last executing test programs: 9.122393825s ago: executing program 1 (id=2014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="4e2bdf9815ff7fe18f180000000000000000000000000000007919b8000000000095000000ff0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x4, 0x0, &(0x7f0000000200)="63eced8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000000a5706adb8dac8bbfc072caf300000000000000000011ffffff00000000950000345d8faf00"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x15, 0x3, &(0x7f0000001780)=ANY=[], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x31, r5, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8}, 0x90) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="38000300010003", 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000080)={[{@errors_remount}, {}]}, 0xfd, 0x48d, &(0x7f0000000940)="$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") 7.825566488s ago: executing program 1 (id=2026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x281200c, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16, @ANYRESOCT, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29bb72f4a2f73b811c7fd9bae7ecd53b9ad91191f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50a7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399c0000010000000000177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8960900a04195ad43adb61100000000000000", @ANYRES16=r0, @ANYRES16=0x0], 0x4, 0x715, &(0x7f0000000500)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809", 0x32}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.736414586s ago: executing program 0 (id=2028): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)) 7.583334328s ago: executing program 0 (id=2031): open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000280)=@req={0xfff, 0x3, 0x3}, 0x10) open(&(0x7f0000000100)='.\x00', 0x555502, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000eaf3"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_getres(0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001140)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910970000000000620000020000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005a000d0300000000000000000c000080080000003a42b50c4a7231bf97c943d1eff5f27da2b20faa7d6db850b0e47cf629ee306d0000000000000000cf", @ANYRES32, @ANYBLOB], 0x1c}], 0x1}, 0x0) 7.097702476s ago: executing program 1 (id=2037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="4e2bdf9815ff7fe18f180000000000000000000000000000007919b8000000000095000000ff0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x4, 0x0, &(0x7f0000000200)="63eced8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000000a5706adb8dac8bbfc072caf300000000000000000011ffffff00000000950000345d8faf00"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x15, 0x3, &(0x7f0000001780)=ANY=[], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x31, r5, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8}, 0x90) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="38000300010003", 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000080)={[{@errors_remount}, {}]}, 0xfd, 0x48d, &(0x7f0000000940)="$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") 6.111193264s ago: executing program 0 (id=2041): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {0xfff3}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 6.005081663s ago: executing program 3 (id=2042): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f00000007c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.111024384s ago: executing program 3 (id=2045): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2214806, &(0x7f00000004c0)=ANY=[@ANYBLOB='hide,unhide\x00norock,block=0x0000000000000000,session=0x0000000000000062,sbsector=0x0000000000000003Amap=acorn,iocharset=iso8859-2,map=normal,map=acorn,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c017cb7f731978191fb0b57e3a2d3ee513f5de981ecdff21486971784c6ac65977b63e2baf9ddd6207740ce64509d05f22cacdb53352bf109"], 0x0, 0x6a4, &(0x7f0000000f00)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) 4.725139475s ago: executing program 2 (id=2048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x281200c, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16, @ANYRESOCT, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29bb72f4a2f73b811c7fd9bae7ecd53b9ad91191f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50a7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399c0000010000000000177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8960900a04195ad43adb61100000000000000", @ANYRES16=r0, @ANYRES16=0x0], 0x4, 0x715, &(0x7f0000000500)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809", 0x32}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.722756755s ago: executing program 3 (id=2049): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x400169042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r2, 0x81fd) write$P9_RREADDIR(r2, &(0x7f0000000280)={0xb}, 0xb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x1670e68) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 4.363374173s ago: executing program 3 (id=2050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a08692526ab83e3c64242fe4131166437600cf623fcb7992"}]]}, 0x38}}, 0x0) 3.914620689s ago: executing program 2 (id=2051): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYRES16=r0], 0x1c}}, 0x0) 3.688213917s ago: executing program 4 (id=2053): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth0_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.688298707s ago: executing program 4 (id=2054): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) syz_emit_ethernet(0x66, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8910, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x6, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.558018687s ago: executing program 0 (id=2055): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) semget$private(0x0, 0x4, 0x22) semop(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregs(0xe, r3, 0x0, &(0x7f0000000440)=""/255) 2.462443755s ago: executing program 1 (id=2056): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f00000007c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.462109115s ago: executing program 2 (id=2057): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000240)={[{@part={'part', 0x3d, 0x200}}, {@nls={'nls', 0x3d, 'cp863'}}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {}]}, 0x1, 0x5e4, &(0x7f0000000cc0)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 2.238068722s ago: executing program 3 (id=2058): unshare(0x2000400) socket$kcm(0x10, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.51854502s ago: executing program 0 (id=2059): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fdatasync(r0) 1.51703947s ago: executing program 4 (id=2060): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@fmask={'fmask', 0x3d, 0x4}}, {@umask={'umask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x361274c1}}, {@dmask={'dmask', 0x3d, 0x9}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@errors_continue}]}, 0x5, 0x1518, &(0x7f0000002280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005a00)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x234) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') 1.431531527s ago: executing program 2 (id=2061): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f00000003c0), 0x2, 0x4e6, &(0x7f0000000840)="$eJzs3MtrXNUfAPDvvUnapo9f8qvPPrSjVQyKTZM+Fy6sKHQjCIrUZUzSUpu20kRoS7BRpIILpX+Bj53gX+BKN6LiQnGruBWhSDatLmTkztwbZzozeXWSaZPPB6Y9595z7znn3nuS85ibANatUvZPErE1In6JiL5qtD5Bqfrfzdnp0b9mp0eTKJdf/jOppLsxOz1aJC2O25JHBtKI9L0kdjXJd/LS5TMjExPjF/L44FSah86OnBo/NX5u+OjRgwd6jxwePtSWemZlurHz7fO7dxx/7dqLoyeuvf7dF1l5y/n+2npU9S8xh66GLaUo1V/LGo8v8ex3um014aQ7+zftXGFYtOypzW5XT6X995VzlX198cK7RboNnSwksCKyxr6xYevc77KZcq0kqR4ArBGJJg3rVPGL/sZsNlKdHm0cBzfR3dYuSEddPxaVCmX1vpl/qnu6KyPYUn91bNSzQvnfGxEnZv7+OPtE03kIAID2+upYxOa831F8qnvSuL8m3f/yWaH+iPh/RGyPiHvy/st9EZW0D0TEgzXHJPl60nxKt8Qb+z8/9eaB2u5q22T9v2fyta36/t/c+kV/Vx7bVql/T3Ly9MT4/vyaDETPxiw+1HjquWm1r5//+aNW+Zdq+n/ZJ8u/6Avm5fij+5YJurGRqZHbrXfh+juVC3ulsf5JdCdFKGJHROxcxvmza3b6yc93t9pfV/+sng31/7D1ydswDil/GvFE9f7PxC31j3zdI6msT559c3Dy0uWnT9euTw4dOTx8aHBTTIzvHyyeikbf/3j1pTzYMIxY+P6vrOz+b276/M+tXPYnteu1k0vP4+qv77cc0yz3+d+QvFIJF+tSF0empi4MRWxIZhq3D/937MWR3rr0Wf0H9jZv/9sj/vkkP25XRGQP8UMR8XBE7MnL/khEPBoRe+ep/7fPPfZGqyHknXD/x5Z0/1sFnv0hovmurjPffNmQ8QelRdY/u/8HK6GBfMvYyNSmheo1X0lrA7d9AQEAAOAusCcitkaS7svnOLdGmu7bF7FlbgZlcuqpk+ffOjdWfUegP3rSYqarr2Y+dCifG87i2VHDNfFs/4HKvHG5XC73ZvFs/D6xrbNVh3VvS4v2n/m98ZUWYK1Z0jpaqzfagLvS8tfR2/+FDGB1raHv8wNLpP3D+rXo9r9Sb8EBHdOs/V+JuNmBogCrrFn7f7UD5QBWn/E/rF/aP6xbC75MC6xJi3pJfhmB7cfnSZN0r0ymrQNp1G3JfuLV/RWA/ogicfEFx/lP+Fsa0Z4SdrW1pr119zRtmmZTtCOvSBdM072EP8SwuoH0zihGNbAxIhZ4eucetitF4PJKF6zSCD7r7E8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA2/dvAAAA//+lFtmI") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x0) 1.421077827s ago: executing program 1 (id=2062): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x800080, &(0x7f0000000600)=ANY=[], 0x9, 0x19d, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = gettid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000000ac0)=[{0x0, &(0x7f0000000740), 0x2}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000ac0)='rpm_return_int\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r0, 0x0, 0x578410e9) sendfile(r2, r0, 0x0, 0x101000000) 1.288752148s ago: executing program 4 (id=2063): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x6, 0x2}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x23) 1.180345097s ago: executing program 4 (id=2064): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth0_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.036545188s ago: executing program 2 (id=2065): syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f000001f200)='./file0\x00', 0x10003, &(0x7f00000001c0)=ANY=[], 0x1, 0x9e9, &(0x7f0000000a40)="$eJzsnUuMG0kdxr9u25lJMklmhhVk4bAdZC2RQJEFrMQtnocncTTJzM54onAhcRhnM2R27B07YoMi1twWcckR7WVzXCEOkeCAhIT2uJcIJC4IceCwSEi5BAmJRUIxcnVVu9vd7fc87P/3k5Iql7urq/tz9fRXr36x8eRGYWXTcRwHsxZcvkCAOupo6O+SOq2hw3+fc9P+89HPrnyz+sclzABn3/jDe49//fVPa6dv/vbs76fwfPYHL15++/PnX37++otXhfs7VWen6uyVa07RuVsu14p3d0vO9k71wSVnfbdUrJacnb1qaT/w9b3dcqXyyCnubZ85VdkvVatOce+R86D0yKmVndr+I6f4TnFnz7l06ZJz5hRIj2z96qhLQAghhBBCCCGEEEIIIYQQQgghZDQ0GphqhpePuiCEEEIIIYQQQgghhBBCCCGEEEIIGZiV/Gruz77PFixchYVPLACzrXQz7386Jp/mpndU7Lz6/6oX68yJHsuZAXDfy9/GNRWzkFJpKdQLmb1fvPqLFRfimV7AQIfmuMlEGtexgoL+XNdlt5BV/xuu6TBrEp7pK3InGM5dTl6YuWzhWSCfROh8TD5XdTjbFs5ZtgobjUajx0s0AHFqEhlQfwF8I/4r6i8b6i8b6j/2WMPsTP3l4ESkUX/ZTCv/n8FJL8X4//tt/j+hbzV2TE5x/r+bL4/0/xH3tKb/r3j529jo1/8bw61Dc9xpz/9fxw72sa/T49oBGhqvHSAbHX6lVfS4S3YMOMZFI4cA9ZcN9ZcN9ZcN9ZcN9ZcN9ZeNHfL/9mc6EuH/7XH2/94IBjf0+/9VlPEOVrCDXZR0epz/v+w/YV9+7eGFbELtdLD993FYyd62Y/2fcD7v3D1A/WVD/WVD/SeQ8GDDWKi/bKi/bKi/bML+P6H7/1+2+f8TvjaAKGa9seyu/88M6P+D4/wtrPft84OY/KcSadxEGbt4iHdRUvnWvePY2PaOmKw3z8PMB3hNfftdfd6v4WNrHpZ7lNS83l+luRukHACOjcA27d9Bt5VkvOMnMa9jVTzCT/AAReyq1ggzHqEC4KK3fQozbfMrEvrM6176ee9R4HxsOwTrv2yov2yov2yov2yov2yov2yo/0SR7XeHsP9Pav//9HR4/n/S+8UUQjnF+v8s+vb/Q/Xzm7f/69Dfz7+AGmrYxzJKuKfTg+0AiZ7bAX6OcDuASuuzHUD59VPm+NZj04CRxiYKWMANLGMBG1jGbeRxAytYwwauYwEF5LGGGz1rHUV8/fdJr35WGR2/6pWvWYICNpDHIrZQQA63sYq8KncXpoYqtMI/m6nui5v5GWmsII9VVaobWMB15IY/aB9kfPFFAMsmri95GmtYxDXksISC0na5l2xH9poO91Zh++Iay5RvU5VtSylcwPdxG8vIYRNLKmUdBfVLPCjWffFofW9iDavYUsoevsZ3fPGsvyZ51y9YvtHXXd/BI6i0bTKj4yZMq/uKjYVRlGEA6jHpLX3z6t6Xwy3cxgbWsNb9vjJCnvji2a7lW8AqVrGGpdFq24Gnvnh0/VhU9bb5a1uPzeXgnv+edS3fBnJYV3/bNlUNWceauqaHo/KnMeUzYqeRw8JB1tsu/KmtSGamrgnd8g3L4Pr/PfYb9waYVvXhCq4gp55dttS1W/X+lmyqZ4ecumsfCL6eoHrcF8eYgcaNnux3B/o/2VB/2YT9f0r5/wRm7XD/f0pZt0xkTt36/xffeus9f2jS32zLJxOYR2ApVzRk/786CytxSX1eD4zrb/3+zY7es542mN+aDYZz9pIKm8+Ht5qRpNtu8D29S/O58DvIqPOw9IUxQyku6n/+Qp5vG7D3VJfRSmb1FQ9y1X/BI0Jz/DnL9ULPzLiBpDvOYDpQzimvLEczT4EcLSNoiCFjDPWXDfWXDfUff3SD2geD7Ev9ZUP9ZTMV8v8ndP//nYj5/yeOeP6/f/3/vucF6HPJeuepr0AijUXsoIZ3UUQldt6/Ies/4Yjl/+asFRWOh59m+59sqL9sqL9sqL9sqL9sqL9UGsr6U//JptsycOH+/ynt/z+LeP/fVMwvxjqw+f82Vvv1+WZguA5N/inl88soo6Y+H4dx/1HtDHHjENrDOZ3PcO0MrP+yof4TTA/rgFF/2VB/2VB/2VB/2VB/2YT9/7T2/x9G+P/pY7P+f2KA9f+D+NcFWEQR21hSawNW4frp4Dp6ther+8bnf+RbgO+VPoI3Pv/lG8FQY45mN9wdjnacAOu/bKi/bKi/bKi/bKi/bKi/bKi/bML+/6Ty/yfxu7b5/ym9vIiNfGROQ/h/pz0vq+v4/5G8F0AddyqRxiZK+CEeYh8ltbxOa/59q36Y/vjW/Ht3bMX/EAybuS1jE3MLV9TnJ2YtJL1OwBNv/n1zOze3eQTXCaj71qw5r0YgANN65Z+3079R18eEZrvHAPLIe9tn9PYv5xNfNDM2IQLb2wH9bF3ep2itF1D3lTevtZ9tK2/Ft97Ya/r4F83Yk5hjt28Xd07t5RuPeRXjAu//sqH+sqH+sqH+sqH+Emk9Q1N/2YT9/ynd//9JRP//qS79//9SscOY/58YwP/b3jmjbf7/FipYQhFVlGLH5Zte/PBy28F8LzgfqtDkg5Q7fsDR6/Clkcce7qGs9zKNHzM7X3vw45/+7a/tuR+s32X9lw31lw31n3SmO35L/WVD/WVD/aUQrTT1l03Y/5/W6/8/scPr/50+pPH/Pff/fzD8ewGa/j+H91FDCXvYVv3f71um/9vGLavzuv5Pm+dquf+avO6eAe7otwSd1v/3W743ddPAiUQaa7iLHyGPbfzzHEaR/6zJ31b5v42Hal2EIoCv6vzv63e7DVv+6UQaGyihgiL2VQtL+HdjsV//iOD9f9Lp/Eoo6i8b6i8b6i8b6i8b6i+bsP+fUd7dQiZi/f+ZLv5/FOv/Bdfls3tel+9jK7wun0ob5H383vEtLzaZ/pT1XzbUXzbUXx6+t6H3sEIkGQcGFZL1XzbUXzSdOwfIxBP2/2c6+P8z9P8TBu//sqH+sqH+k8jL//b6t4r6y4b6y4b6y4b6yybs/8928P9nj6X/n6b/HxjWf9lQf9lQf9lQf9lQf9lQfxmEVy1zof6yCfv/cx38/7m4X8w/TrL/fyxh/ZdLgvqLh/rLhvrLhvrLhvrLhvrLJuz/jY//JYL+3/L2iGZU/n8yffZxhfVfNtRfNtRfNtRfNtRfMLPUXzrUXyKtdwKF/f/cgfj/+PX5h/H/qV43JDGw/suG+suG+suG+suG+suG+ssm8u3rRAxh/z/P/n9B8P4vG+ovG+ovG+ovG+ovG+ovG+ovm7D//xL9vyBY/2VD/WVD/SeXXkbHUX/ZUH/ZUP8x4f8BAAD//ybZFw0=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/104, 0x4d) 627.22569ms ago: executing program 3 (id=2066): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {0xfff3}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 375.29048ms ago: executing program 0 (id=2067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) capset(0x0, 0x0) 352.540612ms ago: executing program 2 (id=2068): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYRES16=r0], 0x1c}}, 0x0) 39.924217ms ago: executing program 1 (id=2069): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "8092000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=2070): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) semget$private(0x0, 0x4, 0x22) semop(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregs(0xe, r3, 0x0, &(0x7f0000000440)=""/255) kernel console output (not intermixed with test programs): vxcan1: link becomes ready [ 512.479681][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.543863][ T4024] device hsr_slave_0 left promiscuous mode [ 512.578414][ T4024] device hsr_slave_1 left promiscuous mode [ 512.585123][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.593385][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.601023][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.609420][ T4024] device bridge_slave_1 left promiscuous mode [ 512.615734][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.637271][ T4024] device bridge_slave_0 left promiscuous mode [ 512.647972][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.673543][ T4024] device hsr_slave_0 left promiscuous mode [ 512.692420][ T4024] device hsr_slave_1 left promiscuous mode [ 512.699225][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 512.706619][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.783831][T10067] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1743'. [ 512.787066][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.794603][T10067] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1743'. [ 512.811900][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.848124][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.868777][ T4024] device bridge_slave_1 left promiscuous mode [ 512.875004][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.896606][ T4024] device bridge_slave_0 left promiscuous mode [ 512.915631][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.935765][ T4024] device hsr_slave_0 left promiscuous mode [ 512.953761][ T4024] device hsr_slave_1 left promiscuous mode [ 512.977950][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.988475][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.995908][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.017097][ T4024] device bridge_slave_1 left promiscuous mode [ 513.023392][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.051479][ T4024] device bridge_slave_0 left promiscuous mode [ 513.067883][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.091459][ T4024] device hsr_slave_0 left promiscuous mode [ 513.122005][ T4024] device hsr_slave_1 left promiscuous mode [ 513.139579][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.147326][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.176977][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.197713][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.205858][ T4024] device bridge_slave_1 left promiscuous mode [ 513.227835][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.235989][ T4024] device bridge_slave_0 left promiscuous mode [ 513.242500][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.529531][T10069] loop1: detected capacity change from 0 to 32768 [ 513.539082][T10069] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 513.547263][T10069] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 513.555920][ T4024] device veth1_macvtap left promiscuous mode [ 513.563687][ T4024] device veth0_macvtap left promiscuous mode [ 513.570469][ T4024] device veth1_vlan left promiscuous mode [ 513.576372][ T4024] device veth0_vlan left promiscuous mode [ 513.590674][T10069] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 513.613328][ T4024] device veth1_macvtap left promiscuous mode [ 513.627747][ T4024] device veth0_macvtap left promiscuous mode [ 513.633861][ T4024] device veth1_vlan left promiscuous mode [ 513.640798][ T4812] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 513.647584][ T4812] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 513.667760][ T4024] device veth0_vlan left promiscuous mode [ 513.758910][ T4812] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 111ms [ 513.779671][ T4812] gfs2: fsid=syz:syz.0: jid=0: Done [ 513.784943][T10069] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 513.838056][ T4024] device veth1_macvtap left promiscuous mode [ 513.844118][ T4024] device veth0_macvtap left promiscuous mode [ 513.857790][ T4024] device veth1_vlan left promiscuous mode [ 513.874222][ T4024] device veth0_vlan left promiscuous mode [ 513.884430][ T4024] device veth1_macvtap left promiscuous mode [ 513.894395][ T4024] device veth0_macvtap left promiscuous mode [ 513.901734][ T4024] device veth1_vlan left promiscuous mode [ 513.902158][ T3658] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 513.907650][ T4024] device veth0_vlan left promiscuous mode [ 513.920825][ T3658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 513.937092][ T3658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 513.945191][ T3658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 513.952852][ T3658] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 513.960341][ T3658] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 515.763915][ T4024] team0 (unregistering): Port device team_slave_1 removed [ 515.814595][ T4024] team0 (unregistering): Port device team_slave_0 removed [ 515.817794][ T3721] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 515.868684][ T4024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.914722][ T4024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.014206][ T3658] Bluetooth: hci3: command tx timeout [ 516.239124][ T3721] usb 2-1: config 0 has no interfaces? [ 516.244685][ T3721] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 516.253972][ T3721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.264270][ T3721] usb 2-1: config 0 descriptor?? [ 516.527138][ T4024] bond0 (unregistering): Released all slaves [ 516.689756][ T152] usb 2-1: USB disconnect, device number 19 [ 517.097435][ T4024] team0 (unregistering): Port device team_slave_1 removed [ 517.151449][ T4024] team0 (unregistering): Port device team_slave_0 removed [ 517.204360][ T4024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.253815][ T4024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.757228][ T4024] bond0 (unregistering): Released all slaves [ 518.087887][ T3658] Bluetooth: hci3: command tx timeout [ 518.266467][ T4024] team0 (unregistering): Port device team_slave_1 removed [ 518.316328][ T4024] team0 (unregistering): Port device team_slave_0 removed [ 518.366801][ T4024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.419271][ T4024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.011991][ T4024] bond0 (unregistering): Released all slaves [ 519.500373][ T4024] team0 (unregistering): Port device team_slave_1 removed [ 519.553766][ T4024] team0 (unregistering): Port device team_slave_0 removed [ 519.598327][ T4024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.646305][ T4024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.150971][ T4024] bond0 (unregistering): Released all slaves [ 520.171952][ T3658] Bluetooth: hci3: command tx timeout [ 520.263878][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 520.298749][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 520.403779][ T9942] device veth0_vlan entered promiscuous mode [ 520.422337][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 520.433289][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 520.458530][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 520.466916][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.513339][ T9942] device veth1_vlan entered promiscuous mode [ 520.534920][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.546539][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.558232][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 520.566331][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 520.577085][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.590974][ T9934] device veth0_vlan entered promiscuous mode [ 520.615323][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.627496][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 520.636255][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.644431][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.653141][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 520.660694][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 520.700167][ T9934] device veth1_vlan entered promiscuous mode [ 520.759218][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 520.767387][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 520.783863][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 520.792738][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.807840][ T9942] device veth0_macvtap entered promiscuous mode [ 520.817399][ T9942] device veth1_macvtap entered promiscuous mode [ 520.841638][ T9934] device veth0_macvtap entered promiscuous mode [ 520.861754][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 520.871045][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 520.880276][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 520.889838][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.903949][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.918176][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.929047][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.939909][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.949946][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.960965][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.973032][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.994437][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 521.003275][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 521.012921][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 521.023810][ T9934] device veth1_macvtap entered promiscuous mode [ 521.034455][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.046063][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.056535][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.067320][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.077556][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.088098][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.098026][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.108589][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.121071][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.161729][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 521.171143][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 521.180080][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 521.205985][ T9942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.226077][ T9942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.235747][ T9942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.245104][ T9942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.257427][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.269757][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.279735][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.290979][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.301087][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.311911][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.321759][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.332572][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.346399][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.370399][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 521.379985][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 521.406222][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.417428][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.427415][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.439485][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.451039][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.462733][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.473223][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.484174][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.494122][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.505373][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.521711][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.558370][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 521.567030][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 521.595528][ T9934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.618263][ T9934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.627009][ T9934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.645456][ T9934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.695305][T10112] loop1: detected capacity change from 0 to 2048 [ 521.704062][T10084] chnl_net:caif_netlink_parms(): no params data found [ 521.716086][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 521.728180][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 521.734214][T10112] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 521.794279][T10112] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 521.816037][T10112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.859579][ T3712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.895382][ T3712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.912480][ T9952] device veth0_vlan entered promiscuous mode [ 521.933578][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 521.942669][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 521.963139][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 521.992916][ T9952] device veth1_vlan entered promiscuous mode [ 522.017018][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 522.038702][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 522.046609][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 522.142443][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 522.151115][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 522.160368][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 522.176176][ T9952] device veth0_macvtap entered promiscuous mode [ 522.252043][ T3658] Bluetooth: hci3: command tx timeout [ 522.518188][ T3717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.552597][ T9952] device veth1_macvtap entered promiscuous mode [ 522.571870][ T3717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.853107][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.886517][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.896976][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.908637][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.918675][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.929336][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.939465][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.950264][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.960107][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.971002][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.983800][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.024512][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 523.032981][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 523.043333][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 523.053184][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 523.062069][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 523.071542][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 523.129687][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.129857][ T3712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.149803][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.160919][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.168065][ T3712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.172386][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.197708][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.209891][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.228679][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.247446][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.268882][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.288494][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.302570][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.306576][T10129] loop1: detected capacity change from 0 to 1024 [ 523.313150][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.325247][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.338163][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 523.346036][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 523.354713][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.364502][T10084] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.373558][T10084] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.374706][T10129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 523.400931][T10084] device bridge_slave_0 entered promiscuous mode [ 523.429604][ T9952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.451593][ T9952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.464055][ T9952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.471389][ T7817] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /197/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 523.473179][ T9952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.515613][ T7817] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 523.540233][T10084] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.547349][T10084] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.570538][T10084] device bridge_slave_1 entered promiscuous mode [ 523.580525][ T3717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.594636][ T3717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.602146][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 523.624117][ T7817] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /197/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 523.655149][ T7817] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 523.717958][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 523.720038][T10084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.739331][ T7817] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /197/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 523.760996][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 523.786540][T10084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.800069][ T7817] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 523.857092][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 523.885618][ T7817] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /197/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 523.956582][ T7817] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 523.980625][T10084] team0: Port device team_slave_0 added [ 523.997304][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 523.998429][ T7817] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /197/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 524.000766][ T7817] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 524.001357][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 524.008343][T10084] team0: Port device team_slave_1 added [ 524.038053][T10138] loop0: detected capacity change from 0 to 2048 [ 524.042009][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 524.064655][T10138] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 524.138723][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 524.140251][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 524.160283][T10138] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 524.192415][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 524.196124][T10138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.200371][ T7817] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 524.261027][ T3712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.261142][ T3712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.297264][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 524.298987][T10084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.299006][T10084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.299035][T10084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.307302][T10084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.307320][T10084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.307348][T10084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.457218][T10084] device hsr_slave_0 entered promiscuous mode [ 524.479094][T10084] device hsr_slave_1 entered promiscuous mode [ 524.494953][ T7493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.495045][ T7493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.600845][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 524.686533][T10142] xt_NFQUEUE: number of total queues is 0 [ 524.721000][T10142] loop0: detected capacity change from 0 to 256 [ 524.826453][T10142] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097162) [ 524.847058][ T27] audit: type=1800 audit(1722372523.397:392): pid=10142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1766" name="file1" dev="loop0" ino=1048763 res=0 errno=0 [ 524.868115][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.589061][T10084] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.648707][ T7817] EXT4-fs (loop1): unmounting filesystem. [ 526.743232][T10160] loop0: detected capacity change from 0 to 512 [ 526.821328][T10084] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.844850][T10160] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1772: Invalid inode bitmap blk 4 in block_group 0 [ 526.917701][T10160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 527.012949][T10084] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.301453][T10084] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.318480][T10155] loop4: detected capacity change from 0 to 32768 [ 528.405921][T10155] XFS (loop4): Mounting V5 Filesystem [ 528.470471][ T9942] EXT4-fs (loop0): unmounting filesystem. [ 528.512549][T10183] xt_NFQUEUE: number of total queues is 0 [ 528.542903][T10183] loop2: detected capacity change from 0 to 256 [ 528.576329][T10183] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097162) [ 528.593653][ T27] audit: type=1800 audit(1722372527.167:393): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1777" name="file1" dev="loop2" ino=1048767 res=0 errno=0 [ 528.636525][T10084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 528.674190][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.690708][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.702427][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.720467][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.769539][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 528.779447][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.087341][T10084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 529.121606][T10084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 529.152107][T10155] XFS (loop4): Ending clean mount [ 529.175405][T10084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 529.361645][ T9952] XFS (loop4): Unmounting Filesystem [ 529.407997][T10190] loop2: detected capacity change from 0 to 1024 [ 529.444578][T10193] loop0: detected capacity change from 0 to 256 [ 529.515895][T10190] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 529.621211][T10084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.651775][ T9934] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 529.678636][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 529.686936][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 529.699535][T10084] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.717921][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 529.731676][ T9934] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 529.752215][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 529.769002][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.776129][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.798095][ T9934] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 529.810749][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 529.828040][ T9934] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 529.852021][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 529.868209][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.875313][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.897996][ T9934] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 529.924940][T10178] chnl_net:caif_netlink_parms(): no params data found [ 529.952093][ T9934] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 529.964613][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 529.978385][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 529.987320][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 529.995831][ T9934] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 530.085221][ T9934] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 530.107276][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 530.119641][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 530.176371][ T9934] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 530.201542][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 530.215738][ T9934] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 530.218785][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 530.246253][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 530.255469][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 530.258655][T10204] loop4: detected capacity change from 0 to 512 [ 530.264083][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 530.288461][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 530.297087][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 530.305869][ T9934] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 530.330160][T10084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 530.337799][ T9934] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 530.387005][ T9934] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 530.414973][T10204] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.1785: iget: special inode unallocated [ 530.454546][T10204] EXT4-fs (loop4): get root inode failed [ 530.454986][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.467764][T10204] EXT4-fs (loop4): mount failed [ 530.479106][ T9934] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 530.505822][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.539102][T10178] device bridge_slave_0 entered promiscuous mode [ 530.565473][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.601221][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.650250][T10178] device bridge_slave_1 entered promiscuous mode [ 530.708416][ T9934] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 530.782620][ T9934] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 530.807828][ T3658] Bluetooth: hci4: command tx timeout [ 531.527866][ T9934] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 531.621801][ T9934] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 531.720287][ T9934] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 531.779198][ T4024] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.822734][T10178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.840470][ T9934] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 531.871422][T10178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.059027][ T4024] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.091614][T10178] team0: Port device team_slave_0 added [ 532.120693][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.131633][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.146669][T10084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.158669][T10178] team0: Port device team_slave_1 added [ 532.205667][ T4024] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.288211][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 532.304070][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 532.360773][ T4024] bond0: (slave netdevsim0): Releasing backup interface [ 532.378140][ T5196] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 532.388272][ T4024] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.414087][T10178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.430950][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.466681][T10178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.489332][T10178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.496290][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.524728][T10178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.654154][T10198] loop0: detected capacity change from 0 to 131072 [ 532.661207][ T5196] usb 5-1: Using ep0 maxpacket: 16 [ 532.677043][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 532.695805][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 532.711247][T10084] device veth0_vlan entered promiscuous mode [ 532.726719][T10198] fscrypt: Error allocating hmac(sha512): -4 [ 532.745349][T10198] F2FS-fs (loop0): Error processing option "test_dummy_encryption" [-4] [ 532.757899][T10178] device hsr_slave_0 entered promiscuous mode [ 532.775213][T10178] device hsr_slave_1 entered promiscuous mode [ 532.787916][ T5196] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 532.791933][ T9934] EXT4-fs (loop2): unmounting filesystem. [ 532.805334][ T5196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.828518][ T5196] usb 5-1: config 0 descriptor?? [ 532.836257][T10178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.852013][T10178] Cannot create hsr debugfs directory [ 532.864951][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 532.869957][ T5196] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 532.880113][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 532.887781][ T3658] Bluetooth: hci4: command tx timeout [ 532.914973][T10084] device veth1_vlan entered promiscuous mode [ 532.977804][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 533.045724][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 533.066539][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.087253][T10084] device veth0_macvtap entered promiscuous mode [ 533.109882][T10084] device veth1_macvtap entered promiscuous mode [ 533.187543][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.246304][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.256391][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.267341][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.277290][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.305956][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.317191][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.340335][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.360483][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.387777][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.407737][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.427706][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.450215][T10084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.461981][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 533.480930][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 533.498651][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 533.517829][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 533.546305][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.557590][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.577782][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.608406][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.637700][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.652099][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.662640][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.669629][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.669653][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.669672][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.669691][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.710848][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.717960][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.733156][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.744038][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.744750][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.763549][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.774426][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 533.775082][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.797802][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.872419][T10084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.896833][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 533.912630][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 533.937292][T10084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.953801][T10084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.963723][T10084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.972548][T10084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.237203][T10228] loop0: detected capacity change from 0 to 32768 [ 534.269764][T10228] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 534.278147][T10228] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 534.305845][T10228] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 534.315059][ T3685] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 534.327945][ T3685] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 534.416867][ T3685] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 88ms [ 534.440129][ T3685] gfs2: fsid=syz:syz.0: jid=0: Done [ 534.445669][T10228] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 534.559995][ T3712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.605857][ T3712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.665105][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 534.773390][ T3712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.797152][ T3712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.846880][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 534.968169][ T3658] Bluetooth: hci4: command tx timeout [ 535.037301][T10223] chnl_net:caif_netlink_parms(): no params data found [ 535.156985][ T5196] gspca_sonixj: reg_r err -71 [ 535.162912][ T5196] sonixj: probe of 5-1:0.0 failed with error -71 [ 535.183255][ T5196] usb 5-1: USB disconnect, device number 11 [ 535.354796][T10239] loop3: detected capacity change from 0 to 1764 [ 535.932444][ T48] Bluetooth: hci2: command tx timeout [ 536.150192][T10246] loop3: detected capacity change from 0 to 512 [ 536.206898][T10249] loop4: detected capacity change from 0 to 512 [ 536.209424][T10247] loop0: detected capacity change from 0 to 1024 [ 536.225409][T10246] EXT4-fs error (device loop3): __ext4_fill_super:5399: inode #2: comm syz.3.1795: iget: special inode unallocated [ 536.238176][T10249] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1796: Invalid inode bitmap blk 4 in block_group 0 [ 536.250186][T10246] EXT4-fs (loop3): get root inode failed [ 536.256960][T10246] EXT4-fs (loop3): mount failed [ 536.278107][T10249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 536.295173][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.309566][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.326912][T10223] device bridge_slave_0 entered promiscuous mode [ 536.355625][T10223] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.373368][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.386712][T10223] device bridge_slave_1 entered promiscuous mode [ 536.437167][T10247] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 536.506584][T10223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.523068][T10223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.638720][ T9942] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 536.656305][T10178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 536.661459][ T9942] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 536.686650][ T9942] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 536.705072][ T9942] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 536.711532][T10223] team0: Port device team_slave_0 added [ 536.744509][ T9942] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 537.219821][ T3658] Bluetooth: hci4: command tx timeout [ 537.351929][ T9942] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 537.443409][ T9942] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 537.478618][ T9942] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 537.518677][ T9942] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 537.538998][T10178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 537.548722][ T9942] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 537.570820][ T9942] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 537.574512][ T9952] EXT4-fs (loop4): unmounting filesystem. [ 537.598807][ T9942] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 537.610855][ T9942] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /12/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 537.644708][T10223] team0: Port device team_slave_1 added [ 537.651159][ T9942] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 537.721013][T10261] loop4: detected capacity change from 0 to 64 [ 537.748336][ T9942] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 537.778424][T10223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.780653][ T9942] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 537.785464][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.807704][ T9942] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 537.840932][ T9942] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 537.855106][ T9942] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 537.867954][ T9942] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 537.888230][T10223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.905931][T10178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 537.951011][T10223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.008653][ T48] Bluetooth: hci2: command tx timeout [ 538.124662][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.378344][T10223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.496692][T10178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 539.084448][ T27] audit: type=1326 audit(1722372537.677:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc99f773b9 code=0x7ffc0000 [ 539.146225][ T27] audit: type=1326 audit(1722372537.677:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc99f773b9 code=0x7ffc0000 [ 539.209685][T10282] loop3: detected capacity change from 0 to 512 [ 539.227142][ T27] audit: type=1326 audit(1722372537.677:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fcc99f773b9 code=0x7ffc0000 [ 539.262785][ T27] audit: type=1326 audit(1722372537.677:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc99f773b9 code=0x7ffc0000 [ 539.288289][T10282] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1807: Invalid inode bitmap blk 4 in block_group 0 [ 539.301304][T10282] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 539.328292][ T27] audit: type=1326 audit(1722372537.677:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.4.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc99f773b9 code=0x7ffc0000 [ 539.354774][T10223] device hsr_slave_0 entered promiscuous mode [ 539.375338][ T9942] EXT4-fs (loop0): unmounting filesystem. [ 539.387977][T10223] device hsr_slave_1 entered promiscuous mode [ 539.400183][T10223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.415674][T10223] Cannot create hsr debugfs directory [ 539.597163][ T4024] device hsr_slave_0 left promiscuous mode [ 539.604370][ T4024] device hsr_slave_1 left promiscuous mode [ 539.611629][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.619825][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.631027][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.649503][ T4024] device bridge_slave_1 left promiscuous mode [ 539.665899][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.684754][ T4024] device bridge_slave_0 left promiscuous mode [ 539.709005][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.737320][ T4024] device hsr_slave_0 left promiscuous mode [ 539.753007][ T4024] device hsr_slave_1 left promiscuous mode [ 539.764273][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.782748][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.799624][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.814943][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.826154][ T4024] device bridge_slave_1 left promiscuous mode [ 539.843270][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.868965][ T4024] device bridge_slave_0 left promiscuous mode [ 539.875694][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.965023][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 539.977797][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 539.995028][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 540.004146][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 540.012889][ T4024] device veth1_macvtap left promiscuous mode [ 540.021076][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 540.028612][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 540.029231][ T4024] device veth0_macvtap left promiscuous mode [ 540.054450][ T4024] device veth1_vlan left promiscuous mode [ 540.060508][ T4024] device veth0_vlan left promiscuous mode [ 540.068169][ T4024] device veth1_macvtap left promiscuous mode [ 540.074237][ T4024] device veth0_macvtap left promiscuous mode [ 540.085529][ T4024] device veth1_vlan left promiscuous mode [ 540.091750][ T48] Bluetooth: hci2: command tx timeout [ 540.098048][ T4024] device veth0_vlan left promiscuous mode [ 540.159208][T10084] EXT4-fs (loop3): unmounting filesystem. [ 540.443389][T10301] loop3: detected capacity change from 0 to 256 [ 540.450459][T10301] exfat: Deprecated parameter 'namecase' [ 540.464603][T10301] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 540.496490][T10301] syz.3.1816: attempt to access beyond end of device [ 540.496490][T10301] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 540.526813][T10301] syz.3.1816: attempt to access beyond end of device [ 540.526813][T10301] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 540.567761][ T27] audit: type=1800 audit(1722372539.157:399): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1816" name="file1" dev="loop3" ino=1048773 res=0 errno=0 [ 540.720530][T10301] exFAT-fs (loop3): hint_cluster is invalid (1) [ 540.737598][T10301] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 540.761447][T10301] exFAT-fs (loop3): error, failed to bmap (inode : ffff888058af94e0 iblock : 9, err : -5) [ 540.790636][T10301] syz.3.1816: attempt to access beyond end of device [ 540.790636][T10301] loop3: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 541.052891][ T4024] team0 (unregistering): Port device team_slave_1 removed [ 541.108256][ T4024] team0 (unregistering): Port device team_slave_0 removed [ 541.160624][ T4024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.215088][ T4024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.760301][ T4024] bond0 (unregistering): Released all slaves [ 542.094886][ T48] Bluetooth: hci0: command tx timeout [ 542.173707][ T48] Bluetooth: hci2: command tx timeout [ 542.282252][ T4024] team0 (unregistering): Port device team_slave_1 removed [ 542.333581][ T4024] team0 (unregistering): Port device team_slave_0 removed [ 542.378927][ T4024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.432193][ T4024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.966583][ T4024] bond0 (unregistering): Released all slaves [ 543.228192][T10309] loop3: detected capacity change from 0 to 4096 [ 543.270293][T10178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.275197][T10309] NILFS (loop3): invalid segment: Checksum error in segment payload [ 543.310314][T10309] NILFS (loop3): trying rollback from an earlier position [ 543.337857][T10309] NILFS (loop3): invalid segment: Checksum error in segment payload [ 543.370187][T10309] NILFS (loop3): error -22 while searching super root [ 543.373451][T10178] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.387280][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 543.399884][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 543.469458][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 543.489102][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 543.498388][ T4817] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.505500][ T4817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.513507][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 543.523393][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.532220][ T4817] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.539385][ T4817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.548911][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 543.661466][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 543.686861][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 543.706016][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.736805][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.751740][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.771023][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.786872][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.805081][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.815821][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 543.831661][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 543.903519][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.922457][T10178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.078095][ T3721] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 544.094469][T10223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.162536][T10292] chnl_net:caif_netlink_parms(): no params data found [ 544.168609][ T48] Bluetooth: hci0: command tx timeout [ 544.306450][T10223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.338080][ T3721] usb 4-1: Using ep0 maxpacket: 32 [ 544.545880][T10223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.585556][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.599323][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.617986][ T3721] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=67.9c [ 544.627090][ T3721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.645178][T10292] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.652536][T10292] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.669144][T10292] device bridge_slave_0 entered promiscuous mode [ 544.675608][ T3721] usb 4-1: Product: syz [ 544.684955][ T3721] usb 4-1: Manufacturer: syz [ 544.704507][T10178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.712374][ T3721] usb 4-1: SerialNumber: syz [ 544.724277][ T3721] usb 4-1: config 0 descriptor?? [ 544.783925][T10223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.827126][T10292] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.836630][T10292] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.852865][T10292] device bridge_slave_1 entered promiscuous mode [ 544.932835][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 544.958466][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 545.011619][ T6386] usb 4-1: USB disconnect, device number 13 [ 545.044072][T10292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.073686][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 545.088605][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 545.114758][T10292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.158413][T10178] device veth0_vlan entered promiscuous mode [ 545.170459][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 545.188357][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 545.206063][T10313] loop4: detected capacity change from 0 to 131072 [ 545.247272][T10313] F2FS-fs (loop4): Test dummy encryption mode enabled [ 545.267012][T10178] device veth1_vlan entered promiscuous mode [ 545.284411][T10313] F2FS-fs (loop4): invalid crc value [ 545.295630][T10292] team0: Port device team_slave_0 added [ 545.330871][T10313] F2FS-fs (loop4): Found nat_bits in checkpoint [ 545.359643][T10292] team0: Port device team_slave_1 added [ 545.418732][T10313] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 545.449614][T10292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.456617][T10292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.487685][T10292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.504689][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 545.682739][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 545.714317][T10223] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 545.741722][T10178] device veth0_macvtap entered promiscuous mode [ 545.750818][T10292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.869805][T10292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.237823][T10332] fscrypt (loop4, inode 10): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 546.251921][ T48] Bluetooth: hci0: command tx timeout [ 546.417694][T10292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.476874][T10223] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 546.542199][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 546.580421][T10223] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 546.612771][T10178] device veth1_macvtap entered promiscuous mode [ 546.636349][T10223] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 546.706609][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.729663][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.751624][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.767153][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.781511][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.802435][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.821171][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.843200][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.856159][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.876941][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.904226][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.957689][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.987843][T10178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.044314][T10292] device hsr_slave_0 entered promiscuous mode [ 547.078119][T10292] device hsr_slave_1 entered promiscuous mode [ 547.097862][T10292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.105448][T10292] Cannot create hsr debugfs directory [ 547.138027][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 547.158080][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 547.180896][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.217673][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.227506][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.280545][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.301339][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.336489][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.357182][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.405293][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.435580][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.467863][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.487674][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.491651][T10342] loop3: detected capacity change from 0 to 40427 [ 547.508906][T10342] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 547.510621][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.524611][T10342] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 547.534016][T10178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.557187][T10178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.566454][T10178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.569133][T10342] F2FS-fs (loop3): invalid crc value [ 547.575315][T10178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.589239][T10178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.611312][T10347] loop4: detected capacity change from 0 to 256 [ 547.627521][T10342] F2FS-fs (loop3): Found nat_bits in checkpoint [ 547.651151][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 547.651448][T10347] exfat: Deprecated parameter 'namecase' [ 547.666924][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 547.760640][T10347] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 547.826921][T10347] syz.4.1825: attempt to access beyond end of device [ 547.826921][T10347] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 547.851180][T10342] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 547.852623][T10347] syz.4.1825: attempt to access beyond end of device [ 547.852623][T10347] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 547.874361][T10342] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 547.874402][ T27] audit: type=1800 audit(1722372546.467:400): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1825" name="file1" dev="loop4" ino=1048774 res=0 errno=0 [ 547.918450][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.928383][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.955999][T10351] exFAT-fs (loop4): hint_cluster is invalid (1) [ 547.965728][T10351] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 547.974729][T10351] exFAT-fs (loop4): error, failed to bmap (inode : ffff888058846960 iblock : 9, err : -5) [ 547.984995][T10351] syz.4.1825: attempt to access beyond end of device [ 547.984995][T10351] loop4: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 548.064812][ T3712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.092355][ T3712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.119210][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 548.138949][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 548.183678][T10223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.344385][ T48] Bluetooth: hci0: command tx timeout [ 548.834229][ T7493] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 548.861707][ T7493] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 548.864296][T10292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.908533][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 548.916279][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 548.928254][T10223] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.013056][T10292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.050726][T10362] loop4: detected capacity change from 0 to 64 [ 549.080018][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 549.097524][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 549.133943][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.141125][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.168098][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 549.201711][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 549.255429][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.262686][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.289584][ T5196] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 549.298198][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 549.397951][T10292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.450798][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 549.469662][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 549.494658][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 549.532462][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 549.544998][T10366] netlink: 'syz.4.1830': attribute type 29 has an invalid length. [ 549.657798][ T5196] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.677781][ T5196] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 549.693103][T10292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.724677][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 549.736003][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 549.744321][ T5196] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.775394][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 549.776134][ T5196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.792021][T10366] netlink: 'syz.4.1830': attribute type 29 has an invalid length. [ 549.878467][T10360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 549.930143][T10369] loop3: detected capacity change from 0 to 4096 [ 549.978114][T10369] NILFS (loop3): invalid segment: Checksum error in segment payload [ 549.986460][T10369] NILFS (loop3): trying rollback from an earlier position [ 550.006480][T10369] NILFS (loop3): invalid segment: Checksum error in segment payload [ 550.016370][T10369] NILFS (loop3): error -22 while searching super root [ 550.047492][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 550.075150][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 550.087476][T10367] netlink: 'syz.4.1830': attribute type 29 has an invalid length. [ 550.149812][T10223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.188395][T10223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 550.208250][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 550.222421][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 550.359503][T10373] loop3: detected capacity change from 0 to 512 [ 550.459125][T10373] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1832: Invalid inode bitmap blk 4 in block_group 0 [ 550.492490][T10373] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 550.872865][T10292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 551.046407][T10292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.156860][T10292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 551.176123][T10292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 551.302988][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.313222][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.410398][T10223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.433977][T10084] EXT4-fs (loop3): unmounting filesystem. [ 551.590027][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 551.604337][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 551.690131][ T3688] usb 2-1: USB disconnect, device number 20 [ 551.936504][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 551.955703][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 551.984320][T10223] device veth0_vlan entered promiscuous mode [ 551.997404][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 552.007541][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 552.032078][T10292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.100308][T10382] loop3: detected capacity change from 0 to 32768 [ 552.127902][T10382] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1833 (10382) [ 552.172233][T10223] device veth1_vlan entered promiscuous mode [ 552.187855][T10382] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 552.207770][T10382] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 552.216447][T10382] BTRFS info (device loop3): using free space tree [ 552.217411][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 552.258651][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 552.285033][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.315839][T10292] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.396653][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 552.407465][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 552.417839][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 552.426539][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 552.455287][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.462453][ T3688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.542534][T10382] BTRFS info (device loop3): enabling ssd optimizations [ 552.651706][T10223] device veth0_macvtap entered promiscuous mode [ 552.676753][T10084] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 552.700975][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 552.719614][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 552.746240][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 552.776163][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 552.795375][ T4817] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.802532][ T4817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.877403][T10223] device veth1_macvtap entered promiscuous mode [ 552.915126][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.960591][T10372] loop4: detected capacity change from 0 to 131072 [ 552.967148][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.967166][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.989086][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.999001][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.010299][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.011594][T10372] F2FS-fs (loop4): Test dummy encryption mode enabled [ 553.020245][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.020267][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.020281][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.020297][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.020324][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.020340][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.020357][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.020373][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.088079][T10372] F2FS-fs (loop4): invalid crc value [ 553.135131][T10223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.144726][T10292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 553.158594][T10292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.169527][T10372] F2FS-fs (loop4): Found nat_bits in checkpoint [ 553.184194][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 553.203592][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.219080][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.238123][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.257728][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.266344][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.282814][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.294173][T10372] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 553.302537][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.329026][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.338299][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.349573][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.357929][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 553.396255][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 553.521357][T10405] loop1: detected capacity change from 0 to 40427 [ 553.529523][T10405] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 553.537352][T10405] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 553.555836][T10405] F2FS-fs (loop1): invalid crc value [ 553.566680][T10405] F2FS-fs (loop1): Found nat_bits in checkpoint [ 553.581368][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.607888][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.628269][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.647681][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.657533][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.668737][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.678750][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.689464][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.689858][T10405] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 553.704144][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.717679][T10405] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 553.727200][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.757727][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.780717][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.938173][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.965126][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.981078][T10223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.993411][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.002662][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.010770][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 554.019960][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 554.527838][ T4024] device hsr_slave_0 left promiscuous mode [ 554.547849][ T4024] device hsr_slave_1 left promiscuous mode [ 554.587939][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.617167][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.646878][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.671014][ T41] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 554.690888][ T41] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 554.724018][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.738811][ T4024] device bridge_slave_1 left promiscuous mode [ 554.748140][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.768159][ T4024] device bridge_slave_0 left promiscuous mode [ 554.774528][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.817837][ T4024] device hsr_slave_0 left promiscuous mode [ 554.827336][ T4024] device hsr_slave_1 left promiscuous mode [ 554.838679][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.851207][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.870471][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.885816][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.898988][ T4024] device bridge_slave_1 left promiscuous mode [ 554.915384][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.931139][ T4024] device bridge_slave_0 left promiscuous mode [ 554.944495][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.957863][T10406] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 555.050830][ T4024] device veth1_macvtap left promiscuous mode [ 555.056910][ T4024] device veth0_macvtap left promiscuous mode [ 555.063374][ T4024] device veth1_vlan left promiscuous mode [ 555.069449][ T4024] device veth0_vlan left promiscuous mode [ 555.079342][ T4024] device veth1_macvtap left promiscuous mode [ 555.085566][ T4024] device veth0_macvtap left promiscuous mode [ 555.103853][ T4024] device veth1_vlan left promiscuous mode [ 555.110380][ T4024] device veth0_vlan left promiscuous mode [ 555.208270][T10406] usb 4-1: Using ep0 maxpacket: 32 [ 555.379935][T10436] PM: Enabling pm_trace changes system date and time during resume. [ 555.379935][T10436] PM: Correct system time has to be restored manually after resume. [ 556.387957][ T152] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 556.447983][T10406] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=67.9c [ 556.467370][T10406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.491190][T10406] usb 4-1: Product: syz [ 556.506685][T10406] usb 4-1: Manufacturer: syz [ 556.515576][T10406] usb 4-1: SerialNumber: syz [ 556.542102][T10406] usb 4-1: config 0 descriptor?? [ 556.747918][ T152] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.759522][ T152] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 556.771037][ T152] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.780404][ T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.818815][T10406] usb 4-1: USB disconnect, device number 14 [ 556.828329][T10433] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 557.826152][ T4024] team0 (unregistering): Port device team_slave_1 removed [ 557.884074][ T4024] team0 (unregistering): Port device team_slave_0 removed [ 557.942316][ T4024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.998127][ T4024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.280532][ T3688] usb 5-1: USB disconnect, device number 12 [ 558.806676][T10457] loop4: detected capacity change from 0 to 40427 [ 558.834592][T10457] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 558.844266][T10457] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 558.855624][T10457] F2FS-fs (loop4): invalid crc value [ 558.870908][T10457] F2FS-fs (loop4): Found nat_bits in checkpoint [ 558.873499][ T4024] bond0 (unregistering): Released all slaves [ 558.958242][T10457] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 558.965317][T10457] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 559.894745][ T3717] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 559.917454][ T3717] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 560.117911][ T4024] team0 (unregistering): Port device team_slave_1 removed [ 560.181780][ T4024] team0 (unregistering): Port device team_slave_0 removed [ 560.238859][ T4024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.308814][ T4024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.994247][ T4024] bond0 (unregistering): Released all slaves [ 561.174862][T10223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.184961][T10223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.193817][T10223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.202550][T10223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.227102][T10477] device bridge0 entered promiscuous mode [ 561.233742][T10477] device vlan2 entered promiscuous mode [ 561.240945][T10477] bridge0: port 3(vlan2) entered blocking state [ 561.247296][T10477] bridge0: port 3(vlan2) entered disabled state [ 561.267343][T10477] device bridge0 left promiscuous mode [ 561.452091][T10292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.465643][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 561.475975][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 561.568071][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 561.581250][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 561.618513][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 561.626930][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 561.652834][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.676041][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.682940][T10292] device veth0_vlan entered promiscuous mode [ 561.691836][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 561.701160][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 561.719909][T10292] device veth1_vlan entered promiscuous mode [ 561.738281][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 561.748531][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 561.776609][ T7493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.792598][ T7493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.806209][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 561.826351][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 561.833723][ T4817] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 561.874673][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 561.907198][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 561.919291][T10292] device veth0_macvtap entered promiscuous mode [ 561.926587][T10491] loop4: detected capacity change from 0 to 512 [ 561.939564][T10292] device veth1_macvtap entered promiscuous mode [ 561.997320][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.000149][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 562.024258][T10491] EXT4-fs (loop4): 1 truncate cleaned up [ 562.039559][T10491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 562.048695][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.058664][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.069221][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.079090][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.094971][ T4817] usb 4-1: Using ep0 maxpacket: 8 [ 562.101508][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.111382][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.122189][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.132149][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.142920][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.156640][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.167823][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.180224][T10292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.181019][ T9952] EXT4-fs (loop4): unmounting filesystem. [ 562.190378][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.216832][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.228153][ T4817] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 562.236084][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.255875][ T4817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 562.267233][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.267998][ T4817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 562.277284][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.297934][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.306839][ T4817] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.307793][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.320935][ T4817] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 562.340597][ T4817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.341316][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.358799][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.370776][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.380940][T10292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.391594][T10292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.414279][T10292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.445062][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 562.460716][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 562.487039][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 562.511375][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 562.523844][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 562.544529][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 562.571248][T10292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.575996][T10505] loop1: detected capacity change from 0 to 1024 [ 562.589525][T10292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.607980][ T4817] usb 4-1: GET_CAPABILITIES returned 0 [ 562.614062][ T4817] usbtmc 4-1:16.0: can't read capabilities [ 562.619672][T10505] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 562.624496][T10292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.644824][T10505] EXT4-fs (loop1): orphan cleanup on readonly fs [ 562.657734][T10292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.660559][T10505] EXT4-fs error (device loop1): ext4_free_blocks:6213: comm syz.1.1865: Freeing blocks not in datazone - block = 0, count = 4096 [ 562.798229][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.804578][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.838151][ T3721] usb 4-1: USB disconnect, device number 15 [ 562.872178][T10505] EXT4-fs (loop1): 1 orphan inode deleted [ 562.880067][T10505] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 562.972352][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 563.609312][T10178] EXT4-fs (loop1): unmounting filesystem. [ 563.656615][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.717667][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.781239][ T3717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.802818][ T3717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.831109][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 563.897047][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 563.924685][T10521] loop2: detected capacity change from 0 to 512 [ 564.076460][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1870'. [ 564.107222][T10516] device geneve1 entered promiscuous mode [ 564.108486][T10521] EXT4-fs (loop2): 1 truncate cleaned up [ 564.119096][T10521] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 564.131315][T10516] device geneve1 left promiscuous mode [ 564.231677][T10223] EXT4-fs (loop2): unmounting filesystem. [ 564.255551][T10524] device bridge0 entered promiscuous mode [ 564.261694][T10524] device vlan2 entered promiscuous mode [ 564.272135][T10524] bridge0: port 3(vlan2) entered blocking state [ 564.278903][T10524] bridge0: port 3(vlan2) entered disabled state [ 564.320635][T10524] device bridge0 left promiscuous mode [ 564.541764][T10530] loop3: detected capacity change from 0 to 256 [ 564.625703][ T27] audit: type=1800 audit(1722372563.217:401): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1874" name="bus" dev="loop3" ino=1048784 res=0 errno=0 [ 565.371700][T10545] loop0: detected capacity change from 0 to 1024 [ 565.412750][T10545] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 565.424046][T10545] EXT4-fs (loop0): orphan cleanup on readonly fs [ 565.450805][T10545] EXT4-fs error (device loop0): ext4_free_blocks:6213: comm syz.0.1879: Freeing blocks not in datazone - block = 0, count = 4096 [ 565.494963][T10545] EXT4-fs (loop0): 1 orphan inode deleted [ 565.507781][T10545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 565.681986][T10292] EXT4-fs (loop0): unmounting filesystem. [ 565.747843][T10406] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 566.957943][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 567.425841][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1883'. [ 567.473161][T10559] device geneve1 entered promiscuous mode [ 567.481654][T10559] device geneve1 left promiscuous mode [ 567.497938][T10406] usb 3-1: Using ep0 maxpacket: 8 [ 567.618013][T10406] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.639143][T10406] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.674295][T10406] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 567.711729][T10406] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.753135][T10406] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.778952][T10406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.784199][T10543] loop1: detected capacity change from 0 to 32768 [ 567.812289][T10543] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 567.843060][T10543] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 567.971587][T10543] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 568.010732][ T3684] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 568.017583][ T3684] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 568.077852][T10406] usb 3-1: GET_CAPABILITIES returned 0 [ 568.083480][T10406] usbtmc 3-1:16.0: can't read capabilities [ 568.119649][ T3684] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 102ms [ 568.134509][ T3684] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 568.143226][T10543] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 568.204486][T10573] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1889'. [ 568.272094][T10573] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.1889'. [ 568.321279][ T4817] usb 3-1: USB disconnect, device number 15 [ 568.352863][T10577] loop4: detected capacity change from 0 to 256 [ 568.365570][ T27] audit: type=1800 audit(1722372566.957:402): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1892" name="bus" dev="loop4" ino=1048785 res=0 errno=0 [ 568.461044][T10579] device veth1_macvtap left promiscuous mode [ 568.505354][T10579] device veth1_macvtap entered promiscuous mode [ 568.723869][T10583] loop0: detected capacity change from 0 to 16 [ 568.750752][T10583] erofs: (device loop0): mounted with root inode @ nid 36. [ 569.158264][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1895'. [ 570.128546][T10597] loop2: detected capacity change from 0 to 1024 [ 570.184285][T10597] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 570.230993][T10597] EXT4-fs (loop2): orphan cleanup on readonly fs [ 570.238401][T10597] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.1900: Freeing blocks not in datazone - block = 0, count = 4096 [ 570.273885][T10604] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1902'. [ 570.335472][T10604] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.1902'. [ 570.359925][T10610] netlink: 'syz.0.1904': attribute type 10 has an invalid length. [ 570.369637][T10597] EXT4-fs (loop2): 1 orphan inode deleted [ 570.375417][T10597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 570.400269][T10610] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.409756][T10610] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.445667][T10610] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.452844][T10610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.461769][T10610] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.468922][T10610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.480543][T10610] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 570.495448][T10223] EXT4-fs (loop2): unmounting filesystem. [ 570.673101][T10621] loop0: detected capacity change from 0 to 512 [ 570.685772][T10621] ext4: Unknown parameter 'fowner<00000000000000000000' [ 570.707748][ T152] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 570.827787][ T3684] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 571.097282][T10626] overlayfs: missing 'lowerdir' [ 572.582528][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'. [ 573.077790][ T152] usb 2-1: Using ep0 maxpacket: 8 [ 573.202023][ T152] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 573.225771][ T152] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 573.253399][ T152] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 573.284072][ T152] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.327234][ T152] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.336555][ T152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.477754][ T152] usb 2-1: usb_control_msg returned -71 [ 573.483904][ T152] usbtmc 2-1:16.0: can't read capabilities [ 573.510588][ T152] usb 2-1: USB disconnect, device number 21 [ 573.577686][ T3684] usb 3-1: Using ep0 maxpacket: 16 [ 573.673495][ T3684] usb 3-1: device descriptor read/all, error -71 [ 573.783019][T10647] loop1: detected capacity change from 0 to 1024 [ 573.802249][T10647] hfsplus: extend alloc file! (8192,65536,366) [ 573.836880][T10654] device veth1_macvtap left promiscuous mode [ 573.894801][T10654] device veth1_macvtap entered promiscuous mode [ 573.925056][T10647] user requested TSC rate below hardware speed [ 574.328255][ T5002] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 574.778250][ T5002] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 574.818670][ T5002] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.003613][ T5002] usb 2-1: config 0 has no interface number 0 [ 575.033981][ T5002] usb 2-1: config 0 interface 185 has no altsetting 0 [ 575.061349][ T5002] usb 2-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 575.094389][ T3684] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 575.107782][ T5002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.134110][ T5002] usb 2-1: config 0 descriptor?? [ 575.144158][T10681] Driver unsupported XDP return value 0 on prog (id 408) dev N/A, expect packet loss! [ 575.202190][ T5002] rndis_wlan 2-1:0.185: skipping garbage [ 575.209708][ T5002] rndis_wlan 2-1:0.185: skipping garbage [ 575.215378][ T5002] usb 2-1: bad CDC descriptors [ 575.265857][ T5002] rndis_host 2-1:0.185: skipping garbage [ 575.277707][ T5002] rndis_host 2-1:0.185: skipping garbage [ 575.285271][ T5002] usb 2-1: bad CDC descriptors [ 575.291613][ T5002] option 2-1:0.185: GSM modem (1-port) converter detected [ 575.327959][T10686] device veth1_macvtap left promiscuous mode [ 575.341580][T10689] device veth1_macvtap entered promiscuous mode [ 575.348264][ T3684] usb 3-1: Using ep0 maxpacket: 8 [ 575.428625][T10647] loop1: detected capacity change from 0 to 256 [ 575.467928][ T3684] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 575.487680][ T3684] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 575.491919][ T152] usb 2-1: USB disconnect, device number 22 [ 575.506129][ T3684] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 575.518907][ T152] option 2-1:0.185: device disconnected [ 575.526805][ T3684] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.561867][T10697] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 575.578985][ T3684] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.585067][T10699] loop0: detected capacity change from 0 to 256 [ 575.594775][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.805780][T10706] loop0: detected capacity change from 0 to 512 [ 575.816771][T10706] EXT4-fs: Ignoring removed oldalloc option [ 575.851363][T10706] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.1943: Parent and EA inode have the same ino 15 [ 575.874268][T10706] EXT4-fs (loop0): Remounting filesystem read-only [ 575.881009][T10706] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 575.896582][ T3684] usb 3-1: GET_CAPABILITIES returned 0 [ 575.901441][T10706] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz.0.1943: couldn't truncate inode 15 (err -30) [ 575.902152][ T3684] usbtmc 3-1:16.0: can't read capabilities [ 575.943583][T10706] EXT4-fs (loop0): 1 orphan inode deleted [ 576.278341][T10706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 576.651591][T10706] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz.0.1943: deleted inode referenced: 15 [ 576.668022][ T3684] usb 3-1: USB disconnect, device number 17 [ 576.707715][T10706] EXT4-fs (loop0): Remounting filesystem read-only [ 576.777923][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 576.870103][T10292] EXT4-fs (loop0): unmounting filesystem. [ 577.076922][T10731] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 577.187883][ T3684] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 577.200216][T10733] loop3: detected capacity change from 0 to 1024 [ 577.217004][T10733] hfsplus: extend alloc file! (8192,65536,366) [ 577.313047][T10733] user requested TSC rate below hardware speed [ 577.336408][T10745] loop0: detected capacity change from 0 to 512 [ 577.356642][T10742] loop1: detected capacity change from 0 to 512 [ 577.374059][T10742] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.1958: casefold flag without casefold feature [ 577.391231][T10742] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 577.407359][T10745] EXT4-fs: Ignoring removed oldalloc option [ 577.435724][T10742] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 577.461617][T10745] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.1959: Parent and EA inode have the same ino 15 [ 577.632186][T10745] EXT4-fs (loop0): Remounting filesystem read-only [ 577.705901][T10745] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz.0.1959: couldn't truncate inode 15 (err -30) [ 577.840805][T10745] EXT4-fs (loop0): 1 orphan inode deleted [ 577.898985][T10745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 578.208030][ T4817] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 578.294056][T10744] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz.0.1959: deleted inode referenced: 15 [ 578.318631][T10744] EXT4-fs (loop0): Remounting filesystem read-only [ 578.330172][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 578.377842][ T3684] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 578.386913][ T3684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.417936][ T3684] usb 5-1: Product: syz [ 578.422136][ T3684] usb 5-1: Manufacturer: syz [ 578.445285][ T3684] usb 5-1: SerialNumber: syz [ 578.466503][T10292] EXT4-fs (loop0): unmounting filesystem. [ 578.499417][ T3684] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 578.586449][T10178] EXT4-fs (loop1): unmounting filesystem. [ 578.617837][ T4817] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 578.627719][ T4817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.650525][ T4817] usb 4-1: config 0 has no interface number 0 [ 578.660238][ T4817] usb 4-1: config 0 interface 185 has no altsetting 0 [ 578.667142][ T4817] usb 4-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 578.703236][ T4817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.719167][ T4817] usb 4-1: config 0 descriptor?? [ 578.770202][ T4817] rndis_wlan 4-1:0.185: skipping garbage [ 578.776050][ T4817] rndis_wlan 4-1:0.185: skipping garbage [ 578.786997][ T4817] usb 4-1: bad CDC descriptors [ 578.793181][ T4817] rndis_host 4-1:0.185: skipping garbage [ 578.799292][ T4817] rndis_host 4-1:0.185: skipping garbage [ 578.817831][ T4817] usb 4-1: bad CDC descriptors [ 578.828259][ T4817] option 4-1:0.185: GSM modem (1-port) converter detected [ 578.945147][T10773] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 579.061883][T10733] loop3: detected capacity change from 0 to 256 [ 579.235555][T10406] usb 4-1: USB disconnect, device number 16 [ 579.248654][T10406] option 4-1:0.185: device disconnected [ 579.277860][ T3684] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 580.173222][T10780] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 580.218767][ T4817] usb 5-1: USB disconnect, device number 13 [ 580.445516][T10788] loop4: detected capacity change from 0 to 512 [ 580.572433][ T27] audit: type=1800 audit(1722372579.117:403): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1973" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 581.168555][T10788] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.1974: casefold flag without casefold feature [ 581.208340][ T3684] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 581.218249][T10788] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 581.235906][ T3684] ath9k_htc: Failed to initialize the device [ 581.269949][ T4817] usb 5-1: ath9k_htc: USB layer deinitialized [ 581.289071][T10788] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 581.502464][T10804] loop2: detected capacity change from 0 to 512 [ 581.528975][T10804] EXT4-fs: Ignoring removed i_version option [ 581.781438][T10804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 581.861989][T10804] System zones: 1-12 [ 582.208815][T10804] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1978: bg 0: block 131: padding at end of block bitmap is not set [ 582.298140][T10804] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 582.310613][T10804] EXT4-fs (loop2): 1 truncate cleaned up [ 582.316318][T10804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 582.450650][T10223] EXT4-fs (loop2): unmounting filesystem. [ 582.500240][T10821] loop0: detected capacity change from 0 to 164 [ 583.414072][T10837] loop3: detected capacity change from 0 to 1024 [ 583.548639][T10837] hfsplus: extend alloc file! (8192,65536,366) [ 583.659635][ T9952] EXT4-fs (loop4): unmounting filesystem. [ 583.674827][T10829] user requested TSC rate below hardware speed [ 583.752889][T10849] loop0: detected capacity change from 0 to 512 [ 583.780992][T10849] EXT4-fs: Ignoring removed i_version option [ 583.802532][T10849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 583.821866][T10849] System zones: 1-12 [ 583.838198][T10849] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1997: bg 0: block 131: padding at end of block bitmap is not set [ 583.863099][T10849] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 583.899256][T10849] EXT4-fs (loop0): 1 truncate cleaned up [ 583.939179][T10849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 583.977865][ T3718] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 584.021807][T10292] EXT4-fs (loop0): unmounting filesystem. [ 584.438384][ T3718] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 584.446677][ T3718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.458555][ T3718] usb 4-1: config 0 has no interface number 0 [ 584.633411][ T3718] usb 4-1: config 0 interface 185 has no altsetting 0 [ 584.640555][ T3718] usb 4-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 584.649934][ T3718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.663862][ T3718] usb 4-1: config 0 descriptor?? [ 584.725491][ T3718] rndis_wlan 4-1:0.185: skipping garbage [ 584.731412][ T3718] rndis_wlan 4-1:0.185: skipping garbage [ 584.737897][ T3718] usb 4-1: bad CDC descriptors [ 584.879497][T10898] Bluetooth: MGMT ver 1.22 [ 584.935290][T10898] loop1: detected capacity change from 0 to 512 [ 585.318553][ T3718] rndis_host 4-1:0.185: skipping garbage [ 585.328917][ T3718] rndis_host 4-1:0.185: skipping garbage [ 585.335218][ T3718] usb 4-1: bad CDC descriptors [ 585.341821][ T3718] option 4-1:0.185: GSM modem (1-port) converter detected [ 585.382988][T10898] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2760: inode #11: comm syz.1.2014: corrupted xattr block 95 [ 585.395699][T10898] EXT4-fs (loop1): Remounting filesystem read-only [ 585.402335][T10898] EXT4-fs error (device loop1): ext4_evict_inode:290: comm syz.1.2014: couldn't truncate inode 11 (err -30) [ 585.417321][T10898] EXT4-fs (loop1): 1 orphan inode deleted [ 585.425094][T10898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 585.466860][T10829] loop3: detected capacity change from 0 to 256 [ 585.474991][T10905] loop0: detected capacity change from 0 to 128 [ 585.619666][T10905] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 585.653683][T10905] sysv_free_block: trying to free block not in datazone [ 585.681467][ T4817] usb 4-1: USB disconnect, device number 17 [ 585.689301][ T4817] option 4-1:0.185: device disconnected [ 585.708692][T10178] EXT4-fs (loop1): unmounting filesystem. [ 585.767100][T10292] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 585.823135][T10920] loop4: detected capacity change from 0 to 256 [ 585.846780][T10917] loop1: detected capacity change from 0 to 1024 [ 585.884201][T10920] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 585.961626][T10926] loop2: detected capacity change from 0 to 1024 [ 586.007250][T10929] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 587.447403][T10953] netlink: 'syz.0.2041': attribute type 16 has an invalid length. [ 587.497836][T10953] netlink: 'syz.0.2041': attribute type 17 has an invalid length. [ 587.810611][T10962] loop4: detected capacity change from 0 to 1024 [ 588.101399][T10964] loop1: detected capacity change from 0 to 512 [ 588.233491][T10964] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2760: inode #11: comm syz.1.2037: corrupted xattr block 95 [ 588.253627][T10964] EXT4-fs (loop1): Remounting filesystem read-only [ 588.262037][T10964] EXT4-fs error (device loop1): ext4_evict_inode:290: comm syz.1.2037: couldn't truncate inode 11 (err -30) [ 588.279067][T10964] EXT4-fs (loop1): 1 orphan inode deleted [ 588.285004][T10964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 588.556286][T10967] loop3: detected capacity change from 0 to 164 [ 588.659212][T10971] loop4: detected capacity change from 0 to 8 [ 588.703344][T10971] SQUASHFS error: lzo decompression failed, data probably corrupt [ 588.727794][T10971] SQUASHFS error: Failed to read block 0x91: -5 [ 588.738400][T10971] SQUASHFS error: Unable to read metadata cache entry [8f] [ 588.766329][T10971] SQUASHFS error: Unable to read inode 0x11f [ 588.923373][T10976] loop2: detected capacity change from 0 to 1024 [ 589.107018][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.114341][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.146318][T10973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 589.921625][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.011275][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.488078][T10903] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 590.521817][T10903] EXT4-fs (loop1): Remounting filesystem read-only [ 590.565382][T10953] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.575161][T10953] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.584538][T10953] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.593485][T10953] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.938654][T10178] EXT4-fs (loop1): unmounting filesystem. [ 591.875909][T10995] loop2: detected capacity change from 0 to 1024 [ 592.074300][T11006] loop4: detected capacity change from 0 to 256 [ 592.124117][T11006] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 592.145193][T11010] loop2: detected capacity change from 0 to 512 [ 592.153318][T11011] loop1: detected capacity change from 0 to 8 [ 592.176315][T11010] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 592.201473][T11011] SQUASHFS error: lzo decompression failed, data probably corrupt [ 592.210431][T11010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 592.226366][T11010] System zones: 1-12 [ 592.237726][T11011] SQUASHFS error: Failed to read block 0x91: -5 [ 592.244056][T11011] SQUASHFS error: Unable to read metadata cache entry [8f] [ 592.252505][T11010] EXT4-fs (loop2): orphan cleanup on readonly fs [ 592.257739][T11011] SQUASHFS error: Unable to read inode 0x11f [ 592.259008][T11010] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.2061: Inode bitmap for bg 0 marked uninitialized [ 592.279286][T11010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 592.427124][T10223] EXT4-fs (loop2): unmounting filesystem. [ 592.566800][T11020] loop2: detected capacity change from 0 to 190 [ 592.604066][T11020] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 592.636831][T11020] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 592.674054][T11020] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 592.707735][T11020] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 592.725460][T11020] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 592.775485][T11020] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 592.792119][T11020] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 592.821723][T11020] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 592.864247][T11020] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 592.885637][T11002] loop0: detected capacity change from 0 to 40427 [ 592.912337][T11020] ntfs: volume version 3.1. [ 592.917571][T11020] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use! [ 592.925100][T11002] F2FS-fs (loop0): invalid crc value [ 592.940212][T11002] F2FS-fs (loop0): Found nat_bits in checkpoint [ 592.956498][T11020] syz.2.2065: attempt to access beyond end of device [ 592.956498][T11020] loop2: rw=0, sector=552, nr_sectors = 8 limit=190 [ 592.971919][T11026] netlink: 'syz.3.2066': attribute type 16 has an invalid length. [ 592.990464][T11026] netlink: 'syz.3.2066': attribute type 17 has an invalid length. [ 593.027130][T11002] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 593.049915][T11020] syz.2.2065: attempt to access beyond end of device [ 593.049915][T11020] loop2: rw=0, sector=552, nr_sectors = 8 limit=190 [ 593.675677][T11035] [ 593.678053][T11035] ====================================================== [ 593.685073][T11035] WARNING: possible circular locking dependency detected [ 593.692101][T11035] 6.1.102-syzkaller #0 Not tainted [ 593.697213][T11035] ------------------------------------------------------ [ 593.704233][T11035] syz.0.2067/11035 is trying to acquire lock: [ 593.710307][T11035] ffff888061acc0d8 (&sighand->siglock){-.-.}-{2:2}, at: __lock_task_sighand+0x145/0x2d0 [ 593.720118][T11035] [ 593.720118][T11035] but task is already holding lock: [ 593.727492][T11035] ffff8880b9835e90 (lock#11){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 593.737877][T11035] [ 593.737877][T11035] which lock already depends on the new lock. [ 593.737877][T11035] [ 593.748298][T11035] [ 593.748298][T11035] the existing dependency chain (in reverse order) is: [ 593.757308][T11035] [ 593.757308][T11035] -> #3 (lock#11){+.+.}-{2:2}: [ 593.764260][T11035] lock_acquire+0x1f8/0x5a0 [ 593.769314][T11035] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 593.776422][T11035] stack_map_get_build_id_offset+0x99e/0x9c0 [ 593.782920][T11035] __bpf_get_stack+0x495/0x570 [ 593.788195][T11035] bpf_get_stack_raw_tp+0x1b2/0x220 [ 593.793903][T11035] 0xffffffffa0001fe2 [ 593.798401][T11035] bpf_trace_run2+0x1fd/0x410 [ 593.803588][T11035] trace_tlb_flush+0x151/0x1a0 [ 593.808867][T11035] switch_mm_irqs_off+0x84a/0xc20 [ 593.814407][T11035] __schedule+0x1152/0x4570 [ 593.819445][T11035] schedule+0xbf/0x180 [ 593.824052][T11035] do_nanosleep+0x192/0x5f0 [ 593.829073][T11035] hrtimer_nanosleep+0x24d/0x490 [ 593.834534][T11035] __se_sys_clock_nanosleep+0x323/0x3b0 [ 593.840601][T11035] do_syscall_64+0x3b/0xb0 [ 593.845535][T11035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.851948][T11035] [ 593.851948][T11035] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 593.859258][T11035] lock_acquire+0x1f8/0x5a0 [ 593.864284][T11035] _raw_spin_lock_nested+0x2d/0x40 [ 593.869908][T11035] raw_spin_rq_lock_nested+0x26/0x140 [ 593.875801][T11035] task_fork_fair+0x5d/0x350 [ 593.880911][T11035] sched_cgroup_fork+0x374/0x400 [ 593.886375][T11035] copy_process+0x2442/0x4060 [ 593.891576][T11035] kernel_clone+0x222/0x920 [ 593.896594][T11035] user_mode_thread+0x12e/0x190 [ 593.901953][T11035] rest_init+0x23/0x300 [ 593.906622][T11035] start_kernel+0x0/0x53f [ 593.911498][T11035] start_kernel+0x496/0x53f [ 593.916526][T11035] secondary_startup_64_no_verify+0xcf/0xdb [ 593.922937][T11035] [ 593.922937][T11035] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 593.930236][T11035] lock_acquire+0x1f8/0x5a0 [ 593.935271][T11035] _raw_spin_lock_irqsave+0xd1/0x120 [ 593.941076][T11035] try_to_wake_up+0xad/0x12e0 [ 593.946270][T11035] complete_signal+0x796/0xbd0 [ 593.951567][T11035] __send_signal_locked+0xb1a/0xdc0 [ 593.957292][T11035] do_notify_parent+0xe2b/0x1100 [ 593.962748][T11035] do_exit+0x172e/0x26a0 [ 593.967508][T11035] do_group_exit+0x202/0x2b0 [ 593.972623][T11035] __x64_sys_exit_group+0x3b/0x40 [ 593.978172][T11035] do_syscall_64+0x3b/0xb0 [ 593.983107][T11035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.989519][T11035] [ 593.989519][T11035] -> #0 (&sighand->siglock){-.-.}-{2:2}: [ 593.997341][T11035] validate_chain+0x1661/0x5950 [ 594.002714][T11035] __lock_acquire+0x125b/0x1f80 [ 594.008091][T11035] lock_acquire+0x1f8/0x5a0 [ 594.013121][T11035] _raw_spin_lock_irqsave+0xd1/0x120 [ 594.018921][T11035] __lock_task_sighand+0x145/0x2d0 [ 594.024547][T11035] group_send_sig_info+0x26c/0x300 [ 594.030178][T11035] bpf_send_signal_common+0x2d8/0x420 [ 594.036078][T11035] bpf_send_signal_thread+0x12/0x20 [ 594.041794][T11035] bpf_prog_7bb747c56a8bcba8+0x15/0x1d [ 594.047766][T11035] bpf_trace_run4+0x253/0x470 [ 594.052962][T11035] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 594.060165][T11035] lock_mm_and_find_vma+0x219/0x2e0 [ 594.065890][T11035] exc_page_fault+0x169/0x620 [ 594.071085][T11035] asm_exc_page_fault+0x22/0x30 [ 594.076466][T11035] __get_user_4+0x1c/0x30 [ 594.081319][T11035] cap_validate_magic+0x94/0x2b0 [ 594.086768][T11035] __se_sys_capset+0x186/0xdd0 [ 594.092040][T11035] do_syscall_64+0x3b/0xb0 [ 594.096974][T11035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.103383][T11035] [ 594.103383][T11035] other info that might help us debug this: [ 594.103383][T11035] [ 594.113595][T11035] Chain exists of: [ 594.113595][T11035] &sighand->siglock --> &rq->__lock --> lock#11 [ 594.113595][T11035] [ 594.125764][T11035] Possible unsafe locking scenario: [ 594.125764][T11035] [ 594.133204][T11035] CPU0 CPU1 [ 594.138559][T11035] ---- ---- [ 594.143912][T11035] lock(lock#11); [ 594.147634][T11035] lock(&rq->__lock); [ 594.154212][T11035] lock(lock#11); [ 594.160453][T11035] lock(&sighand->siglock); [ 594.165038][T11035] [ 594.165038][T11035] *** DEADLOCK *** [ 594.165038][T11035] [ 594.173169][T11035] 5 locks held by syz.0.2067/11035: [ 594.178358][T11035] #0: ffff8880186ad3d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2e0 [ 594.188279][T11035] #1: ffff8880b9835e90 (lock#11){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 594.199070][T11035] #2: ffffffff8d32ad40 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 594.208636][T11035] #3: ffffffff8d32ad40 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x16a/0x470 [ 594.218025][T11035] #4: ffffffff8d32ad40 (rcu_read_lock){....}-{1:2}, at: __lock_task_sighand+0x25/0x2d0 [ 594.227766][T11035] [ 594.227766][T11035] stack backtrace: [ 594.233648][T11035] CPU: 0 PID: 11035 Comm: syz.0.2067 Not tainted 6.1.102-syzkaller #0 [ 594.241785][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 594.251827][T11035] Call Trace: [ 594.255101][T11035] [ 594.258029][T11035] dump_stack_lvl+0x1e3/0x2cb [ 594.262708][T11035] ? nf_tcp_handle_invalid+0x642/0x642 [ 594.268178][T11035] ? print_circular_bug+0x12b/0x1a0 [ 594.273373][T11035] check_noncircular+0x2fa/0x3b0 [ 594.278306][T11035] ? add_chain_block+0x850/0x850 [ 594.283276][T11035] ? lockdep_lock+0x11f/0x2a0 [ 594.287951][T11035] ? _find_first_zero_bit+0xd0/0x100 [ 594.293235][T11035] validate_chain+0x1661/0x5950 [ 594.298094][T11035] ? reacquire_held_locks+0x660/0x660 [ 594.303468][T11035] ? validate_chain+0x112/0x5950 [ 594.308409][T11035] ? validate_chain+0x112/0x5950 [ 594.313346][T11035] ? reacquire_held_locks+0x660/0x660 [ 594.318734][T11035] ? smp_call_function_many_cond+0x1ec9/0x3460 [ 594.324885][T11035] ? reacquire_held_locks+0x660/0x660 [ 594.330263][T11035] ? mark_lock+0x9a/0x340 [ 594.334599][T11035] __lock_acquire+0x125b/0x1f80 [ 594.339459][T11035] lock_acquire+0x1f8/0x5a0 [ 594.343965][T11035] ? __lock_task_sighand+0x145/0x2d0 [ 594.349254][T11035] ? read_lock_is_recursive+0x10/0x10 [ 594.354631][T11035] ? read_lock_is_recursive+0x10/0x10 [ 594.360001][T11035] ? _raw_spin_lock_irqsave+0xac/0x120 [ 594.365458][T11035] _raw_spin_lock_irqsave+0xd1/0x120 [ 594.370732][T11035] ? __lock_task_sighand+0x145/0x2d0 [ 594.376011][T11035] ? _raw_spin_lock+0x40/0x40 [ 594.380678][T11035] __lock_task_sighand+0x145/0x2d0 [ 594.385783][T11035] ? __lock_task_sighand+0x25/0x2d0 [ 594.390978][T11035] group_send_sig_info+0x26c/0x300 [ 594.396083][T11035] ? lockdep_assert_task_sighand_held+0x2b0/0x2b0 [ 594.402494][T11035] bpf_send_signal_common+0x2d8/0x420 [ 594.407861][T11035] ? trace_bpf_trace_printk+0x250/0x250 [ 594.413402][T11035] ? bpf_trace_run4+0x16a/0x470 [ 594.418240][T11035] bpf_send_signal_thread+0x12/0x20 [ 594.423427][T11035] bpf_prog_7bb747c56a8bcba8+0x15/0x1d [ 594.428872][T11035] bpf_trace_run4+0x253/0x470 [ 594.433541][T11035] ? bpf_trace_run3+0x440/0x440 [ 594.438382][T11035] ? get_mm_memcg_path+0x4e6/0x600 [ 594.443493][T11035] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 594.450168][T11035] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 594.456942][T11035] lock_mm_and_find_vma+0x219/0x2e0 [ 594.462132][T11035] exc_page_fault+0x169/0x620 [ 594.466804][T11035] asm_exc_page_fault+0x22/0x30 [ 594.471647][T11035] RIP: 0010:__get_user_4+0x1c/0x30 [ 594.476763][T11035] Code: 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 ba [ 594.496359][T11035] RSP: 0018:ffffc9000afa7cb8 EFLAGS: 00050246 [ 594.502421][T11035] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9000afa7c03 [ 594.510409][T11035] RDX: ffffffffffffffff RSI: ffffffff8b0c13c0 RDI: ffffffff8b5d5ba0 [ 594.518383][T11035] RBP: ffffc9000afa7d90 R08: dffffc0000000000 R09: fffffbfff1d337ae [ 594.526344][T11035] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920015f4fce [ 594.534304][T11035] R13: 1ffff920015f4f9c R14: 1ffff920015f4fc8 R15: 0000000000000000 [ 594.542273][T11035] cap_validate_magic+0x94/0x2b0 [ 594.547217][T11035] ? ptracer_capable+0x250/0x250 [ 594.552183][T11035] ? do_futex+0x375/0x490 [ 594.556509][T11035] __se_sys_capset+0x186/0xdd0 [ 594.561267][T11035] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 594.566633][T11035] ? __x64_sys_capset+0x60/0x60 [ 594.571473][T11035] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 594.577456][T11035] ? syscall_enter_from_user_mode+0x2e/0x230 [ 594.583427][T11035] ? lockdep_hardirqs_on+0x94/0x130 [ 594.588613][T11035] ? syscall_enter_from_user_mode+0x2e/0x230 [ 594.594584][T11035] do_syscall_64+0x3b/0xb0 [ 594.598992][T11035] ? clear_bhb_loop+0x45/0xa0 [ 594.603667][T11035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.609569][T11035] RIP: 0033:0x7f1da93773b9 [ 594.613976][T11035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.633568][T11035] RSP: 002b:00007f1daa1e4048 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 594.641971][T11035] RAX: ffffffffffffffda RBX: 00007f1da9505f80 RCX: 00007f1da93773b9 [ 594.649935][T11035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 594.657919][T11035] RBP: 00007f1da93e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 594.665877][T11035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.673838][T11035] R13: 000000000000000b R14: 00007f1da9505f80 R15: 00007ffc420dc978 [ 594.681826][T11035] [ 594.817684][T11026] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.824987][T11026] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.847749][ T3686] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 595.087772][ T3686] usb 2-1: Using ep0 maxpacket: 8 [ 595.207777][ T3686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.220962][ T3686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.230810][ T3686] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.243601][ T3686] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 595.252673][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.262665][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.278108][ T3686] usb 2-1: config 0 descriptor?? [ 595.310000][T11026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.663697][T11026] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.672621][T11026] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.681992][T11026] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.691104][T11026] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.759840][ T3686] wacom 0003:056A:0000.001A: unknown main item tag 0x0 [ 595.766732][ T3686] wacom 0003:056A:0000.001A: unknown main item tag 0x0 [ 595.781470][ T3686] wacom 0003:056A:0000.001A: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 595.796633][ T3686] wacom 0003:056A:0000.001A: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.1-1/input0 [ 595.808991][ T3686] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0000.001A/input/input35 [ 595.968208][ T4810] usb 2-1: USB disconnect, device number 23