last executing test programs: 1m53.655824568s ago: executing program 0 (id=958): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x32, 0x36, 0x38, 0x35, 0x36, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r0, 0x0, 0x80006800) 58.558255019s ago: executing program 0 (id=960): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x7fff}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a54", 0xe4bd}], 0x1}, 0x0) 58.202842491s ago: executing program 0 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9", 0x2f}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) io_uring_setup(0x1782, &(0x7f00000011c0)) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x18) 48.83181728s ago: executing program 0 (id=1020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[], 0x5e4}}, 0x0) 48.625489097s ago: executing program 0 (id=1021): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 48.311300213s ago: executing program 0 (id=1023): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x0, 0x0, 0x1}}], 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000300), 0xfe7f) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000cc0)=""/142, 0x8e}, {0x0}], 0x2}}], 0xf4240, 0x2, 0x0) 46.317147477s ago: executing program 2 (id=1027): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x32, 0x36, 0x38, 0x35, 0x36, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe5e, 0xfa00, {0x0, 0x0}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80006800) symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000bc0)='./file3\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 42.327857664s ago: executing program 2 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x5e4}}, 0x0) 42.025589536s ago: executing program 2 (id=1030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004600007c00006000002f907800000000e0000001940400000009"], 0x8e) 41.015253405s ago: executing program 2 (id=1031): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 40.736699282s ago: executing program 2 (id=1032): rt_sigreturn() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, {0x0, 0x100000000000000, 0x0, 0x0, 0x1}}}, 0x78) write$P9_RAUTH(r2, &(0x7f0000000000)={0x14}, 0x14) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_clone3(&(0x7f0000000980)={0xa0044400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x58) 40.48768166s ago: executing program 2 (id=1033): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x6, 0x0, 0x9, [0xfffffffb]}]}}}], 0x18}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000240)={{@any, 0x6088}, @host, 0x8, 0x0, 0x3, 0x7, 0xff, 0xfffffffe, 0x9}) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xc909}, &(0x7f0000000040), &(0x7f0000000080)) socket$rds(0x15, 0x5, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0x40, 0x4, 0x2d7}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000040)) 26.266099506s ago: executing program 1 (id=1065): syz_mount_image$f2fs(&(0x7f0000005e00), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0xfd, 0x5520, &(0x7f0000006280)="$eJzs3EtvG9UXAPDjpOn733+FWLDrSBVSguooTh+CXYFWPESriseCFTjx1HJre6LYddKuumCJWPBNEJVYseQzsGDNrkIIxA6pyHMnaoPaUilu3DS/nzQ5c6+vj891okhnPHIA+9bJ7K8/anEijkTEbEQcjyjPa9VRupjCaxFxKiJmHjlq1XyauH00DkbE0Yg4MU6ectaqh789Mzp9/rcP//zx50MHjn33wy/T2zUwba9HRG8tnW/0UizaKd6o5pujThl750ZVTA/0blbjIsWNuPug1Nxa1yzj2XZaX6zdGoxjrdZcHcd253o5v9ZPLzgYpbiRr5RPuNFcL8etfKWMnUFRxvadVNfmnfS/7c5gmPK0qny3y/QxHG7FNJ9v5mk/azfLuNofVvMpb9HKN8dxVMXq5WK16LbKOlZ29Fa/0D7q9G9tZqN8fdAp+tn5xcabi40L9cZ60cqH+bl6s9e6cC6bb3fHy+rDvNm72C6KdjdfXC16C9l8e3W13mhk85fylU6znzUai2cXl+rnF9LZG5G9d/WzrNvK5sfxnU7/1rDTHWTXi/UsPWMhW148+9ZCdrqRfXLlWnbt48uXr1z79ItLn199+8oH71aLHpb1+/2yrGx+eWl5ud5Yqi83Fl7g/S+dmez+v6qKnuD+YUdq0y4AYO+ZbP8fof8HnsVE+/98pcyw8R/9//Xu5Pr/0P9PxJ7qf7fK2q/9/3PYP+yI/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN/6de7798uTk2l8rJr/X8Sp8dQr1bgWETMR8eAxZuPgtpyzVZ65J6yf+1cNP9WizDB+jUPVcTQiLlbH3/9/3u8CAAAAvLzuPWzbxy371iUA9of02585/uWE8tUiYu7k/ckkm5sZ/3z1qWuWnlDEY4z/vg/E5kRKSxe24vCEkqVLbgcmle2ZzG4Lhx8JtRRmdrUcAABgV2zvBHa3CwEAAGA3fT3tApiO8qPS6l786k6AQylUHwge2TYCAAAA9qAn3CoNAAAAvETK/v8p3/8Xvv8PAAAA9r57d099M+0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgH3buJyd5IIwD8NtCvw//RWLcexV3cAyP4NKl4QBegiPgFbwAZ8CdRzBgaEu0BhNjhxLI8yTtMA38mBI270wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcOxei9n4+fHmqW3OctVOmrsBAAAAtlkUs3H5Ylj1z+rrF/Wlq7qfRUQeEdtq9178a2T26pzih/cX38bwElEmrL/jf32cRsRtfbxf7vpXAAAAgOM1n0xHVbVenYb7HhBdqiZt8vO7RHlZRBTDt0Rp+fp0nSis/H/34yFRWjmBNUgUVk259VOl/Uqv0Qy+NFnV5J0OBwAA6ESzEui2CgEAAKBL93/7mBWiQ5fFZilzsxZcPnn/uSB40ugBAAAAByjb9wAAAACAnSvrf/v/AQAAwHGr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABglxbFbDyfTEdtc5ardtLcDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwf68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EW/++X/xNQ4k8ydNpaOR5K1q8bWVWPvQePowXj7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/bvGzcVBwD8a/t8/QGIEFCGIAQSAyw0vZSWrgygiIE/ASlKryVw5UeagVYVUhY2lLkLghEhJFDY+j90bqUuZetwQ5GYQfbZqXvJcFVV+9p8PtK79/WT5fd9ThTl6+cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKiNP3wYZ8XHwiROq7HbD65vFP2dqb5wc/fuctGKOGkz6WfDG82DZKm7RAAAADg6srq+j4h7+d5a0acLZf2f1+cUNf/PL03iup6frvvrvq79i/bXn/df259oYTJPcdGLm6Ph6YOp9J7eKufbywdGjk8d98o7Xz57ycofSPrJzqvjvLyfyY+3bn3UL8NjbWUMADyuU3VfBfX/Q0U/6DIxAI6MXqPwruv/bKHbnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADaMN6JF+o4iYjlXr4fF+48uL5xWH9z9+5y3c7duLHbvGYvIoqrXNwcDU+3uZg5d+XqtS/XR6PhVvvBmxHR3exV8NkM50R0maHgSYO0+l2fl3yejaDjP0wAADx38qoVdf29fG+tGEsWI/775dH6/51GHDPW//c/P3e7OVez/h+0tsL5t7J9+ZuVK1evvbd5ef3S8NLwq/dXBx8Mzpw/e/b8SvmsZMUTEwAAAJ5MP4noT9X/6eLB/f+TjThmrP+//WnwfXOuTP1/qIebfl1nAgAAcLS98ta//ySHjCf9fny3vr29NZh8VsextVoer3aQ6mM7VrVm/Z8tdp0VAAAA0IbxTvLI/v+FRhwz7v+/+OvrvzevmUXEiWr//9TG16ML7S1nrrXxdeKu1wgAAEC3TlStuf+fl+//p/uvPKQR8e7bk7hXjc1S/2cf//Bbc67m+/9n2lviXEqXJvej7JciektdZwQAAMDz7HjVimL/73xv7Ys/Tn7a9/4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DwAA//+qAEV4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="605d4a8d21479cd8"}}) 21.596525978s ago: executing program 1 (id=1073): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x14a80, 0x12, 0x38, &(0x7f00000002c0)="24006f20a01c2500", &(0x7f00000001c0)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="4b000000020000"], 0x0) 20.554501848s ago: executing program 1 (id=1077): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 19.460150568s ago: executing program 1 (id=1078): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="5a0bccbf8ede89c544c3ebf56f73869d135fd806237ef812d5bda1b5e1395e7bab9b3b54c358193ce5202bda48ed79a1cdce555552291e443967032c72ec9f2a53ad5b46260b3ac7dd89e75218c2ee5f4e407406f661d99ee4375b45acd7176b1b06a9f19cb04b2df0fc0ba46effe25a08578191faa6e81dd9d605b2e2edff425d7e2ed1574855d2eaf3a6f87f7e757498578481bb563d22c7741b3a9743b5df537762b7d591"], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xec, 0x0, &(0x7f00000000c0)) 19.138242474s ago: executing program 1 (id=1081): pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ad000000800000001c00128009000100766c616e000000000c000280060001000000001008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100aaaaaaaaaa000000080004"], 0x60}}, 0x0) 18.7712826s ago: executing program 1 (id=1083): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x6, 0x0, 0x9, [0xfffffffb]}]}}}], 0x18}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000240)={{@any, 0x6088}, @host, 0x8, 0x0, 0x3, 0x7, 0xff, 0xfffffffe, 0x9}) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xc909}, &(0x7f0000000040), &(0x7f0000000080)) socket$rds(0x15, 0x5, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0x40, 0x4, 0x2d7}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r6}) 18.75335263s ago: executing program 3 (id=1084): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 18.555304345s ago: executing program 3 (id=1085): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open$dir(0x0, 0x2f2281, 0x28) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000300)={[{@noblock_validity}, {@dioread_nolock}, {@nobh}, {@minixdf}, {@nobh}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') 17.865026314s ago: executing program 3 (id=1086): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) fallocate(r0, 0x0, 0x0, 0x9000f4) 16.162105612s ago: executing program 3 (id=1087): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 14.442041659s ago: executing program 3 (id=1089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, 0x0, 0x8e) 13.956621672s ago: executing program 3 (id=1091): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3563], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x400, 0x0, 0x0, {}, [{0x58, 0x1, [@m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000780)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000340), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0xfffffffffffffc62, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x4d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4003a567e42533ce) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d80000000314010000000000000000000900020073797a3200000000080041007278650014003300677265300000000000000000000000000900020073797a3200000000080041007369770014003300697036677265746170300000000000000900020073797a3200000000080041007278650014003300626f6e645f736c6176655f30000000000900020073797a3000000000e2ff4100523865001400330076657468315f746f5f687372000000000900020073797a310000000008004100727865001400000076657468315f766c616e000000000080"], 0xd8}}, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 6.597432377s ago: executing program 5 (id=1110): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 5.327157882s ago: executing program 4 (id=1112): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 4.370111523s ago: executing program 4 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) 3.791909414s ago: executing program 5 (id=1115): pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ad000000800000001c00128009000100766c616e000000000c000280060001000000001008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100aaaaaaaaaa000000080004"], 0x60}}, 0x0) 3.791167429s ago: executing program 4 (id=1116): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002180)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x1, 0xfffffffc, 0x3, 0x4, 0x80, 0xf, 0x63c, 0x246d, 0x4, 0x8, 0x0, 0xc, 0x7, 0x3, 0x10, 0x7f, 0x7, 0x2df, 0xfffffff8, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x10000, 0x8266, 0x2, 0x6, 0x3fb, 0x8, 0x5, 0x800, 0x1, 0x2, 0x9, 0x6, 0x3, 0x0, 0x3ff, 0x10000, 0x3, 0x2, 0x10, 0x1b053236, 0x3, 0x4, 0x5, 0x1000, 0x7ff, 0x6, 0xf5, 0x5, 0x4, 0x4, 0x80000000, 0xaf07, 0x8, 0x1, 0xffff, 0xffffffc7, 0xc, 0x8, 0x5, 0x81, 0x8, 0x7, 0x8001, 0x5, 0x7, 0x8, 0x4, 0x6, 0xffff8001, 0x5, 0xd0, 0x6, 0x8, 0x72, 0x8, 0x8, 0x1000000, 0x2, 0x4, 0x0, 0x50c2cc90, 0x8, 0x0, 0x1ff, 0xbaed, 0x10000000, 0xfffffffa, 0x3c1, 0x251, 0xfffffff7, 0x4, 0xc8, 0x4, 0x9, 0xffff0000, 0x0, 0x9, 0x76, 0x7, 0xff, 0x7, 0x9, 0x8, 0x9, 0x10, 0x1, 0x200, 0x2, 0x1c, 0x1, 0x5, 0xa, 0x1ff, 0x3, 0xad88, 0x3, 0x9, 0x1aa, 0x9, 0x9, 0x7, 0xd, 0x9, 0xb, 0x4, 0x5, 0x4, 0x5, 0x9, 0x80, 0xffffffff, 0x1, 0xffffff80, 0x3, 0x7, 0x1000, 0x8, 0x6ba434fc, 0xd, 0xa, 0x10000, 0x8, 0x554, 0xffffffff, 0x9, 0x5cedb95b, 0x5, 0x0, 0xfffffff7, 0x59a, 0x4, 0x0, 0x2, 0x162, 0x40000000, 0x3, 0x200000, 0x2, 0x8, 0x7, 0x100, 0x1, 0x2, 0x8000, 0x0, 0x34b5, 0x80, 0x5, 0xa5, 0x2337, 0x7, 0x5, 0xe, 0x9, 0x9d, 0x1000, 0x90, 0x0, 0xc1a, 0x400, 0xff, 0xff0000, 0x0, 0xb75, 0x2, 0x9, 0xf0c, 0xc12d, 0x1, 0x9436, 0x100, 0x8, 0x81, 0x8, 0x7, 0x9, 0xb, 0x0, 0x6, 0x80000000, 0x800, 0x7467, 0x10, 0x27, 0x3, 0x0, 0x100, 0x3, 0x1454, 0x2, 0x6, 0x1, 0x6, 0x5, 0x6, 0x7, 0x401, 0xffffff36, 0xf, 0x6, 0x3000, 0xff, 0x0, 0x80000000, 0x4, 0x92, 0x6, 0x3, 0x0, 0x9, 0x2, 0x0, 0x5, 0xffff, 0x3, 0x4, 0x5, 0x50dd, 0x2a86, 0x3, 0x9, 0x7, 0xa1, 0x2, 0x4, 0x7f, 0xffffff00, 0x5, 0x10000, 0x200]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x405, 0x7, 0x7, 0x3}, {0x16, 0x2, 0xfff, 0x100, 0x101, 0x8b1c50}, 0x2, 0x8000, 0x22e5}}, @TCA_TBF_RATE64={0xc, 0x4, 0xd60c41016b0e984f}]}}]}, 0x468}}, 0x0) 3.431198977s ago: executing program 4 (id=1117): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600), 0x4) fchownat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$FIOCLEX(r6, 0x5451) recvmsg(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x104) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r8, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000001100)="94", 0x1) read$alg(r7, &(0x7f0000000140)=""/116, 0x74) tee(r0, r8, 0x6, 0x7) vmsplice(r8, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x70) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.200064056s ago: executing program 5 (id=1118): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000202"], 0x10}}, 0x0) 2.169878911s ago: executing program 4 (id=1119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.099189286s ago: executing program 5 (id=1120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000001000000000014"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a800000013000100"/20, @ANYBLOB="000000000000000008000d00280a000060001980140004006b2e4f2fdd8733dc1c1639228919eb5e2efc02007b5d2f215d290000140005004af57c15cd92d389e606fce6a0eebda514000400f4d8d35abbd4fab3a3614be8a496bd8f140005008ebcd2c7e1cf0421ab20db4c32c4330605001000040000001400030076657468315f6d616376746170"], 0xa8}}, 0x0) 1.844378838s ago: executing program 4 (id=1121): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00'}, 0x70) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x2, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r5, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.564452934s ago: executing program 5 (id=1122): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, 0x0) 0s ago: executing program 5 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_destroy(0x0) kernel console output (not intermixed with test programs): erface: batadv_slave_0 [ 619.749611][ T46] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 619.762140][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.769561][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.869935][ T143] hsr_slave_0: left promiscuous mode [ 619.884139][ T143] hsr_slave_1: left promiscuous mode [ 619.933063][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.968813][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.991315][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.009478][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.043602][T10057] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.861'. [ 620.073457][ T143] hsr_slave_0: left promiscuous mode [ 620.100448][ T143] hsr_slave_1: left promiscuous mode [ 620.109107][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.144672][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.163912][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.179420][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.201528][ T8643] Bluetooth: hci3: command 0x0406 tx timeout [ 620.217461][ T46] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 620.242443][ T143] hsr_slave_0: left promiscuous mode [ 620.301091][ T143] hsr_slave_1: left promiscuous mode [ 620.332365][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.367983][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.421262][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.552136][ T46] usb 2-1: USB disconnect, device number 12 [ 620.599989][ T46] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 620.623622][ T46] visor 2-1:0.0: device disconnected [ 620.715553][ T143] veth1_macvtap: left promiscuous mode [ 620.731243][ T143] veth0_macvtap: left promiscuous mode [ 620.741394][ T143] veth1_vlan: left promiscuous mode [ 620.751152][ T143] veth0_vlan: left promiscuous mode [ 620.789549][ T143] veth1_macvtap: left promiscuous mode [ 620.796544][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 620.813036][ T143] veth0_macvtap: left promiscuous mode [ 620.819266][ T143] veth1_vlan: left promiscuous mode [ 620.825617][ T143] veth0_vlan: left promiscuous mode [ 620.904221][ T143] veth1_macvtap: left promiscuous mode [ 620.909807][ T143] veth0_macvtap: left promiscuous mode [ 620.939396][ T143] veth1_vlan: left promiscuous mode [ 620.968514][ T143] veth0_vlan: left promiscuous mode [ 620.991401][ T143] veth1_macvtap: left promiscuous mode [ 621.003509][ T143] veth0_macvtap: left promiscuous mode [ 621.024211][ T143] veth1_vlan: left promiscuous mode [ 621.088102][ T143] veth0_vlan: left promiscuous mode [ 621.971032][ T5297] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 622.152713][ T5297] usb 2-1: device descriptor read/64, error -71 [ 622.425547][ T5297] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 622.600645][ T5297] usb 2-1: device descriptor read/64, error -71 [ 622.745804][ T5297] usb usb2-port1: attempt power cycle [ 623.201089][ T5297] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 623.235121][ T5297] usb 2-1: device descriptor read/8, error -71 [ 623.294947][ T143] team0 (unregistering): Port device team_slave_1 removed [ 623.393885][ T143] team0 (unregistering): Port device team_slave_0 removed [ 623.541018][ T5297] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 623.591788][ T5297] usb 2-1: device descriptor read/8, error -71 [ 623.721422][ T5297] usb usb2-port1: unable to enumerate USB device [ 623.885863][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.893949][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.072645][ T143] team0 (unregistering): Port device team_slave_1 removed [ 625.129773][ T143] team0 (unregistering): Port device team_slave_0 removed [ 626.392585][ T143] team0 (unregistering): Port device team_slave_1 removed [ 626.471978][ T143] team0 (unregistering): Port device team_slave_0 removed [ 627.832813][ T143] team0 (unregistering): Port device team_slave_1 removed [ 627.894334][ T143] team0 (unregistering): Port device team_slave_0 removed [ 628.690604][ T9672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.967354][ T9672] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.267837][ T9821] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 629.359662][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.366844][ T6610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.401456][T10104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 629.441665][ T9821] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 629.490331][T10108] loop1: detected capacity change from 0 to 256 [ 629.532694][ T9821] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 629.601451][T10108] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 629.615995][ T9821] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 629.657507][T10108] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 629.937972][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.945147][ T6610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.969499][ T9672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 631.073077][ T9672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.173976][ T9670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.754575][ T9670] veth0_vlan: entered promiscuous mode [ 631.767309][ T9821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.841113][ T5515] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 632.065861][ T9670] veth1_vlan: entered promiscuous mode [ 632.079973][ T5515] usb 5-1: no configurations [ 632.089198][ T5515] usb 5-1: can't read configurations, error -22 [ 632.238024][ T9821] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.261061][ T5515] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 632.329971][ T9672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.378822][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.386066][ T6610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.446306][ T9820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 632.463723][ T5515] usb 5-1: no configurations [ 632.468370][ T5515] usb 5-1: can't read configurations, error -22 [ 632.485235][ T5515] usb usb5-port1: attempt power cycle [ 632.532503][ T9820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 632.585635][ T9820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 632.656186][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.663406][ T6610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.772793][ T9820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 632.845013][ T9670] veth0_macvtap: entered promiscuous mode [ 632.901189][ T5515] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 632.943805][ T5515] usb 5-1: no configurations [ 632.944131][ T9670] veth1_macvtap: entered promiscuous mode [ 632.948418][ T5515] usb 5-1: can't read configurations, error -22 [ 633.111135][ T5515] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 633.231543][ T5515] usb 5-1: no configurations [ 633.236149][ T5515] usb 5-1: can't read configurations, error -22 [ 633.256967][ T5515] usb usb5-port1: unable to enumerate USB device [ 633.411627][ T9672] veth0_vlan: entered promiscuous mode [ 633.451588][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.520632][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.539750][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.550755][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.572355][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.593882][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.616991][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.765371][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.797674][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.814157][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.860951][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.883168][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.903182][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.973091][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.027467][ T9672] veth1_vlan: entered promiscuous mode [ 634.118294][ T9670] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.184258][ T9670] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.219804][ T9670] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.260663][ T9670] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.705971][ T9820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.877397][ T9672] veth0_macvtap: entered promiscuous mode [ 634.985197][ T9672] veth1_macvtap: entered promiscuous mode [ 635.054595][ T9820] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.065707][ T6610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.070605][ T9821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.115530][ T6610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.209489][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.256439][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.275023][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.286114][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.305849][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.327058][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.340703][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.354748][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.368787][ T9672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.445721][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.452947][ T5496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.464863][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.472082][ T5496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.581417][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.589277][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.621448][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.643899][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.669777][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.691017][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.703397][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.714538][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.728577][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.739767][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.752998][ T9672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.769378][ T9672] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.778646][ T9672] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.788099][ T9672] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.798403][ T9672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.159979][T10162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.876'. [ 636.526374][ T9821] veth0_vlan: entered promiscuous mode [ 636.526973][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.626999][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.810874][T10173] loop2: detected capacity change from 0 to 512 [ 636.850565][T10173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 636.924997][ T9821] veth1_vlan: entered promiscuous mode [ 636.950848][T10173] EXT4-fs (loop2): 1 truncate cleaned up [ 636.980743][T10173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.011005][ T5299] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 637.075661][ T6610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.095998][ T6610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.100469][ T9670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.197612][ T9820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.221448][ T5299] usb 5-1: Using ep0 maxpacket: 8 [ 637.283918][ T9821] veth0_macvtap: entered promiscuous mode [ 637.374604][ T9821] veth1_macvtap: entered promiscuous mode [ 637.389150][ T5299] usb 5-1: config index 0 descriptor too short (expected 260, got 27) [ 637.460591][ T5299] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 637.515515][ T5299] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 637.581379][ T5299] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 637.590458][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.662388][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.677244][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.687824][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.699184][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.713669][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.737615][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.767411][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.778627][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.789051][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.800100][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.817554][ T9821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.898981][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.953534][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.008945][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.039221][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.066987][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.085398][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.101420][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.162518][T10181] netlink: 68 bytes leftover after parsing attributes in process `syz.3.647'. [ 638.788049][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.817775][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.858734][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.875563][ T9821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.004869][T10183] netlink: 'syz.3.647': attribute type 10 has an invalid length. [ 639.016191][T10183] bridge0: port 3(team0) entered blocking state [ 639.023249][T10183] bridge0: port 3(team0) entered disabled state [ 639.029798][T10183] team0: entered allmulticast mode [ 639.035081][T10183] team_slave_0: entered allmulticast mode [ 639.044546][T10183] team_slave_1: entered allmulticast mode [ 639.053288][T10183] team0: entered promiscuous mode [ 639.058369][T10183] team_slave_0: entered promiscuous mode [ 639.064784][T10183] team_slave_1: entered promiscuous mode [ 639.072334][T10183] bridge0: port 3(team0) entered blocking state [ 639.078770][T10183] bridge0: port 3(team0) entered forwarding state [ 639.155625][ T9821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.284351][ T9821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.310441][ T5299] usb 5-1: string descriptor 0 read error: -71 [ 639.330340][ T9821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.371826][ T5299] usb 5-1: USB disconnect, device number 12 [ 639.404580][ T9821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.459106][T10181] infiniband syz0: set active [ 639.471190][T10181] infiniband syz0: added bond_slave_0 [ 639.490206][T10181] syz0: rxe_create_cq: returned err = -12 [ 639.496103][T10181] infiniband syz0: Couldn't create ib_mad CQ [ 639.508700][ T9820] veth0_vlan: entered promiscuous mode [ 639.535951][T10181] infiniband syz0: Couldn't open port 1 [ 639.637815][ T9820] veth1_vlan: entered promiscuous mode [ 639.664022][T10181] RDS/IB: syz0: added [ 639.679957][T10178] loop2: detected capacity change from 0 to 32768 [ 639.687168][T10181] smc: adding ib device syz0 with port count 1 [ 639.697419][T10181] smc: ib device syz0 port 1 has pnetid [ 639.767135][T10178] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 639.963753][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.012379][ T5299] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 640.020882][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.040449][ T9820] veth0_macvtap: entered promiscuous mode [ 640.047839][T10178] XFS (loop2): Ending clean mount [ 640.088529][T10178] XFS (loop2): Quotacheck needed: Please wait. [ 640.147469][ T9820] veth1_macvtap: entered promiscuous mode [ 640.211282][T10178] XFS (loop2): Quotacheck: Done. [ 640.212966][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.217391][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.233036][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.245496][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.292397][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.309974][ T5299] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 640.323600][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.336096][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.346835][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.358161][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.366496][ T5299] usb 5-1: config 0 descriptor?? [ 640.388767][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.407465][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.417923][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.428831][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.441629][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.453754][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.464026][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.476681][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.489553][ T9670] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 640.489915][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.554837][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.593591][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.620379][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.631035][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.641202][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.670963][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.731282][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.767691][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.782177][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.797443][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.810126][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.930628][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.992501][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.135691][ T9820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.178780][ T9820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.220129][ T9820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.274809][ T9820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.326593][ T5299] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -32 [ 641.344627][T10196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 641.906663][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.906691][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.195042][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.258970][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.431578][ T58] usb 5-1: USB disconnect, device number 13 [ 642.618959][T10204] loop5: detected capacity change from 0 to 128 [ 642.653809][T10204] vfat: Unknown parameter ' &Š’eˆ¹gHAºx` [ 642.653809][T10204] 4öZÆÞØ—H•«êô´ƒOùY¼ìÇ©T%£ ~u€D«N¦÷ÅUØìù u¿tkìfº' [ 643.058286][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 643.068195][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 643.078638][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 643.094296][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 643.104492][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 643.112198][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 644.277218][T10207] loop2: detected capacity change from 0 to 32768 [ 644.311141][T10207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.882 (10207) [ 644.333725][ T8643] Bluetooth: to_multiplier 42238 > 3200 [ 644.415158][T10212] loop4: detected capacity change from 0 to 32768 [ 644.501035][T10207] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 644.508856][T10219] mmap: syz.5.886 (10219) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 644.513270][T10207] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 644.532272][T10207] BTRFS info (device loop2): disk space caching is enabled [ 644.539627][T10207] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 644.554404][T10212] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.883 (10212) [ 644.643679][T10212] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 644.731089][T10212] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 644.809770][T10212] BTRFS info (device loop4): using free-space-tree [ 644.849553][T10207] BTRFS info (device loop2): rebuilding free space tree [ 644.930997][ T5237] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 644.997416][T10207] BTRFS info (device loop2): disabling free space tree [ 645.021454][T10207] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 645.041056][T10207] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 645.162994][ T8643] Bluetooth: hci6: command tx timeout [ 645.202322][ T5237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.271171][ T5237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.324121][ T5237] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 645.420226][ T5237] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.421083][ T29] audit: type=1800 audit(1725225582.189:447): pid=10212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.883" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 645.508701][ T5237] usb 6-1: config 0 descriptor?? [ 645.730770][ T9670] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 645.786392][T10215] loop0: detected capacity change from 0 to 32768 [ 645.891631][T10215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.884 (10215) [ 645.954987][ T9412] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 646.243174][T10215] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 646.318383][T10215] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 646.325753][ T5237] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 646.335309][ T5237] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 646.343651][ T5237] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 646.361431][ T8643] Bluetooth: hci5: command tx timeout [ 646.370647][ T5237] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 646.453398][ T5237] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 646.461096][T10215] BTRFS info (device loop0): disk space caching is enabled [ 646.552621][ T5237] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 646.566489][T10215] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 646.582292][ T5237] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 646.702189][T10215] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 646.702881][T10215] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 646.784337][T10215] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 646.806081][T10215] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 646.818988][T10215] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 646.834828][T10215] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 646.875917][T10215] BTRFS error (device loop0): open_ctree failed [ 647.251310][ T8643] Bluetooth: hci6: command tx timeout [ 647.802328][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 647.866770][T10209] chnl_net:caif_netlink_parms(): no params data found [ 647.913746][ T5515] usb 6-1: USB disconnect, device number 24 [ 648.261242][T10290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 648.717160][T10300] loop2: detected capacity change from 0 to 128 [ 648.726625][T10300] vfat: Unknown parameter ' &Š’eˆ¹gHAºx` [ 648.726625][T10300] 4öZÆÞØ—H•«êô´ƒOùY¼ìÇ©T%£ ~u€D«N¦÷ÅUØìù u¿tkìfº' [ 649.321251][ T8643] Bluetooth: hci6: command tx timeout [ 649.623422][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 649.653927][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 649.676306][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 649.677887][T10209] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.741637][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 649.749468][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 649.758804][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 649.787610][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.844159][ T54] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 649.944167][T10209] bridge_slave_0: entered allmulticast mode [ 650.018477][T10209] bridge_slave_0: entered promiscuous mode [ 650.036397][T10209] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.058468][T10209] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.071573][T10209] bridge_slave_1: entered allmulticast mode [ 650.110139][T10209] bridge_slave_1: entered promiscuous mode [ 650.515431][T10209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.696819][T10209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.921043][T10322] netlink: 68 bytes leftover after parsing attributes in process `syz.4.904'. [ 651.405699][ T54] Bluetooth: hci6: command tx timeout [ 651.583967][T10323] netlink: 'syz.4.904': attribute type 10 has an invalid length. [ 651.601140][T10323] bridge0: port 3(team0) entered blocking state [ 651.609882][T10323] bridge0: port 3(team0) entered disabled state [ 651.620294][T10323] team0: entered allmulticast mode [ 651.625997][T10323] team_slave_0: entered allmulticast mode [ 651.639091][T10323] team_slave_1: entered allmulticast mode [ 651.685687][T10323] team0: entered promiscuous mode [ 651.701483][T10323] team_slave_0: entered promiscuous mode [ 651.717493][T10323] team_slave_1: entered promiscuous mode [ 651.729078][T10323] bridge0: port 3(team0) entered blocking state [ 651.735516][T10323] bridge0: port 3(team0) entered forwarding state [ 651.853625][T10322] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 651.881111][ T54] Bluetooth: hci8: command tx timeout [ 651.891246][ T54] Bluetooth: hci1: command tx timeout [ 651.991720][T10306] loop5: detected capacity change from 0 to 32768 [ 652.015800][T10306] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.899 (10306) [ 652.114642][T10326] netlink: 32 bytes leftover after parsing attributes in process `syz.2.905'. [ 652.125773][T10306] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 652.136084][T10306] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 652.148720][T10306] BTRFS info (device loop5): using free-space-tree [ 652.236965][T10209] team0: Port device team_slave_0 added [ 652.241044][ T5299] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 652.310535][T10315] loop0: detected capacity change from 0 to 32768 [ 652.442566][ T5299] usb 3-1: Using ep0 maxpacket: 8 [ 652.481369][T10315] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.900 (10315) [ 652.508204][ T5299] usb 3-1: config index 0 descriptor too short (expected 260, got 27) [ 652.519549][ T5299] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 652.537888][ T5299] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 652.547944][ T5299] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 652.561463][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.664047][T10315] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 652.777550][T10315] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 652.837990][ T5496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.881320][T10315] BTRFS info (device loop0): disk space caching is enabled [ 652.905192][T10306] BTRFS error (device loop5): open_ctree failed [ 652.936757][T10315] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 652.964085][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 652.976329][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 653.044974][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 653.102093][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 653.117917][T10209] team0: Port device team_slave_1 added [ 653.260509][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 653.262627][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 653.357785][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 653.418588][ T5496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.449754][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 653.451737][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 653.521931][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 653.623464][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 653.695779][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 653.814855][T10315] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 653.881951][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 653.904922][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 653.915011][ T54] Bluetooth: hci1: hardware error 0x00 [ 653.975671][ T9674] Bluetooth: hci8: command tx timeout [ 653.981329][ T8643] Bluetooth: hci1: command tx timeout [ 654.080417][T10315] BTRFS error (device loop0): open_ctree failed [ 654.435919][T10380] loop4: detected capacity change from 0 to 128 [ 654.473128][ T5496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.572864][T10209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.580310][T10209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.661249][ T5299] usb 3-1: string descriptor 0 read error: -71 [ 654.661283][T10209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.682529][T10209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.689590][T10209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.734520][ T5299] usb 3-1: USB disconnect, device number 7 [ 654.757895][T10209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.999985][ T5496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.533614][T10209] hsr_slave_0: entered promiscuous mode [ 655.600658][T10209] hsr_slave_1: entered promiscuous mode [ 655.891575][ T5237] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 656.041012][ T8643] Bluetooth: hci8: command tx timeout [ 656.083100][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.100938][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.111350][ T5237] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 656.120411][ T5237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.132630][ T5237] usb 3-1: config 0 descriptor?? [ 656.361487][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 656.649116][ T5237] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 656.712237][ T5237] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 656.743084][ T5237] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 656.843305][ T5237] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device [ 656.845776][T10307] chnl_net:caif_netlink_parms(): no params data found [ 656.851288][ T5237] arvo 0003:1E7D:30D4.0005: couldn't install keyboard [ 656.908278][ T5237] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -5 [ 656.947894][T10399] loop0: detected capacity change from 0 to 32768 [ 656.956971][T10399] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.918 (10399) [ 656.995982][ T5496] team0: left allmulticast mode [ 657.011160][ T5496] team_slave_0: left allmulticast mode [ 657.033243][ T5496] team_slave_1: left allmulticast mode [ 657.038743][ T5496] team0: left promiscuous mode [ 657.040950][T10399] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 657.091498][ T5237] usb 3-1: USB disconnect, device number 8 [ 657.110279][T10399] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 657.118901][ T5496] team_slave_0: left promiscuous mode [ 657.135450][ T5496] team_slave_1: left promiscuous mode [ 657.144574][T10399] BTRFS info (device loop0): using free-space-tree [ 657.189256][ T5496] bridge0: port 3(team0) entered disabled state [ 657.233541][ T5496] bridge_slave_1: left allmulticast mode [ 657.239214][ T5496] bridge_slave_1: left promiscuous mode [ 657.309050][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.395647][ T5496] bridge_slave_0: left allmulticast mode [ 657.428791][ T5496] bridge_slave_0: left promiscuous mode [ 657.447142][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.509522][ T29] audit: type=1800 audit(1725225594.289:448): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.918" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 657.818336][ T9820] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 658.557399][ T54] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 658.573327][ T8643] Bluetooth: hci8: command tx timeout [ 658.686773][T10430] loop2: detected capacity change from 0 to 512 [ 659.064579][T10430] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.924: corrupted in-inode xattr: invalid ea_ino [ 659.375520][T10430] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.924: couldn't read orphan inode 15 (err -117) [ 659.745503][T10430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.004666][T10430] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.924: invalid indirect mapped block 234881024 (level 0) [ 660.287640][ T9670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.603107][ T54] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 661.358486][T10448] loop2: detected capacity change from 0 to 128 [ 661.454278][T10448] vfat: Unknown parameter ' &Š’eˆ¹gHAºx` [ 661.454278][T10448] 4öZÆÞØ—H•«êô´ƒOùY¼ìÇ©T%£ ~u€D«N¦÷ÅUØìù u¿tkìfº' [ 662.105101][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.163646][ T5496] infiniband syz0: set down [ 662.205144][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.254454][ T5496] bond0 (unregistering): Released all slaves [ 662.719786][T10465] syz.2.934[10465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 662.719956][T10465] syz.2.934[10465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 662.985376][T10209] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.868825][T10461] loop0: detected capacity change from 0 to 32768 [ 663.891582][T10461] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.933 (10461) [ 663.931623][T10461] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 663.979501][T10461] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 664.021029][T10461] BTRFS info (device loop0): using free-space-tree [ 664.505783][ T29] audit: type=1800 audit(1725225601.289:449): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.933" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 664.534154][T10209] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.641071][ T29] audit: type=1804 audit(1725225601.369:450): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.933" name="/newroot/13/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 664.986916][ T9820] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 665.079560][T10494] loop2: detected capacity change from 0 to 512 [ 665.134327][T10494] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 665.195257][T10494] System zones: 0-2, 18-18, 34-35 [ 665.232497][T10209] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.283843][T10494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.342391][T10494] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.818141][T10505] loop0: detected capacity change from 0 to 256 [ 665.915122][T10505] FAT-fs (loop0): Directory bread(block 64) failed [ 665.990410][T10505] FAT-fs (loop0): Directory bread(block 65) failed [ 665.998261][T10505] FAT-fs (loop0): Directory bread(block 66) failed [ 666.005787][T10505] FAT-fs (loop0): Directory bread(block 67) failed [ 666.013407][T10505] FAT-fs (loop0): Directory bread(block 68) failed [ 666.020101][T10505] FAT-fs (loop0): Directory bread(block 69) failed [ 666.050286][T10505] FAT-fs (loop0): Directory bread(block 70) failed [ 666.060254][T10505] FAT-fs (loop0): Directory bread(block 71) failed [ 666.069198][T10505] FAT-fs (loop0): Directory bread(block 72) failed [ 666.077758][T10505] FAT-fs (loop0): Directory bread(block 73) failed [ 666.551743][T10209] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.774502][T10307] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.823260][T10307] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.844680][T10307] bridge_slave_0: entered allmulticast mode [ 666.853875][T10307] bridge_slave_0: entered promiscuous mode [ 666.882164][T10307] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.889332][T10307] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.949102][T10307] bridge_slave_1: entered allmulticast mode [ 667.031478][T10307] bridge_slave_1: entered promiscuous mode [ 667.156324][ T9674] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 667.169854][ T9674] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 667.186847][ T9674] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 667.202488][ T9674] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 667.211178][ T9674] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 667.221317][ T9674] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 667.326580][T10524] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.939: Directory hole found for htree leaf block 0 [ 667.685881][T10307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.783199][T10307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.878383][T10529] loop5: detected capacity change from 0 to 128 [ 667.908206][T10529] vfat: Unknown parameter ' &Š’eˆ¹gHAºx` [ 667.908206][T10529] 4öZÆÞØ—H•«êô´ƒOùY¼ìÇ©T%£ ~u€D«N¦÷ÅUØìù u¿tkìfº' [ 667.928834][ T5496] hsr_slave_0: left promiscuous mode [ 667.999490][ T5496] hsr_slave_1: left promiscuous mode [ 668.057623][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.109665][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.135091][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.148280][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.171109][ T9670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.311069][ T5496] veth1_macvtap: left promiscuous mode [ 668.328658][ T5496] veth0_macvtap: left promiscuous mode [ 668.353381][ T5496] veth1_vlan: left promiscuous mode [ 668.358802][ T5496] veth0_vlan: left promiscuous mode [ 668.718393][T10534] loop2: detected capacity change from 0 to 512 [ 668.726433][T10534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 668.811158][T10534] EXT4-fs (loop2): 1 truncate cleaned up [ 668.819500][T10534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.054731][ T9670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.334715][ T54] Bluetooth: hci7: command tx timeout [ 670.158026][T10551] loop0: detected capacity change from 0 to 512 [ 670.231687][T10551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.254012][T10551] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.769126][ T9820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.203987][T10565] loop0: detected capacity change from 0 to 1024 [ 671.388482][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 671.401163][ T54] Bluetooth: hci7: command tx timeout [ 671.535570][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 671.953990][ T6306] smc: removing ib device syz0 [ 673.212911][ T12] hfsplus: b-tree write err: -5, ino 4 [ 673.501789][ T54] Bluetooth: hci7: command tx timeout [ 673.554436][ T9820] hfsplus: bad catalog entry type [ 675.561664][ T54] Bluetooth: hci7: command tx timeout [ 675.716924][T10307] team0: Port device team_slave_0 added [ 675.771499][ T63] hfsplus: b-tree write err: -5, ino 4 [ 675.822778][T10307] team0: Port device team_slave_1 added [ 676.297618][T10209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 676.329614][T10307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.388507][T10307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.491023][T10307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.523082][T10307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.555204][T10307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.658930][T10307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.769211][T10209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 677.048981][T10209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 677.127846][T10209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 677.165568][ T9674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.313852][ T9674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.326252][ T9674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.348166][ T9674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.363616][ T9674] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 677.374781][ T9674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 678.018743][T10307] hsr_slave_0: entered promiscuous mode [ 678.119135][T10307] hsr_slave_1: entered promiscuous mode [ 678.166516][T10307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.185151][T10307] Cannot create hsr debugfs directory [ 678.403958][T10609] Bluetooth: MGMT ver 1.23 [ 679.481622][ T9674] Bluetooth: hci0: command tx timeout [ 679.676065][ T5496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.039337][T10620] loop5: detected capacity change from 0 to 32768 [ 680.064216][T10620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.969 (10620) [ 680.118451][T10620] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 680.137777][ T5496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.152524][T10620] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 680.183096][T10620] BTRFS info (device loop5): disk space caching is enabled [ 680.192203][T10620] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 680.397348][T10620] BTRFS info (device loop5): rebuilding free space tree [ 680.468069][T10620] BTRFS info (device loop5): disabling free space tree [ 680.479601][ T5496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.483537][T10620] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 680.524314][T10620] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 680.848142][ T5496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.945082][T10522] chnl_net:caif_netlink_parms(): no params data found [ 681.403976][ T9821] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 681.561523][ T9674] Bluetooth: hci0: command tx timeout [ 682.648632][T10522] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.685015][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.714104][T10522] bridge_slave_0: entered allmulticast mode [ 682.744443][T10522] bridge_slave_0: entered promiscuous mode [ 682.789041][T10522] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.825702][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.843774][T10522] bridge_slave_1: entered allmulticast mode [ 682.873733][T10522] bridge_slave_1: entered promiscuous mode [ 683.234707][ T5496] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.406040][T10522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.448592][T10522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.595750][ T5496] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.633211][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 683.641510][ T8643] Bluetooth: hci0: command tx timeout [ 683.653174][ T8643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 683.663131][ T8643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 683.680672][ T8643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 683.694030][ T8643] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 683.701845][ T8643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 683.713880][T10593] chnl_net:caif_netlink_parms(): no params data found [ 683.908482][T10522] team0: Port device team_slave_0 added [ 684.137428][ T5496] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.230238][T10522] team0: Port device team_slave_1 added [ 684.326800][T10307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 684.369953][ T5496] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.444179][T10522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.460924][T10522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.490979][T10522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.554728][T10307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 684.590801][T10307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 684.672716][T10209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.691563][T10522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.699204][T10522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.783039][T10522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.833904][T10307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 684.960423][T10593] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.981342][T10593] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.988670][T10593] bridge_slave_0: entered allmulticast mode [ 685.004050][T10593] bridge_slave_0: entered promiscuous mode [ 685.047576][T10593] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.085347][T10593] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.124488][T10593] bridge_slave_1: entered allmulticast mode [ 685.159644][T10593] bridge_slave_1: entered promiscuous mode [ 685.329187][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.337754][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.656662][T10209] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.721186][ T9674] Bluetooth: hci0: command tx timeout [ 685.801234][ T9674] Bluetooth: hci4: command tx timeout [ 685.954557][T10522] hsr_slave_0: entered promiscuous mode [ 685.976166][T10522] hsr_slave_1: entered promiscuous mode [ 685.993055][T10522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.000647][T10522] Cannot create hsr debugfs directory [ 686.027601][T10593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.067418][T10593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.395920][T10593] team0: Port device team_slave_0 added [ 686.529335][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.536558][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.753441][T10593] team0: Port device team_slave_1 added [ 687.076017][ T5496] bridge_slave_1: left allmulticast mode [ 687.092759][ T5496] bridge_slave_1: left promiscuous mode [ 687.098512][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.134619][ T5496] bridge_slave_0: left allmulticast mode [ 687.156748][ T5496] bridge_slave_0: left promiscuous mode [ 687.163635][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.186944][ T5496] team0: left allmulticast mode [ 687.203682][ T5496] team_slave_0: left allmulticast mode [ 687.209270][ T5496] team_slave_1: left allmulticast mode [ 687.214955][ T5496] team0: left promiscuous mode [ 687.219729][ T5496] team_slave_0: left promiscuous mode [ 687.226035][ T5496] team_slave_1: left promiscuous mode [ 687.232088][ T5496] bridge0: port 3(team0) entered disabled state [ 687.254427][ T5496] bridge_slave_1: left allmulticast mode [ 687.260135][ T5496] bridge_slave_1: left promiscuous mode [ 687.274624][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.300554][ T5496] bridge_slave_0: left allmulticast mode [ 687.314113][ T5496] bridge_slave_0: left promiscuous mode [ 687.349360][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.881532][ T9674] Bluetooth: hci4: command tx timeout [ 689.559665][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.599303][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.617559][ T5496] bond0 (unregistering): Released all slaves [ 689.887768][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.916322][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.937444][ T5496] bond0 (unregistering): Released all slaves [ 689.969368][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.976620][ T7324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.036891][T10593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.041266][ T9674] Bluetooth: hci4: command tx timeout [ 690.048016][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.077133][T10593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.091960][T10593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.099387][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.127421][T10593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.601513][ T5243] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 690.810253][ T5243] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 690.819768][ T5243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.831784][ T5243] usb 3-1: config 0 has no interface number 0 [ 690.838028][ T5243] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 690.849381][ T5243] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.869382][ T5243] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 690.879097][ T5243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.900657][ T5243] usb 3-1: Product: syz [ 690.908135][ T5243] usb 3-1: Manufacturer: syz [ 690.910034][T10593] hsr_slave_0: entered promiscuous mode [ 690.914529][ T5243] usb 3-1: SerialNumber: syz [ 690.951456][ T5243] usb 3-1: config 0 descriptor?? [ 690.968300][T10593] hsr_slave_1: entered promiscuous mode [ 690.990061][T10593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 691.006159][T10593] Cannot create hsr debugfs directory [ 691.035768][T10307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.179200][T10663] chnl_net:caif_netlink_parms(): no params data found [ 691.382728][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.428813][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.694261][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.716338][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.747242][T10307] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.121231][ T9674] Bluetooth: hci4: command tx timeout [ 692.289210][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.296420][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.373268][T10663] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.381791][T10663] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.405729][T10663] bridge_slave_0: entered allmulticast mode [ 692.431507][T10663] bridge_slave_0: entered promiscuous mode [ 692.621218][ T5299] usb 3-1: USB disconnect, device number 9 [ 692.750641][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.757961][ T7324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.801303][T10663] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.811381][T10663] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.823525][T10663] bridge_slave_1: entered allmulticast mode [ 692.856110][T10663] bridge_slave_1: entered promiscuous mode [ 692.918613][T10209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.945494][ T5496] hsr_slave_0: left promiscuous mode [ 692.967406][ T5496] hsr_slave_1: left promiscuous mode [ 693.011366][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.018934][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.045046][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.061059][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.109865][ T5496] hsr_slave_0: left promiscuous mode [ 693.126863][ T5496] hsr_slave_1: left promiscuous mode [ 693.143349][T10757] loop2: detected capacity change from 0 to 1024 [ 693.150375][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.191120][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.205620][T10757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 693.219003][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.227331][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.384762][ T5496] veth1_macvtap: left promiscuous mode [ 693.390545][ T5496] veth0_macvtap: left promiscuous mode [ 693.397683][ T5496] veth1_vlan: left promiscuous mode [ 693.405155][ T5496] veth0_vlan: left promiscuous mode [ 693.429705][ T5496] veth1_macvtap: left promiscuous mode [ 693.437661][ T5496] veth0_macvtap: left promiscuous mode [ 693.447593][ T5496] veth1_vlan: left promiscuous mode [ 693.453779][ T5496] veth0_vlan: left promiscuous mode [ 695.432466][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 695.618028][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 699.391960][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 699.550766][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 700.648045][T10663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.667226][T10663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.023821][T10663] team0: Port device team_slave_0 added [ 701.205178][T10663] team0: Port device team_slave_1 added [ 701.373476][T10522] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 701.643667][T10663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.650641][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.689205][T10663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.704443][T10522] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 701.797938][T10522] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 701.939526][T10663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.952657][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.999864][T10663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.045671][T10522] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 702.478661][T10209] veth0_vlan: entered promiscuous mode [ 702.979444][T10663] hsr_slave_0: entered promiscuous mode [ 703.004609][T10663] hsr_slave_1: entered promiscuous mode [ 703.064987][T10663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.102922][T10663] Cannot create hsr debugfs directory [ 703.519667][T10307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.705375][ T8643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 703.716886][ T8643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 703.729696][ T8643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 703.739152][ T8643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 703.748102][ T8643] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 703.757857][ T8643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 704.447854][T10663] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.543617][T10593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 704.718028][T10593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 704.886666][T10663] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.979186][T10593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 705.002463][T10593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 705.132957][T10663] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.415588][T10663] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.592576][T10307] veth0_vlan: entered promiscuous mode [ 705.612379][T10307] veth1_vlan: entered promiscuous mode [ 705.790558][T10522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.891467][ T9674] Bluetooth: hci5: command tx timeout [ 706.273549][T10522] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.314165][ T5496] bridge_slave_1: left allmulticast mode [ 706.353856][ T5496] bridge_slave_1: left promiscuous mode [ 706.359696][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.415807][ T5496] bridge_slave_0: left allmulticast mode [ 706.432251][ T5496] bridge_slave_0: left promiscuous mode [ 706.439132][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.488586][ T5496] bridge_slave_1: left allmulticast mode [ 706.531724][ T5496] bridge_slave_1: left promiscuous mode [ 706.537568][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.549288][ T5496] bridge_slave_0: left allmulticast mode [ 706.555879][ T5496] bridge_slave_0: left promiscuous mode [ 706.562523][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.502826][ T5298] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 707.728522][ T5298] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 707.749985][ T5298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.790179][ T5298] usb 3-1: config 0 has no interface number 0 [ 707.809591][ T5298] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 707.829956][ T5298] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.911888][ T5298] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 707.934090][ T5298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.961086][ T9674] Bluetooth: hci5: command tx timeout [ 707.969783][ T5298] usb 3-1: Product: syz [ 707.978634][ T5298] usb 3-1: Manufacturer: syz [ 707.987555][ T5298] usb 3-1: SerialNumber: syz [ 707.995783][ T5298] usb 3-1: config 0 descriptor?? [ 708.434160][T10843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.453654][T10843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.668176][T10843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.703875][T10843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.763211][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.792012][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.820270][ T8643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 708.822813][ T5496] bond0 (unregistering): Released all slaves [ 708.835671][ T8643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 708.846626][ T8643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 708.884265][ T8643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 708.896770][ T8643] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 708.908325][ T8643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 709.127953][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.151486][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.165480][ T5496] bond0 (unregistering): Released all slaves [ 709.360843][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.368245][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.426575][T10813] chnl_net:caif_netlink_parms(): no params data found [ 709.517901][ T5515] usb 3-1: USB disconnect, device number 10 [ 709.670907][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.678097][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.061229][ T8643] Bluetooth: hci5: command tx timeout [ 710.719704][T10663] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 710.792886][T10663] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 710.848847][T10663] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 711.011035][ T8643] Bluetooth: hci6: command tx timeout [ 711.058461][ T5496] hsr_slave_0: left promiscuous mode [ 711.072010][ T5496] hsr_slave_1: left promiscuous mode [ 711.101998][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.130266][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.174723][ T5496] hsr_slave_0: left promiscuous mode [ 711.200118][ T5496] hsr_slave_1: left promiscuous mode [ 711.218804][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.246017][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.268374][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.284008][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.417268][ T5496] veth0_vlan: left promiscuous mode [ 711.438500][ T5496] veth1_macvtap: left promiscuous mode [ 711.454455][ T5496] veth0_macvtap: left promiscuous mode [ 711.460202][ T5496] veth1_vlan: left promiscuous mode [ 711.490808][ T5496] veth0_vlan: left promiscuous mode [ 712.134742][ T8643] Bluetooth: hci5: command tx timeout [ 712.742481][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 712.818074][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 713.088286][ T8643] Bluetooth: hci6: command tx timeout [ 715.160991][ T8643] Bluetooth: hci6: command tx timeout [ 715.174522][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 715.269546][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 716.550672][T10593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.562601][T10663] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 716.589656][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.597459][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.606680][T10813] bridge_slave_0: entered allmulticast mode [ 716.614551][T10813] bridge_slave_0: entered promiscuous mode [ 716.706548][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.723559][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.730777][T10813] bridge_slave_1: entered allmulticast mode [ 716.751473][T10813] bridge_slave_1: entered promiscuous mode [ 716.950200][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.031998][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.056909][T10593] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.109189][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.116408][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.241976][ T8643] Bluetooth: hci6: command tx timeout [ 717.327923][T10813] team0: Port device team_slave_0 added [ 717.387552][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.394793][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.536211][T10921] loop2: detected capacity change from 0 to 256 [ 717.545444][T10813] team0: Port device team_slave_1 added [ 717.582732][T10921] vfat: Unknown parameter 'sh' [ 717.847461][T10813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.917099][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.945117][T10813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.961759][T10813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.969157][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.999548][T10813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.194951][T10864] chnl_net:caif_netlink_parms(): no params data found [ 718.347601][T10522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.523885][T10813] hsr_slave_0: entered promiscuous mode [ 718.592631][T10813] hsr_slave_1: entered promiscuous mode [ 719.248224][T10663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.563297][T10864] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.570684][T10864] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.579690][T10864] bridge_slave_0: entered allmulticast mode [ 719.588075][T10864] bridge_slave_0: entered promiscuous mode [ 719.722435][T10864] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.752870][T10864] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.760070][T10864] bridge_slave_1: entered allmulticast mode [ 719.805878][T10864] bridge_slave_1: entered promiscuous mode [ 720.120270][T10864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.171710][T10864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.272624][T10663] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.453460][T10593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.487314][T10522] veth0_vlan: entered promiscuous mode [ 720.531538][T10864] team0: Port device team_slave_0 added [ 720.635128][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.642335][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.674802][T10522] veth1_vlan: entered promiscuous mode [ 720.708960][T10864] team0: Port device team_slave_1 added [ 721.092131][T10864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.100522][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.130251][T10864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.144669][T10864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.152475][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.183808][T10864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.205478][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.212637][ T6610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.428475][T10663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.902696][T10864] hsr_slave_0: entered promiscuous mode [ 721.922028][T10864] hsr_slave_1: entered promiscuous mode [ 721.947263][T10864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.994064][T10864] Cannot create hsr debugfs directory [ 722.153459][ T5496] bridge_slave_1: left allmulticast mode [ 722.163720][ T5496] bridge_slave_1: left promiscuous mode [ 722.170762][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.228082][ T5496] bridge_slave_0: left allmulticast mode [ 722.254377][ T5496] bridge_slave_0: left promiscuous mode [ 722.260222][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.590261][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.638237][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.679544][ T5496] bond0 (unregistering): Released all slaves [ 724.012238][T10593] veth0_vlan: entered promiscuous mode [ 724.099122][ T5496] hsr_slave_0: left promiscuous mode [ 724.106956][ T5496] hsr_slave_1: left promiscuous mode [ 724.122641][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.141724][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.177008][ T5496] veth1_vlan: left promiscuous mode [ 724.198580][ T5496] veth0_vlan: left promiscuous mode [ 725.488648][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 725.615432][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 725.814060][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 726.534862][T10593] veth1_vlan: entered promiscuous mode [ 726.712687][T10663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.884363][T10813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 726.981705][T10813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 727.018091][T10813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 727.147746][T10813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 727.500389][T10593] veth0_macvtap: entered promiscuous mode [ 727.667994][T10593] veth1_macvtap: entered promiscuous mode [ 727.817222][ T9674] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 727.857595][ T9674] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 727.872435][ T9674] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 727.886027][ T9674] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 727.902089][ T9674] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 727.910657][ T9674] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 728.417912][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.429442][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.449063][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.462226][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.472769][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.483949][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.496037][T10593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.602023][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.617673][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.647106][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.661076][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.672670][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.685746][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.704879][T10593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.024376][T10593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.035025][T10593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.046007][T10593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.058173][T10593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.639671][T10663] veth0_vlan: entered promiscuous mode [ 729.714888][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.760745][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.766175][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.043918][ T9674] Bluetooth: hci8: command tx timeout [ 730.158706][T10864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 730.242005][T10663] veth1_vlan: entered promiscuous mode [ 730.257615][T10864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 730.475887][T10864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 730.498903][T10864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 730.545773][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.566309][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.581177][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.767185][T10663] veth0_macvtap: entered promiscuous mode [ 730.823867][T11008] chnl_net:caif_netlink_parms(): no params data found [ 731.005017][T10663] veth1_macvtap: entered promiscuous mode [ 731.200639][ T5496] bridge_slave_1: left allmulticast mode [ 731.221340][ T5496] bridge_slave_1: left promiscuous mode [ 731.227717][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.264914][ T5496] bridge_slave_0: left allmulticast mode [ 731.270768][ T5496] bridge_slave_0: left promiscuous mode [ 731.286618][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.131072][ T9674] Bluetooth: hci8: command tx timeout [ 734.202825][ T9674] Bluetooth: hci8: command tx timeout [ 735.633424][ T5496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.646538][ T5496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.674565][ T5496] bond0 (unregistering): Released all slaves [ 735.740813][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.748044][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.051765][ T5496] hsr_slave_0: left promiscuous mode [ 736.072664][ T5496] hsr_slave_1: left promiscuous mode [ 736.079471][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.093003][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.134425][ T5496] veth1_vlan: left promiscuous mode [ 736.139822][ T5496] veth0_vlan: left promiscuous mode [ 736.281065][ T9674] Bluetooth: hci8: command tx timeout [ 737.507169][ T5496] team0 (unregistering): Port device team_slave_1 removed [ 737.606915][ T5496] team0 (unregistering): Port device team_slave_0 removed [ 738.348037][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.361380][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.375962][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.386873][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.397603][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.409614][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.420060][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.431108][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.444390][T10663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.540082][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.547272][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.606919][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.641776][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.670121][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.682795][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.713970][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.730980][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.744754][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.755457][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.769343][T10663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.789131][T10663] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.801666][T10663] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.810542][T10663] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.819671][T10663] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.082382][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.090385][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.146408][T11008] bridge_slave_0: entered allmulticast mode [ 739.184361][T11008] bridge_slave_0: entered promiscuous mode [ 739.281438][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.289732][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.370585][T11008] bridge_slave_1: entered allmulticast mode [ 739.391623][T11008] bridge_slave_1: entered promiscuous mode [ 739.629501][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.696844][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.973590][T11008] team0: Port device team_slave_0 added [ 740.034803][T11008] team0: Port device team_slave_1 added [ 740.315222][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.345203][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.359638][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.371708][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.389495][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.564185][T10864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.644152][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.662988][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.703507][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.977795][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1021'. [ 741.054530][T11008] hsr_slave_0: entered promiscuous mode [ 741.099780][T11008] hsr_slave_1: entered promiscuous mode [ 741.135302][T11008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.156403][T11008] Cannot create hsr debugfs directory [ 741.182232][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.223185][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.238919][T10864] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.383965][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.391187][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.447371][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.454722][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.487727][T10813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.986293][T10813] veth0_vlan: entered promiscuous mode [ 743.465263][T10813] veth1_vlan: entered promiscuous mode [ 746.983891][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.990234][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.381609][ T5320] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 747.398133][T10813] veth0_macvtap: entered promiscuous mode [ 747.453000][T10864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.534307][T10813] veth1_macvtap: entered promiscuous mode [ 748.019218][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.040323][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.090389][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.132577][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.172596][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.213242][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.241462][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.260698][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.279782][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.324630][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.356029][T10813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.516000][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.541367][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.586912][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.624234][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.645012][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.662181][T11185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1031'. [ 748.662521][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.686754][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.721051][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.751050][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.770935][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.797768][T10813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.903439][T11008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 748.954594][T11008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 749.009562][T10813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.111032][T10813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.149073][T10813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.160033][T10813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.190336][T11008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 749.249731][T11008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 749.288246][T10864] veth0_vlan: entered promiscuous mode [ 749.400208][T10864] veth1_vlan: entered promiscuous mode [ 749.864703][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.931182][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.149822][T10864] veth0_macvtap: entered promiscuous mode [ 750.185094][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.197991][T10864] veth1_macvtap: entered promiscuous mode [ 750.227782][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.198407][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.313531][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.350649][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.412088][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.475888][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.505313][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.529612][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.540026][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.551193][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.561875][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.583625][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.615480][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.638958][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.662912][T10864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.715695][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.778122][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.810569][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.828354][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.838369][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.865140][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.875434][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.970455][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.995298][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.020958][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.035839][T10864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.051819][T10864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.064308][T10864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.157870][T10864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.228079][T10864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.296543][T10864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.354118][T10864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.452801][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.484766][ T8643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 752.504203][ T8643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 752.514446][ T8643] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 752.525470][ T8643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 752.534049][ T8643] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 752.553628][ T8643] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 752.597085][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.604337][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.799218][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.806579][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.174676][T11227] loop5: detected capacity change from 0 to 32768 [ 753.201424][T11227] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1038 (11227) [ 753.277845][T11227] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 753.290706][T11227] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 753.314944][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.329701][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.338034][T11227] BTRFS info (device loop5): disk space caching is enabled [ 753.373289][T11227] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 753.566500][ T6306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.632994][ T6306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.692293][ T5299] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 753.939027][T11227] BTRFS info (device loop5): rebuilding free space tree [ 753.994394][T11227] BTRFS info (device loop5): disabling free space tree [ 754.004411][T11227] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 754.006033][ T5299] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 754.101412][ T5299] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 754.111175][T11227] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 754.122033][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.130057][ T5299] usb 2-1: Product: syz [ 754.134445][ T5299] usb 2-1: Manufacturer: syz [ 754.141438][ T5299] usb 2-1: SerialNumber: syz [ 754.153150][ T5299] usb 2-1: config 0 descriptor?? [ 754.601306][ T8643] Bluetooth: hci7: command tx timeout [ 754.723561][T10663] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 755.238054][T11229] chnl_net:caif_netlink_parms(): no params data found [ 755.539767][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.177988][T11229] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.232029][T11229] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.254621][T11229] bridge_slave_0: entered allmulticast mode [ 756.305453][T11229] bridge_slave_0: entered promiscuous mode [ 756.451751][ T5320] usb 2-1: USB disconnect, device number 17 [ 756.666347][T11229] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.683618][ T8643] Bluetooth: hci7: command tx timeout [ 756.711170][T11229] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.718598][T11229] bridge_slave_1: entered allmulticast mode [ 756.768339][T11229] bridge_slave_1: entered promiscuous mode [ 757.101226][T11229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.683218][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.155598][T11229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.625949][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.761686][ T8643] Bluetooth: hci7: command tx timeout [ 758.800144][T11229] team0: Port device team_slave_0 added [ 758.999392][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.113718][T11229] team0: Port device team_slave_1 added [ 759.311842][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.411469][T11229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.418507][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.521891][T11229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.574159][T11229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.614518][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.644568][T11229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.797965][T11008] veth0_vlan: entered promiscuous mode [ 759.978815][ T9674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 759.997575][ T9674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 760.023805][ T9674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 760.043400][T11229] hsr_slave_0: entered promiscuous mode [ 760.055549][ T9674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 760.068523][ T9674] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 760.082161][ T9674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 760.096491][T11229] hsr_slave_1: entered promiscuous mode [ 760.111579][T11229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.126524][T11229] Cannot create hsr debugfs directory [ 760.231101][ T5237] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 760.378548][T11008] veth1_vlan: entered promiscuous mode [ 760.921787][ T9674] Bluetooth: hci7: command tx timeout [ 761.144767][ T11] bridge_slave_1: left allmulticast mode [ 761.194772][ T11] bridge_slave_1: left promiscuous mode [ 761.221651][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.254158][ T11] bridge_slave_0: left allmulticast mode [ 761.287494][ T11] bridge_slave_0: left promiscuous mode [ 761.322626][ T5237] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 761.324325][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.333146][ T5237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.348849][ T5237] usb 2-1: config 0 has no interface number 0 [ 761.355110][ T5237] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 761.365620][ T5237] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.422773][ T5237] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 761.433239][ T5237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.441911][ T5237] usb 2-1: Product: syz [ 761.446176][ T5237] usb 2-1: Manufacturer: syz [ 761.450792][ T5237] usb 2-1: SerialNumber: syz [ 761.462179][ T5237] usb 2-1: config 0 descriptor?? [ 761.470023][T11316] loop5: detected capacity change from 0 to 512 [ 761.517889][T11316] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1056: corrupted in-inode xattr: invalid ea_ino [ 761.536640][T11316] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1056: couldn't read orphan inode 15 (err -117) [ 761.555082][T11316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.637974][T11316] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1056: invalid indirect mapped block 234881024 (level 0) [ 761.790596][T10663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.993096][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.031951][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.136292][ T9674] Bluetooth: hci0: command tx timeout [ 762.285029][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.312497][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.658783][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.674999][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.688420][ T11] bond0 (unregistering): Released all slaves [ 762.763712][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 763.236207][ T9] usb 2-1: USB disconnect, device number 18 [ 763.855881][ T11] hsr_slave_0: left promiscuous mode [ 763.901073][ T11] hsr_slave_1: left promiscuous mode [ 763.908385][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.943030][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.962693][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.123750][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.218584][ T9674] Bluetooth: hci0: command tx timeout [ 764.565211][ T11] veth1_macvtap: left promiscuous mode [ 764.643671][ T11] veth0_macvtap: left promiscuous mode [ 764.737368][ T11] veth1_vlan: left promiscuous mode [ 764.771207][ T11] veth0_vlan: left promiscuous mode [ 765.774331][T11339] loop1: detected capacity change from 0 to 40427 [ 765.791574][T11339] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 765.800557][T11339] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 765.826979][T11339] F2FS-fs (loop1): invalid crc value [ 765.877038][T11339] F2FS-fs (loop1): Found nat_bits in checkpoint [ 766.044010][T11339] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 766.052031][T11339] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 766.282748][ T9674] Bluetooth: hci0: command tx timeout [ 766.555745][ T11] team0 (unregistering): Port device team_slave_1 removed [ 766.673221][ T11] team0 (unregistering): Port device team_slave_0 removed [ 766.849748][T11376] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 768.296550][T11008] veth0_macvtap: entered promiscuous mode [ 768.361234][ T9674] Bluetooth: hci0: command tx timeout [ 768.376126][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1067'. [ 768.533922][T11379] loop1: detected capacity change from 0 to 512 [ 768.550468][T11008] veth1_macvtap: entered promiscuous mode [ 768.558353][T11379] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 768.696293][T11379] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 768.795187][T11379] EXT4-fs (loop1): 1 truncate cleaned up [ 768.832728][T11379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.978036][T10813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.744029][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.928919][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.020898][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.060475][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.070804][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.081458][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.091915][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.102592][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.114703][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.125251][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.135178][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.146178][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.176942][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.189529][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.200114][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.218588][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.229202][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.239700][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.250387][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.260807][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.272601][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.287784][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.298366][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.308297][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.321627][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.339955][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.440182][T11305] chnl_net:caif_netlink_parms(): no params data found [ 770.496691][T11008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.540583][T11008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.550513][T11008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.559770][T11008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.178847][T11422] loop3: detected capacity change from 0 to 512 [ 771.217627][T11422] EXT4-fs: Ignoring removed nobh option [ 771.291029][T11422] EXT4-fs: Ignoring removed nobh option [ 771.363408][T11422] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 771.398575][T11305] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.411054][T11305] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.418673][T11305] bridge_slave_0: entered allmulticast mode [ 771.427961][T11305] bridge_slave_0: entered promiscuous mode [ 771.429748][T11422] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1085: invalid indirect mapped block 2683928664 (level 1) [ 771.465220][ T6306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.517838][ T6306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.524227][T11422] EXT4-fs (loop3): 1 truncate cleaned up [ 771.551353][T11305] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.571730][T11422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.591658][T11305] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.621347][T11305] bridge_slave_1: entered allmulticast mode [ 771.661497][T11412] loop5: detected capacity change from 0 to 40427 [ 771.663561][T11305] bridge_slave_1: entered promiscuous mode [ 771.669728][T11412] F2FS-fs (loop5): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 771.683164][T11412] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 771.693911][T11412] F2FS-fs (loop5): invalid crc value [ 771.709236][T10864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.733649][T11412] F2FS-fs (loop5): Found nat_bits in checkpoint [ 771.895930][T11229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 771.897989][ T7324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.920678][T11412] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 771.927840][ T7324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.938053][T11412] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 772.013378][T11305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.086256][T11305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.114782][T11439] loop3: detected capacity change from 0 to 128 [ 772.141066][T11229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 772.216454][ T29] audit: type=1800 audit(1725225708.999:451): pid=11439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1086" name="bus" dev="loop3" ino=1048783 res=0 errno=0 [ 772.533096][T11229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 773.390076][T11229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 773.962163][T11305] team0: Port device team_slave_0 added [ 774.031418][T11305] team0: Port device team_slave_1 added [ 774.992773][T11305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.022153][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.081371][T11305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.111968][T11305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.119396][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.176465][T11305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.467771][T11305] hsr_slave_0: entered promiscuous mode [ 775.505321][T11305] hsr_slave_1: entered promiscuous mode [ 775.532417][T11305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.552880][T11305] Cannot create hsr debugfs directory [ 775.764127][T11458] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1091'. [ 777.120775][T11458] infiniband syz0: set active [ 777.149824][T11458] infiniband syz0: added bond_slave_0 [ 777.166695][T11458] syz0: rxe_create_cq: returned err = -12 [ 777.190345][T11305] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.216378][T11458] infiniband syz0: Couldn't create ib_mad CQ [ 777.242539][T11458] infiniband syz0: Couldn't open port 1 [ 777.305851][T11476] loop5: detected capacity change from 0 to 512 [ 777.318134][T11476] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 777.414961][T11458] RDS/IB: syz0: added [ 777.425580][T11476] EXT4-fs (loop5): 1 truncate cleaned up [ 777.444605][T11458] smc: adding ib device syz0 with port count 1 [ 777.450780][T11458] smc: ib device syz0 port 1 has pnetid [ 777.464005][T11476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.529131][T11476] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 777.560714][T11305] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.854200][T10663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.877032][T11305] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.990782][T11229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.102607][T11305] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.268706][T11229] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.373867][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.381241][ T6610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.480889][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.488257][ T5496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.931516][T11305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 780.969283][T11305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 781.005913][T11305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 781.057321][T11305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 781.445090][T11510] Bluetooth: MGMT ver 1.23 [ 782.560333][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1108'. [ 782.663395][T11514] veth1_macvtap: left promiscuous mode [ 782.733109][T11515] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1108'. [ 782.949854][T11305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.018446][T11229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.334162][T11519] loop5: detected capacity change from 0 to 1024 [ 783.368106][T11305] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.460384][T11519] EXT4-fs: Ignoring removed oldalloc option [ 784.213021][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.220221][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.729824][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.737100][ T7324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.174680][T11519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.212517][ T8643] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 785.230440][ T8643] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 785.254529][ T8643] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 785.292963][ T8643] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 785.317726][ T8643] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 785.325949][ T8643] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 785.615586][T11229] veth0_vlan: entered promiscuous mode [ 785.666640][T10663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.693210][T11229] veth1_vlan: entered promiscuous mode [ 785.852138][T11538] sch_tbf: peakrate 9116752 is lower than or equals to rate 15423774298183997519 ! [ 786.059390][T11229] veth0_macvtap: entered promiscuous mode [ 786.097348][T11229] veth1_macvtap: entered promiscuous mode [ 786.257173][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.376109][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.526961][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.689521][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.823786][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.845735][ T8643] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 786.850919][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.878520][ T8643] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 786.890362][ T8643] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 786.897256][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.927260][ T8643] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 786.940924][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.983950][ T8643] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 786.991361][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.024206][ T8643] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 787.158288][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.189460][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.200579][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.213694][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.224707][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.238345][T11229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.294486][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.401192][ T54] Bluetooth: hci9: command tx timeout [ 787.408180][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.431262][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.452438][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.473305][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.490969][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.500812][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.524869][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.535550][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.546433][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.557092][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.568958][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.579537][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.590745][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.616675][T11229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.661583][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1120'. [ 787.713281][T11559] veth1_macvtap: left promiscuous mode [ 787.771099][T11560] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1120'. [ 787.835865][T11229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.890980][T11229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.940929][T11229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.000746][T11229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.467268][ T30] INFO: task syz.1.873:10130 blocked for more than 143 seconds. [ 789.522084][ T54] Bluetooth: hci10: command tx timeout [ 789.530003][ T54] Bluetooth: hci9: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 789.572427][ T30] Not tainted 6.11.0-rc6-syzkaller #0 [ 789.578470][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 789.672454][ T30] task:syz.1.873 state:D stack:24672 pid:10130 tgid:10130 ppid:8680 flags:0x00000004 [ 789.785188][ T30] Call Trace: [ 789.788616][ T30] [ 789.851836][ T30] __schedule+0x1800/0x4a60 [ 789.856449][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.862254][ T30] ? __pfx___schedule+0x10/0x10 [ 789.867161][ T30] ? __pfx_lock_release+0x10/0x10 [ 789.876785][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 789.883308][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 789.889677][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 789.895325][ T30] ? schedule+0x90/0x320 [ 789.899606][ T30] schedule+0x14b/0x320 [ 789.903851][ T30] ? down_read+0x6a5/0xa40 [ 789.908294][ T30] schedule_preempt_disabled+0x13/0x30 [ 789.914068][ T30] down_read+0x705/0xa40 [ 789.918803][ T30] ? __pfx_down_read+0x10/0x10 [ 789.924120][ T30] ? release_fault_lock+0xa6/0x230 [ 789.929273][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 789.934817][ T30] ? count_memcg_event_mm+0x90/0x420 [ 789.940167][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 789.951416][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 789.957390][ T30] ? count_memcg_event_mm+0x90/0x420 [ 789.962850][ T30] ? __filemap_get_folio+0x984/0xc10 [ 789.970802][ T30] filemap_fault+0x828/0x1760 [ 789.977948][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 789.984442][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 789.989605][ T30] ? pte_alloc_one+0x443/0x5d0 [ 789.994473][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 789.999637][ T30] ? __pfx_validate_chain+0x10/0x10 [ 790.005204][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.010945][ T30] ? __pfx_validate_chain+0x10/0x10 [ 790.016181][ T30] __do_fault+0x137/0x460 [ 790.020550][ T30] handle_pte_fault+0x1176/0x6fc0 [ 790.026185][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.032145][ T30] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 790.037905][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.044609][ T30] ? mark_lock+0x9a/0x350 [ 790.049519][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.059569][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 790.065900][ T29] audit: type=1326 audit(1725225726.849:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.5.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1b379eb9 code=0x7ffc0000 [ 790.116125][ T29] audit: type=1326 audit(1725225726.849:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.5.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1b379eb9 code=0x7ffc0000 [ 790.132368][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.138891][ T29] audit: type=1326 audit(1725225726.849:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.5.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f2f1b379eb9 code=0x7ffc0000 [ 790.171157][ T29] audit: type=1326 audit(1725225726.849:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.5.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1b379eb9 code=0x7ffc0000 [ 790.193508][ T30] ? __lock_acquire+0x137a/0x2040 [ 790.202076][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.207785][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 790.223559][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 790.229454][ T29] audit: type=1326 audit(1725225726.849:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.5.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1b379eb9 code=0x7ffc0000 [ 790.232355][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.263348][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 790.269402][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 790.276963][ T30] handle_mm_fault+0x1109/0x1bc0 [ 790.288749][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 790.296593][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.303110][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 790.308382][ T30] ? exc_page_fault+0x113/0x8c0 [ 790.315961][ T30] exc_page_fault+0x459/0x8c0 [ 790.324431][ T30] asm_exc_page_fault+0x26/0x30 [ 790.329704][ T30] RIP: 0033:0x7fad77641101 [ 790.334804][ T30] RSP: 002b:00007ffd20cb24e0 EFLAGS: 00010246 [ 790.341641][ T30] RAX: 0000000020000240 RBX: 0000000000000004 RCX: 0000000000000000 [ 790.350452][ T30] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000555582ff93c8 [ 790.359189][ T30] RBP: 00007ffd20cb25f8 R08: 0000000000000000 R09: 0000000000000000 [ 790.368187][ T30] R10: 0000000000000000 R11: 0000000000000004 R12: 000000000009a3c1 [ 790.376674][ T30] R13: 00007ffd20cb2620 R14: 0000000000000032 R15: fffffffffffffffe [ 790.388113][ T30] [ 790.425598][ T30] [ 790.425598][ T30] Showing all locks held in the system: [ 790.480890][ T30] 2 locks held by kworker/0:1/9: [ 790.485896][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 790.526973][ T30] #1: ffffc900000e7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 790.539734][ T30] 2 locks held by kworker/u8:1/12: [ 790.545218][ T30] 1 lock held by khungtaskd/30: [ 790.550113][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 790.571142][ T30] 2 locks held by getty/4987: [ 790.575892][ T30] #0: ffff888034a8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 790.586360][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 790.599166][ T30] 2 locks held by kworker/u8:11/5496: [ 790.605604][ T30] 1 lock held by syz.1.64/5812: [ 790.610492][ T30] 3 locks held by kworker/0:7/7754: [ 790.616967][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 790.658741][ T30] #1: ffffc900040f7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 790.671843][ T30] #2: ffff888022ade240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 790.682759][ T30] 1 lock held by syz.1.873/10130: [ 790.687788][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 790.710957][ T30] 1 lock held by syz-executor/11008: [ 790.716292][ T30] 1 lock held by syz.2.1033/11190: [ 790.723165][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 790.752857][ T30] 1 lock held by syz-executor/11229: [ 790.758199][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 790.870968][ T30] 1 lock held by syz-executor/11305: [ 790.876316][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 790.954015][ T30] 1 lock held by syz.1.1083/11413: [ 790.959191][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 790.975545][ T30] 5 locks held by syz.3.1091/11458: [ 790.980785][ T30] 1 lock held by syz-executor/11531: [ 790.988679][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 791.011975][ T30] 4 locks held by syz-executor/11550: [ 791.017442][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 791.027921][ T30] #1: ffffffff8f9fce90 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 791.041001][ T30] #2: ffffffff8f9fd050 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 791.052762][ T30] #3: ffff888048248f40 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 791.073406][ T30] 1 lock held by syz.5.1123/11570: [ 791.078645][ T30] [ 791.132061][ T30] ============================================= [ 791.132061][ T30] [ 791.216419][ T30] NMI backtrace for cpu 1 [ 791.220796][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller #0 [ 791.229583][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 791.239659][ T30] Call Trace: [ 791.242951][ T30] [ 791.245884][ T30] dump_stack_lvl+0x241/0x360 [ 791.250576][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.255783][ T30] ? __pfx__printk+0x10/0x10 [ 791.260376][ T30] ? vprintk_emit+0x667/0x7c0 [ 791.265062][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 791.270098][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 791.275063][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 791.280536][ T30] ? _printk+0xd5/0x120 [ 791.284694][ T30] ? __pfx__printk+0x10/0x10 [ 791.289294][ T30] ? __wake_up_klogd+0xcc/0x110 [ 791.294157][ T30] ? __pfx__printk+0x10/0x10 [ 791.298750][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.304399][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 791.309440][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 791.315438][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 791.321449][ T30] watchdog+0xff4/0x1040 [ 791.325747][ T30] ? watchdog+0x1ea/0x1040 [ 791.330209][ T30] ? __pfx_watchdog+0x10/0x10 [ 791.334920][ T30] kthread+0x2f2/0x390 [ 791.339105][ T30] ? __pfx_watchdog+0x10/0x10 [ 791.343893][ T30] ? __pfx_kthread+0x10/0x10 [ 791.348507][ T30] ret_from_fork+0x4d/0x80 [ 791.352947][ T30] ? __pfx_kthread+0x10/0x10 [ 791.357564][ T30] ret_from_fork_asm+0x1a/0x30 [ 791.362368][ T30] [ 791.366928][ T30] Sending NMI from CPU 1 to CPUs 0: [ 791.373122][ C0] NMI backtrace for cpu 0 [ 791.373138][ C0] CPU: 0 UID: 0 PID: 11008 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller #0 [ 791.373164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 791.373179][ C0] RIP: 0010:unwind_next_frame+0x51b/0x2a00 [ 791.373222][ C0] Code: 00 00 00 fc ff df 0f b6 04 08 84 c0 75 34 48 63 2b 48 01 dd 48 89 ef 4c 89 f6 e8 30 62 52 00 48 8d 43 04 4c 39 f5 4c 0f 46 e8 <48> 8d 43 fc 4c 0f 47 e0 4c 0f 46 fb 4d 39 e5 77 1d e8 af 5f 52 00 [ 791.373241][ C0] RSP: 0018:ffffc900045076e8 EFLAGS: 00000216 [ 791.373262][ C0] RAX: ffffffff90305700 RBX: ffffffff903056fc RCX: ffff88802ce71e00 [ 791.373280][ C0] RDX: 0000000000000000 RSI: ffffffff81eaed25 RDI: ffffffff81eaed94 [ 791.373298][ C0] RBP: ffffffff81eaed94 R08: ffffffff81412c60 R09: ffffc900045078b0 [ 791.373315][ C0] R10: 0000000000000003 R11: ffffffff817f2f00 R12: ffffffff90305708 [ 791.373331][ C0] R13: ffffffff903056f0 R14: ffffffff81eaed25 R15: ffffffff903056f0 [ 791.373354][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 791.373374][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 791.373390][ C0] CR2: 000000110c43ee61 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 791.373409][ C0] Call Trace: [ 791.373418][ C0] [ 791.373427][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 791.373460][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 791.373497][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 791.373531][ C0] ? nmi_handle+0x2a/0x5a0 [ 791.373567][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 791.373597][ C0] ? nmi_handle+0x151/0x5a0 [ 791.373620][ C0] ? nmi_handle+0x2a/0x5a0 [ 791.373644][ C0] ? unwind_next_frame+0x51b/0x2a00 [ 791.373680][ C0] ? default_do_nmi+0x63/0x160 [ 791.373711][ C0] ? exc_nmi+0x123/0x1f0 [ 791.373741][ C0] ? end_repeat_nmi+0xf/0x53 [ 791.373772][ C0] ? vfree+0x185/0x2e0 [ 791.373807][ C0] ? vfree+0x1f4/0x2e0 [ 791.373841][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 791.373872][ C0] ? unwind_next_frame+0x510/0x2a00 [ 791.373908][ C0] ? vfree+0x185/0x2e0 [ 791.373940][ C0] ? vfree+0x1f4/0x2e0 [ 791.373974][ C0] ? unwind_next_frame+0x51b/0x2a00 [ 791.374011][ C0] ? unwind_next_frame+0x51b/0x2a00 [ 791.374048][ C0] ? unwind_next_frame+0x51b/0x2a00 [ 791.374084][ C0] [ 791.374093][ C0] [ 791.374106][ C0] ? vfree+0x185/0x2e0 [ 791.374143][ C0] ? vfree+0x186/0x2e0 [ 791.374176][ C0] ? vfree+0x186/0x2e0 [ 791.374211][ C0] ? __kernel_text_address+0xd/0x40 [ 791.374235][ C0] ? vfree+0x186/0x2e0 [ 791.374269][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 791.374300][ C0] arch_stack_walk+0x151/0x1b0 [ 791.374329][ C0] ? vfree+0x186/0x2e0 [ 791.374367][ C0] stack_trace_save+0x118/0x1d0 [ 791.374398][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 791.374431][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.374472][ C0] save_stack+0xfb/0x1f0 [ 791.374501][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.374539][ C0] ? __pfx_save_stack+0x10/0x10 [ 791.374567][ C0] ? free_unref_page+0xd22/0xea0 [ 791.374596][ C0] ? vfree+0x186/0x2e0 [ 791.374641][ C0] ? page_ext_get+0x20/0x2a0 [ 791.374671][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.374708][ C0] __reset_page_owner+0x76/0x430 [ 791.374739][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.374779][ C0] free_unref_page+0xd22/0xea0 [ 791.374814][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.374850][ C0] vfree+0x186/0x2e0 [ 791.374888][ C0] kcov_close+0x2b/0x50 [ 791.374920][ C0] ? __pfx_kcov_close+0x10/0x10 [ 791.374951][ C0] __fput+0x24c/0x8a0 [ 791.374997][ C0] task_work_run+0x251/0x310 [ 791.375026][ C0] ? __pfx_task_work_run+0x10/0x10 [ 791.375053][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.375085][ C0] ? kmem_cache_free+0x145/0x350 [ 791.375114][ C0] do_exit+0xa2f/0x27f0 [ 791.375144][ C0] ? __pfx_do_exit+0x10/0x10 [ 791.375164][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 791.375199][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 791.375238][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 791.375274][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.375306][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 791.375346][ C0] do_group_exit+0x207/0x2c0 [ 791.375373][ C0] __x64_sys_exit_group+0x3f/0x40 [ 791.375396][ C0] x64_sys_call+0x2634/0x2640 [ 791.375431][ C0] do_syscall_64+0xf3/0x230 [ 791.375459][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.375489][ C0] RIP: 0033:0x7f7361779eb9 [ 791.375507][ C0] Code: Unable to access opcode bytes at 0x7f7361779e8f. [ 791.375521][ C0] RSP: 002b:00007ffd5fef70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 791.375544][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7361779eb9 [ 791.375561][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 791.375576][ C0] RBP: 00007f73617e8ea7 R08: 00007ffd5fef4e86 R09: 00000000000c0c1a [ 791.375592][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 791.375606][ C0] R13: 00000000000c0c1a R14: 00000000000c04d9 R15: 00007ffd5fef7290 [ 791.375636][ C0] [ 791.379096][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 791.879921][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller #0 [ 791.888690][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 791.898751][ T30] Call Trace: [ 791.902029][ T30] [ 791.905132][ T30] dump_stack_lvl+0x241/0x360 [ 791.909820][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.915027][ T30] ? __pfx__printk+0x10/0x10 [ 791.919617][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 791.925621][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.931276][ T30] ? vscnprintf+0x5d/0x90 [ 791.935630][ T30] panic+0x349/0x860 [ 791.939533][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.945182][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 791.951350][ T30] ? __pfx_panic+0x10/0x10 [ 791.955780][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 791.961542][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.967306][ T30] ? __irq_work_queue_local+0x137/0x410 [ 791.972878][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.978527][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 791.983909][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 791.990076][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 791.996257][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 792.001921][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 792.008095][ T30] watchdog+0x1033/0x1040 [ 792.012450][ T30] ? watchdog+0x1ea/0x1040 [ 792.016890][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.021587][ T30] kthread+0x2f2/0x390 [ 792.025682][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.030376][ T30] ? __pfx_kthread+0x10/0x10 [ 792.034992][ T30] ret_from_fork+0x4d/0x80 [ 792.039428][ T30] ? __pfx_kthread+0x10/0x10 [ 792.044047][ T30] ret_from_fork_asm+0x1a/0x30 [ 792.048851][ T30] [ 792.052108][ T30] Kernel Offset: disabled [ 792.056438][ T30] Rebooting in 86400 seconds..