last executing test programs: 59.84300419s ago: executing program 2 (id=30): r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 59.618996476s ago: executing program 2 (id=32): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 59.368008478s ago: executing program 2 (id=33): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000900)="2cd83ffff800aa6ff3eb", 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40) 59.125003651s ago: executing program 2 (id=34): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001a80)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_remount}, {@nodiscard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@init_itable}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x586, &(0x7f0000001e80)="$eJzs3UtrW8ceAPD/ka28nHvtQAj33sUlkEVTQuTY7iOFQtJlaUMD7T4VtmKC5ShYcojdQJNFs+mmhEIpDZR+gO67DP0C/RSBNhBKMO2iFFyOdOQo1sOPyJFj/35wrBkdSTOjOTOaOSP5BLBvnUz/5CL+GxFfJRGjLfuGI9t5svG4lae3p9MtidXVj39P4sK610qy25Es8p+I+PmLiDO59nSrS8tzxXK5tJDFx2vzN8arS8tnr80XZ0uzpeuTU1Pn35yafOftt/pW1tcv//ntRw/fP//lqZVvfnx87H4SF+Noti8tVx+SuNMaOVn8Owvl4+K6B070IbHdJBl0BtiWoayd5yPtA0ZjKGv1wN73eUSsAvtUspX2n9NZwN7RHAc05/Z9mge/Mp6815gAtZd/uHFuJA7V50ZHVpLnZkbpfHesD+mnafz024P76Ra9z0Mc3iAOsCV37kbEueHh9v4vyfq/7TtXP3nc2/o09tvnDwzSw3T8k9yJaGv/ubXxT3QY/4x0aLvb8ew1GisI7e0/97gPyXSVjv/e7Tj+Xeu6xoay2L/qY758cvVauXQuIv4dEacjfzCN91rPOb/yaLXbvtbxX7ql6TfHglk+Hg8ffP45M8Va8UXK3OrJ3Yj/dRz/Jmv1n3So//T9uLzJNE6UHvy/276Ny7+zVn+IeK1j/T9b0Up6r0+O14+H8eZR0e6Peyd+6Zb+oMuf1v+R3uUfS1rXa6tbT+P7Q3+Vuu3b7vF/IPmkHj6Q3XcrnwWSD4dHWu8v1moLk8+e24zXbyca5T99qnP773X8p5OvTzdZ/nvH73V96G6o/5kt1f/WA48++Oy7bulvrv7fqIdOZ/dspv/bbAZf5L0DAAAAAACA3SYXEUcjyRXWwrlcodD4fsfxOJIrV6q1M1cri9dnov5b2bHI55or3aMt34eYyL4P24xProtPRcSxiPh66HA9XpiulGcGXXgAAAAAAAAAAAAAAAAAAADYJUa6/P4/9evQoHMH7Lj6hQ0ODjoXwCBseMn/Hld6OtrnvAAv14btH9iztt7+nRmAvWL7n/9OGsCrzvgf9i/tH/avzbb//OgOZwR46Xz+w/6l/QMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfXb50Kd1WV57enk7jMzeXFucqN8/OlKpzhfnF6cJ0ZeFGYbZSmS2XCtOV+Y1er1yp3JiYjMVb47VStTZeXVq+Ml9ZvF67cm2+OFu6Usr7Z8MAAAAAAAAAAAAAAAAAAADQprq0PFcsl0sLAl0DF2JXZGMnC9iwracP75ZSCPQ1MOCOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa/BMAAP//y+kvew==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3200009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) 58.270310526s ago: executing program 2 (id=41): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000012c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x4866, 0x0, 0xb, 0x0, 0x0) 57.291672086s ago: executing program 2 (id=45): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4804) 56.897548221s ago: executing program 32 (id=45): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4804) 6.875541968s ago: executing program 4 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000380), &(0x7f00000002c0)=r2}, 0x20) 6.629324831s ago: executing program 0 (id=369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)={@val={0x70, 0x18}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x4, 0x6, "fef95a", 0x14, 0x6, 0x1, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x4000}}}}}}}}, 0x4e) 6.583618042s ago: executing program 4 (id=370): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x80, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc4) pwrite64(r0, &(0x7f0000000440)='\x00', 0x1, 0xf490) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) 6.193555707s ago: executing program 0 (id=372): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49905, 0x9a4d}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x40}}, 0x4004050) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 5.770671495s ago: executing program 0 (id=375): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/215, 0xd7}], 0x1) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 4.918672141s ago: executing program 4 (id=380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x20000851) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x200440f1}, 0x24008041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008000a"], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) 3.887386621s ago: executing program 4 (id=386): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x3000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xfffc}) 3.562766518s ago: executing program 3 (id=389): socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.165237652s ago: executing program 0 (id=390): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, "a0ab"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, 0x0, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x82, 0x2, "b648"}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x0, 0xe, 0x2, "c59f"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000500)={0x0, 0x5, 0x2, "af9c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.124738494s ago: executing program 3 (id=391): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = semget$private(0x0, 0x4, 0x96) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) 2.893058469s ago: executing program 3 (id=393): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 2.663008865s ago: executing program 3 (id=394): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x2, 0x841, 0x4, 0x100, 0x2001, 0xb}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.493545182s ago: executing program 3 (id=395): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000006600)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981ddfc47532cf2f46d4d4904f68fb43cd165b98394a1705c9bb5330ca3d57c417572fa5345a234d284f66082e5c7ee10008b76a217b176213a0c6712dc6076ac9ac30e270554fd6efa03e59c10240211be758d72799eb73b38587bce830cef0f9d"], 0x1, 0x6282, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 2.344092883s ago: executing program 4 (id=396): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000fc0)={0x48}) 972.691798ms ago: executing program 1 (id=399): io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xd9f9, 0x2, 0xfffffffe, 0x183}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x801, 0x84) 813.024917ms ago: executing program 3 (id=400): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2800c1e, &(0x7f0000000000)={[{@test_dummy_encryption}, {@usrjquota}]}, 0xff, 0x249, &(0x7f0000000500)="$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") r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 760.686177ms ago: executing program 1 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) fstat(r0, 0x0) 589.945794ms ago: executing program 1 (id=402): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[], 0x0) 458.454419ms ago: executing program 4 (id=403): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 454.577838ms ago: executing program 1 (id=404): open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 311.89629ms ago: executing program 1 (id=405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x4bb8, 0x965f, 0x8}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 247.242298ms ago: executing program 0 (id=406): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, 0x0, 0x0) 95.801119ms ago: executing program 0 (id=407): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8918, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 0s ago: executing program 1 (id=408): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts_2292={{0x12}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}], 0x30}, 0x1400c0c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 81.336633][ T5754] cgroup: Unknown subsys name 'net' [ 81.472532][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.175656][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.892591][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.901185][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.912758][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.924669][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.932720][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.964050][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.984271][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.998827][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.004276][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.009435][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.021579][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.022841][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.033597][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.042035][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.043881][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.050599][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.064364][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.064829][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.089764][ T5081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.094259][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.107475][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.116484][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.129324][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.137349][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.567271][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 85.675294][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 85.753179][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 85.793454][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.801477][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.812847][ T5767] bridge_slave_0: entered allmulticast mode [ 85.820804][ T5767] bridge_slave_0: entered promiscuous mode [ 85.835367][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.842574][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.853704][ T5767] bridge_slave_1: entered allmulticast mode [ 85.860859][ T5767] bridge_slave_1: entered promiscuous mode [ 85.927649][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.974906][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.986995][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 85.999192][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.006822][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.014144][ T5772] bridge_slave_0: entered allmulticast mode [ 86.021315][ T5772] bridge_slave_0: entered promiscuous mode [ 86.054493][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.061725][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.069390][ T5772] bridge_slave_1: entered allmulticast mode [ 86.076894][ T5772] bridge_slave_1: entered promiscuous mode [ 86.155850][ T5767] team0: Port device team_slave_0 added [ 86.184192][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.198321][ T5767] team0: Port device team_slave_1 added [ 86.205067][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.212791][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.220580][ T5766] bridge_slave_0: entered allmulticast mode [ 86.228374][ T5766] bridge_slave_0: entered promiscuous mode [ 86.243630][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.272389][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.281853][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.289486][ T5766] bridge_slave_1: entered allmulticast mode [ 86.297311][ T5766] bridge_slave_1: entered promiscuous mode [ 86.369719][ T5772] team0: Port device team_slave_0 added [ 86.389259][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.399387][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.428823][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.443241][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.456721][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.468345][ T5772] team0: Port device team_slave_1 added [ 86.485377][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.492558][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.500336][ T5771] bridge_slave_0: entered allmulticast mode [ 86.508267][ T5771] bridge_slave_0: entered promiscuous mode [ 86.517234][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.524840][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.553619][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.601526][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.609114][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.616463][ T5771] bridge_slave_1: entered allmulticast mode [ 86.623737][ T5771] bridge_slave_1: entered promiscuous mode [ 86.663288][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.670831][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.699231][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.712669][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.719984][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.752088][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.766605][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.783875][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.795889][ T5766] team0: Port device team_slave_0 added [ 86.830722][ T5767] hsr_slave_0: entered promiscuous mode [ 86.837897][ T5767] hsr_slave_1: entered promiscuous mode [ 86.859629][ T5766] team0: Port device team_slave_1 added [ 86.892190][ T5771] team0: Port device team_slave_0 added [ 86.932667][ T5771] team0: Port device team_slave_1 added [ 86.947496][ T5772] hsr_slave_0: entered promiscuous mode [ 86.955200][ T5772] hsr_slave_1: entered promiscuous mode [ 86.962027][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.970556][ T5772] Cannot create hsr debugfs directory [ 87.008596][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.015726][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.042352][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.112675][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.124914][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.152258][ T5781] Bluetooth: hci3: command tx timeout [ 87.158829][ T5781] Bluetooth: hci0: command tx timeout [ 87.166966][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.191354][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.201497][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.227952][ T5781] Bluetooth: hci2: command tx timeout [ 87.233868][ T5777] Bluetooth: hci1: command tx timeout [ 87.244715][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.261701][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.270236][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.301837][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.502380][ T5766] hsr_slave_0: entered promiscuous mode [ 87.514937][ T5766] hsr_slave_1: entered promiscuous mode [ 87.521585][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.533447][ T5766] Cannot create hsr debugfs directory [ 87.550771][ T5771] hsr_slave_0: entered promiscuous mode [ 87.558003][ T5771] hsr_slave_1: entered promiscuous mode [ 87.566571][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.574301][ T5771] Cannot create hsr debugfs directory [ 88.000903][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.026967][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.039633][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.051332][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.118590][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.137030][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.153675][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.169606][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.264415][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.279781][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.292554][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.304550][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.404873][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.416293][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.446907][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.459409][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.526934][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.612082][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.651174][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.668987][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.676610][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.709132][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.721891][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.729142][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.765434][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.772625][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.822456][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.839409][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.846676][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.872345][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.963956][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.979769][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.987099][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.009493][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.043031][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.050225][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.096976][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.104250][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.140567][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.147849][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.226871][ T5777] Bluetooth: hci3: command tx timeout [ 89.232438][ T5777] Bluetooth: hci0: command tx timeout [ 89.296345][ T5766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.306936][ T5777] Bluetooth: hci1: command tx timeout [ 89.315069][ T5777] Bluetooth: hci2: command tx timeout [ 89.334276][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.422687][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.639131][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.699559][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.829474][ T5767] veth0_vlan: entered promiscuous mode [ 89.886093][ T5767] veth1_vlan: entered promiscuous mode [ 89.945248][ T5772] veth0_vlan: entered promiscuous mode [ 89.955530][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.982513][ T5772] veth1_vlan: entered promiscuous mode [ 90.015504][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.071372][ T5767] veth0_macvtap: entered promiscuous mode [ 90.095292][ T5772] veth0_macvtap: entered promiscuous mode [ 90.117761][ T5767] veth1_macvtap: entered promiscuous mode [ 90.174889][ T5772] veth1_macvtap: entered promiscuous mode [ 90.191396][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.212438][ T5771] veth0_vlan: entered promiscuous mode [ 90.229049][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.246672][ T5771] veth1_vlan: entered promiscuous mode [ 90.259631][ T5766] veth0_vlan: entered promiscuous mode [ 90.281122][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.292295][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.301714][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.310667][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.331759][ T5766] veth1_vlan: entered promiscuous mode [ 90.349545][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.361577][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.374880][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.388446][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.399088][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.410921][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.442770][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.452058][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.461116][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.470459][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.562778][ T5766] veth0_macvtap: entered promiscuous mode [ 90.605404][ T5771] veth0_macvtap: entered promiscuous mode [ 90.613230][ T5766] veth1_macvtap: entered promiscuous mode [ 90.685385][ T5771] veth1_macvtap: entered promiscuous mode [ 90.704792][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.712881][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.781331][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.793437][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.807071][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.817682][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.830539][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.840434][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.855163][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.876894][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.878662][ T2875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.893898][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.905587][ T2875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.921529][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.932509][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.944229][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.955476][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.967054][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.977631][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.993020][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.003693][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.014398][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.025997][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.054437][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.066386][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.076876][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.088734][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.099714][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.110454][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.135147][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.152521][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.162069][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.171291][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.180532][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.217000][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.228615][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.237697][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.246553][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.284444][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.303809][ T5777] Bluetooth: hci0: command tx timeout [ 91.309405][ T5777] Bluetooth: hci3: command tx timeout [ 91.316901][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.383757][ T5781] Bluetooth: hci1: command tx timeout [ 91.389417][ T5777] Bluetooth: hci2: command tx timeout [ 91.496601][ T4825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.527979][ T4825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.677259][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.701001][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.815467][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.826438][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.953825][ T4825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.961822][ T4825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.010720][ T5849] syz.3.4[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.215944][ T23] cfg80211: failed to load regulatory.db [ 92.889598][ T5866] rdma_op ffff888079b8e1f0 conn xmit_rdma 0000000000000000 [ 93.080817][ T5849] loop3: detected capacity change from 0 to 32768 [ 93.384025][ T5777] Bluetooth: hci3: command tx timeout [ 93.389538][ T5777] Bluetooth: hci0: command tx timeout [ 93.464407][ T5781] Bluetooth: hci1: command tx timeout [ 93.471773][ T5777] Bluetooth: hci2: command tx timeout [ 94.297007][ T5872] loop1: detected capacity change from 0 to 40427 [ 94.338757][ T5872] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 94.362727][ T5872] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 94.392722][ T5872] F2FS-fs (loop1): inline encryption not supported [ 94.402685][ T5872] F2FS-fs (loop1): Image doesn't support compression [ 94.452382][ T5872] F2FS-fs (loop1): invalid crc value [ 94.483759][ T5872] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.656277][ T5872] F2FS-fs (loop1): Start checkpoint disabled! [ 94.701496][ T5872] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 94.776040][ T5897] "syz.2.23" (5897) uses obsolete ecb(arc4) skcipher [ 94.802488][ T5897] trusted_key: syz.2.23 sent an empty control message without MSG_MORE. [ 94.813278][ T5872] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_getxattr+0xf3a/0x12f0 [ 94.836402][ T5872] syz.1.14: attempt to access beyond end of device [ 94.836402][ T5872] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 95.130202][ T34] kworker/u4:2: attempt to access beyond end of device [ 95.130202][ T34] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 95.179993][ T5905] loop0: detected capacity change from 0 to 512 [ 95.187776][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 95.198668][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 95.289440][ T5905] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.27: inode has both inline data and extents flags [ 95.316320][ T5910] netlink: 'syz.2.29': attribute type 4 has an invalid length. [ 95.346365][ T5905] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.27: couldn't read orphan inode 15 (err -117) [ 95.393022][ T5911] netlink: 'syz.2.29': attribute type 4 has an invalid length. [ 95.405321][ T5905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.637892][ T5905] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 1718579813 > max in inode 18 [ 95.781302][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.445657][ T5926] loop3: detected capacity change from 0 to 64 [ 96.458430][ T5924] loop2: detected capacity change from 0 to 1024 [ 96.495489][ T5924] EXT4-fs: Ignoring removed orlov option [ 96.553493][ T5924] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.572616][ T28] audit: type=1800 audit(1772722217.078:2): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.35" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 96.631476][ T5924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.817834][ T5933] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 97.005327][ T5939] loop1: detected capacity change from 0 to 1024 [ 97.022247][ T5939] ======================================================= [ 97.022247][ T5939] WARNING: The mand mount option has been deprecated and [ 97.022247][ T5939] and is ignored by this kernel. Remove the mand [ 97.022247][ T5939] option from the mount to silence this warning. [ 97.022247][ T5939] ======================================================= [ 97.121025][ T5939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 97.162614][ T5939] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.246129][ T5767] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 97.273711][ T28] audit: type=1800 audit(1772722217.778:3): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.39" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 97.296793][ T5767] EXT4-fs (loop2): Remounting filesystem read-only [ 97.334193][ T5939] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm syz.1.39: lblock 0 mapped to illegal pblock 0 (length 1) [ 97.347805][ T28] audit: type=1800 audit(1772722217.828:4): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.39" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 97.391895][ T5942] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 8: comm syz.1.39: lblock 8 mapped to illegal pblock 8 (length 8) [ 97.517041][ T5942] EXT4-fs error (device loop1): ext4_ext_remove_space:2929: inode #15: comm syz.1.39: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 97.768736][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.906303][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.069445][ T2875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.301756][ T2875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.404584][ T2875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.536006][ T2875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.618217][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.630468][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.641434][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.650229][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.659320][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.669391][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.941483][ T5985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.008127][ T5985] netlink: 'syz.3.55': attribute type 12 has an invalid length. [ 100.016311][ T5985] netlink: 'syz.3.55': attribute type 29 has an invalid length. [ 100.040625][ T5985] netlink: 148 bytes leftover after parsing attributes in process `syz.3.55'. [ 100.070948][ T5985] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 100.098739][ T5985] netlink: 'syz.3.55': attribute type 2 has an invalid length. [ 100.153639][ T5985] netlink: 39 bytes leftover after parsing attributes in process `syz.3.55'. [ 100.168257][ T5985] Zero length message leads to an empty skb [ 100.889993][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.60'. [ 101.173158][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 101.787894][ T5777] Bluetooth: hci1: command tx timeout [ 101.879905][ T2875] hsr_slave_0: left promiscuous mode [ 101.916635][ T2875] hsr_slave_1: left promiscuous mode [ 101.950013][ T2875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.967027][ T2875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.004427][ T2875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.017351][ T6025] loop0: detected capacity change from 0 to 32768 [ 102.027702][ T2875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.043529][ T2875] bridge_slave_1: left allmulticast mode [ 102.059685][ T2875] bridge_slave_1: left promiscuous mode [ 102.089597][ T2875] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.109465][ T6025] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.137352][ T2875] bridge_slave_0: left allmulticast mode [ 102.153469][ T2875] bridge_slave_0: left promiscuous mode [ 102.160142][ T2875] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.226463][ T6025] XFS (loop0): Ending clean mount [ 102.304326][ T6025] XFS (loop0): Quotacheck needed: Please wait. [ 102.355121][ T2875] veth1_macvtap: left promiscuous mode [ 102.361322][ T2875] veth0_macvtap: left promiscuous mode [ 102.373558][ T2875] veth1_vlan: left promiscuous mode [ 102.380274][ T2875] veth0_vlan: left promiscuous mode [ 102.506533][ T6025] XFS (loop0): Quotacheck: Done. [ 103.079874][ T5766] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.873576][ T5777] Bluetooth: hci1: command tx timeout [ 104.018051][ T2875] team0 (unregistering): Port device team_slave_1 removed [ 104.068377][ T2875] team0 (unregistering): Port device team_slave_0 removed [ 104.123241][ T2875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.177852][ T2875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.649036][ T2875] bond0 (unregistering): Released all slaves [ 104.740190][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.749042][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.756584][ T5980] bridge_slave_0: entered allmulticast mode [ 104.764785][ T5980] bridge_slave_0: entered promiscuous mode [ 104.774722][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.781920][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.789426][ T5980] bridge_slave_1: entered allmulticast mode [ 104.797007][ T5980] bridge_slave_1: entered promiscuous mode [ 104.838644][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 105.037964][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.070504][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.155773][ T5980] team0: Port device team_slave_0 added [ 105.186731][ T5980] team0: Port device team_slave_1 added [ 105.349448][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.375193][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.438876][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.488763][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.510460][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.563977][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.809029][ T5980] hsr_slave_0: entered promiscuous mode [ 105.834800][ T5980] hsr_slave_1: entered promiscuous mode [ 105.852478][ T6103] netlink: 'syz.1.89': attribute type 39 has an invalid length. [ 105.946167][ T5777] Bluetooth: hci1: command tx timeout [ 106.618782][ T5980] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.648113][ T5980] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.672271][ T5980] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.702319][ T5980] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.997985][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.104352][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.135148][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.142525][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.507960][ T6133] loop1: detected capacity change from 0 to 40427 [ 107.520946][ T6133] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 107.529461][ T6133] F2FS-fs (loop1): Image doesn't support compression [ 107.536321][ T6133] F2FS-fs (loop1): Image doesn't support compression [ 107.556983][ T6133] F2FS-fs (loop1): invalid crc value [ 107.565726][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.572968][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.617110][ T6133] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.671479][ T6133] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.829249][ T6133] F2FS-fs (loop1): inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x1a8/0x340 [ 108.018806][ T5772] syz-executor: attempt to access beyond end of device [ 108.018806][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 108.036552][ T5777] Bluetooth: hci1: command tx timeout [ 108.047188][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 108.104479][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 108.351013][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.952560][ T6150] loop0: detected capacity change from 0 to 40427 [ 108.986917][ T6150] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 109.012661][ T6150] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 109.087578][ T6150] F2FS-fs (loop0): invalid crc value [ 109.212195][ T5980] veth0_vlan: entered promiscuous mode [ 109.251139][ T5980] veth1_vlan: entered promiscuous mode [ 109.330987][ T5980] veth0_macvtap: entered promiscuous mode [ 109.360103][ T5980] veth1_macvtap: entered promiscuous mode [ 109.380086][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.423143][ T6150] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 109.446663][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.460978][ T6150] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.471481][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.517021][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.555835][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.583243][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.606198][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.623528][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 109.638397][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 109.656237][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.677690][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.700065][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.733382][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.743218][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.761703][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.773931][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.784813][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.800230][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.810610][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.819984][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.830576][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.839827][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.854757][ T5766] syz-executor: attempt to access beyond end of device [ 109.854757][ T5766] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.855993][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.890667][ T5766] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 109.921212][ T5980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.953594][ T5980] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.962989][ T5980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.981562][ T5980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.237925][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.287028][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.427756][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.451106][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.871554][ T6210] usbtmc 2-1:16.0: simple control status returned 0 [ 111.083666][ T5835] usb 2-1: USB disconnect, device number 2 [ 111.403427][ T6229] mmap: syz.0.111 (6229) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.511749][ T6231] loop4: detected capacity change from 0 to 512 [ 111.641949][ T6231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.670116][ T6231] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.816901][ T28] audit: type=1800 audit(1772722232.328:5): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.114" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 111.877724][ T28] audit: type=1800 audit(1772722232.358:6): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.114" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 112.161535][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.271015][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 112.414861][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 113.070265][ T6274] netlink: 'syz.0.124': attribute type 10 has an invalid length. [ 113.113948][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.124550][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.279262][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.286616][ T6274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.295984][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.303244][ T6274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.384771][ T6274] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 113.647785][ T6285] loop1: detected capacity change from 0 to 8192 [ 113.726241][ T6285] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.743900][ T6285] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 113.765785][ T6285] REISERFS (device loop1): using ordered data mode [ 113.811174][ T6285] reiserfs: using flush barriers [ 113.857865][ T6285] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.898057][ T6285] REISERFS (device loop1): checking transaction log (loop1) [ 113.960445][ T6285] REISERFS (device loop1): Using r5 hash to sort names [ 113.995380][ T6285] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 114.033122][ T6285] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 114.141922][ T6302] netlink: 'syz.0.132': attribute type 7 has an invalid length. [ 114.211316][ T6302] netlink: 'syz.0.132': attribute type 7 has an invalid length. [ 114.333582][ T28] audit: type=1800 audit(1772722234.838:7): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.128" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 114.404370][ T6285] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 114.451862][ T6285] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 114.738789][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 116.246984][ T6343] loop0: detected capacity change from 0 to 128 [ 116.263634][ T6339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.141'. [ 116.599625][ T6338] loop4: detected capacity change from 0 to 32768 [ 116.646595][ T6338] (syz.4.142,6338,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.674777][ T6338] (syz.4.142,6338,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.765228][ T6338] JBD2: Ignoring recovery information on journal [ 117.002053][ T6354] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.049670][ T6338] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 117.782082][ T5980] ocfs2: Unmounting device (7,4) on (node local) [ 118.212478][ T6381] loop4: detected capacity change from 0 to 164 [ 119.165863][ T6402] loop0: detected capacity change from 0 to 512 [ 119.186328][ T6402] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.219922][ T6402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.248036][ T6402] EXT4-fs (loop0): 1 truncate cleaned up [ 119.262742][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.384073][ T6402] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 119.489204][ T5766] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /35/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 119.554960][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.727092][ T6414] bond0: (slave bridge0): Releasing backup interface [ 119.746656][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.754057][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.800426][ T6414] bridge_slave_0: left allmulticast mode [ 119.810097][ T6414] bridge_slave_0: left promiscuous mode [ 119.817694][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.851383][ T6414] bridge_slave_1: left allmulticast mode [ 119.864322][ T6414] bridge_slave_1: left promiscuous mode [ 119.879812][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.911542][ T6414] bond0: (slave bond_slave_0): Releasing backup interface [ 119.952767][ T6414] bond0: (slave bond_slave_1): Releasing backup interface [ 120.001885][ T6414] team0: Port device team_slave_0 removed [ 120.036954][ T6414] team0: Port device team_slave_1 removed [ 120.074499][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.082071][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.139970][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.162465][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.198862][ T6422] loop4: detected capacity change from 0 to 128 [ 120.908993][ T6438] netlink: 'syz.1.170': attribute type 5 has an invalid length. [ 121.205186][ T6451] ªªªªªª: renamed from vlan0 (while UP) [ 121.427330][ T6461] loop0: detected capacity change from 0 to 512 [ 121.456734][ T6461] EXT4-fs: Ignoring removed orlov option [ 121.463927][ T6461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.518755][ T6461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.561088][ T6461] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.686175][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.946404][ T6479] loop1: detected capacity change from 0 to 4096 [ 122.530693][ T6499] loop0: detected capacity change from 0 to 512 [ 122.659076][ T6499] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.705061][ T6499] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 122.867845][ T5766] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 122.920299][ T6508] netlink: 'syz.4.192': attribute type 2 has an invalid length. [ 122.963468][ T6508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.192'. [ 123.043638][ T6065] IPVS: starting estimator thread 0... [ 123.165440][ T6514] IPVS: using max 18 ests per chain, 43200 per kthread [ 123.213978][ T6520] netlink: 'syz.4.196': attribute type 5 has an invalid length. [ 123.422420][ T6527] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 123.865552][ T6513] loop0: detected capacity change from 0 to 40427 [ 123.884202][ T6541] netlink: 27 bytes leftover after parsing attributes in process `syz.4.203'. [ 123.923518][ T6513] F2FS-fs (loop0): invalid crc value [ 123.950918][ T6513] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.074781][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 124.140782][ T6513] F2FS-fs (loop0): Start checkpoint disabled! [ 124.156277][ T6513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 124.168453][ T6545] bond1: entered promiscuous mode [ 124.181309][ T6545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.389529][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c78a000: rx timeout, send abort [ 124.400861][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c78a400: rx timeout, send abort [ 124.412926][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c78a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.429094][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c78a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.514078][ T49] kworker/u4:3: attempt to access beyond end of device [ 124.514078][ T49] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 124.552249][ T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 124.568238][ T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 124.583226][ T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 125.440113][ T6554] loop1: detected capacity change from 0 to 40427 [ 125.471093][ T6554] F2FS-fs (loop1): invalid crc value [ 125.512159][ T6554] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.555501][ T6582] bond0: entered promiscuous mode [ 125.564789][ T6582] bond_slave_0: entered promiscuous mode [ 125.570801][ T6582] bond_slave_1: entered promiscuous mode [ 125.645664][ T6554] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.783807][ T5772] syz-executor: attempt to access beyond end of device [ 125.783807][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.812210][ T6581] bond0: left promiscuous mode [ 125.816038][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 125.824123][ T6581] bond_slave_0: left promiscuous mode [ 125.844911][ T6581] bond_slave_1: left promiscuous mode [ 126.042614][ T6575] loop0: detected capacity change from 0 to 40427 [ 126.080387][ T6575] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 126.112147][ T6575] F2FS-fs (loop0): invalid crc value [ 126.134016][ T6575] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.258432][ T6575] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.876316][ T6596] process 'syz.1.224' launched './file0' with NULL argv: empty string added [ 127.334020][ T6585] loop4: detected capacity change from 0 to 40427 [ 127.390187][ T6585] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 127.472586][ T6585] F2FS-fs (loop4): invalid crc value [ 127.505944][ T6585] F2FS-fs (loop4): Found nat_bits in checkpoint [ 127.674804][ T6585] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 127.888879][ T28] audit: type=1800 audit(1772722248.398:8): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.219" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 127.899381][ T6585] syz.4.219: attempt to access beyond end of device [ 127.899381][ T6585] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 127.928802][ T6628] loop1: detected capacity change from 0 to 1024 [ 127.960510][ T28] audit: type=1800 audit(1772722248.398:9): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.219" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 127.990679][ T6585] syz.4.219: attempt to access beyond end of device [ 127.990679][ T6585] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.049722][ T6628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.130827][ T5980] syz-executor: attempt to access beyond end of device [ 128.130827][ T5980] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 128.145264][ T5980] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 128.184750][ T28] audit: type=1800 audit(1772722248.698:10): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.231" name="file1" dev="loop1" ino=16 res=0 errno=0 [ 128.210647][ T6628] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 128.328675][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 131587 with max blocks 1 with error 28 [ 128.393582][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.393582][ T12] [ 128.428528][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 128.446802][ T12] EXT4-fs (loop1): Free/Dirty block details [ 128.452881][ T12] EXT4-fs (loop1): free_blocks=68451041280 [ 128.488080][ T12] EXT4-fs (loop1): dirty_blocks=16 [ 128.500406][ T12] EXT4-fs (loop1): Block reservation details [ 128.519143][ T12] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 128.538050][ T6637] warning: `syz.3.234' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.559456][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.999153][ T6646] bond0: entered promiscuous mode [ 129.018859][ T6646] bond_slave_0: entered promiscuous mode [ 129.043711][ T6646] bond_slave_1: entered promiscuous mode [ 129.124047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.351975][ T6645] bond0: left promiscuous mode [ 129.373592][ T6645] bond_slave_0: left promiscuous mode [ 129.384045][ T6645] bond_slave_1: left promiscuous mode [ 129.775802][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 131.041113][ T6696] loop1: detected capacity change from 0 to 256 [ 131.166341][ T6177] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.114021][ T6699] loop4: detected capacity change from 0 to 32768 [ 132.156035][ T6699] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.248 (6699) [ 132.308736][ T6699] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.370108][ T6699] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 132.408313][ T6699] BTRFS info (device loop4): using free space tree [ 132.711793][ T6699] BTRFS info (device loop4): enabling ssd optimizations [ 132.722413][ T6699] BTRFS info (device loop4): auto enabling async discard [ 133.017747][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 133.036219][ T5980] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.164043][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.171095][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.877432][ T5756] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.118459][ T5756] usb 5-1: Using ep0 maxpacket: 32 [ 134.152458][ T5756] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 134.188194][ T5756] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.195646][ T5756] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 134.223567][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.274713][ T5756] usb 5-1: config 0 descriptor?? [ 134.459666][ T6772] loop1: detected capacity change from 0 to 1024 [ 135.081007][ T5756] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 135.113580][ T5756] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 135.121831][ T5756] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 135.139561][ T5756] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 135.163468][ T5756] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 135.233536][ T5756] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 135.903416][ T5756] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-110) [ 135.942337][ T5756] corsair-psu: probe of 0003:1B1C:1C09.0001 failed with error -110 [ 136.012295][ T5756] usb 5-1: USB disconnect, device number 2 [ 136.350396][ T6815] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 136.658063][ T6826] loop1: detected capacity change from 0 to 128 [ 136.712843][ T6826] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 136.728898][ T6828] netlink: 104 bytes leftover after parsing attributes in process `syz.4.275'. [ 136.757496][ T6826] hpfs: filesystem error: improperly stopped [ 136.782272][ T6826] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 136.833486][ T6826] hpfs: You really don't want any checks? You are crazy... [ 136.854738][ T6826] hpfs: Code page index out of array [ 136.860119][ T6826] hpfs: code page support is disabled [ 136.935216][ T6826] hpfs: hpfs_map_4sectors(): unaligned read [ 136.942009][ T6826] hpfs: hpfs_map_4sectors(): unaligned read [ 136.989783][ T6826] hpfs: filesystem error: unable to find root dir [ 137.861962][ T6858] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.972808][ T6861] ALSA: mixer_oss: invalid OSS volume '1' [ 137.987137][ T6861] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 138.584940][ T6875] syz.1.287 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 138.831487][ T6884] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 139.044160][ T5835] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 139.235745][ T5835] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 139.257974][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.280825][ T5835] usb 2-1: config 0 descriptor?? [ 139.336739][ T5835] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 139.526704][ T5835] gp8psk: usb in 128 operation failed. [ 139.616262][ T6905] syz.0.297 uses obsolete (PF_INET,SOCK_PACKET) [ 139.749260][ T5835] gp8psk: usb in 146 operation failed. [ 139.773336][ T5835] gp8psk: failed to get FW version [ 139.792439][ T5835] gp8psk: usb in 149 operation failed. [ 139.808092][ T5835] gp8psk: failed to get FPGA version [ 140.036237][ T5835] gp8psk: usb out operation failed. [ 140.041579][ T5835] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 140.058261][ C0] Unknown status report in ack skb [ 140.083453][ T5835] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 140.112646][ T5835] usb 2-1: USB disconnect, device number 3 [ 140.757245][ T6941] bond_slave_0: entered promiscuous mode [ 140.763540][ T6941] bond_slave_1: entered promiscuous mode [ 140.791015][ T6941] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.801010][ T6941] team0: Port device macvlan2 added [ 141.277152][ T6945] loop0: detected capacity change from 0 to 32768 [ 141.348542][ T6945] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 141.371269][ T6945] JBD2: Ignoring recovery information on journal [ 141.502502][ T6945] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 141.562818][ T6963] netlink: 168 bytes leftover after parsing attributes in process `syz.1.320'. [ 141.793153][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 142.263426][ T6065] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.463442][ T6065] usb 5-1: Using ep0 maxpacket: 8 [ 142.477014][ T6065] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 142.488871][ T6065] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.501456][ T6065] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.513753][ T6065] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.530191][ T6065] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.549474][ T6065] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.561336][ T6065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.759218][ T6990] loop1: detected capacity change from 0 to 128 [ 142.772181][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 142.799337][ T6065] usb 5-1: GET_CAPABILITIES returned 0 [ 142.814023][ T6992] netlink: 'syz.0.332': attribute type 9 has an invalid length. [ 142.823989][ T6065] usbtmc 5-1:16.0: can't read capabilities [ 142.871371][ T6992] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.881265][ T6992] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.890349][ T6992] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.899321][ T6992] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.071972][ T6990] syz.1.333: attempt to access beyond end of device [ 143.071972][ T6990] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 143.119327][ T6999] netlink: 'syz.0.335': attribute type 1 has an invalid length. [ 143.147719][ T6974] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 143.154431][ T5756] usb 5-1: USB disconnect, device number 3 [ 143.212536][ T6999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.330012][ T7006] loop0: detected capacity change from 0 to 16 [ 143.375466][ T7006] erofs: (device loop0): mounted with root inode @ nid 36. [ 143.889386][ T7008] loop1: detected capacity change from 0 to 32768 [ 143.908025][ T7008] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.338 (7008) [ 143.938176][ T7008] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 143.975264][ T7008] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 143.990090][ T7008] BTRFS info (device loop1): using free space tree [ 144.103615][ T5835] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 144.203910][ T7008] BTRFS info (device loop1): enabling ssd optimizations [ 144.233075][ T7008] BTRFS info (device loop1): auto enabling async discard [ 144.275323][ T7034] netlink: 76 bytes leftover after parsing attributes in process `syz.3.342'. [ 144.295654][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.310298][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.323168][ T5835] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.332843][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.351529][ T5835] usb 1-1: Product: syz [ 144.368115][ T5835] usb 1-1: Manufacturer: syz [ 144.372839][ T5835] usb 1-1: SerialNumber: syz [ 144.414626][ T28] audit: type=1800 audit(1772722264.908:11): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.338" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 144.665314][ T5835] usb 1-1: 0:2 : does not exist [ 144.765009][ T5835] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 144.844788][ T7041] Bluetooth: MGMT ver 1.22 [ 145.014655][ T5835] usb 1-1: USB disconnect, device number 2 [ 145.176021][ T5772] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 145.256749][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.573307][ C1] sched: RT throttling activated [ 147.723041][ T7127] loop1: detected capacity change from 0 to 128 [ 147.757865][ T7127] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.782326][ T7127] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.097097][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.823116][ T7156] loop4: detected capacity change from 0 to 32768 [ 149.867313][ T7156] JBD2: Ignoring recovery information on journal [ 149.985294][ T5835] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.994619][ T7156] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 150.240299][ T5835] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.264633][ T5835] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 150.278815][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.294405][ T5835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 150.353100][ T5835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 150.386971][ T5835] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.401222][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.411527][ T5835] usb 1-1: Product: syz [ 150.424777][ T5835] usb 1-1: Manufacturer: syz [ 150.440150][ T7156] syz.4.370 (7156) used greatest stack depth: 18768 bytes left [ 150.457518][ T5835] cdc_wdm 1-1:1.0: skipping garbage [ 150.462819][ T5835] cdc_wdm 1-1:1.0: skipping garbage [ 150.486439][ T7194] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 150.507249][ T5835] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 150.513262][ T5835] cdc_wdm 1-1:1.0: Unknown control protocol [ 150.561839][ T5980] ocfs2: Unmounting device (7,4) on (node local) [ 151.556189][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 151.578206][ T5835] usb 1-1: USB disconnect, device number 3 [ 151.755102][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 151.986887][ T7237] loop4: detected capacity change from 0 to 32768 [ 151.999920][ T7237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.386 (7237) [ 152.050808][ T7237] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.073263][ T7237] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 152.098679][ T7237] BTRFS info (device loop4): force clearing of disk cache [ 152.117000][ T7237] BTRFS info (device loop4): metadata ratio 0 [ 152.123221][ T7237] BTRFS info (device loop4): enabling ssd optimizations [ 152.153585][ T7237] BTRFS info (device loop4): using spread ssd allocation scheme [ 152.171657][ T7237] BTRFS info (device loop4): using free space tree [ 152.368039][ T7237] BTRFS info (device loop4): auto enabling async discard [ 152.400754][ T7237] BTRFS info (device loop4): rebuilding free space tree [ 152.539504][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 152.603568][ T5835] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 152.648054][ T28] audit: type=1800 audit(1772722273.158:12): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.386" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 152.840214][ T5835] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.855877][ T5835] usb 1-1: not running at top speed; connect to a high speed hub [ 152.914443][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.933377][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.965495][ T5835] usb 1-1: string descriptor 0 read error: -22 [ 152.971869][ T5835] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.001534][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.049001][ T5835] usb 1-1: 0:2 : does not exist [ 153.062743][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.062817][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.076440][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.085887][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.094119][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.101776][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.110207][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.118167][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.126119][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.135222][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.150338][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.155660][ T5980] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.180882][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.181103][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.203490][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.211192][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.220669][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.232940][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.242647][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.253475][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.283719][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.291891][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.344564][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.379628][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.428038][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 153.473493][ T7267] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 154.357774][ T5835] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 154.429258][ T5835] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 154.515477][ T5835] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 154.559142][ T5835] usb 1-1: USB disconnect, device number 4 [ 154.747085][ T7291] xt_hashlimit: size too large, truncated to 1048576 [ 155.223470][ T1568] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.423376][ T1568] usb 5-1: Using ep0 maxpacket: 32 [ 155.435832][ T1568] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.463068][ T1568] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 155.479847][ T1568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.496320][ T1568] usb 5-1: config 0 descriptor?? [ 155.505971][ T1568] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 155.524981][ T59] ------------[ cut here ]------------ [ 155.531156][ T59] WARNING: CPU: 0 PID: 59 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.542257][ T59] Modules linked in: [ 155.547074][ T59] CPU: 0 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 155.554677][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.565130][ T59] Workqueue: phy9 ieee80211_csa_finalize_work [ 155.571310][ T59] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.572365][ T49] ------------[ cut here ]------------ [ 155.578764][ T59] Code: 48 89 df e8 fa 70 d7 f7 e9 dc fc ff ff e8 20 42 7f f7 eb 24 e8 19 42 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 42 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa 41 7f f7 48 8b 7c 24 08 4c 8b 7c [ 155.578815][ T59] RSP: 0018:ffffc900015a79c0 EFLAGS: 00010293 [ 155.578839][ T59] RAX: ffffffff8a07d65e RBX: 0000000000000001 RCX: ffff88801cab1e00 [ 155.584769][ T49] WARNING: CPU: 1 PID: 49 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.584812][ T49] Modules linked in: [ 155.584829][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 155.604645][ T59] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 155.604663][ T59] RBP: dffffc0000000000 R08: ffff88805b8b95af R09: 1ffff1100b7172b5 [ 155.604681][ T59] R10: dffffc0000000000 R11: ffffed100b7172b6 R12: 0000000000000001 [ 155.604695][ T59] R13: ffff88805b8ba5d9 R14: ffff88805b8f2c70 R15: ffff88805b8f2ce8 [ 155.604712][ T59] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 155.610794][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.618997][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.630475][ T49] Workqueue: phy10 ieee80211_csa_finalize_work [ 155.630519][ T49] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.630552][ T49] Code: 48 89 df e8 fa 70 d7 f7 e9 dc fc ff ff e8 20 42 7f f7 eb 24 e8 19 42 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 42 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa 41 7f f7 48 8b 7c 24 08 4c 8b 7c [ 155.630573][ T49] RSP: 0018:ffffc90000ba79c0 EFLAGS: 00010293 [ 155.630597][ T49] RAX: ffffffff8a07d65e RBX: 0000000000000001 RCX: ffff8880186c5a00 [ 155.630616][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 155.630631][ T49] RBP: dffffc0000000000 R08: ffff88805b8d55af R09: 1ffff1100b71aab5 [ 155.630650][ T49] R10: dffffc0000000000 R11: ffffed100b71aab6 R12: 0000000000000001 [ 155.630667][ T49] R13: ffff88805b8d65d9 R14: ffff888022ba2c70 R15: ffff888022ba2ce8 [ 155.630694][ T49] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 155.630714][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.630731][ T49] CR2: 0000001b2d523ffc CR3: 0000000061405000 CR4: 00000000003506e0 [ 155.630752][ T49] Call Trace: [ 155.630776][ T49] [ 155.630784][ C0] ------------[ cut here ]------------ [ 155.630804][ T49] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 155.630813][ C0] WARNING: CPU: 0 PID: 59 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 155.630839][ T49] ieee80211_csa_finalize+0x5a6/0xf20 [ 155.630858][ C0] Modules linked in: [ 155.630868][ T49] ? mutex_lock_nested+0x20/0x20 [ 155.630875][ C0] CPU: 0 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 155.630899][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.630905][ T49] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 155.630915][ C0] Workqueue: phy9 ieee80211_csa_finalize_work [ 155.630933][ T49] ? ieee80211_csa_finalize_work+0x140/0x140 [ 155.630947][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 155.630963][ T49] ? read_lock_is_recursive+0x20/0x20 [ 155.630978][ C0] Code: 24 4c 89 e7 e8 2e a7 c1 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 ee 83 f7 0f 0b e9 f6 f7 ff ff e8 fd ed 83 f7 <0f> 0b e9 48 fb ff ff e8 f1 ed 83 f7 48 c7 c7 00 61 64 8e 4c 89 e6 [ 155.630998][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 155.631001][ T49] ieee80211_csa_finalize_work+0xf6/0x140 [ 155.631014][ C0] [ 155.631021][ C0] RAX: ffffffff8a032e63 RBX: ffffffff8a031c66 RCX: ffff88801cab1e00 [ 155.631032][ T49] ? process_scheduled_works+0x96f/0x15d0 [ 155.631040][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.631055][ C0] RBP: 0000000000000000 R08: ffff88801cab1e00 R09: 0000000000000003 [ 155.631062][ T49] process_scheduled_works+0xa5d/0x15d0 [ 155.631071][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805b8ba3c0 [ 155.631088][ C0] R13: dffffc0000000000 R14: ffff88805b8ba8b0 R15: ffff888020e76c24 [ 155.631106][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 155.631126][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.631126][ T49] ? worker_attach_to_pool+0x380/0x380 [ 155.631143][ C0] CR2: 00007f5e06b1deac CR3: 000000005ead4000 CR4: 00000000003506f0 [ 155.631164][ C0] Call Trace: [ 155.631164][ T49] ? assign_work+0x3d2/0x5d0 [ 155.631174][ C0] [ 155.631187][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 155.631201][ T49] worker_thread+0xa55/0xfc0 [ 155.631228][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 155.631231][ T49] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 155.631262][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 155.631287][ T49] kthread+0x2fa/0x390 [ 155.631305][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 155.631309][ T49] ? pr_cont_work+0x560/0x560 [ 155.631339][ T49] ? kthread_blkcg+0xd0/0xd0 [ 155.631342][ C0] __iterate_interfaces+0x243/0x500 [ 155.631362][ T49] ret_from_fork+0x48/0x80 [ 155.631376][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 155.631389][ T49] ? kthread_blkcg+0xd0/0xd0 [ 155.631404][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 155.631414][ T49] ret_from_fork_asm+0x11/0x20 [ 155.631448][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 155.631464][ T49] [ 155.631476][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.631476][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 155.631486][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 155.631504][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.631513][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 155.631516][ T49] Workqueue: phy10 ieee80211_csa_finalize_work [ 155.631543][ T49] Call Trace: [ 155.631539][ C0] __hrtimer_run_queues+0x520/0xc40 [ 155.631550][ T49] [ 155.631557][ T49] dump_stack_lvl+0x18c/0x250 [ 155.631562][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 155.631598][ C0] ? hw_scan_work+0xf60/0xf60 [ 155.631593][ T49] ? show_regs_print_info+0x20/0x20 [ 155.631625][ T49] ? load_image+0x400/0x400 [ 155.631629][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 155.631652][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 155.631668][ T49] panic+0x2dc/0x730 [ 155.631689][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 155.631706][ T49] ? bpf_jit_dump+0xd0/0xd0 [ 155.631719][ C0] handle_softirqs+0x280/0x820 [ 155.631746][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 155.631743][ T49] ? ret_from_fork_asm+0x11/0x20 [ 155.631773][ C0] ? do_softirq+0x1a0/0x1a0 [ 155.631779][ T49] __warn+0x2e0/0x470 [ 155.631800][ T49] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.631800][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 155.631828][ T49] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.631850][ C0] __irq_exit_rcu+0xd3/0x190 [ 155.631869][ T49] report_bug+0x2be/0x4f0 [ 155.631872][ C0] ? irq_exit_rcu+0x20/0x20 [ 155.631888][ T49] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.631903][ C0] irq_exit_rcu+0x9/0x20 [ 155.631913][ T49] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.631922][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 155.631937][ T49] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 155.631946][ C0] [ 155.631952][ C0] [ 155.631960][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.631961][ T49] handle_bug+0xcf/0x120 [ 155.631987][ C0] RIP: 0010:vprintk_emit+0x46f/0x610 [ 155.631994][ T49] exc_invalid_op+0x1a/0x50 [ 155.632014][ C0] Code: 85 3f 01 00 00 e8 21 a7 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 10 a7 1b 00 eb 06 e8 09 a7 1b 00 fb 48 c7 c7 80 63 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 99 b2 [ 155.632025][ T49] asm_exc_invalid_op+0x1a/0x20 [ 155.632031][ C0] RSP: 0018:ffffc900015a75a0 EFLAGS: 00000293 [ 155.632048][ C0] RAX: ffffffff816b7557 RBX: ffffffff816b73fb RCX: ffff88801cab1e00 [ 155.632046][ T49] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.632064][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d126380 [ 155.632071][ T49] Code: 48 89 df e8 fa 70 d7 f7 e9 dc fc ff ff e8 20 42 7f f7 eb 24 e8 19 42 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 42 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa 41 7f f7 48 8b 7c 24 08 4c 8b 7c [ 155.632077][ C0] RBP: ffffc900015a7690 R08: ffffffff911c15c7 R09: 1ffffffff22382b8 [ 155.632087][ T49] RSP: 0018:ffffc90000ba79c0 EFLAGS: 00010293 [ 155.632093][ C0] R10: dffffc0000000000 R11: fffffbfff22382b9 R12: dffffc0000000000 [ 155.632099][ T49] [ 155.632104][ T49] RAX: ffffffff8a07d65e RBX: 0000000000000001 RCX: ffff8880186c5a00 [ 155.632108][ C0] R13: 1ffff920002b4eb8 R14: 0000000000000031 R15: 0000000000000031 [ 155.632119][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 155.632130][ T49] RBP: dffffc0000000000 R08: ffff88805b8d55af R09: 1ffff1100b71aab5 [ 155.632127][ C0] ? vprintk_emit+0x30b/0x610 [ 155.632145][ T49] R10: dffffc0000000000 R11: ffffed100b71aab6 R12: 0000000000000001 [ 155.632154][ C0] ? vprintk_emit+0x467/0x610 [ 155.632159][ T49] R13: ffff88805b8d65d9 R14: ffff888022ba2c70 R15: ffff888022ba2ce8 [ 155.632184][ T49] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 155.632186][ C0] ? vprintk_emit+0x30b/0x610 [ 155.632213][ C0] ? printk_sprint+0x460/0x460 [ 155.632234][ T49] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 155.632240][ C0] ? _printk+0xde/0x130 [ 155.632265][ T49] ieee80211_csa_finalize+0x5a6/0xf20 [ 155.632265][ C0] ? copy_from_kernel_nofault+0x1d2/0x310 [ 155.632291][ T49] ? mutex_lock_nested+0x20/0x20 [ 155.632307][ C0] _printk+0xde/0x130 [ 155.632325][ T49] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 155.632334][ C0] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 155.632349][ T49] ? ieee80211_csa_finalize_work+0x140/0x140 [ 155.632364][ C0] ? load_image+0x400/0x400 [ 155.632376][ T49] ? read_lock_is_recursive+0x20/0x20 [ 155.632406][ C0] __show_regs+0x3f5/0x600 [ 155.632411][ T49] ieee80211_csa_finalize_work+0xf6/0x140 [ 155.632440][ T49] ? process_scheduled_works+0x96f/0x15d0 [ 155.632446][ C0] show_regs+0x44/0x90 [ 155.632466][ T49] process_scheduled_works+0xa5d/0x15d0 [ 155.632474][ C0] __warn+0x160/0x470 [ 155.632496][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.632523][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.632526][ T49] ? worker_attach_to_pool+0x380/0x380 [ 155.632548][ C0] report_bug+0x2be/0x4f0 [ 155.632561][ T49] ? assign_work+0x3d2/0x5d0 [ 155.632566][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.632592][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.632595][ T49] worker_thread+0xa55/0xfc0 [ 155.632616][ C0] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 155.632623][ T49] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 155.632641][ C0] handle_bug+0xcf/0x120 [ 155.632672][ C0] exc_invalid_op+0x1a/0x50 [ 155.632682][ T49] kthread+0x2fa/0x390 [ 155.632707][ T49] ? pr_cont_work+0x560/0x560 [ 155.632710][ C0] asm_exc_invalid_op+0x1a/0x20 [ 155.632735][ T49] ? kthread_blkcg+0xd0/0xd0 [ 155.632733][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 155.632758][ C0] Code: 48 89 df e8 fa 70 d7 f7 e9 dc fc ff ff e8 20 42 7f f7 eb 24 e8 19 42 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 42 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa 41 7f f7 48 8b 7c 24 08 4c 8b 7c [ 155.632756][ T49] ret_from_fork+0x48/0x80 [ 155.632775][ C0] RSP: 0018:ffffc900015a79c0 EFLAGS: 00010293 [ 155.632779][ T49] ? kthread_blkcg+0xd0/0xd0 [ 155.632788][ C0] [ 155.632793][ C0] RAX: ffffffff8a07d65e RBX: 0000000000000001 RCX: ffff88801cab1e00 [ 155.632800][ T49] ret_from_fork_asm+0x11/0x20 [ 155.632807][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 155.632820][ C0] RBP: dffffc0000000000 R08: ffff88805b8b95af R09: 1ffff1100b7172b5 [ 155.632835][ C0] R10: dffffc0000000000 R11: ffffed100b7172b6 R12: 0000000000000001 [ 155.632846][ T49] [ 155.632849][ C0] R13: ffff88805b8ba5d9 R14: ffff88805b8f2c70 R15: ffff88805b8f2ce8 [ 155.632998][ T49] Kernel Offset: disabled