076][ T4972] loop3: detected capacity change from 0 to 32768 [ 88.133552][ T4972] XFS (loop3): Mounting V5 Filesystem [ 88.271294][ T4972] XFS (loop3): Ending clean mount [ 88.274796][ T4972] XFS (loop3): Quotacheck needed: Please wait. [ 88.328262][ T4972] XFS (loop3): Quotacheck: Done. [ 88.427670][ T4029] XFS (loop3): Unmounting Filesystem [ 88.901435][ T5026] loop4: detected capacity change from 0 to 32768 [ 88.909174][ T5029] loop0: detected capacity change from 0 to 2048 [ 88.959701][ T5026] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.268 (5026) [ 89.034632][ T5026] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 89.036992][ T5026] BTRFS info (device loop4): enabling disk space caching [ 89.038784][ T5026] BTRFS info (device loop4): setting nodatasum [ 89.040457][ T5026] BTRFS info (device loop4): turning off barriers [ 89.042191][ T5026] BTRFS info (device loop4): turning on flush-on-commit [ 89.043957][ T5026] BTRFS info (device loop4): use zlib compression, level 3 [ 89.045851][ T5026] BTRFS info (device loop4): force clearing of disk cache [ 89.047933][ T5026] BTRFS info (device loop4): enabling auto defrag [ 89.049642][ T5026] BTRFS info (device loop4): max_inline at 4096 [ 89.051351][ T5026] BTRFS info (device loop4): disk space caching is enabled [ 89.053249][ T5026] BTRFS info (device loop4): has skinny extents [ 89.300252][ T5051] loop1: detected capacity change from 0 to 256 [ 89.441642][ T5051] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.445551][ T5051] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 89.480501][ T5051] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 89.720195][ T5051] exFAT-fs (loop1): hint_cluster is invalid (17) [ 89.823079][ T4130] BTRFS warning (device loop4): checksum verify failed on 5292032 wanted 0xe145e4ee found 0x58e8a27d level 0 [ 89.887520][ T5026] BTRFS warning (device loop4): failed to read root (objectid=9): -5 [ 90.057063][ T5026] BTRFS error (device loop4): open_ctree failed [ 90.144468][ T5035] loop0: detected capacity change from 0 to 32768 [ 90.231519][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 90.231533][ T26] audit: type=1326 audit(90.190:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe730d28 code=0x7ffc0000 [ 90.265631][ T26] audit: type=1326 audit(90.220:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe730d28 code=0x7ffc0000 [ 90.272799][ T26] audit: type=1326 audit(90.230:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=31 compat=0 ip=0xffffbe730d28 code=0x7ffc0000 [ 90.306500][ T26] audit: type=1326 audit(90.230:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe730d28 code=0x7ffc0000 [ 90.327322][ T5035] XFS (loop0): Mounting V5 Filesystem [ 90.358252][ T26] audit: type=1326 audit(90.230:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe730d28 code=0x7ffc0000 [ 90.428019][ T5088] netlink: 'syz.1.285': attribute type 12 has an invalid length. [ 90.484191][ T5035] XFS (loop0): Ending clean mount [ 90.495496][ T5035] XFS (loop0): Quotacheck needed: Please wait. [ 90.639073][ T5095] loop2: detected capacity change from 0 to 256 [ 90.653062][ T5035] XFS (loop0): Quotacheck: Done. [ 90.712965][ T4040] XFS (loop0): Unmounting Filesystem [ 90.721075][ T5095] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.723704][ T5095] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 90.773405][ T5095] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 90.973593][ T5095] exFAT-fs (loop2): hint_cluster is invalid (17) [ 91.053440][ T5108] loop4: detected capacity change from 0 to 1024 [ 91.054602][ T5110] loop1: detected capacity change from 0 to 64 [ 91.221662][ T5110] hfs: keylen 1794 too large [ 91.223443][ T5110] hfs: keylen 1794 too large [ 91.282767][ T5110] hfs: keylen 1794 too large [ 91.284900][ T5110] hfs: keylen 1794 too large [ 91.330888][ T4715] hfs: keylen 1794 too large [ 91.450373][ T5115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 91.661949][ T5117] loop1: detected capacity change from 0 to 32768 [ 91.755635][ T5117] XFS (loop1): Mounting V5 Filesystem [ 91.838189][ T5117] XFS (loop1): Ending clean mount [ 91.848942][ T5117] XFS (loop1): Quotacheck needed: Please wait. [ 91.945185][ T5117] XFS (loop1): Quotacheck: Done. [ 91.954160][ T5137] loop4: detected capacity change from 0 to 128 [ 91.999414][ T4028] XFS (loop1): Unmounting Filesystem [ 92.016915][ T5137] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none. [ 92.128883][ T5134] loop0: detected capacity change from 0 to 32768 [ 92.259864][ T5134] XFS (loop0): Mounting V5 Filesystem [ 92.439250][ T5134] XFS (loop0): Ending clean mount [ 92.442260][ T5134] XFS (loop0): Quotacheck needed: Please wait. [ 92.530689][ T5134] XFS (loop0): Quotacheck: Done. [ 92.556480][ T5150] loop3: detected capacity change from 0 to 32768 [ 92.682975][ T5150] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.306 (5150) [ 92.698489][ T4040] XFS (loop0): Unmounting Filesystem [ 92.797409][ T5156] loop4: detected capacity change from 0 to 32768 [ 92.967112][ T5150] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 92.969340][ T5150] BTRFS info (device loop3): enabling auto defrag [ 92.970910][ T5150] BTRFS info (device loop3): turning on sync discard [ 92.972513][ T5150] BTRFS info (device loop3): force clearing of disk cache [ 92.974374][ T5150] BTRFS info (device loop3): max_inline at 4096 [ 92.975964][ T5150] BTRFS info (device loop3): enabling ssd optimizations [ 92.977765][ T5150] BTRFS info (device loop3): using spread ssd allocation scheme [ 92.979569][ T5150] BTRFS info (device loop3): using free space tree [ 92.981148][ T5150] BTRFS info (device loop3): has skinny extents [ 93.614489][ T5163] loop1: detected capacity change from 0 to 40427 [ 93.700795][ T5156] XFS (loop4): Mounting V5 Filesystem [ 93.750414][ T5163] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.804015][ T5163] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.830567][ T5156] XFS (loop4): Ending clean mount [ 93.833476][ T5156] XFS (loop4): Quotacheck needed: Please wait. [ 93.915374][ T5156] XFS (loop4): Quotacheck: Done. [ 93.926403][ T4028] attempt to access beyond end of device [ 93.926403][ T4028] loop1: rw=2049, want=45104, limit=40427 [ 94.030078][ T4042] XFS (loop4): Unmounting Filesystem [ 94.039450][ T5150] BTRFS info (device loop3): clearing free space tree [ 94.041114][ T5150] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.043454][ T5150] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.062813][ T5150] BTRFS info (device loop3): creating free space tree [ 94.065153][ T5150] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.067695][ T5150] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.294663][ T5193] loop2: detected capacity change from 0 to 32768 [ 94.481710][ T5193] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 94.505373][ T5193] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 94.577002][ T5207] udc-core: couldn't find an available UDC or it's busy [ 94.578801][ T5207] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.792222][ T5211] udc-core: couldn't find an available UDC or it's busy [ 94.794130][ T5211] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.832283][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 94.847636][ T5209] loop1: detected capacity change from 0 to 32768 [ 94.919484][ T5209] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.313 (5209) [ 94.968673][ T5209] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 94.971159][ T5209] BTRFS info (device loop1): force zlib compression, level 3 [ 94.972992][ T5209] BTRFS info (device loop1): force clearing of disk cache [ 94.974821][ T5209] BTRFS info (device loop1): enabling ssd optimizations [ 94.976730][ T5209] BTRFS info (device loop1): using spread ssd allocation scheme [ 94.978732][ T5209] BTRFS info (device loop1): using free space tree [ 94.980254][ T5209] BTRFS info (device loop1): has skinny extents [ 95.188883][ T5233] loop2: detected capacity change from 0 to 1024 [ 95.206970][ T5209] BTRFS info (device loop1): clearing free space tree [ 95.208929][ T5209] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.211505][ T5209] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.218030][ T5209] BTRFS info (device loop1): creating free space tree [ 95.220476][ T5209] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.222909][ T5209] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.228952][ T5233] EXT4-fs (loop2): Mount option "delalloc" incompatible with ext3 [ 95.542096][ T5242] loop3: detected capacity change from 0 to 32768 [ 95.554790][ T5245] device vlan2 entered promiscuous mode [ 95.556476][ T5245] device gretap0 entered promiscuous mode [ 95.623304][ T5245] device gretap0 left promiscuous mode [ 95.664501][ T5213] loop0: detected capacity change from 0 to 32768 [ 95.720381][ T5242] XFS (loop3): Mounting V5 Filesystem [ 95.808884][ T5213] XFS (loop0): Mounting V5 Filesystem [ 95.824234][ T5242] XFS (loop3): Ending clean mount [ 95.835103][ T5242] XFS (loop3): Quotacheck needed: Please wait. [ 95.868334][ T5268] udc-core: couldn't find an available UDC or it's busy [ 95.870164][ T5268] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.900205][ T5242] XFS (loop3): Quotacheck: Done. [ 95.961155][ T5213] XFS (loop0): Ending clean mount [ 95.964342][ T5213] XFS (loop0): Quotacheck needed: Please wait. [ 96.008567][ T5213] XFS (loop0): Quotacheck: Done. [ 96.016714][ T4029] XFS (loop3): Unmounting Filesystem [ 96.116704][ T4040] XFS (loop0): Unmounting Filesystem [ 96.631541][ T5276] loop1: detected capacity change from 0 to 1024 [ 96.700795][ T5270] loop4: detected capacity change from 0 to 32768 [ 96.839634][ T5270] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 96.855731][ T5270] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 96.912672][ T5284] loop0: detected capacity change from 0 to 65 [ 97.006624][ T5284] BFS-fs: bfs_fill_super(): Impossible last inode number 4088 > 513 on loop0 [ 97.201275][ T4042] ocfs2: Unmounting device (7,4) on (node local) [ 97.221815][ T5290] udc-core: couldn't find an available UDC or it's busy [ 97.223902][ T5290] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.493388][ T5301] loop1: detected capacity change from 0 to 1024 [ 97.499393][ T5300] loop0: detected capacity change from 0 to 2048 [ 97.514814][ T5300] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 97.590674][ T148] hfsplus: b-tree write err: -5, ino 4 [ 97.595687][ T5305] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.596898][ T5300] attempt to access beyond end of device [ 97.596898][ T5300] loop0: rw=524288, want=33554432, limit=2048 [ 97.965463][ T5316] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 98.154498][ T5322] loop4: detected capacity change from 0 to 1024 [ 98.177211][ T5320] loop3: detected capacity change from 0 to 16 [ 98.241285][ T5322] EXT4-fs (loop4): Mount option "delalloc" incompatible with ext3 [ 98.360166][ T5320] erofs: (device loop3): mounted with root inode @ nid 36. [ 98.439658][ T5314] loop0: detected capacity change from 0 to 32768 [ 98.494369][ T5314] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 98.546707][ T5314] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.594617][ T4040] ocfs2: Unmounting device (7,0) on (node local) [ 98.630548][ T5333] loop3: detected capacity change from 0 to 512 [ 98.706043][ T5333] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.352: casefold flag without casefold feature [ 98.723775][ T5333] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.352: couldn't read orphan inode 15 (err -117) [ 98.766186][ T5333] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 98.925301][ T5340] loop4: detected capacity change from 0 to 8 [ 99.663089][ T5351] loop3: detected capacity change from 0 to 32768 [ 100.251669][ T5360] loop2: detected capacity change from 0 to 1024 [ 100.318319][ T5360] EXT4-fs (loop2): Mount option "delalloc" incompatible with ext3 [ 100.550282][ T5364] loop2: detected capacity change from 0 to 65 [ 100.643429][ T5364] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 100.645359][ T5364] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 100.650534][ T5364] BFS-fs: bfs_fill_super(): Last block not available on loop2: 511 [ 100.685596][ T5366] loop3: detected capacity change from 0 to 16 [ 100.719875][ T5366] erofs: (device loop3): mounted with root inode @ nid 36. [ 100.795424][ T5368] loop2: detected capacity change from 0 to 16 [ 100.867935][ T5368] erofs: (device loop2): mounted with root inode @ nid 36. [ 100.874932][ T5368] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.902300][ T5368] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 100.951154][ T5368] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 101.044201][ T5362] loop4: detected capacity change from 0 to 32768 [ 101.180142][ T5362] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 101.242417][ T5362] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 101.373402][ T4042] ocfs2: Unmounting device (7,4) on (node local) [ 101.710243][ T5388] loop2: detected capacity change from 0 to 256 [ 101.751541][ T5388] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.753962][ T5388] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 101.773012][ T5388] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 102.051081][ T5391] exFAT-fs (loop2): hint_cluster is invalid (17) [ 102.418981][ T5396] device batadv0 entered promiscuous mode [ 102.465564][ T5396] device batadv0 left promiscuous mode [ 102.509910][ T5398] team0: No ports can be present during mode change [ 102.863596][ T5412] loop1: detected capacity change from 0 to 64 [ 103.165253][ T5424] loop1: detected capacity change from 0 to 164 [ 103.233675][ T5426] udc-core: couldn't find an available UDC or it's busy [ 103.235444][ T5426] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 103.278756][ T5428] loop2: detected capacity change from 0 to 256 [ 103.328277][ T5401] loop4: detected capacity change from 0 to 32768 [ 103.350544][ T5428] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.353424][ T5428] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 103.357148][ T5424] udc-core: couldn't find an available UDC or it's busy [ 103.374734][ T5424] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 103.376422][ T5401] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 103.392393][ T5428] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 103.412702][ T5401] (syz.4.379,5401,0):ocfs2_clear_journal_error:1063 ERROR: File system error 117440512 recorded in journal 0. [ 103.415679][ T5401] (syz.4.379,5401,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop4 needs checking. [ 103.458193][ T5401] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 103.580788][ T4042] ocfs2: Unmounting device (7,4) on (node local) [ 103.628386][ T5431] exFAT-fs (loop2): hint_cluster is invalid (17) [ 103.850702][ T5438] loop3: detected capacity change from 0 to 128 [ 103.935830][ T5443] loop4: detected capacity change from 0 to 1024 [ 103.946783][ T5438] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.956464][ T5438] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.983251][ T5438] udc-core: couldn't find an available UDC or it's busy [ 103.989481][ T5438] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 104.014994][ T5443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.049152][ T5443] overlayfs: upper fs needs to support d_type. [ 104.065456][ T5443] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.070808][ T5443] overlayfs: failed to set xattr on upper [ 104.074535][ T5443] overlayfs: ...falling back to index=off,metacopy=off. [ 104.249405][ T5448] loop2: detected capacity change from 0 to 256 [ 104.353632][ T5448] FAT-fs (loop2): Directory bread(block 64) failed [ 104.355291][ T5448] FAT-fs (loop2): Directory bread(block 65) failed [ 104.461956][ T5448] FAT-fs (loop2): Directory bread(block 66) failed [ 104.463649][ T5448] FAT-fs (loop2): Directory bread(block 67) failed [ 104.465406][ T5448] FAT-fs (loop2): Directory bread(block 68) failed [ 104.476496][ T5448] FAT-fs (loop2): Directory bread(block 69) failed [ 104.478231][ T5448] FAT-fs (loop2): Directory bread(block 70) failed [ 104.479827][ T5448] FAT-fs (loop2): Directory bread(block 71) failed [ 104.481418][ T5448] FAT-fs (loop2): Directory bread(block 72) failed [ 104.483154][ T5448] FAT-fs (loop2): Directory bread(block 73) failed [ 104.594625][ T5450] loop4: detected capacity change from 0 to 40427 [ 104.649256][ T5454] loop1: detected capacity change from 0 to 16 [ 104.664044][ T5450] F2FS-fs (loop4): Unrecognized mount option "barrier" or missing value [ 104.777787][ T5454] erofs: (device loop1): mounted with root inode @ nid 36. [ 104.909457][ T5461] device ip6gretap0 entered promiscuous mode [ 104.911100][ T5461] device macsec1 entered promiscuous mode [ 104.974041][ T5465] loop0: detected capacity change from 0 to 1024 [ 105.011648][ T5465] EXT4-fs (loop0): Ignoring removed nobh option [ 105.013192][ T5465] EXT4-fs (loop0): Ignoring removed bh option [ 105.014818][ T5465] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.046550][ T5469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 105.064628][ T5467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.068639][ T5465] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,barrier,sysvgroups,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 105.390067][ T5477] loop0: detected capacity change from 0 to 256 [ 105.409648][ T5477] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.415896][ T5477] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 105.442786][ T5477] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 105.668955][ T5482] loop3: detected capacity change from 0 to 256 [ 106.537335][ T5490] loop4: detected capacity change from 0 to 512 [ 106.552268][ T5492] loop0: detected capacity change from 0 to 512 [ 106.570798][ T5490] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 106.573574][ T5490] EXT4-fs (loop4): orphan cleanup on readonly fs [ 106.587529][ T5490] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #16: comm syz.4.412: casefold flag without casefold feature [ 106.595214][ T5490] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.412: couldn't read orphan inode 16 (err -117) [ 106.599499][ T5490] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.612477][ T5492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.613212][ T5475] loop2: detected capacity change from 0 to 32768 [ 106.650890][ T5492] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.675291][ T5492] EXT4-fs (loop0): 1 truncate cleaned up [ 106.679155][ T5492] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 106.690099][ T5475] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 106.700018][ T5475] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 106.750696][ T5500] loop4: detected capacity change from 0 to 164 [ 106.826781][ T5500] rock: directory entry would overflow storage [ 106.828639][ T5500] rock: sig=0x66, size=4, remaining=3 [ 106.886744][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 106.909611][ T5500] rock: directory entry would overflow storage [ 106.911300][ T5500] rock: sig=0x66, size=4, remaining=3 [ 107.056437][ T5507] loop4: detected capacity change from 0 to 1024 [ 107.115355][ T5508] loop2: detected capacity change from 0 to 4096 [ 107.230752][ T5507] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrquota,lazytime,usrquota,,errors=continue. Quota mode: writeback. [ 107.310759][ T5521] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 107.326487][ T5508] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 107.643085][ T5521] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 512 with error 28 [ 107.985522][ T5521] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.985522][ T5521] [ 107.995678][ T5521] EXT4-fs (loop4): Total free blocks count 0 [ 108.000048][ T5521] EXT4-fs (loop4): Free/Dirty block details [ 108.001533][ T5521] EXT4-fs (loop4): free_blocks=68451041280 [ 108.003025][ T5521] EXT4-fs (loop4): dirty_blocks=512 [ 108.004384][ T5521] EXT4-fs (loop4): Block reservation details [ 108.027522][ T5521] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 108.269337][ T4130] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 12 with error 28 [ 108.272632][ T4130] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.272632][ T4130] [ 109.038474][ T5534] loop4: detected capacity change from 0 to 8 [ 109.076670][ T5534] unable to read id index table [ 109.102259][ T5537] loop1: detected capacity change from 0 to 64 [ 109.351549][ T5548] loop1: detected capacity change from 0 to 256 [ 109.408399][ T5548] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.410995][ T5548] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 109.436095][ T5548] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 109.677643][ T5556] exFAT-fs (loop1): hint_cluster is invalid (17) [ 110.787055][ T5535] loop0: detected capacity change from 0 to 32768 [ 110.871686][ T5563] loop1: detected capacity change from 0 to 32768 [ 110.877247][ T5535] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 110.917391][ T5535] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.993948][ T4040] ocfs2: Unmounting device (7,0) on (node local) [ 111.032745][ T5573] loop3: detected capacity change from 0 to 256 [ 111.061137][ T5576] netlink: 3 bytes leftover after parsing attributes in process `syz.0.441'. [ 111.064278][ T5563] XFS (loop1): Mounting V5 Filesystem [ 111.138144][ T5573] exfat: Unknown parameter 'sys_tz' [ 111.179422][ T5573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 111.293630][ T5591] loop3: detected capacity change from 0 to 256 [ 111.297213][ T5563] XFS (loop1): Ending clean mount [ 111.306747][ T5563] XFS (loop1): Quotacheck needed: Please wait. [ 111.352893][ T5563] XFS (loop1): Quotacheck: Done. [ 111.391264][ T5591] FAT-fs (loop3): Directory bread(block 64) failed [ 111.393171][ T5591] FAT-fs (loop3): Directory bread(block 65) failed [ 111.395114][ T5591] FAT-fs (loop3): Directory bread(block 66) failed [ 111.398739][ T5591] FAT-fs (loop3): Directory bread(block 67) failed [ 111.400586][ T5591] FAT-fs (loop3): Directory bread(block 68) failed [ 111.402370][ T5591] FAT-fs (loop3): Directory bread(block 69) failed [ 111.404352][ T5591] FAT-fs (loop3): Directory bread(block 70) failed [ 111.406299][ T5591] FAT-fs (loop3): Directory bread(block 71) failed [ 111.408128][ T5591] FAT-fs (loop3): Directory bread(block 72) failed [ 111.409915][ T5591] FAT-fs (loop3): Directory bread(block 73) failed [ 111.453315][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.455264][ T4028] XFS (loop1): Unmounting Filesystem [ 111.468999][ T5590] bond0: (slave rose0): Enslaving as an active interface with an up link [ 111.536147][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 111.826399][ T5578] chnl_net:caif_netlink_parms(): no params data found [ 111.836436][ T5613] loop2: detected capacity change from 0 to 256 [ 111.882756][ T5613] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.885626][ T5613] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 111.954854][ T5613] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 112.140083][ T5623] loop1: detected capacity change from 0 to 256 [ 112.156986][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.159024][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.161555][ T5578] device bridge_slave_0 entered promiscuous mode [ 112.171552][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.179052][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.180136][ T5621] exFAT-fs (loop2): hint_cluster is invalid (17) [ 112.185618][ T5578] device bridge_slave_1 entered promiscuous mode [ 112.255545][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.288054][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.302082][ T5594] loop0: detected capacity change from 0 to 32768 [ 112.379248][ T5578] team0: Port device team_slave_0 added [ 112.390705][ T5578] team0: Port device team_slave_1 added [ 112.416570][ T5594] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 112.437323][ T5594] (syz.0.445,5594,1):ocfs2_clear_journal_error:1063 ERROR: File system error 117440512 recorded in journal 0. [ 112.440390][ T5594] (syz.0.445,5594,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop0 needs checking. [ 112.463379][ T5594] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.530361][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.532458][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.567107][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.610928][ T4040] ocfs2: Unmounting device (7,0) on (node local) [ 112.675002][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.683985][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.690829][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.766963][ T5651] udc-core: couldn't find an available UDC or it's busy [ 112.768789][ T5651] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.822181][ T5634] loop1: detected capacity change from 0 to 32768 [ 112.900609][ T5634] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 112.908126][ T5578] device hsr_slave_0 entered promiscuous mode [ 112.932540][ T5634] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 112.945425][ T5578] device hsr_slave_1 entered promiscuous mode [ 112.976167][ T5578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.978185][ T5578] Cannot create hsr debugfs directory [ 112.981897][ T5646] mkiss: ax0: crc mode is auto. [ 112.996126][ T4076] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 113.043125][ T4028] ocfs2: Unmounting device (7,1) on (node local) [ 113.150153][ T4521] Bluetooth: hci4: command 0x0409 tx timeout [ 113.168409][ T5666] udc-core: couldn't find an available UDC or it's busy [ 113.170615][ T5666] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.203765][ T5668] udc-core: couldn't find an available UDC or it's busy [ 113.204192][ T5578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.205586][ T5668] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.278992][ T5578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.303245][ T5578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.356346][ T4076] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.357698][ T5578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.416327][ T4076] usb 1-1: no configurations [ 113.417583][ T4076] usb 1-1: can't read configurations, error -22 [ 113.595900][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.611624][ T5679] loop2: detected capacity change from 0 to 512 [ 113.639404][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.641678][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.647737][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.653410][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.656485][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.663098][ T5679] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.667329][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.669839][ T4776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.672389][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.694356][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.699138][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.702209][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.703952][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.704909][ T5679] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #17: comm syz.2.463: iget: bad i_size value: -6917529027641081756 [ 113.717600][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.720288][ T5679] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.463: couldn't read orphan inode 17 (err -117) [ 113.720829][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.725250][ T5679] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,,errors=continue. Quota mode: writeback. [ 113.731144][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.753765][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.772712][ T5578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.775261][ T5578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.780688][ T5682] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 113.802967][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.805798][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.809286][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.817154][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.822703][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.857244][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.870073][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.878670][ T5686] loop0: detected capacity change from 0 to 1024 [ 113.894126][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.945137][ T5686] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 113.967590][ T5686] hfsplus: bad catalog entry used to create inode [ 114.119476][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.121450][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.152661][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.312503][ T5698] loop3: detected capacity change from 0 to 32768 [ 114.371910][ T5684] loop1: detected capacity change from 0 to 32768 [ 114.417510][ T5698] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.469 (5698) [ 114.443030][ T5684] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 114.457736][ T5684] (syz.1.464,5684,1):ocfs2_clear_journal_error:1063 ERROR: File system error 117440512 recorded in journal 0. [ 114.460848][ T5684] (syz.1.464,5684,1):ocfs2_clear_journal_error:1065 ERROR: File system on device loop1 needs checking. [ 114.464119][ T5698] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 114.466886][ T5698] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.469538][ T5698] BTRFS info (device loop3): trying to use backup root at mount time [ 114.471474][ T5698] BTRFS info (device loop3): setting nodatasum [ 114.473034][ T5698] BTRFS info (device loop3): enabling auto defrag [ 114.474525][ T5698] BTRFS info (device loop3): using free space tree [ 114.476115][ T5698] BTRFS info (device loop3): has skinny extents [ 114.487665][ T5684] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 114.534215][ T5692] loop2: detected capacity change from 0 to 32768 [ 114.538156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.541223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.561183][ T4028] ocfs2: Unmounting device (7,1) on (node local) [ 114.584135][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.587087][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.595904][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.598253][ T4076] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.609535][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.614634][ T5578] device veth0_vlan entered promiscuous mode [ 114.630296][ T5578] device veth1_vlan entered promiscuous mode [ 114.690043][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.692624][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.709167][ T5692] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 114.721604][ T5692] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 114.761123][ T5698] BTRFS info (device loop3): enabling ssd optimizations [ 114.767487][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.770196][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.807441][ T5578] device veth0_macvtap entered promiscuous mode [ 114.812600][ T5578] device veth1_macvtap entered promiscuous mode [ 114.814713][ T5698] BTRFS info (device loop3): balance: start -d -m -s [ 114.819632][ T5698] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 114.828568][ T4130] BTRFS info (device loop3): space_info 5 has 589824 free, is not full [ 114.830953][ T4130] BTRFS info (device loop3): space_info total=3276800, used=61440, pinned=0, reserved=8192, may_use=978944, readonly=1638400 zone_unusable=0 [ 114.834708][ T4130] BTRFS info (device loop3): global_block_rsv: size 851968 reserved 851968 [ 114.836499][ T4076] usb 1-1: Using ep0 maxpacket: 32 [ 114.837343][ T4130] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 114.840463][ T4130] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 114.842378][ T4130] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 114.842543][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.844192][ T4130] BTRFS info (device loop3): delayed_refs_rsv: size 262144 reserved 126976 [ 114.871077][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.873500][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.886083][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.888637][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.915004][ T5698] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 114.966228][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.969485][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.972474][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.974969][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.976397][ T4076] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 114.979751][ T4076] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 114.981834][ T4076] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 114.987657][ T5732] loop1: detected capacity change from 0 to 1024 [ 114.995656][ T4076] usb 1-1: config 1 has no interface number 0 [ 114.997894][ T4076] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.000781][ T4076] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 115.004185][ T4076] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 115.006259][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.007252][ T4076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.023987][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 115.025053][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.026334][ T5698] BTRFS info (device loop3): found 10 extents, stage: move data extents [ 115.035067][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.039133][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.041700][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.047121][ T5698] BTRFS info (device loop3): balance: canceled [ 115.054826][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.084874][ T4076] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 115.091047][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.093589][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.122872][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.125560][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.145877][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.156267][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.158691][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.161186][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.163555][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.176121][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.181561][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.201469][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.204246][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.215065][ T4075] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 115.219991][ T5578] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.222247][ T5578] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.224382][ T5578] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.244026][ T5734] udc-core: couldn't find an available UDC or it's busy [ 115.246244][ T5578] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.247303][ T4075] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.251577][ T5734] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.265362][ T3605] Bluetooth: hci4: command 0x041b tx timeout [ 115.327854][ T4076] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 115.423169][ T5740] udc-core: couldn't find an available UDC or it's busy [ 115.448225][ T5740] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.520471][ T4776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.522616][ T4776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.525515][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.528236][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.542112][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.563658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.350762][ T4216] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 116.859282][ T4521] usb 1-1: USB disconnect, device number 5 [ 116.867910][ T4521] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 117.053716][ T5779] loop0: detected capacity change from 0 to 512 [ 117.063025][ T5781] loop3: detected capacity change from 0 to 1024 [ 117.250273][ T5787] udc-core: couldn't find an available UDC or it's busy [ 117.266286][ T5787] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 117.292476][ T5768] loop2: detected capacity change from 0 to 32768 [ 117.308204][ T4211] Bluetooth: hci4: command 0x040f tx timeout [ 117.325614][ T5788] loop1: detected capacity change from 0 to 2048 [ 117.339501][ T5762] loop5: detected capacity change from 0 to 32768 [ 117.343749][ T5779] EXT4-fs (loop0): Test dummy encryption mode enabled [ 117.345840][ T5779] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 117.360298][ T5768] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 117.361537][ T5779] EXT4-fs (loop0): 1 truncate cleaned up [ 117.364221][ T5779] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 117.433086][ T5768] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 117.449709][ T5762] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 117.454393][ T5788] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.464573][ T5762] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 117.494110][ T5762] (syz.5.479,5762,0):ocfs2_clear_journal_error:1063 ERROR: File system error 117440512 recorded in journal 0. [ 117.497512][ T5762] (syz.5.479,5762,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop5 needs checking. [ 117.507514][ T5762] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 117.559839][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 117.583640][ T5578] ocfs2: Unmounting device (7,5) on (node local) [ 117.927099][ T5810] loop2: detected capacity change from 0 to 512 [ 118.015346][ T5810] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 118.079208][ T5810] EXT2-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 118.081571][ T5810] EXT2-fs (loop2): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 118.108009][ T5804] loop5: detected capacity change from 0 to 65536 [ 118.232924][ T5823] loop3: detected capacity change from 0 to 64 [ 118.395491][ T5804] XFS (loop5): Mounting V5 Filesystem [ 118.791457][ T5804] XFS (loop5): Ending clean mount [ 119.224651][ T5578] XFS (loop5): Unmounting Filesystem [ 119.396286][ T4521] Bluetooth: hci4: command 0x0419 tx timeout [ 119.760890][ T5830] loop2: detected capacity change from 0 to 32768 [ 119.844732][ T5830] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 119.863581][ T5853] loop3: detected capacity change from 0 to 1764 [ 119.911413][ T5830] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 120.151045][ T26] audit: type=1326 audit(120.110:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82188d28 code=0x7ffc0000 [ 120.161564][ T26] audit: type=1326 audit(120.120:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=67 compat=0 ip=0xffff82188d28 code=0x7ffc0000 [ 120.184235][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 120.191601][ T26] audit: type=1326 audit(120.120:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82188d28 code=0x7ffc0000 [ 121.001065][ T26] audit: type=1326 audit(120.120:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffff82188d28 code=0x7ffc0000 [ 121.006689][ T26] audit: type=1326 audit(120.900:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82188d28 code=0x7ffc0000 [ 121.012354][ T26] audit: type=1326 audit(120.900:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82188d28 code=0x7ffc0000 [ 121.018156][ T26] audit: type=1326 audit(120.900:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff82188d28 code=0x7ffc0000 [ 121.023857][ T26] audit: type=1326 audit(120.900:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82188d28 code=0x7ffc0000 [ 121.203916][ T5871] loop3: detected capacity change from 0 to 256 [ 121.282567][ T5870] loop2: detected capacity change from 0 to 4096 [ 121.301578][ T5871] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.304153][ T5871] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 121.312803][ T5871] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 121.330077][ T5870] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 121.367787][ T5870] ntfs3: loop2: Failed to load $AttrDef -> 0 [ 121.748090][ T5876] loop0: detected capacity change from 0 to 40427 [ 121.842838][ T5876] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 121.845310][ T5876] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.869804][ T5876] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 121.871649][ T5876] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 122.562458][ T5867] loop5: detected capacity change from 0 to 32768 [ 122.634565][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.520'. [ 122.654671][ T5867] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 122.775170][ T5867] (syz.5.503,5867,0):ocfs2_clear_journal_error:1063 ERROR: File system error 117440512 recorded in journal 0. [ 122.778241][ T5867] (syz.5.503,5867,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop5 needs checking. [ 122.786475][ T5867] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 122.938438][ T5578] ocfs2: Unmounting device (7,5) on (node local) [ 123.433401][ T5904] loop3: detected capacity change from 0 to 32768 [ 124.746889][ T5888] loop2: detected capacity change from 0 to 32768 [ 124.867113][ T5888] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 124.926751][ T5888] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 124.937099][ T5919] loop5: detected capacity change from 0 to 512 [ 125.000431][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 125.062420][ T5919] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 125.065477][ T5919] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 125.091034][ T5919] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.530: Failed to acquire dquot type 1 [ 125.138302][ T5919] EXT4-fs (loop5): 1 truncate cleaned up [ 125.139815][ T5919] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.385323][ T5942] udc-core: couldn't find an available UDC or it's busy [ 125.398505][ T5942] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.198423][ T5945] loop5: detected capacity change from 0 to 32768 [ 126.282210][ T5945] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 126.326092][ T5945] (syz.5.533,5945,0):ocfs2_clear_journal_error:1063 ERROR: File system error 117440512 recorded in journal 0. [ 126.329323][ T5945] (syz.5.533,5945,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop5 needs checking. [ 126.337399][ T5945] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 126.356742][ T5966] loop1: detected capacity change from 0 to 1024 [ 126.394576][ T5578] ocfs2: Unmounting device (7,5) on (node local) [ 126.401093][ T5966] EXT4-fs (loop1): Ignoring removed bh option [ 126.419025][ T5966] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 126.752481][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 126.756986][ T5977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.544'. [ 126.761749][ T5977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.544'. [ 126.766746][ T5976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.544'. [ 126.781500][ T5976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.544'. [ 126.819888][ T5973] loop5: detected capacity change from 0 to 32768 [ 126.861099][ T5973] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.542 (5973) [ 126.917964][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.922162][ T5973] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 126.924388][ T5973] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 126.927218][ T5973] BTRFS info (device loop5): trying to use backup root at mount time [ 126.929124][ T5973] BTRFS info (device loop5): setting nodatasum [ 126.930535][ T5973] BTRFS info (device loop5): enabling auto defrag [ 126.932023][ T5973] BTRFS info (device loop5): using free space tree [ 126.933530][ T5973] BTRFS info (device loop5): has skinny extents [ 126.977151][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.999848][ T5950] device bridge_slave_0 entered promiscuous mode [ 127.018511][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.039968][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.049559][ T5950] device bridge_slave_1 entered promiscuous mode [ 127.253893][ T5973] BTRFS info (device loop5): enabling ssd optimizations [ 127.325781][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.368961][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.466497][ T5973] BTRFS info (device loop5): balance: start -d -m -s [ 127.469011][ T5973] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 127.472055][ T4130] BTRFS info (device loop5): space_info 5 has 589824 free, is not full [ 127.474115][ T4130] BTRFS info (device loop5): space_info total=3276800, used=61440, pinned=0, reserved=8192, may_use=978944, readonly=1638400 zone_unusable=0 [ 127.477762][ T4130] BTRFS info (device loop5): global_block_rsv: size 851968 reserved 851968 [ 127.479955][ T4130] BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 [ 127.481898][ T4130] BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 [ 127.483678][ T4130] BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0 [ 127.485745][ T4130] BTRFS info (device loop5): delayed_refs_rsv: size 262144 reserved 126976 [ 127.506967][ T5950] team0: Port device team_slave_0 added [ 127.522228][ T5950] team0: Port device team_slave_1 added [ 127.534539][ T5973] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 127.566645][ T5973] BTRFS info (device loop5): found 10 extents, stage: move data extents [ 127.584127][ T5973] BTRFS info (device loop5): found 1 extents, stage: update data pointers [ 127.603594][ T5973] BTRFS info (device loop5): left=0, need=98304, flags=2 [ 127.605965][ T5973] BTRFS info (device loop5): space_info 2 has 0 free, is not full [ 127.608258][ T5973] BTRFS info (device loop5): space_info total=4194304, used=4096, pinned=0, reserved=4096, may_use=0, readonly=4186112 zone_unusable=0 [ 127.611643][ T5973] BTRFS info (device loop5): global_block_rsv: size 851968 reserved 847872 [ 127.614002][ T5973] BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 [ 127.615895][ T5973] BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 [ 127.617897][ T5973] BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0 [ 127.619789][ T5973] BTRFS info (device loop5): delayed_refs_rsv: size 786432 reserved 421888 [ 127.623493][ T5973] BTRFS info (device loop5): relocating block group 1048576 flags system [ 127.640231][ T5973] BTRFS info (device loop5): found 1 extents, stage: move data extents [ 127.654444][ T5973] BTRFS info (device loop5): balance: ended with status: 0 [ 127.742823][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.954119][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.964583][ T4211] Bluetooth: hci1: command 0x0409 tx timeout [ 128.502860][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.555006][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.576132][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.596085][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.838772][ T5950] device hsr_slave_0 entered promiscuous mode [ 128.876589][ T5950] device hsr_slave_1 entered promiscuous mode [ 128.916151][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.918052][ T5950] Cannot create hsr debugfs directory [ 129.045321][ T6018] loop1: detected capacity change from 0 to 32768 [ 129.121518][ T6018] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 129.137195][ T6018] (syz.1.550,6018,0):ocfs2_clear_journal_error:1063 ERROR: File system error 117440512 recorded in journal 0. [ 129.140019][ T6018] (syz.1.550,6018,0):ocfs2_clear_journal_error:1065 ERROR: File system on device loop1 needs checking. [ 129.148544][ T6018] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 129.213961][ T5950] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.228550][ T4028] ocfs2: Unmounting device (7,1) on (node local) [ 129.259502][ T5950] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 129.288206][ T5950] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.338430][ T5950] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 129.360019][ T6041] netlink: 48 bytes leftover after parsing attributes in process `syz.1.558'. [ 129.513830][ T6048] udc-core: couldn't find an available UDC or it's busy [ 129.529599][ T6048] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.560037][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.677781][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.680717][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.685310][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.703031][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.705821][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.712283][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.714242][ T4167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.744303][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.747596][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.947590][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.039969][ T4521] Bluetooth: hci1: command 0x041b tx timeout [ 130.194482][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.196386][ T4167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.530333][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.645201][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.652027][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.681040][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.706780][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.717219][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.721110][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.730459][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.744801][ T5950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.752561][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.763846][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.767090][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.771911][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.861918][ T6064] netlink: 60 bytes leftover after parsing attributes in process `syz.5.566'. [ 130.864194][ T6064] netlink: 60 bytes leftover after parsing attributes in process `syz.5.566'. [ 130.879541][ T6062] netlink: 60 bytes leftover after parsing attributes in process `syz.5.566'. [ 130.995215][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.016838][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.018848][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.028480][ T6070] netlink: 'syz.1.568': attribute type 29 has an invalid length. [ 131.078493][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.080155][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.448160][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.451173][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.692067][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.790989][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.227849][ T1534] Bluetooth: hci1: command 0x040f tx timeout [ 132.309221][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.312657][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.344100][ T5950] device veth0_vlan entered promiscuous mode [ 132.377750][ T5950] device veth1_vlan entered promiscuous mode [ 132.411918][ T6098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.576'. [ 132.417677][ T6098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.576'. [ 132.420338][ T6095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.576'. [ 132.434842][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.459308][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.463210][ T6095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.576'. [ 132.480373][ T5950] device veth0_macvtap entered promiscuous mode [ 132.508737][ T5950] device veth1_macvtap entered promiscuous mode [ 132.555492][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.571321][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.582017][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.584606][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.598661][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.601338][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.603660][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.620571][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.636139][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.638701][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.653981][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.656856][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.677018][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.680019][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.682524][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.685344][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.696742][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.709328][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.711871][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.714084][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.766146][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.768819][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.771503][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.774096][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.787393][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.789916][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.792503][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.794900][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.816061][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.889461][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.900563][ T5950] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.913498][ T5950] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.922539][ T5950] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.947135][ T5950] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.990303][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.993686][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.054709][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.058482][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.078051][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.095551][ T6106] device syzkaller1 entered promiscuous mode [ 133.142886][ T4167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.145237][ T4167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.154773][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.262216][ T6097] loop5: detected capacity change from 0 to 32768 [ 133.277466][ T6121] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.398444][ T6097] XFS (loop5): Mounting V5 Filesystem [ 133.642957][ T6097] XFS (loop5): Ending clean mount [ 133.657212][ T6097] XFS (loop5): Quotacheck needed: Please wait. [ 133.736476][ T6097] XFS (loop5): Quotacheck: Done. [ 133.802881][ T5578] XFS (loop5): Unmounting Filesystem [ 133.959713][ T6149] syz.0.590 uses old SIOCAX25GETINFO [ 134.016548][ T6149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input2 [ 134.266796][ T1534] Bluetooth: hci1: command 0x0419 tx timeout [ 134.510831][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.5.588'. [ 134.513144][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.5.588'. [ 134.515625][ T6160] netlink: 60 bytes leftover after parsing attributes in process `syz.5.588'. [ 134.544981][ T6160] netlink: 60 bytes leftover after parsing attributes in process `syz.5.588'. [ 134.661838][ T6170] netlink: 'syz.1.593': attribute type 10 has an invalid length. [ 134.696610][ T6170] team0: Port device wlan1 added [ 136.072742][ T6183] loop2: detected capacity change from 0 to 32768 [ 136.074341][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 136.320824][ T6183] XFS (loop2): Mounting V5 Filesystem [ 136.431407][ T6183] XFS (loop2): Ending clean mount [ 136.466720][ T6183] XFS (loop2): Quotacheck needed: Please wait. [ 136.522075][ T6183] XFS (loop2): Quotacheck: Done. [ 136.637119][ T4035] XFS (loop2): Unmounting Filesystem [ 136.676082][ T1534] Bluetooth: hci1: command 0x0405 tx timeout [ 137.047071][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 137.068998][ T6229] bond0: option miimon: invalid value (18446744073537628286) [ 137.084039][ T6229] bond0: option miimon: allowed values 0 - 2147483647 [ 137.517800][ T6247] netlink: 'syz.5.617': attribute type 3 has an invalid length. [ 137.519715][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.617'. [ 138.206212][ T6269] bridge0: port 3(gretap0) entered blocking state [ 138.214907][ T6269] bridge0: port 3(gretap0) entered disabled state [ 138.249249][ T6269] device gretap0 entered promiscuous mode [ 138.259806][ T6269] bridge0: port 3(gretap0) entered blocking state [ 138.261862][ T6269] bridge0: port 3(gretap0) entered forwarding state [ 138.323053][ T6270] device gretap0 left promiscuous mode [ 138.331105][ T6270] bridge0: port 3(gretap0) entered disabled state [ 138.365578][ T6251] loop0: detected capacity change from 0 to 32768 [ 138.518177][ T6251] XFS (loop0): Mounting V5 Filesystem [ 138.572393][ T6251] XFS (loop0): Ending clean mount [ 138.578076][ T6251] XFS (loop0): Quotacheck needed: Please wait. [ 138.613753][ T6251] XFS (loop0): Quotacheck: Done. [ 138.644145][ T4040] XFS (loop0): Unmounting Filesystem [ 139.100951][ T6287] loop1: detected capacity change from 0 to 16 [ 139.225786][ T6287] erofs: (device loop1): mounted with root inode @ nid 36. [ 139.380889][ T6295] device ip6tnl1 entered promiscuous mode [ 139.755050][ T6311] netlink: 'syz.6.642': attribute type 1 has an invalid length. [ 139.776164][ T6311] netlink: 224 bytes leftover after parsing attributes in process `syz.6.642'. [ 139.957199][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.642'. [ 139.987051][ T6311] netlink: 56 bytes leftover after parsing attributes in process `syz.6.642'. [ 140.433489][ T6305] loop0: detected capacity change from 0 to 32768 [ 140.607407][ T6305] XFS (loop0): Mounting V5 Filesystem [ 140.821690][ T6305] XFS (loop0): Ending clean mount [ 140.824859][ T6305] XFS (loop0): Quotacheck needed: Please wait. [ 140.865445][ T6305] XFS (loop0): Quotacheck: Done. [ 140.987552][ T4040] XFS (loop0): Unmounting Filesystem [ 142.055304][ T6362] netlink: 32 bytes leftover after parsing attributes in process `syz.6.660'. [ 142.144317][ T6366] xt_hashlimit: overflow, try lower: 0/0 [ 142.157573][ T6366] netlink: 'syz.6.660': attribute type 6 has an invalid length. [ 142.370255][ T6373] device macvlan2 entered promiscuous mode [ 142.374507][ T6373] device bond_slave_0 entered promiscuous mode [ 142.376504][ T6373] device bond_slave_1 entered promiscuous mode [ 142.385428][ T6373] device bond0 entered promiscuous mode [ 142.395677][ T6373] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.400717][ T6373] team0: Port device macvlan2 added [ 142.536558][ T6375] udc-core: couldn't find an available UDC or it's busy [ 142.538359][ T6375] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 143.009340][ T6390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.672'. [ 143.977700][ T6425] netlink: 'syz.1.684': attribute type 1 has an invalid length. [ 144.090643][ T6431] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input3 [ 144.657987][ T6454] netlink: 'syz.5.694': attribute type 1 has an invalid length. [ 145.737046][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.740124][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.742810][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.752131][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.754843][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.779807][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.782348][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.785060][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.823005][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.825670][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 145.912163][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.914265][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.334743][ T6539] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.339282][ T6539] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 147.765414][ T6585] netlink: 'syz.6.738': attribute type 4 has an invalid length. [ 147.814613][ T6585] netlink: 'syz.6.738': attribute type 4 has an invalid length. [ 148.520651][ T1534] Bluetooth: hci1: command 0x0405 tx timeout [ 150.860551][ T6645] __nla_validate_parse: 63 callbacks suppressed [ 150.860567][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.760'. [ 151.019439][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 151.031986][ T6651] loop5: detected capacity change from 0 to 64 [ 151.165150][ T6651] hfs: keylen 1794 too large [ 151.168522][ T6651] hfs: keylen 1794 too large [ 151.204944][ T6651] hfs: keylen 1794 too large [ 151.222313][ T6651] hfs: keylen 1794 too large [ 151.332311][ T9] hfs: keylen 1794 too large [ 151.547574][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'. [ 151.582668][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.766'. [ 151.640292][ T6661] netlink: 'syz.5.766': attribute type 7 has an invalid length. [ 152.341132][ T6674] xt_CT: No such helper "pptp" [ 152.601952][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 153.413094][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 154.372780][ T6729] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 154.947110][ T6753] netlink: set zone limit has 8 unknown bytes [ 155.167875][ T6762] bridge0: port 2(bridge_slave_1) entered learning state [ 155.552198][ T6782] netlink: 'syz.5.809': attribute type 1 has an invalid length. [ 155.554156][ T6782] netlink: 36 bytes leftover after parsing attributes in process `syz.5.809'. [ 155.815851][ T6787] device syzkaller0 entered promiscuous mode [ 156.914680][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 156.983071][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 158.035184][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 158.216630][ T6851] sctp: [Deprecated]: syz.5.831 (pid 6851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.216630][ T6851] Use struct sctp_sack_info instead [ 158.527575][ T6867] netlink: 'syz.1.835': attribute type 4 has an invalid length. [ 158.545184][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'. [ 159.311387][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.851'. [ 161.235620][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 161.240181][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 161.244097][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 161.252330][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 161.260454][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 161.265467][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 161.279924][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.289505][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.595885][ T7018] xt_hashlimit: size too large, truncated to 1048576 [ 165.104745][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.128557][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.131762][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.143818][ T7052] device bridge_slave_0 left promiscuous mode [ 165.149800][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.208880][ T7052] device bridge_slave_1 left promiscuous mode [ 165.224340][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.310572][ T7052] bond0: (slave bond_slave_0): Releasing backup interface [ 165.368179][ T7052] device bond_slave_0 left promiscuous mode [ 165.414105][ T7052] bond0: (slave bond_slave_1): Releasing backup interface [ 165.469405][ T7052] device bond_slave_1 left promiscuous mode [ 165.589250][ T7052] team0: Port device team_slave_0 removed [ 165.755326][ T7052] team0: Port device team_slave_1 removed [ 165.765662][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.775133][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.787675][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.839913][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.593441][ T7052] team0: Port device wlan1 removed [ 166.650161][ T7052] device bond0 left promiscuous mode [ 166.719920][ T7052] team0: Port device macvlan2 removed [ 166.786302][ T7053] team0: Mode changed to "loadbalance" [ 167.073212][ T7071] device macsec0 entered promiscuous mode [ 167.219775][ T7065] device macsec0 left promiscuous mode [ 167.945497][ T7101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4 [ 168.553669][ T7095] __nla_validate_parse: 70 callbacks suppressed [ 168.553684][ T7095] netlink: 160 bytes leftover after parsing attributes in process `syz.1.920'. [ 170.414837][ T7146] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 170.569581][ T7150] sctp: [Deprecated]: syz.0.937 (pid 7150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.569581][ T7150] Use struct sctp_sack_info instead [ 170.886730][ T1534] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 173.128511][ T7202] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 173.130341][ T7202] netlink: 224 bytes leftover after parsing attributes in process `syz.0.957'. [ 173.229223][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'. [ 173.265727][ T7202] netlink: 56 bytes leftover after parsing attributes in process `syz.0.957'. [ 173.486942][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.963'. [ 174.597782][ T25] Bluetooth: hci3: command 0x0406 tx timeout [ 174.715988][ C0] sched: RT throttling activated [ 175.829691][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.5.975'. [ 175.838617][ T7249] device vti0 entered promiscuous mode [ 177.191486][ T7272] netlink: 'syz.1.981': attribute type 39 has an invalid length. [ 178.178983][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 178.450895][ T7323] device syzkaller0 entered promiscuous mode [ 179.171318][ T7307] chnl_net:caif_netlink_parms(): no params data found [ 179.314496][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.323677][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.338168][ T7307] device bridge_slave_0 entered promiscuous mode [ 179.364326][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.374144][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.391098][ T7307] device bridge_slave_1 entered promiscuous mode [ 179.463175][ T7307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.485588][ T7307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.560686][ T7307] team0: Port device team_slave_0 added [ 179.564531][ T7307] team0: Port device team_slave_1 added [ 179.630472][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.632523][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.660105][ T7307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.665381][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.680388][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.700589][ T7307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.929708][ T7307] device hsr_slave_0 entered promiscuous mode [ 179.976713][ T7307] device hsr_slave_1 entered promiscuous mode [ 180.016252][ T7307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.019627][ T7307] Cannot create hsr debugfs directory [ 180.026702][ T4213] Bluetooth: hci5: command 0x0409 tx timeout [ 180.434509][ T7307] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 180.482190][ T7307] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 180.523073][ T7307] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 180.550191][ T7307] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 180.694945][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1016'. [ 180.895153][ T7307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.937571][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.940126][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.962427][ T7307] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.008383][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.011432][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.014090][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.016095][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.047543][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.056793][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.059468][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.061845][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.063657][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.084606][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.111011][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.128944][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.144817][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.165726][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.174754][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.184432][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.191893][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.201259][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.235033][ T7307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.244464][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.253908][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.259949][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.532723][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.542964][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.553112][ T7307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.020152][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.023944][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.107201][ T4213] Bluetooth: hci5: command 0x041b tx timeout [ 182.117626][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.120459][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.123892][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.135541][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.343184][ T7307] device veth0_vlan entered promiscuous mode [ 182.383686][ T7307] device veth1_vlan entered promiscuous mode [ 182.510936][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.513980][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.517021][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.540347][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.550246][ T7307] device veth0_macvtap entered promiscuous mode [ 182.555019][ T7307] device veth1_macvtap entered promiscuous mode [ 182.610485][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.613202][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.615846][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.637403][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.639893][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.642463][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.644897][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.652912][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.655547][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.658957][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.661616][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.664386][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.670330][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.673029][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.675836][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.701694][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.719730][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.776917][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.779901][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.790630][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.803676][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.812079][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.816307][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.818669][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.822482][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.825014][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.846050][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.848624][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.851191][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.855069][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.887739][ T7307] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.889823][ T7307] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.891941][ T7307] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.894098][ T7307] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.938012][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.941062][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.064740][ T4776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.069636][ T4776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.127060][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.157522][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.159784][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.165849][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.527718][ T7466] xt_ipcomp: unknown flags F7 [ 184.637447][ T4213] Bluetooth: hci5: command 0x040f tx timeout [ 184.740421][ T7482] device netdevsim0 entered promiscuous mode [ 186.666111][ T4216] Bluetooth: hci5: command 0x0419 tx timeout [ 186.765169][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1071'. [ 188.893844][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'. [ 188.953146][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 189.168653][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 190.465005][ T7671] tun0: tun_chr_ioctl cmd 1074025675 [ 190.471340][ T7671] tun0: persist enabled [ 190.526345][ T7674] tun0: tun_chr_ioctl cmd 1074025675 [ 190.527771][ T7674] tun0: persist disabled [ 190.530473][ T7674] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1123'. [ 191.212170][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 191.292259][ T7699] device syzkaller1 entered promiscuous mode [ 191.435758][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1133'. [ 191.674499][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1139'. [ 191.698580][ T7716] device vti0 entered promiscuous mode [ 191.953582][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1142'. [ 192.099323][ T7724] team0 (unregistering): Port device team_slave_0 removed [ 192.129131][ T7724] team0 (unregistering): Port device team_slave_1 removed [ 192.266261][ T9] ------------[ cut here ]------------ [ 192.267946][ T9] Unexpected user alpha2: Aż [ 192.269728][ T9] WARNING: CPU: 1 PID: 9 at net/wireless/reg.c:439 restore_regulatory_settings+0x368/0x22cc [ 192.272336][ T9] Modules linked in: [ 192.273259][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.178-syzkaller #0 [ 192.275319][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.277860][ T9] Workqueue: events_power_efficient crda_timeout_work [ 192.279677][ T9] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 192.281670][ T9] pc : restore_regulatory_settings+0x368/0x22cc [ 192.283319][ T9] lr : restore_regulatory_settings+0x368/0x22cc [ 192.284949][ T9] sp : ffff80001bcf7a20 [ 192.285976][ T9] x29: ffff80001bcf7af0 x28: dfff800000000000 x27: ffff0000c0848418 [ 192.287960][ T9] x26: ffff800016ead960 x25: ffff0000c0038400 x24: 0000000000000000 [ 192.289958][ T9] x23: 1ffff00002dd5b2c x22: 0000000000000041 x21: 0000000000000001 [ 192.291945][ T9] x20: ffff80001bcf7aa8 x19: ffff80001bc12000 x18: 0000000000000001 [ 192.293904][ T9] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 192.295850][ T9] x14: ffff0000c0948000 x13: 0000000000000001 x12: 0000000000000001 [ 192.297938][ T9] x11: 0000000000000000 x10: 0000000000000000 x9 : 9ec7446c0e6aae00 [ 192.300004][ T9] x8 : 9ec7446c0e6aae00 x7 : 0000000000000001 x6 : 0000000000000001 [ 192.302102][ T9] x5 : ffff80001bcf7198 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 192.304089][ T9] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000001a [ 192.306246][ T9] Call trace: [ 192.307142][ T9] restore_regulatory_settings+0x368/0x22cc [ 192.308694][ T9] crda_timeout_work+0x38/0x68 [ 192.309950][ T9] process_one_work+0x790/0x11b8 [ 192.311160][ T9] worker_thread+0x910/0x1034 [ 192.312491][ T9] kthread+0x37c/0x45c [ 192.313537][ T9] ret_from_fork+0x10/0x20 [ 192.314663][ T9] irq event stamp: 4474774 [ 192.315763][ T9] hardirqs last enabled at (4474773): [] __up_console_sem+0xb4/0x100 [ 192.318159][ T9] hardirqs last disabled at (4474774): [] el1_dbg+0x24/0x80 [ 192.320464][ T9] softirqs last enabled at (4474254): [] handle_softirqs+0xb88/0xdbc [ 192.322968][ T9] softirqs last disabled at (4474161): [] __irq_exit_rcu+0x268/0x4d8 [ 192.325448][ T9] ---[ end trace aa542b38765e91da ]--- [ 192.511370][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.513011][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.626122][ T148] ------------[ cut here ]------------ [ 195.627773][ T148] Unexpected user alpha2: Aż [ 195.629479][ T148] WARNING: CPU: 1 PID: 148 at net/wireless/reg.c:439 restore_regulatory_settings+0x368/0x22cc [ 195.631944][ T148] Modules linked in: [ 195.632843][ T148] CPU: 1 PID: 148 Comm: kworker/u4:2 Tainted: G W 5.15.178-syzkaller #0 [ 195.635274][ T148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.637751][ T148] Workqueue: events_power_efficient crda_timeout_work [ 195.639560][ T148] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 195.641598][ T148] pc : restore_regulatory_settings+0x368/0x22cc [ 195.643244][ T148] lr : restore_regulatory_settings+0x368/0x22cc [ 195.644848][ T148] sp : ffff80001d417a20 [ 195.645881][ T148] x29: ffff80001d417af0 x28: dfff800000000000 x27: ffff0000c0b2d618 [ 195.647905][ T148] x26: ffff800016ead960 x25: ffff0000c0038400 x24: 0000000000000000 [ 195.649954][ T148] x23: 1ffff00002dd5b2c x22: 0000000000000041 x21: 0000000000000001 [ 195.652062][ T148] x20: ffff80001d417aa8 x19: ffff80001bc12000 x18: 0000000000000001 [ 195.654063][ T148] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 195.656102][ T148] x14: ffff0000c2be0000 x13: 0000000000000001 x12: 0000000000000001 [ 195.658142][ T148] x11: 0000000000000000 x10: 0000000000000000 x9 : 417e2766d4f4cf00 [ 195.660299][ T148] x8 : 417e2766d4f4cf00 x7 : 0000000000000001 x6 : 0000000000000001 [ 195.662464][ T148] x5 : ffff80001d417198 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 195.664568][ T148] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000001a [ 195.666650][ T148] Call trace: [ 195.667537][ T148] restore_regulatory_settings+0x368/0x22cc [ 195.669115][ T148] crda_timeout_work+0x38/0x68 [ 195.670381][ T148] process_one_work+0x790/0x11b8 [ 195.671690][ T148] worker_thread+0x910/0x1034 [ 195.672858][ T148] kthread+0x37c/0x45c [ 195.673956][ T148] ret_from_fork+0x10/0x20 [ 195.675202][ T148] irq event stamp: 9056512 [ 195.676381][ T148] hardirqs last enabled at (9056511): [] __up_console_sem+0xb4/0x100 [ 195.678995][ T148] hardirqs last disabled at (9056512): [] el1_dbg+0x24/0x80 [ 195.681293][ T148] softirqs last enabled at (9056476): [] ieee80211_ibss_work+0x2d8/0x1230 [ 195.684003][ T148] softirqs last disabled at (9056474): [] ieee80211_ibss_work+0xd8/0x1230 [ 195.686635][ T148] ---[ end trace aa542b38765e91db ]--- [ 198.906943][ T9] ------------[ cut here ]------------ [ 198.908511][ T9] Unexpected user alpha2: Aż [ 198.910167][ T9] WARNING: CPU: 1 PID: 9 at net/wireless/reg.c:439 restore_regulatory_settings+0x368/0x22cc [ 198.912616][ T9] Modules linked in: [ 198.913548][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Tainted: G W 5.15.178-syzkaller #0 [ 198.915510][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.918093][ T9] Workqueue: events_power_efficient crda_timeout_work [ 198.919875][ T9] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 198.921787][ T9] pc : restore_regulatory_settings+0x368/0x22cc [ 198.923311][ T9] lr : restore_regulatory_settings+0x368/0x22cc [ 198.924869][ T9] sp : ffff80001bcf7a20 [ 198.925942][ T9] x29: ffff80001bcf7af0 x28: dfff800000000000 x27: ffff0000c0848418 [ 198.927956][ T9] x26: ffff800016ead960 x25: ffff0000c0038400 x24: 0000000000000000 [ 198.929959][ T9] x23: 1ffff00002dd5b2c x22: 0000000000000041 x21: 0000000000000001 [ 198.931957][ T9] x20: ffff80001bcf7aa8 x19: ffff80001bc12000 x18: 0000000000000001 [ 198.934101][ T9] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 198.936100][ T9] x14: ffff0000c0948000 x13: 0000000000000001 x12: 0000000000000001 [ 198.938230][ T9] x11: 0000000000000000 x10: 0000000000000000 x9 : 9ec7446c0e6aae00 [ 198.940317][ T9] x8 : 9ec7446c0e6aae00 x7 : 0000000000000001 x6 : 0000000000000001 [ 198.942312][ T9] x5 : ffff80001bcf7198 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 198.944338][ T9] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000001a [ 198.946496][ T9] Call trace: [ 198.947243][ T9] restore_regulatory_settings+0x368/0x22cc [ 198.948727][ T9] crda_timeout_work+0x38/0x68 [ 198.949905][ T9] process_one_work+0x790/0x11b8 [ 198.951198][ T9] worker_thread+0x910/0x1034 [ 198.952378][ T9] kthread+0x37c/0x45c [ 198.953390][ T9] ret_from_fork+0x10/0x20 [ 198.954527][ T9] irq event stamp: 4477470 [ 198.955591][ T9] hardirqs last enabled at (4477469): [] __up_console_sem+0xb4/0x100 [ 198.958018][ T9] hardirqs last disabled at (4477470): [] el1_dbg+0x24/0x80 [ 198.960247][ T9] softirqs last enabled at (4477444): [] local_bh_enable+0x10/0x34 [ 198.962668][ T9] softirqs last disabled at (4477440): [] local_bh_disable+0x10/0x34 [ 198.965129][ T9] ---[ end trace aa542b38765e91dc ]--- [ 202.186106][ T4130] ------------[ cut here ]------------ [ 202.187572][ T4130] Unexpected user alpha2: Aż [ 202.189173][ T4130] WARNING: CPU: 1 PID: 4130 at net/wireless/reg.c:439 restore_regulatory_settings+0x368/0x22cc [ 202.191691][ T4130] Modules linked in: [ 202.192612][ T4130] CPU: 1 PID: 4130 Comm: kworker/u4:6 Tainted: G W 5.15.178-syzkaller #0 [ 202.194854][ T4130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.197400][ T4130] Workqueue: events_power_efficient crda_timeout_work [ 202.199830][ T4130] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 202.201792][ T4130] pc : restore_regulatory_settings+0x368/0x22cc [ 202.203291][ T4130] lr : restore_regulatory_settings+0x368/0x22cc [ 202.204933][ T4130] sp : ffff80001fcb7a20 [ 202.206187][ T4130] x29: ffff80001fcb7af0 x28: dfff800000000000 x27: ffff0000db531818 [ 202.208414][ T4130] x26: ffff800016ead960 x25: ffff0000c0038400 x24: 0000000000000000 [ 202.210551][ T4130] x23: 1ffff00002dd5b2c x22: 0000000000000041 x21: 0000000000000001 [ 202.212758][ T4130] x20: ffff80001fcb7aa8 x19: ffff80001bc12000 x18: 0000000000000001 [ 202.214911][ T4130] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 202.216999][ T4130] x14: ffff0000d1941b40 x13: 0000000000000001 x12: 0000000000000001 [ 202.219000][ T4130] x11: 0000000000000000 x10: 0000000000000000 x9 : 686356309f241500 [ 202.221041][ T4130] x8 : 686356309f241500 x7 : 0000000000000001 x6 : 0000000000000001 [ 202.223019][ T4130] x5 : ffff80001fcb7198 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 202.224988][ T4130] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000001a [ 202.226955][ T4130] Call trace: [ 202.227724][ T4130] restore_regulatory_settings+0x368/0x22cc [ 202.229191][ T4130] crda_timeout_work+0x38/0x68 [ 202.230392][ T4130] process_one_work+0x790/0x11b8 [ 202.231627][ T4130] worker_thread+0x910/0x1034 [ 202.232790][ T4130] kthread+0x37c/0x45c [ 202.233822][ T4130] ret_from_fork+0x10/0x20 [ 202.234929][ T4130] irq event stamp: 4860032 [ 202.235978][ T4130] hardirqs last enabled at (4860031): [] __up_console_sem+0xb4/0x100 [ 202.238448][ T4130] hardirqs last disabled at (4860032): [] el1_dbg+0x24/0x80 [ 202.240647][ T4130] softirqs last enabled at (4859992): [] ieee80211_ibss_work+0x2d8/0x1230 [ 202.243374][ T4130] softirqs last disabled at (4859990): [] ieee80211_ibss_work+0xd8/0x1230 [ 202.246012][ T4130] ---[ end trace aa542b38765e91dd ]---