last executing test programs: 12m37.724414407s ago: executing program 0 (id=2460): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}, {&(0x7f0000000080)="ea8fd1dfaf042f4498f19fd629a5c0", 0xf}], 0x3, 0x0, 0x0, 0x400c800}, 0x4000000) close(0xffffffffffffffff) 12m37.521360823s ago: executing program 0 (id=2461): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 12m36.313444812s ago: executing program 0 (id=2462): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x20000400) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) listen(r0, 0x0) 12m36.034157705s ago: executing program 0 (id=2463): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x141842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000005) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000640), 0x3, 0x42f, &(0x7f0000000200)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x81, 0x10000000000000) 12m35.567394053s ago: executing program 0 (id=2464): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001480)=""/4095, 0xfff}], 0x1) 12m35.170130085s ago: executing program 1 (id=2466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3, 0x400, 0x0, 0x7, 0x0, 0xff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1ff, 0x9, 0x2dd0, 0x3, 0x7fffffff, 0x3ff}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7fffffff}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7, 0x6}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0x2, 0xb}, {0xa, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008810) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12m34.937781834s ago: executing program 0 (id=2469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'vlan0\x00'}) 12m34.517827628s ago: executing program 32 (id=2469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'vlan0\x00'}) 12m34.310204685s ago: executing program 1 (id=2472): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc52b390", 0x4}, {&(0x7f0000000100)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="ca2d", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="748080a54714ce974a428103824a223696f0821cda0b0faabd2683bce6e29460f49e7ecca4b1efcaead665a9586108b36c3123d86e7472495513633f1a9b91ba0c6f68df1c7d587f503c24c0ab03730c8e3fd08dade50b3e8cc887e4ceefc44b41a04ab49c20b7a6caed21801820f58ceb0124c7a7f1145a47bdac6a15ecc48e712cce474b342b787013c31dec1e44edfe546ae4ad5fd37f93609de43a8e4a657cb582bbc0d5a6e03f0c8eabb5afd4579b71af1e22c4dd007b5e56c4d2638f382de8621e221ba85e0985abcf3487c8dc41095787d0660bc6695edf4897d391658837e9d047644858", 0xe8}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 12m33.873631991s ago: executing program 1 (id=2473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054) 12m31.302171161s ago: executing program 1 (id=2477): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x141842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000005) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000640), 0x3, 0x42f, &(0x7f0000000200)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x81, 0x10000000000000) 12m30.864131746s ago: executing program 1 (id=2479): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc52b390", 0x4}, {&(0x7f0000000100)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="ca2d", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="748080a54714ce974a428103824a223696f0821cda0b0faabd2683bce6e29460f49e7ecca4b1efcaead665a9586108b36c3123d86e7472495513633f1a9b91ba0c6f68df1c7d587f503c24c0ab03730c8e3fd08dade50b3e8cc887e4ceefc44b41a04ab49c20b7a6caed21801820f58ceb0124c7a7f1145a47bdac6a15ecc48e712cce474b342b787013c31dec1e44edfe546ae4ad5fd37f93609de43a8e4a657cb582bbc0d5a6e03f0c8eabb5afd4579b71af1e22c4dd007b5e56c4d2638f382de8621e221ba85e0985abcf3487c8dc41095787d0660bc6695edf4897d391658837e9d047644858", 0xe8}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 12m30.357857468s ago: executing program 1 (id=2481): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x6, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 12m29.808743313s ago: executing program 33 (id=2481): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x6, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 8m35.332499004s ago: executing program 4 (id=3812): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="ca2d", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 8m34.272979511s ago: executing program 4 (id=3814): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x59b, &(0x7f0000002480)="$eJzs3T1sG2UfAPD/2fGbfuRt+krvK72gDhUgFamqk/QDClO7IipV6oDEUizHjaI4cRQ70EQZ0r1CdECAupQNBkYQAwNiQWJhZQExI1U0AqnpAEb+StvEDk6p6zT+/aSz77nn7P/z3Pl/9nO6kwMYWEdrD6mIZyLiYhIx+kDdUDQrjzbWW19byd9bW8knUa1e+jWJJCLurq3kW+snzeeDEbEaEf+PiG8yEcdTW+OWl5ZncsViYaFZHqvMzo+Vl5ZPTM/mpgpThblTL79y5uzpMxMnJzo3PrOzvl7/6ca7179/7daNTz87spp/P5fEuRhp1j3Yj8epsU0ycW7T8tO9CNZHSb8bwCNJN/O8lkr/i9FIN7O+neroE20a0GPV4YjqTiSrO1od2M2SneU/sGe0fgfUxr9th9Pp3v7+uH2+MQCpxV9vTo2aoca5idhXH5sc+C15aGRSG28e7m3TGACr1yJifGio9vlrTY2apPn5e3Tjj6OB9NTX5xs7auv+T20cf6LN8Wekde70H2od/9a3HP/ux093OP5d7DLGH2/+/FHH+Ncinm0bP9mIn7SJn4qIt7qMf/ONL892qqt+HHEs2sdvSbY/Pzx2ZbpYGG88to3x1bEjr27X/wMd4jfO2e6rf8202/7zXfb/i28/f251m/gvPr/9/m+3/fdHxHtdxv/P3U9e71R3+1pyp/YrYKf7v7bsVpfxXzp39McOVfu7fAsAAAAAAAAAAKCNVP1atiSV3ZhPpbLZxj28/40DqWKpXDl+pbQ4N9m45u1wZFKtK61GG+WkVp5oXo/bKp/cVD7Vuo44vb9ezuZLxck+9x0AAAAAAAAAAAAAAAAAAAB2i4Ob7v//PV2//3/z31UDe1Xnv/wG9jr5D4Pr4fxPIob71hTgCfP9DwOrKv9hcMl/GFzyHwaX/IfBJf9hcMl/GFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAeuLihQu1qXpvbSVfK08OLS3OlN4+MVkoz2RnF/PZfGlhPjtVKk0VC9l8afbv3q9YKs2Px9zi1bFKoVwZKy8tX54tLc5VLk/P5qYKlwuZJ9IrAAAAAAAAAAAAAAAAAAAAeLqM1KcklY2IVH0+lcpmI/4dEYcjk1yZLhbGI+JQRPyQzgzXyhP9bjQAAAAAAAAAAAAAAAAAAADsMeWl5ZlcsVhYGJCZoS1Lvuu8ckSsPt5m1N5xR68anskVM819tVu24dM2c2j7ddLR9xbuxpk+H5gAAAAAAAAAAAAAAAAAAGAA3b/pt9tX/NnbBgEAAAAAAAAAAAAAAAAAAMBASv2SRERtOjb6wsjm2n8l6+n6c0S8c/PSB1dzlcrCRG35nY3llQ+by0/2o/1At1p52spjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L7y0vJMrlgsLPRwpt99BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgUfwUAAP//H1DQ4Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x78) 8m33.751266884s ago: executing program 4 (id=3819): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}}, 0x24}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 8m33.313026449s ago: executing program 4 (id=3821): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000340)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@nobarrier}, {@noinline_dentry}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 8m30.754453298s ago: executing program 4 (id=3830): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f00000003c0), 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00), &(0x7f0000001c40)=r6}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d00010027bd70000000000007000000", @ANYRES32=r7, @ANYBLOB="8000a6000a0002"], 0x28}}, 0x20000040) 8m24.662000336s ago: executing program 4 (id=3842): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8m22.727127273s ago: executing program 34 (id=3842): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7m24.442935629s ago: executing program 6 (id=4029): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 7m24.294262491s ago: executing program 6 (id=4030): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e2200"], 0x0) 7m24.160813722s ago: executing program 6 (id=4031): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getpid() 7m23.829897569s ago: executing program 6 (id=4034): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r4, r3}, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000440)={[{@nolazytime}, {@orlov}, {@usrjquota}, {@usrjquota}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") 7m21.650412487s ago: executing program 6 (id=4047): pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 7m21.161780266s ago: executing program 6 (id=4050): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x3fed, &(0x7f0000000380), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000300)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) 7m5.990780814s ago: executing program 35 (id=4050): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x3fed, &(0x7f0000000380), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000300)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) 37.536256894s ago: executing program 2 (id=5240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x7c2378cc973e4a5, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 37.281254894s ago: executing program 2 (id=5242): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/269, 0xfffffdef) 37.124893757s ago: executing program 2 (id=5245): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), 0x0, 0x2}, 0x20) socket(0x1, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 35.026352488s ago: executing program 2 (id=5255): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00003f3000/0x2000)=nil, 0x2000, 0xa) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x3000) msgrcv(r2, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_RMID(r2, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003300), 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) mount_setattr(0xffffffffffffffff, 0x0, 0x900, 0x0, 0x0) fanotify_init(0x200, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x1, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r3, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 0', 0x1d) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x80086303, &(0x7f0000000000)) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r6, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xfffffd8d, &(0x7f00000000c0)={&(0x7f0000000400)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x10044011}, 0x811) 33.457838387s ago: executing program 2 (id=5263): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 32.410312012s ago: executing program 2 (id=5273): r0 = socket$pppoe(0x18, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b000000090400"], 0x0) syz_open_dev$midi(0x0, 0x500, 0xc900) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f0000000300), 0x0}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @random="c0c13c2baeb6", 'hsr0\x00'}}, 0x1e) 28.790267948s ago: executing program 7 (id=5291): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x65b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 27.398249022s ago: executing program 7 (id=5294): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) sendmmsg$inet(r1, &(0x7f0000005f80), 0x0, 0x8040) 16.264623981s ago: executing program 7 (id=5295): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) acct(&(0x7f0000000140)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r4, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000290000003e00000000000000"], 0x10}, 0x40080) ioctl$SIOCSIFHWADDR(r3, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="860000202300"}) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_open_procfs(0x0, 0x0) writev(r6, &(0x7f0000000040), 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000480)=0xf6) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000540)) splice(r0, &(0x7f00000004c0)=0x2, r5, &(0x7f0000000500)=0xf, 0x4, 0x8) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2800, 0xd59f82, 0x2, 0x5, 0xb, 0x8, 0x0, 0x722, 0x1, 0x7, 0x9, 0x2b, 0x0, {0xffff945a, 0x1}, 0x9, 0xf1}}) 16.014077951s ago: executing program 36 (id=5273): r0 = socket$pppoe(0x18, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b000000090400"], 0x0) syz_open_dev$midi(0x0, 0x500, 0xc900) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f0000000300), 0x0}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @random="c0c13c2baeb6", 'hsr0\x00'}}, 0x1e) 13.384121516s ago: executing program 5 (id=5299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6", 0x11}, {&(0x7f0000002440)="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", 0x2c4}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@volatile}]}) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) shutdown(r1, 0x1) 11.785755887s ago: executing program 5 (id=5301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r2, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) 7.95847985s ago: executing program 5 (id=5302): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xef1, &(0x7f0000000cc0)={0x0, 0x1c2a, 0x10100, 0x0, 0xa7, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2}, 'syz0\x00', 0x35}) ioctl$UI_DEV_CREATE(r5, 0x5501) read(r5, &(0x7f0000000280)=""/44, 0x2c) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) 6.85349687s ago: executing program 3 (id=5303): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) sendmmsg$inet(r1, &(0x7f0000005f80), 0x0, 0x8040) 4.450172316s ago: executing program 3 (id=5304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) 3.847540045s ago: executing program 7 (id=5305): r0 = socket$tipc(0x1e, 0x2, 0x0) io_setup(0x800, &(0x7f0000000500)=0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r3, 0xffff) close(0x3) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x1, 0x0, 0x8000}) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.275271902s ago: executing program 5 (id=5306): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x40812, 0x3}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x5, 0x4, 0x4}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'dummy0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x24008000) 3.090866517s ago: executing program 7 (id=5307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x7c2378cc973e4a5, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.550261103s ago: executing program 3 (id=5308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6", 0x11}, {&(0x7f0000002440)="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", 0x2c4}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@volatile}]}) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) shutdown(r1, 0x1) 1.299572184s ago: executing program 5 (id=5309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r2, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) 1.132315067s ago: executing program 3 (id=5310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a010200"], 0xcc}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xe, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0xb, "0000002d240c0378cf"}, @window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @sack={0x5, 0x1a, [0x91, 0x4, 0x2, 0x0, 0x31f3, 0x2a66645e]}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) 562.378704ms ago: executing program 3 (id=5311): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) 344.359941ms ago: executing program 3 (id=5312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0xc, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x2000c884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 926.75µs ago: executing program 5 (id=5313): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) acct(&(0x7f0000000140)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r4, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000290000003e00000000000000"], 0x10}, 0x40080) ioctl$SIOCSIFHWADDR(r3, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="860000202300"}) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_open_procfs(0x0, 0x0) writev(r6, &(0x7f0000000040), 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000480)=0xf6) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000540)) splice(r0, &(0x7f00000004c0)=0x2, r5, &(0x7f0000000500)=0xf, 0x4, 0x8) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2800, 0xd59f82, 0x2, 0x5, 0xb, 0x8, 0x0, 0x722, 0x1, 0x7, 0x9, 0x2b, 0x0, {0xffff945a, 0x1}, 0x9, 0xf1}}) 0s ago: executing program 7 (id=5320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r2, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 00 00 00 00 00 00 00 00 00 00 00 ................ [ 956.561693][T17409] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 956.571895][T19941] XFS (loop2): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 956.584903][T19941] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 956.593326][ T28] audit: type=1326 audit(1753967159.664:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19957 comm="syz.3.4705" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86aa98e9a9 code=0x0 [ 956.600217][T19941] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 956.698376][T19960] random: crng reseeded on system resumption [ 956.850955][T11997] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 957.652975][T19969] loop5: detected capacity change from 0 to 4096 [ 957.667290][T19969] EXT4-fs (loop5): Test dummy encryption mode enabled [ 957.678760][T19969] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 957.687099][T19969] System zones: 0-5 [ 957.727839][T19969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.923876][T19977] binder: 19966:19977 ioctl c0306201 0 returned -14 [ 957.975337][T19967] loop3: detected capacity change from 0 to 8192 [ 958.030865][T19967] loop3: p1 p2[DM] p4 [ 958.044686][T19967] loop3: p1 size 196608 extends beyond EOD, truncated [ 958.060901][T19967] loop3: p2 start 4292936063 is beyond EOD, truncated [ 958.115383][T19967] loop3: p4 size 50331648 extends beyond EOD, truncated [ 958.372816][T19981] loop2: detected capacity change from 0 to 4096 [ 958.711706][T12275] udevd[12275]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 958.722220][T12597] udevd[12597]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 959.290865][T19991] loop3: detected capacity change from 0 to 256 [ 959.309056][T19991] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 959.345091][T19991] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 959.381887][T19993] ./file0: Can't lookup blockdev [ 959.390643][T19991] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 959.635781][T17560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.527483][T12158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.586994][T20008] loop7: detected capacity change from 0 to 256 [ 960.742476][T20008] FAT-fs (loop7): Directory bread(block 64) failed [ 960.764092][T20008] FAT-fs (loop7): Directory bread(block 65) failed [ 960.790739][T20012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4724'. [ 960.794619][T20008] FAT-fs (loop7): Directory bread(block 66) failed [ 960.823199][T20008] FAT-fs (loop7): Directory bread(block 67) failed [ 960.840323][T20008] FAT-fs (loop7): Directory bread(block 68) failed [ 960.848171][T20008] FAT-fs (loop7): Directory bread(block 69) failed [ 960.855314][T20008] FAT-fs (loop7): Directory bread(block 70) failed [ 960.861991][T20008] FAT-fs (loop7): Directory bread(block 71) failed [ 960.869290][T20008] FAT-fs (loop7): Directory bread(block 72) failed [ 960.876239][T20008] FAT-fs (loop7): Directory bread(block 73) failed [ 961.204429][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 961.221771][T20022] loop2: detected capacity change from 0 to 1024 [ 961.281698][T20022] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 961.342389][T20022] System zones: 0-1, 3-36 [ 961.413338][T20022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.445902][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.493220][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 961.520785][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 961.557849][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 961.589694][ T9] usb 6-1: SerialNumber: syz [ 961.831382][ T9] usb 6-1: 0:2 : does not exist [ 961.896825][ T9] usb 6-1: USB disconnect, device number 4 [ 961.969173][T12597] udevd[12597]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.619767][T20037] loop5: detected capacity change from 0 to 256 [ 962.663412][T20037] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 962.683321][T20037] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 962.700500][T20037] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 964.172274][T20046] overlayfs: statfs failed on './file0' [ 965.139180][T20075] input: syz1 as /devices/virtual/input/input19 [ 965.376008][T20079] tipc: Can't bind to reserved service type 0 [ 965.818070][T11997] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.108751][T20083] loop3: detected capacity change from 0 to 256 [ 966.194978][T20083] FAT-fs (loop3): Directory bread(block 64) failed [ 966.201617][T20083] FAT-fs (loop3): Directory bread(block 65) failed [ 966.246062][T20083] FAT-fs (loop3): Directory bread(block 66) failed [ 966.272327][T20083] FAT-fs (loop3): Directory bread(block 67) failed [ 966.279502][T20083] FAT-fs (loop3): Directory bread(block 68) failed [ 966.294749][T20083] FAT-fs (loop3): Directory bread(block 69) failed [ 966.301475][T20083] FAT-fs (loop3): Directory bread(block 70) failed [ 966.313318][T20083] FAT-fs (loop3): Directory bread(block 71) failed [ 966.320373][T20083] FAT-fs (loop3): Directory bread(block 72) failed [ 966.334115][T20083] FAT-fs (loop3): Directory bread(block 73) failed [ 966.589880][T20107] binder: 20106:20107 ioctl c018620b 0 returned -14 [ 966.801248][ T5861] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 967.402874][T20113] loop3: detected capacity change from 0 to 65536 [ 967.456155][ T5861] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.601647][ T5861] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.640224][T20113] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 967.775064][ T5861] usb 6-1: config 0 interface 0 has no altsetting 0 [ 967.781942][ T5861] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 967.836581][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 967.982966][T20113] XFS (loop3): Ending clean mount [ 968.017805][T17409] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 968.039397][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 968.062198][T17409] XFS (loop3): Unmount and run xfs_repair [ 968.072715][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.092848][T17409] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 968.121165][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.140495][T17409] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 968.160744][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 968.185004][T17409] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 968.193945][T17409] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 968.213813][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 968.241112][T17409] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 968.264429][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.278728][T17409] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 968.288271][T17409] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 968.304579][T17409] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 968.329188][ T9] usb 3-1: config 0 descriptor?? [ 968.338719][T17409] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 968.376586][T20113] XFS (loop3): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 968.387859][T20113] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 968.403425][T20113] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 968.469780][T11803] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 969.036747][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 969.056223][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 969.084317][ T9] usb 3-1: USB disconnect, device number 7 [ 969.350071][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.365494][ T5861] usb 6-1: config 0 descriptor?? [ 969.538008][ T5861] usbhid 6-1:0.0: can't add hid device: -71 [ 969.555142][ T5861] usbhid: probe of 6-1:0.0 failed with error -71 [ 969.575073][ T5861] usb 6-1: USB disconnect, device number 5 [ 969.810217][T17409] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 969.932283][T20139] loop5: detected capacity change from 0 to 4096 [ 970.344412][T17409] usb 8-1: Using ep0 maxpacket: 32 [ 970.369032][T17409] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.388973][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 970.396853][T17409] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.434043][T17409] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 970.463350][T17409] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 970.473835][T17409] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.496688][T17409] usb 8-1: config 0 descriptor?? [ 970.540894][T20146] overlayfs: overlapping lowerdir path [ 970.635593][ T9] usb 3-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 970.664359][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.717435][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 970.744922][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 970.753209][ T9] usb 3-1: SerialNumber: syz [ 970.771251][ T9] usb 3-1: 0:2 : does not exist [ 970.784476][ T9] usb 3-1: unit 233 not found! [ 971.381151][ T9] usb 3-1: USB disconnect, device number 8 [ 971.755005][T17409] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.000A/input/input20 [ 971.927287][T17409] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.000A/input/input21 [ 972.197993][T17409] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.7-1/input0 [ 972.411051][T17409] usb 8-1: USB disconnect, device number 3 [ 972.730527][T20162] fido_id[20162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 973.100733][T20170] binder_alloc: 20169: pid 20169 spamming oneway? 1 buffers allocated for a total size of 5240 [ 973.408213][T20177] loop5: detected capacity change from 0 to 4096 [ 973.601941][T20186] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 973.621227][T20186] overlayfs: missing 'lowerdir' [ 975.742260][T20221] loop3: detected capacity change from 0 to 4096 [ 976.219286][T20210] loop7: detected capacity change from 0 to 256 [ 976.391291][T20210] FAT-fs (loop7): Directory bread(block 64) failed [ 976.416637][T20210] FAT-fs (loop7): Directory bread(block 65) failed [ 976.423378][T20210] FAT-fs (loop7): Directory bread(block 66) failed [ 976.476078][T20210] FAT-fs (loop7): Directory bread(block 67) failed [ 976.482805][T20210] FAT-fs (loop7): Directory bread(block 68) failed [ 976.535296][T20210] FAT-fs (loop7): Directory bread(block 69) failed [ 976.542031][T20210] FAT-fs (loop7): Directory bread(block 70) failed [ 976.557078][T20210] FAT-fs (loop7): Directory bread(block 71) failed [ 976.614554][T20210] FAT-fs (loop7): Directory bread(block 72) failed [ 976.621214][T20210] FAT-fs (loop7): Directory bread(block 73) failed [ 976.766850][T20237] loop3: detected capacity change from 0 to 4096 [ 976.781362][T20237] EXT4-fs (loop3): Test dummy encryption mode enabled [ 976.799413][T20237] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 976.807816][T20237] System zones: 0-5 [ 976.876462][T20237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.893670][T18791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 976.906524][T18791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 976.921885][T18791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 977.006419][T18791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 977.017444][T18791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 977.025076][T18791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 977.680059][ T1141] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.055971][ T1141] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.306129][ T1141] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.377967][T20250] loop7: detected capacity change from 0 to 65536 [ 978.406801][T20250] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 978.572904][T20250] XFS (loop7): Ending clean mount [ 978.621262][ T1141] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.761259][T20240] chnl_net:caif_netlink_parms(): no params data found [ 978.892433][ T3063] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 978.938866][ T3063] XFS (loop7): Unmount and run xfs_repair [ 978.955110][ T3063] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 978.983118][ T3063] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 979.005403][ T3063] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 979.048800][ T3063] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 979.074414][T18791] Bluetooth: hci3: command tx timeout [ 979.087150][ T3063] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 979.110799][ T3063] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 979.120533][ T3063] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 979.129681][ T3063] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 979.141192][ T3063] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 979.150342][T20262] XFS (loop7): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 979.170220][T20262] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 979.185543][T20262] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 979.216015][T20240] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.223391][T20240] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.231218][T20240] bridge_slave_0: entered allmulticast mode [ 979.239109][T20240] bridge_slave_0: entered promiscuous mode [ 979.249109][T20240] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.257065][T20240] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.411206][T17560] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 979.490867][T20240] bridge_slave_1: entered allmulticast mode [ 979.527105][T20240] bridge_slave_1: entered promiscuous mode [ 979.946142][T20240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.050420][T20240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.323254][T20240] team0: Port device team_slave_0 added [ 980.379354][T20240] team0: Port device team_slave_1 added [ 980.595216][ T1141] tipc: Left network mode [ 980.638279][T20240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.689134][T20240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.744431][T20240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.846017][T20240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.887347][T20240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.031219][T20240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.159971][T18791] Bluetooth: hci3: command tx timeout [ 981.595953][T11803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.689235][T20240] hsr_slave_0: entered promiscuous mode [ 981.754959][T20240] hsr_slave_1: entered promiscuous mode [ 982.108479][T20292] loop7: detected capacity change from 0 to 4096 [ 982.234425][T17409] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 982.426949][T17409] usb 3-1: Using ep0 maxpacket: 32 [ 982.459429][T17409] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 982.473185][T17409] usb 3-1: config 0 has no interface number 0 [ 982.510604][T17409] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 982.541036][T17409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.565307][T17409] usb 3-1: Product: syz [ 982.569563][T17409] usb 3-1: Manufacturer: syz [ 982.602682][T17409] usb 3-1: SerialNumber: syz [ 982.620605][T17409] usb 3-1: config 0 descriptor?? [ 982.694621][T20308] loop7: detected capacity change from 0 to 1024 [ 982.706461][T20308] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 982.715371][T20308] System zones: 0-1, 3-36 [ 982.731961][T20308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.274523][T18791] Bluetooth: hci3: command tx timeout [ 983.738742][T17409] smsc95xx v2.0.0 [ 984.190618][T20318] loop3: detected capacity change from 0 to 65536 [ 984.260286][T20318] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 984.321952][T20318] XFS (loop3): Ending clean mount [ 984.647620][ T5861] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 984.684409][ T5861] XFS (loop3): Unmount and run xfs_repair [ 984.711759][ T5861] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 984.765891][T17409] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 984.767174][ T5861] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 984.794271][T17409] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 984.852105][ T5861] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 984.861643][ T5861] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 984.878258][ T5861] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 984.889327][T17560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.963468][ T5861] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 984.993375][ T5861] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 985.031623][ T5861] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 985.064690][ T5861] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 985.077085][T20328] XFS (loop3): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 985.088083][T20328] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 985.103869][T20328] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 985.355037][T18791] Bluetooth: hci3: command tx timeout [ 985.370208][T11803] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 985.402069][ T1141] hsr_slave_0: left promiscuous mode [ 985.425069][ T1141] hsr_slave_1: left promiscuous mode [ 985.450440][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.459611][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.469978][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.478207][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.490794][ T1141] bridge_slave_1: left allmulticast mode [ 985.499403][ T1141] bridge_slave_1: left promiscuous mode [ 985.511824][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.616325][ T1141] bridge_slave_0: left allmulticast mode [ 985.650784][ T1141] bridge_slave_0: left promiscuous mode [ 985.664477][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.831918][ T1141] veth1_macvtap: left promiscuous mode [ 985.841882][ T1141] veth0_macvtap: left promiscuous mode [ 985.861811][ T1141] veth1_vlan: left promiscuous mode [ 985.868657][ T1141] veth0_vlan: left promiscuous mode [ 986.724599][ T1141] pimreg (unregistering): left allmulticast mode [ 986.801287][ T1141] pimreg3 (unregistering): left allmulticast mode [ 986.911783][T20363] loop7: detected capacity change from 0 to 1024 [ 987.129574][T17409] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 987.166588][T20363] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 987.212616][T17409] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 987.274626][T20363] System zones: 0-1, 3-36 [ 987.279274][T17409] usb 3-1: USB disconnect, device number 9 [ 987.403801][T20363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.489788][T20365] loop3: detected capacity change from 0 to 65536 [ 987.549231][T20365] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 987.710824][T20365] XFS (loop3): Ending clean mount [ 987.982593][T17409] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 988.014793][T17409] XFS (loop3): Unmount and run xfs_repair [ 988.042466][T17409] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 988.057095][T17409] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 988.078383][T17409] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 988.088319][T17409] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 988.103651][T17409] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 988.113152][T17409] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 988.128832][T17409] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 988.138607][T17409] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 988.154142][T17409] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 988.168551][T20365] XFS (loop3): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 988.216861][T20365] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 988.231954][T20365] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 988.382877][T11803] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 989.170899][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 989.335465][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 989.481235][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.625603][T20392] loop3: detected capacity change from 0 to 4096 [ 991.124913][ T1141] bond0 (unregistering): Released all slaves [ 991.400217][T17560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.677237][T20240] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 991.702719][T20240] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 991.764295][T20240] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 991.818307][T20240] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 992.098643][T20423] loop2: detected capacity change from 0 to 4096 [ 992.254407][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 992.263397][T20240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.360661][T20240] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.429365][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.436775][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.484682][ T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 992.509153][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.516444][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.526216][ T9] usb 4-1: config 0 has no interface number 0 [ 992.548143][ T9] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.584281][ T9] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.604584][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 992.624393][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.657425][ T9] usb 4-1: config 0 descriptor?? [ 993.135853][ T9] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 993.157251][ T9] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 993.165078][ T9] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 993.174926][ T9] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 993.193174][ T9] lenovo 0003:17EF:6047.000B: unknown main item tag 0x0 [ 993.218391][ T9] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input64 [ 993.316769][ T9] lenovo 0003:17EF:6047.000B: Failed to switch F7/9/11 mode: -71 [ 993.352265][ T9] lenovo 0003:17EF:6047.000B: Failed to switch middle button: -71 [ 993.370785][ T9] lenovo 0003:17EF:6047.000B: Fn-lock setting failed: -71 [ 993.395839][T20240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.421589][ T9] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -71 [ 993.480682][ T9] usb 4-1: USB disconnect, device number 7 [ 993.495335][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.541416][T20451] fido_id[20451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 993.872184][T20466] loop8: detected capacity change from 0 to 79 [ 994.026532][T20466] loop8: detected capacity change from 79 to 78 [ 994.227215][T20477] loop3: detected capacity change from 0 to 4096 [ 994.379474][T20240] veth0_vlan: entered promiscuous mode [ 994.462701][T20240] veth1_vlan: entered promiscuous mode [ 994.607987][T20240] veth0_macvtap: entered promiscuous mode [ 994.652912][T20240] veth1_macvtap: entered promiscuous mode [ 994.715465][T20240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.766967][T20240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.813081][T20240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.854839][T20240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.902884][T20240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.957882][T20240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.028313][T20240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.121584][T20240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.203108][T20240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.261589][T20240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.315506][T20240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.357987][T20240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.389157][T20240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.422804][T20488] loop7: detected capacity change from 0 to 65536 [ 995.437060][T20240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.508123][T20488] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 995.548433][T20240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.609870][T20488] XFS (loop7): Ending clean mount [ 995.614572][T20240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.644318][T20240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.653126][T20240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.935183][T17409] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 995.948046][T17409] XFS (loop7): Unmount and run xfs_repair [ 995.953836][T17409] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 995.974292][T17409] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 996.025111][T17409] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 996.067936][T17409] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 996.105737][T17409] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 996.131359][T17409] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 996.149591][T17409] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 996.161139][T17409] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 996.171810][T17409] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 996.189808][T19866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.218858][T20488] XFS (loop7): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 996.235931][T20488] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 996.250955][T20488] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 996.312348][T19866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.374845][T17560] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 996.416217][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.460129][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.020765][T12188] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 997.244798][T12188] usb 3-1: Using ep0 maxpacket: 32 [ 997.271039][T12188] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 997.325539][T12188] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 997.403361][T12188] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 997.463440][T12188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 997.527254][T12188] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 997.562604][T12188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 997.610459][T12188] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 997.654292][T12188] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 997.678214][T12188] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 997.736034][T12188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.812980][T12188] usb 3-1: config 0 descriptor?? [ 997.840269][T20527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 998.290486][T12188] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 998.306458][T12188] usb 3-1: USB disconnect, device number 10 [ 998.316030][T12188] usblp0: removed [ 998.342768][T20545] loop5: detected capacity change from 0 to 256 [ 998.363613][T20545] FAT-fs (loop5): Directory bread(block 64) failed [ 998.370382][T20545] FAT-fs (loop5): Directory bread(block 65) failed [ 998.377240][T20545] FAT-fs (loop5): Directory bread(block 66) failed [ 998.383823][T20545] FAT-fs (loop5): Directory bread(block 67) failed [ 998.390552][T20545] FAT-fs (loop5): Directory bread(block 68) failed [ 998.397197][T20545] FAT-fs (loop5): Directory bread(block 69) failed [ 998.404528][T20545] FAT-fs (loop5): Directory bread(block 70) failed [ 998.411108][T20545] FAT-fs (loop5): Directory bread(block 71) failed [ 998.417994][T20545] FAT-fs (loop5): Directory bread(block 72) failed [ 998.424778][T20545] FAT-fs (loop5): Directory bread(block 73) failed [ 998.473901][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 998.489147][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 998.519573][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 998.552356][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 998.567828][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 998.577309][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 998.790866][T15949] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.864554][T12188] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 999.114488][T12188] usb 3-1: Using ep0 maxpacket: 32 [ 999.143360][T12188] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 999.153830][T12188] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 999.164449][T12188] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 999.173659][T12188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 999.183939][T12188] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 999.194103][T12188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 999.210548][T12188] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 999.228549][T15949] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.244116][T12188] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 999.258051][T12188] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 999.267980][T12188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.289036][T20548] chnl_net:caif_netlink_parms(): no params data found [ 999.306592][T12188] usb 3-1: config 0 descriptor?? [ 999.331502][T20527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 999.471790][T15949] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.611903][T12188] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 999.654171][T15949] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.724359][ T3063] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 999.751887][T20548] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.759307][T20548] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.768506][T20548] bridge_slave_0: entered allmulticast mode [ 999.798291][T20548] bridge_slave_0: entered promiscuous mode [ 999.823866][T20548] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.865114][ C1] usblp0: nonzero read bulk status received: -71 [ 999.872956][T20548] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.880845][T20548] bridge_slave_1: entered allmulticast mode [ 999.906757][T20548] bridge_slave_1: entered promiscuous mode [ 999.924598][ T3063] usb 8-1: Using ep0 maxpacket: 8 [ 999.934187][T18071] usb 3-1: USB disconnect, device number 11 [ 999.961160][ T3063] usb 8-1: config 64 has an invalid interface number: 143 but max is 0 [ 999.980749][T18071] usblp0: removed [ 1000.002553][ T3063] usb 8-1: config 64 has no interface number 0 [ 1000.052250][ T3063] usb 8-1: config 64 interface 143 has no altsetting 0 [ 1000.095316][ T3063] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=c5.be [ 1000.122660][ T3063] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.172972][ T3063] usb 8-1: Product: syz [ 1000.183110][ T3063] usb 8-1: Manufacturer: syz [ 1000.196474][ T3063] usb 8-1: SerialNumber: syz [ 1000.219171][T20548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.328798][T20548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.481934][T20580] loop5: detected capacity change from 0 to 65536 [ 1000.504930][ T3063] usb_ehset_test: probe of 8-1:64.143 failed with error -32 [ 1000.529553][ T3063] usb 8-1: USB disconnect, device number 4 [ 1000.615943][T20548] team0: Port device team_slave_0 added [ 1000.632429][T20548] team0: Port device team_slave_1 added [ 1000.666928][T20580] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1000.675108][T18791] Bluetooth: hci0: command tx timeout [ 1000.755804][T20580] XFS (loop5): Ending clean mount [ 1000.821452][T15949] tipc: Left network mode [ 1000.830184][ T27] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 1000.880734][ T27] XFS (loop5): Unmount and run xfs_repair [ 1000.892570][T20548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.914940][ T27] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1000.924381][T20548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.962008][ T27] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1000.970931][T20548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.986342][ T27] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1000.996535][ T27] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1001.031731][ T27] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1001.082017][ T27] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1001.114592][ T27] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1001.135365][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1001.166788][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1001.193714][T20591] XFS (loop5): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 1001.205235][T20591] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1001.223298][T20591] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1001.230761][T20548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.239856][T20548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.292835][T20548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.468651][T20240] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1001.716462][T20612] loop7: detected capacity change from 0 to 256 [ 1001.824103][T20548] hsr_slave_0: entered promiscuous mode [ 1001.845143][T20548] hsr_slave_1: entered promiscuous mode [ 1001.862237][T20612] FAT-fs (loop7): Directory bread(block 64) failed [ 1001.868972][T20612] FAT-fs (loop7): Directory bread(block 65) failed [ 1001.875901][T20612] FAT-fs (loop7): Directory bread(block 66) failed [ 1001.882468][T20612] FAT-fs (loop7): Directory bread(block 67) failed [ 1001.890297][T20612] FAT-fs (loop7): Directory bread(block 68) failed [ 1001.897000][T20612] FAT-fs (loop7): Directory bread(block 69) failed [ 1001.903720][T20612] FAT-fs (loop7): Directory bread(block 70) failed [ 1001.904355][T20548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1001.910331][T20612] FAT-fs (loop7): Directory bread(block 71) failed [ 1001.925129][T20612] FAT-fs (loop7): Directory bread(block 72) failed [ 1001.932327][T20612] FAT-fs (loop7): Directory bread(block 73) failed [ 1001.980999][T20548] Cannot create hsr debugfs directory [ 1002.672524][T20631] loop5: detected capacity change from 0 to 4096 [ 1002.693619][T20631] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1002.742726][T20631] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1002.756808][T18791] Bluetooth: hci0: command tx timeout [ 1002.766655][T20631] System zones: 0-5 [ 1002.779122][T20631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.961034][T12188] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1004.149262][T20652] loop2: detected capacity change from 0 to 65536 [ 1004.184763][T12188] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.210535][T15949] hsr_slave_0: left promiscuous mode [ 1004.244433][T20652] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1004.249587][T12188] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1004.286546][T15949] hsr_slave_1: left promiscuous mode [ 1004.304297][T15949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.309390][T20652] XFS (loop2): Ending clean mount [ 1004.357765][T12188] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1004.368444][T15949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.392382][T12188] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1004.411302][T15949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.421370][ T9] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 1004.450987][T12188] usb 8-1: SerialNumber: syz [ 1004.452924][T15949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.480432][ T9] XFS (loop2): Unmount and run xfs_repair [ 1004.488293][T15949] bridge_slave_1: left allmulticast mode [ 1004.495027][T15949] bridge_slave_1: left promiscuous mode [ 1004.498753][ T9] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1004.500897][T15949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.539408][ T9] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1004.562823][ T9] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1004.576098][T15949] bridge_slave_0: left promiscuous mode [ 1004.593864][T15949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.604759][ T9] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1004.613732][ T9] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1004.671956][ T9] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1004.704418][ T9] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1004.713620][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1004.758684][T12188] usb 8-1: 0:2 : does not exist [ 1004.773896][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1004.807096][T20669] XFS (loop2): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 1004.813712][T12188] usb 8-1: USB disconnect, device number 5 [ 1004.818507][T20669] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1004.838547][T20669] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1004.847263][T18791] Bluetooth: hci0: command tx timeout [ 1004.881487][T15949] veth1_macvtap: left promiscuous mode [ 1004.918762][T12275] udevd[12275]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.934933][T15949] veth0_macvtap: left promiscuous mode [ 1004.940647][T15949] veth1_vlan: left promiscuous mode [ 1004.976528][T15949] veth0_vlan: left promiscuous mode [ 1005.014745][T11997] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1005.771166][T15949] pimreg (unregistering): left allmulticast mode [ 1005.802288][T20678] input: syz0 as /devices/virtual/input/input22 [ 1005.857361][T15949] pimreg3 (unregistering): left allmulticast mode [ 1006.396015][T12188] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1006.428168][T20240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.600015][T12188] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.620239][T12188] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.634388][T12188] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1006.641103][T12188] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1006.652518][T12188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.684897][T12188] usb 3-1: config 0 descriptor?? [ 1006.916958][T18791] Bluetooth: hci0: command tx timeout [ 1007.186244][T15949] team0 (unregistering): Port device team_slave_1 removed [ 1007.267165][T20705] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1007.295000][T20705] overlayfs: missing 'lowerdir' [ 1007.330234][T12188] usb 3-1: string descriptor 0 read error: -71 [ 1007.341741][T12188] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 1007.365783][T12188] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 1007.374018][T12188] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 1007.396553][T12188] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 1007.405186][T15949] team0 (unregistering): Port device team_slave_0 removed [ 1007.422759][T12188] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 1007.465748][T12188] usb 3-1: USB disconnect, device number 12 [ 1007.587650][T15949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.168448][ T23] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1008.377772][ T23] usb 8-1: Using ep0 maxpacket: 8 [ 1008.415774][ T23] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1008.424121][ T23] usb 8-1: config 179 has no interface number 0 [ 1008.439428][ T23] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1008.474494][ T23] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1008.504337][ T23] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1008.530937][ T23] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1008.574345][ T23] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1008.619845][ T23] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1008.630074][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.659428][T20707] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1008.915529][T20707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.953725][T20707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.204488][ T9] usb 8-1: USB disconnect, device number 6 [ 1009.204493][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1009.210428][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1009.563267][T15949] bond0 (unregistering): Released all slaves [ 1010.541569][T20548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1010.747027][T20548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1010.758888][T20548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1010.954458][T20548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1011.465249][T20764] input: syz1 as /devices/virtual/input/input23 [ 1015.287782][T20768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1015.324080][T20768] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1015.375601][T20768] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1015.393768][T20768] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1015.412278][T20768] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1015.432403][T20768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1015.439148][T20548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.444554][T20768] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1015.456708][T20783] fuse: Bad value for 'fd' [ 1015.462327][T20768] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1015.489498][T20768] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1015.496047][T20768] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1015.500457][T20548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.514937][T20768] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1015.551653][T15949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.558914][T15949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.611516][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.618767][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.794526][ T5777] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 1016.176772][T20802] loop7: detected capacity change from 0 to 1024 [ 1016.330295][T20802] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 1016.340503][T20802] System zones: 0-1, 3-36 [ 1016.369233][T20802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.004639][ T5777] usb 3-1: device descriptor read/all, error -71 [ 1017.242790][T20548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.364664][T18791] Bluetooth: hci2: command 0x0406 tx timeout [ 1017.394860][T18791] Bluetooth: hci4: command 0x0406 tx timeout [ 1017.427098][T20811] binder: 20810:20811 ioctl c0306201 0 returned -14 [ 1017.474446][T18791] Bluetooth: hci3: command 0x0c1a tx timeout [ 1017.481875][T20811] binder: 20810:20811 ioctl c0306201 0 returned -14 [ 1017.557683][T18791] Bluetooth: hci0: command 0x0c1a tx timeout [ 1017.664919][T20548] veth0_vlan: entered promiscuous mode [ 1017.752886][T20548] veth1_vlan: entered promiscuous mode [ 1018.930241][T20548] veth0_macvtap: entered promiscuous mode [ 1018.997048][T20548] veth1_macvtap: entered promiscuous mode [ 1019.039010][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.051282][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.062453][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.108998][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.154352][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1019.184146][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.243292][T20548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.306026][T17560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.325213][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.362611][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.380767][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.400481][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.413275][T20548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.430744][T20548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.443126][T20548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.452778][T18791] Bluetooth: hci2: command 0x0406 tx timeout [ 1019.473024][T20548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.489008][T18791] Bluetooth: hci4: command 0x0406 tx timeout [ 1019.507201][T20548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.522066][T20548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.532561][T20548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.560459][T18791] Bluetooth: hci3: command 0x0c1a tx timeout [ 1019.629054][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1019.637243][T18791] Bluetooth: hci0: command 0x0c1a tx timeout [ 1019.729507][T20819] loop2: detected capacity change from 0 to 65536 [ 1019.734041][T15949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.751548][T15949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.823771][T20819] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1019.874347][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 1019.879812][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.895355][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.913285][ T23] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1019.940193][ T23] usb 6-1: config 0 has no interface number 0 [ 1019.967166][T20819] XFS (loop2): Ending clean mount [ 1019.981610][ T23] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1020.014613][ T23] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1020.028296][ T23] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1020.039682][ T23] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1020.068218][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.107637][ T23] usb 6-1: Product: syz [ 1020.151653][ T23] usb 6-1: Manufacturer: syz [ 1020.184287][ T23] usb 6-1: SerialNumber: syz [ 1020.235172][ T23] usb 6-1: config 0 descriptor?? [ 1020.268101][T20821] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.294562][T20821] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.373937][ T5777] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 1020.399234][ T5777] XFS (loop2): Unmount and run xfs_repair [ 1020.415193][ T5777] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1020.460313][ T5777] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1020.470395][ T5777] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1020.504455][ T5777] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1020.534392][T20821] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.541743][T20821] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1020.550450][ T5777] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1020.591430][ T5777] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1020.620028][ T5777] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1020.646865][ T5777] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1020.663392][ T5777] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1020.676739][T20837] XFS (loop2): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 1020.698825][T20837] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1020.719494][T20837] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1020.940113][T11997] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1020.994517][ T23] CoreChips: probe of 6-1:0.41 failed with error -71 [ 1021.038716][ T23] usb 6-1: USB disconnect, device number 6 [ 1021.123626][T20857] loop7: detected capacity change from 0 to 1024 [ 1021.381865][T20857] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 1021.390815][T20857] System zones: 0-1, 3-36 [ 1021.438258][T20857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.477857][T18791] Bluetooth: hci2: command 0x0406 tx timeout [ 1021.562866][T20860] overlayfs: failed to resolve './bus': -2 [ 1021.643193][T18791] Bluetooth: hci3: command 0x0c1a tx timeout [ 1021.726263][T18791] Bluetooth: hci0: command 0x0c1a tx timeout [ 1023.198848][T20550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1023.210656][T20550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1023.219961][T20550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1023.228813][T20550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1023.238378][T20550] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1023.246514][T20550] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1023.412042][T17560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.624312][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1023.751924][T20873] input: syz0 as /devices/virtual/input/input25 [ 1023.860049][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1023.910229][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1023.942095][ T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1023.981884][ T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1024.017283][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1024.028421][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.040167][ T23] usb 4-1: Product: syz [ 1024.045625][ T23] usb 4-1: Manufacturer: syz [ 1024.050421][ T23] usb 4-1: SerialNumber: syz [ 1024.069097][T20866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1024.082224][ T23] cdc_mbim 4-1:1.0: skipping garbage [ 1024.144984][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.182355][T20863] chnl_net:caif_netlink_parms(): no params data found [ 1024.283309][T20866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1024.297166][T20866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1024.314390][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.478151][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.539969][T20863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.552368][T20863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.560841][T20863] bridge_slave_0: entered allmulticast mode [ 1024.570078][T20863] bridge_slave_0: entered promiscuous mode [ 1024.586461][T20863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.594875][T20863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.602302][T20863] bridge_slave_1: entered allmulticast mode [ 1024.615177][T20863] bridge_slave_1: entered promiscuous mode [ 1024.646139][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.667865][T20894] loop5: detected capacity change from 0 to 1024 [ 1024.751475][T20894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 1024.768227][T20863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.801801][T20863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.809831][T20894] System zones: 0-1, 3-36 [ 1024.836365][T20894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.922776][T20863] team0: Port device team_slave_0 added [ 1024.950467][T20863] team0: Port device team_slave_1 added [ 1025.040422][T20863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.053378][T20863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.089541][T20863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.147168][T20866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1025.163152][T20866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1025.187829][T20863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.195568][ T23] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1025.203995][T20863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.236146][ T23] wwan wwan0: port wwan0mbim0 attached [ 1025.302674][T20863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.324643][T18791] Bluetooth: hci1: command tx timeout [ 1025.380884][ T23] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, fa:d6:2e:9a:13:7f [ 1025.429265][ T23] usb 4-1: USB disconnect, device number 8 [ 1025.462173][ T23] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1025.607608][ T23] wwan wwan0: port wwan0mbim0 disconnected [ 1025.649861][ T11] tipc: Disabling bearer [ 1025.656196][ T11] tipc: Left network mode [ 1025.669840][T20863] hsr_slave_0: entered promiscuous mode [ 1025.698009][T20863] hsr_slave_1: entered promiscuous mode [ 1025.746547][T20863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1025.785415][T20863] Cannot create hsr debugfs directory [ 1026.956802][T20932] kvm: emulating exchange as write [ 1027.119577][T20938] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1027.174643][T20938] overlayfs: missing 'lowerdir' [ 1027.404833][T18791] Bluetooth: hci1: command tx timeout [ 1028.249282][T20863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1028.267370][T20863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1028.306918][T20863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1028.357471][ T5861] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1028.374343][T17409] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1028.410923][ T11] hsr_slave_0: left promiscuous mode [ 1028.430592][ T11] hsr_slave_1: left promiscuous mode [ 1028.443258][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.452213][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.466834][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.479627][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.535104][ T11] veth1_macvtap: left promiscuous mode [ 1028.547055][ T11] veth0_macvtap: left promiscuous mode [ 1028.552960][ T11] veth1_vlan: left promiscuous mode [ 1028.574489][T17409] usb 4-1: Using ep0 maxpacket: 32 [ 1028.582551][ T5861] usb 8-1: config 13 has an invalid interface number: 215 but max is 0 [ 1028.584061][T17409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.609431][ T5861] usb 8-1: config 13 has no interface number 0 [ 1028.620759][ T5861] usb 8-1: config 13 interface 215 has no altsetting 0 [ 1028.624504][T17409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.643611][ T5861] usb 8-1: New USB device found, idVendor=0b57, idProduct=08c2, bcdDevice= 1.f9 [ 1028.653114][T17409] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1028.664258][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.674030][ T5861] usb 8-1: Product: syz [ 1028.685556][T17409] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1028.698343][ T5861] usb 8-1: Manufacturer: syz [ 1028.703073][ T5861] usb 8-1: SerialNumber: syz [ 1028.705538][T17409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.750330][T17409] usb 4-1: config 0 descriptor?? [ 1028.773396][T17409] usbhid 4-1:0.0: can't add hid device: -22 [ 1028.800709][T17409] usbhid: probe of 4-1:0.0 failed with error -22 [ 1028.951685][ T5861] usbhid 8-1:13.215: couldn't find an input interrupt endpoint [ 1028.973021][ T5861] usb 8-1: USB disconnect, device number 7 [ 1029.027162][T17409] usb 4-1: USB disconnect, device number 9 [ 1029.083785][ T11] pimreg3 (unregistering): left allmulticast mode [ 1029.455370][T20240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.476587][T18791] Bluetooth: hci1: command tx timeout [ 1029.724453][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4953'. [ 1030.016875][T20967] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1030.026600][T20967] overlayfs: missing 'lowerdir' [ 1030.084934][T17409] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1030.539769][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1030.585567][T17409] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.607110][T17409] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1030.621724][T17409] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1030.633069][T17409] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1030.644795][T17409] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1030.693257][T17409] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1030.709464][T17409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.734859][T17409] usb 4-1: Product: syz [ 1030.739111][T17409] usb 4-1: Manufacturer: syz [ 1030.743756][T17409] usb 4-1: SerialNumber: syz [ 1030.754975][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1030.768190][T20964] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1030.778998][T17409] cdc_mbim 4-1:1.0: skipping garbage [ 1030.858098][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.566188][T18791] Bluetooth: hci1: command tx timeout [ 1031.655748][ T3063] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1031.850748][T17409] cdc_mbim 4-1:1.0: bind() failure [ 1031.878146][T17409] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 1031.884358][ T3063] usb 8-1: Using ep0 maxpacket: 32 [ 1031.885691][T17409] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 1031.906978][T17409] usbtest: probe of 4-1:1.1 failed with error -71 [ 1031.913396][ T3063] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1031.919073][T17409] usb 4-1: USB disconnect, device number 10 [ 1031.955417][ T3063] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1031.964529][ T3063] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1031.973564][ T3063] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1032.008414][ T3063] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1032.018634][ T3063] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1032.028553][ T3063] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1032.038449][ T3063] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1032.051620][ T3063] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1032.060764][ T3063] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.082592][ T3063] usb 8-1: config 0 descriptor?? [ 1032.176613][ T11] bond0 (unregistering): Released all slaves [ 1032.233209][T20863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1032.383395][ T3063] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1032.446555][ T3063] usb 8-1: USB disconnect, device number 8 [ 1032.496433][ T3063] usblp0: removed [ 1032.731317][T20863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.791877][T20863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.841398][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.848659][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.860361][T21003] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1032.906758][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.914072][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.923860][T21003] overlayfs: missing 'lowerdir' [ 1033.014457][ T3063] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1033.265079][ T3063] usb 8-1: Using ep0 maxpacket: 32 [ 1033.274228][ T3063] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1033.293914][ T3063] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1033.318704][ T3063] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1033.351030][ T3063] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1033.373878][ T3063] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1033.405487][ T3063] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1033.437891][ T3063] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1033.468696][ T3063] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1033.752861][ T3063] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1033.762081][ T3063] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.773476][ T3063] usb 8-1: config 0 descriptor?? [ 1033.988709][ T3063] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1034.045707][T20863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.161587][T20863] veth0_vlan: entered promiscuous mode [ 1034.180526][T20863] veth1_vlan: entered promiscuous mode [ 1034.203786][T17409] usb 8-1: USB disconnect, device number 9 [ 1034.241230][T17409] usblp0: removed [ 1034.302030][T20863] veth0_macvtap: entered promiscuous mode [ 1034.333881][T20863] veth1_macvtap: entered promiscuous mode [ 1034.410479][T20863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.453841][T20863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.499661][T20863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.539479][T20863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.581227][T20863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.614451][T20863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.636458][T20863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.678078][T20863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.714412][T20863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.734285][T20863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.770195][T20863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.794379][T20863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.834385][T20863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.879621][T20863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.921477][T20863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.955548][T20863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.975134][T20863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.010437][T20863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.189259][T21034] loop3: detected capacity change from 0 to 256 [ 1035.274285][T17409] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1035.300636][T21034] FAT-fs (loop3): Directory bread(block 64) failed [ 1035.341402][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.349857][T21034] FAT-fs (loop3): Directory bread(block 65) failed [ 1035.374350][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.384656][T21034] FAT-fs (loop3): Directory bread(block 66) failed [ 1035.391262][T21034] FAT-fs (loop3): Directory bread(block 67) failed [ 1035.422676][T21034] FAT-fs (loop3): Directory bread(block 68) failed [ 1035.429804][T21034] FAT-fs (loop3): Directory bread(block 69) failed [ 1035.441795][T21034] FAT-fs (loop3): Directory bread(block 70) failed [ 1035.449522][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.462828][T21034] FAT-fs (loop3): Directory bread(block 71) failed [ 1035.469931][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.497389][T21034] FAT-fs (loop3): Directory bread(block 72) failed [ 1035.501650][T17409] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1035.503971][T21034] FAT-fs (loop3): Directory bread(block 73) failed [ 1035.535786][T17409] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.543875][T17409] usb 8-1: Product: syz [ 1035.558740][T17409] usb 8-1: Manufacturer: syz [ 1035.604446][T17409] usb 8-1: SerialNumber: syz [ 1036.624382][ T5861] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1036.749922][T17409] cdc_ncm 8-1:1.0: failed to get mac address [ 1036.773654][T17409] cdc_ncm 8-1:1.0: bind() failure [ 1036.809699][T17409] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 1036.837173][T17409] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 1036.883889][T17409] usbtest: probe of 8-1:1.1 failed with error -71 [ 1036.902594][T17409] usb 8-1: USB disconnect, device number 10 [ 1037.114390][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 1037.134496][ T5861] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1037.146731][ T5861] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1037.158258][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.174293][ T5861] usb 4-1: Product: syz [ 1037.178640][ T5861] usb 4-1: Manufacturer: syz [ 1037.183282][ T5861] usb 4-1: SerialNumber: syz [ 1037.195588][ T5861] usb 4-1: config 0 descriptor?? [ 1037.218340][ T5861] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1037.236320][ T5861] usb 4-1: Detected FT232R [ 1037.488653][T21079] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4978'. [ 1037.849306][ T5861] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1037.898327][ T5861] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1037.945007][ T5861] usb 4-1: USB disconnect, device number 11 [ 1037.978253][ T5861] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1038.002675][ T5861] ftdi_sio 4-1:0.0: device disconnected [ 1039.114293][T17409] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1039.311198][T17409] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1039.368056][T17409] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1039.386340][T17409] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1039.396441][T17409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.417387][T17409] usb 6-1: config 0 descriptor?? [ 1039.423265][T21092] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1039.454347][T12188] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1039.464977][T17409] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1039.656401][T12188] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1039.667202][T12188] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1039.688540][T12188] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1039.698195][T12188] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1039.737800][T12188] usb 8-1: SerialNumber: syz [ 1039.859440][T21113] loop2: detected capacity change from 0 to 256 [ 1039.886986][T21113] FAT-fs (loop2): Directory bread(block 64) failed [ 1039.893706][T21113] FAT-fs (loop2): Directory bread(block 65) failed [ 1039.900533][T21113] FAT-fs (loop2): Directory bread(block 66) failed [ 1039.907968][T21113] FAT-fs (loop2): Directory bread(block 67) failed [ 1039.914758][T21113] FAT-fs (loop2): Directory bread(block 68) failed [ 1039.921341][T21113] FAT-fs (loop2): Directory bread(block 69) failed [ 1039.928149][T21113] FAT-fs (loop2): Directory bread(block 70) failed [ 1039.934874][T21113] FAT-fs (loop2): Directory bread(block 71) failed [ 1039.941555][T21113] FAT-fs (loop2): Directory bread(block 72) failed [ 1039.948421][T21113] FAT-fs (loop2): Directory bread(block 73) failed [ 1040.022592][T12188] usb 8-1: 0:2 : does not exist [ 1040.070658][T12188] usb 8-1: unit 255 not found! [ 1040.174034][T12188] usb 8-1: USB disconnect, device number 11 [ 1040.283879][T12597] udevd[12597]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.814784][T12201] usb 6-1: USB disconnect, device number 7 [ 1042.133287][T21150] binder_alloc: 21148: pid 21148 spamming oneway? 1 buffers allocated for a total size of 5240 [ 1042.605489][T21161] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1042.644480][T12188] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1042.874697][T12188] usb 4-1: Using ep0 maxpacket: 8 [ 1042.990731][T12188] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.008967][T12188] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1043.092745][T12188] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1043.144397][T17409] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1043.155265][T12188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.220176][T12188] usbtmc 4-1:16.0: bulk endpoints not found [ 1043.344428][T17409] usb 3-1: Using ep0 maxpacket: 32 [ 1043.375505][T17409] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1043.390145][T17409] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.411448][T17409] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 3 [ 1043.444778][T17409] usb 3-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b [ 1043.457438][T17409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.466848][T17409] usb 3-1: Product: syz [ 1043.474546][T17409] usb 3-1: Manufacturer: syz [ 1043.479470][T17409] usb 3-1: SerialNumber: syz [ 1043.799966][T17409] usb 3-1: USB disconnect, device number 15 [ 1046.025430][T21193] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.031496][T21193] binder: 21192:21193 ioctl 4018620d 2000000002c0 returned -16 [ 1046.258076][ T3063] usb 4-1: USB disconnect, device number 12 [ 1046.303998][T21199] loop5: detected capacity change from 0 to 256 [ 1046.355304][T21199] FAT-fs (loop5): Directory bread(block 64) failed [ 1046.362022][T21199] FAT-fs (loop5): Directory bread(block 65) failed [ 1046.368959][T21199] FAT-fs (loop5): Directory bread(block 66) failed [ 1046.376303][T21199] FAT-fs (loop5): Directory bread(block 67) failed [ 1046.383074][T21199] FAT-fs (loop5): Directory bread(block 68) failed [ 1046.390537][T21199] FAT-fs (loop5): Directory bread(block 69) failed [ 1046.397260][T21199] FAT-fs (loop5): Directory bread(block 70) failed [ 1046.403855][T21199] FAT-fs (loop5): Directory bread(block 71) failed [ 1046.410570][T21199] FAT-fs (loop5): Directory bread(block 72) failed [ 1046.417240][T21199] FAT-fs (loop5): Directory bread(block 73) failed [ 1046.452958][T21201] loop2: detected capacity change from 0 to 1024 [ 1046.585162][T21201] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 1046.593491][T21201] System zones: 0-1, 3-36 [ 1046.609787][T21201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.429828][T20863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.006050][T21240] binder: BINDER_SET_CONTEXT_MGR already set [ 1050.012124][T21240] binder: 21239:21240 ioctl 4018620d 2000000002c0 returned -16 [ 1050.704826][T21259] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 1050.710125][T21230] loop7: detected capacity change from 0 to 65536 [ 1050.781139][T21230] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1050.932784][T21230] XFS (loop7): Ending clean mount [ 1051.386478][T21279] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.415398][T21279] binder: 21278:21279 ioctl 4018620d 2000000002c0 returned -16 [ 1051.928410][T12188] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 1051.941461][T12188] XFS (loop7): Unmount and run xfs_repair [ 1052.035165][T12188] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1052.051970][T12188] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1052.082407][T12188] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1052.093228][T12188] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1052.102910][T12188] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1052.112573][T12188] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1052.122110][T12188] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1052.135073][T12188] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1052.144089][T12188] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1052.168216][T21282] XFS (loop7): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 1052.179052][T21282] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1052.193848][T21282] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 1052.855034][T17560] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1054.612556][T21289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.620612][T21289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.920159][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.932066][T21314] loop7: detected capacity change from 0 to 256 [ 1054.952656][T21314] FAT-fs (loop7): Directory bread(block 64) failed [ 1054.960697][T21314] FAT-fs (loop7): Directory bread(block 65) failed [ 1054.967495][T21314] FAT-fs (loop7): Directory bread(block 66) failed [ 1054.974071][T21314] FAT-fs (loop7): Directory bread(block 67) failed [ 1054.980833][T21314] FAT-fs (loop7): Directory bread(block 68) failed [ 1054.987434][T21314] FAT-fs (loop7): Directory bread(block 69) failed [ 1054.994041][T21314] FAT-fs (loop7): Directory bread(block 70) failed [ 1055.000662][T21314] FAT-fs (loop7): Directory bread(block 71) failed [ 1055.007351][T21314] FAT-fs (loop7): Directory bread(block 72) failed [ 1055.013896][T21314] FAT-fs (loop7): Directory bread(block 73) failed [ 1055.213458][T21289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.296914][T21289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.028841][T21328] loop7: detected capacity change from 0 to 4096 [ 1056.065258][T21328] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1056.113407][T21328] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1056.121950][T21328] System zones: 0-5 [ 1056.147747][T21328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.414694][T21289] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.429047][T17560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.438169][T21289] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.452351][T21289] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.490837][T21289] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.415872][T21351] loop3: detected capacity change from 0 to 4096 [ 1058.452648][T21351] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1058.476729][T21351] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1058.485210][T21351] System zones: 0-5 [ 1058.502650][T21351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.551395][T21353] loop7: detected capacity change from 0 to 256 [ 1058.654703][T21353] FAT-fs (loop7): Directory bread(block 64) failed [ 1058.661447][T21353] FAT-fs (loop7): Directory bread(block 65) failed [ 1058.668263][T21353] FAT-fs (loop7): Directory bread(block 66) failed [ 1058.674973][T21353] FAT-fs (loop7): Directory bread(block 67) failed [ 1058.681633][T21353] FAT-fs (loop7): Directory bread(block 68) failed [ 1058.688398][T21353] FAT-fs (loop7): Directory bread(block 69) failed [ 1058.695318][T21353] FAT-fs (loop7): Directory bread(block 70) failed [ 1058.701899][T21353] FAT-fs (loop7): Directory bread(block 71) failed [ 1058.708766][T21353] FAT-fs (loop7): Directory bread(block 72) failed [ 1058.715387][T21353] FAT-fs (loop7): Directory bread(block 73) failed [ 1060.378360][T20548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.110749][T21375] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1061.129623][T21375] overlayfs: missing 'lowerdir' [ 1061.478250][T21383] loop2: detected capacity change from 0 to 4096 [ 1061.500561][T21383] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1061.528771][T21383] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1061.537126][T21383] System zones: 0-5 [ 1061.570839][T21383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.641723][T21387] loop3: detected capacity change from 0 to 256 [ 1061.761299][T21387] FAT-fs (loop3): Directory bread(block 64) failed [ 1061.768253][T21387] FAT-fs (loop3): Directory bread(block 65) failed [ 1061.775036][T21387] FAT-fs (loop3): Directory bread(block 66) failed [ 1061.781605][T21387] FAT-fs (loop3): Directory bread(block 67) failed [ 1061.788943][T21387] FAT-fs (loop3): Directory bread(block 68) failed [ 1061.795695][T21387] FAT-fs (loop3): Directory bread(block 69) failed [ 1061.802351][T21387] FAT-fs (loop3): Directory bread(block 70) failed [ 1061.809015][T21387] FAT-fs (loop3): Directory bread(block 71) failed [ 1061.815690][T21387] FAT-fs (loop3): Directory bread(block 72) failed [ 1061.822335][T21387] FAT-fs (loop3): Directory bread(block 73) failed [ 1063.470981][T20863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.668656][ T28] audit: type=1326 audit(1753967266.734:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21401 comm="syz.2.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded8e9a9 code=0x7ffc0000 [ 1063.745295][ T28] audit: type=1326 audit(1753967266.734:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21401 comm="syz.2.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded8e9a9 code=0x7ffc0000 [ 1063.860423][ T28] audit: type=1326 audit(1753967266.744:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21401 comm="syz.2.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccded8e9a9 code=0x7ffc0000 [ 1063.913015][T21400] loop2: detected capacity change from 0 to 7 [ 1063.959153][T21400] Dev loop2: unable to read RDB block 7 [ 1063.959184][ T28] audit: type=1326 audit(1753967266.744:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21401 comm="syz.2.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded8e9a9 code=0x7ffc0000 [ 1063.987548][ T28] audit: type=1326 audit(1753967266.744:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21401 comm="syz.2.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded8e9a9 code=0x7ffc0000 [ 1064.012060][T21400] loop2: unable to read partition table [ 1064.021611][T21400] loop2: partition table beyond EOD, truncated [ 1064.028482][T21400] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1064.082401][T21409] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1064.169433][T21409] overlayfs: missing 'lowerdir' [ 1065.607172][T21434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1066.131275][T21438] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5081'. [ 1066.163665][T21438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5081'. [ 1066.179567][T21438] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5081'. [ 1066.526060][T21447] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1066.554274][T21447] overlayfs: missing 'lowerdir' [ 1066.766112][T21432] loop7: detected capacity change from 0 to 65536 [ 1066.817717][T21432] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1066.936720][T21432] XFS (loop7): Ending clean mount [ 1067.202753][T21468] cgroup: fork rejected by pids controller in /syz2 [ 1067.314569][T21306] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1067.538365][T21306] usb 6-1: Using ep0 maxpacket: 16 [ 1067.559025][T21306] usb 6-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 1067.578821][T21306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.604259][T21306] usb 6-1: Product: syz [ 1067.610529][T21306] usb 6-1: Manufacturer: syz [ 1067.623047][T21306] usb 6-1: SerialNumber: syz [ 1067.640262][T21306] usb 6-1: config 0 descriptor?? [ 1067.657312][T21306] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1067.769031][T21292] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 1067.793693][T21292] XFS (loop7): Unmount and run xfs_repair [ 1067.828453][T21292] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1067.844296][T21292] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1067.871376][T21306] gspca_spca501: reg write: error -71 [ 1067.896045][T21306] spca501 6-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 1067.909384][T21292] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1067.918818][T21306] spca501: probe of 6-1:0.0 failed with error -22 [ 1067.930820][T21292] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1067.949161][T21306] usb 6-1: USB disconnect, device number 8 [ 1067.972992][T21292] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1067.986784][T21292] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1068.039904][T21292] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1068.062427][T21292] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1068.076418][T21292] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1068.094459][T21471] XFS (loop7): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 1068.125764][T21471] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1068.145405][T21471] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 1068.223432][T21475] batadv_slave_1: entered promiscuous mode [ 1068.256039][T21474] batadv_slave_1: left promiscuous mode [ 1068.498135][T21477] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1068.565141][T21477] overlayfs: missing 'lowerdir' [ 1068.706315][T17560] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1069.048964][T20550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1069.061996][T20550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1069.071247][T20550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1069.097825][T20550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1069.109852][T20550] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1069.132462][T20550] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1070.074462][ T5777] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1070.328509][ T5777] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 1070.374457][ T5777] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.416933][ T5777] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1070.491654][ T5777] usb 4-1: config 1 has no interface number 0 [ 1070.537493][ T5777] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1070.598080][T21487] chnl_net:caif_netlink_parms(): no params data found [ 1070.619051][ T5777] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.634371][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.679197][ T5777] usb 4-1: Product: syz [ 1070.697008][ T5777] usb 4-1: Manufacturer: syz [ 1070.728969][ T5777] usb 4-1: SerialNumber: syz [ 1070.801261][ T5777] cdc_wdm: probe of 4-1:1.128 failed with error -22 [ 1071.246784][T21524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5101'. [ 1071.397981][ T2941] hsr_slave_0: left promiscuous mode [ 1071.443624][ T2941] hsr_slave_1: left promiscuous mode [ 1071.505749][ T2941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.572387][ T2941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.617030][ T2941] bridge_slave_1: left allmulticast mode [ 1071.623632][ T2941] bridge_slave_1: left promiscuous mode [ 1071.679622][ T2941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.778853][ T2941] bridge_slave_0: left allmulticast mode [ 1071.802091][ T2941] bridge_slave_0: left promiscuous mode [ 1071.828062][ T2941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.063493][ T2941] team0 (unregistering): Port device team_slave_1 removed [ 1074.160817][ T2941] team0 (unregistering): Port device team_slave_0 removed [ 1074.250366][ T2941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.337459][ T2941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.802631][T21558] loop5: detected capacity change from 0 to 65536 [ 1074.832172][T21558] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1074.889224][T21558] XFS (loop5): Ending clean mount [ 1075.350448][T21292] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 1075.362463][T21292] XFS (loop5): Unmount and run xfs_repair [ 1075.369117][T21292] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1075.376960][T21292] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1075.386939][T21292] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1075.399122][T21292] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1075.411234][T21292] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1075.423338][T21292] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1075.432546][T21292] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1075.441592][T21292] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1075.451364][T21292] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1075.473575][T21567] XFS (loop5): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 1075.549391][T21567] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1075.568153][T21567] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1075.598800][ T2941] bond0 (unregistering): Released all slaves [ 1075.711650][T20240] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1076.030791][T21303] usb 4-1: USB disconnect, device number 13 [ 1076.157862][T21487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.186961][T21487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.194984][T21487] bridge_slave_0: entered allmulticast mode [ 1076.230761][T21487] bridge_slave_0: entered promiscuous mode [ 1076.264827][T21487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.272183][T21487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.292604][T21487] bridge_slave_1: entered allmulticast mode [ 1076.300560][T21487] bridge_slave_1: entered promiscuous mode [ 1076.467013][T21487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.508044][T21487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.790488][T21487] team0: Port device team_slave_0 added [ 1076.897218][T21487] team0: Port device team_slave_1 added [ 1077.086757][T21487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.116870][T21487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.194512][T21487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.237930][T21487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.272417][T21487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.334366][T21487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.502449][T21487] hsr_slave_0: entered promiscuous mode [ 1077.535809][T21487] hsr_slave_1: entered promiscuous mode [ 1077.588103][T21487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.614762][T21487] Cannot create hsr debugfs directory [ 1078.133705][T21623] loop5: detected capacity change from 0 to 256 [ 1078.145792][T21623] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1078.169742][T21623] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1078.197358][T21621] loop7: detected capacity change from 0 to 256 [ 1078.220996][T21621] FAT-fs (loop7): Directory bread(block 64) failed [ 1078.227748][T21621] FAT-fs (loop7): Directory bread(block 65) failed [ 1078.234703][T21621] FAT-fs (loop7): Directory bread(block 66) failed [ 1078.241292][T21621] FAT-fs (loop7): Directory bread(block 67) failed [ 1078.248133][T21621] FAT-fs (loop7): Directory bread(block 68) failed [ 1078.254799][T21621] FAT-fs (loop7): Directory bread(block 69) failed [ 1078.261471][T21621] FAT-fs (loop7): Directory bread(block 70) failed [ 1078.268167][T21621] FAT-fs (loop7): Directory bread(block 71) failed [ 1078.275820][T21621] FAT-fs (loop7): Directory bread(block 72) failed [ 1078.282410][T21621] FAT-fs (loop7): Directory bread(block 73) failed [ 1078.338245][T21623] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1080.295594][T21487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1080.324524][T21487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1080.340927][T21487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1080.371938][T21487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1081.412132][T21487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.566857][T21487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.625704][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.633220][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.678199][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.685460][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.820325][T21487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1081.909151][T21670] loop7: detected capacity change from 0 to 256 [ 1081.937455][T21670] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1081.985345][T21670] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1082.013749][T21670] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1082.907095][T21682] batadv_slave_1: entered promiscuous mode [ 1083.016993][T21679] batadv_slave_1: left promiscuous mode [ 1083.197777][T21487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.390403][T21487] veth0_vlan: entered promiscuous mode [ 1083.452254][T21487] veth1_vlan: entered promiscuous mode [ 1083.586308][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5133'. [ 1084.285257][T21487] veth0_macvtap: entered promiscuous mode [ 1084.313986][T21487] veth1_macvtap: entered promiscuous mode [ 1084.365315][T21487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.375929][T21487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.385884][T21487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.396425][T21487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.408160][T21487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.428901][T21487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.442751][T21487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.484850][T21487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.534338][T21487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.557238][T21487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.598169][T21487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.629341][T21487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.657192][T21487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.676760][T21487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.714015][T21487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.750471][T21487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.784266][T21487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.793062][T21487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.963850][T21709] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1084.974029][T21709] overlayfs: missing 'lowerdir' [ 1085.032918][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.072579][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.205396][ T9455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.213401][ T9455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.521881][T21724] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5091'. [ 1086.770644][ T28] audit: type=1400 audit(1753967289.844:362): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=21738 comm="syz.7.5146" [ 1086.887237][T21747] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1086.934415][T21747] overlayfs: missing 'lowerdir' [ 1087.155087][T21292] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1087.373385][T21759] fuse: Unknown parameter 'ÿ0x0000000000000006ÿÿÿÿ00000000000000000000' [ 1087.382163][T21292] usb 8-1: Using ep0 maxpacket: 32 [ 1087.474367][T21759] netlink: 'syz.3.5151': attribute type 10 has an invalid length. [ 1087.616420][T21759] dvmrp0: entered allmulticast mode [ 1087.745853][T21292] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1087.764434][T21292] usb 8-1: config 0 has no interface number 0 [ 1087.943581][T21292] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1087.973695][T21292] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.996543][T21292] usb 8-1: Product: syz [ 1088.000800][T21292] usb 8-1: Manufacturer: syz [ 1088.028406][T21292] usb 8-1: SerialNumber: syz [ 1088.058417][T21292] usb 8-1: config 0 descriptor?? [ 1088.121708][T21292] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1088.153131][T21292] usb 8-1: selecting invalid altsetting 1 [ 1088.173783][T21292] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1088.243731][T21771] @: renamed from vlan0 (while UP) [ 1088.262526][ T27] IPVS: starting estimator thread 0... [ 1088.290417][T21292] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1088.374789][T21292] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1088.399356][T21772] IPVS: using max 26 ests per chain, 62400 per kthread [ 1088.415247][T21292] usb 8-1: media controller created [ 1088.536841][T21292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1089.886524][T21292] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1089.939350][T21292] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1090.824480][T21292] usb 8-1: USB disconnect, device number 12 [ 1090.910100][T21813] loop5: detected capacity change from 0 to 256 [ 1090.982222][T21813] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1091.033656][T21813] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1091.092326][T21813] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1092.338256][ T28] audit: type=1400 audit(1753967295.414:363): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=21822 comm="syz.7.5164" [ 1092.937486][T21839] netlink: 'syz.7.5170': attribute type 1 has an invalid length. [ 1093.071582][T21839] macvlan2: entered promiscuous mode [ 1093.087637][T21839] macvlan2: entered allmulticast mode [ 1093.098149][T21839] bond1: entered promiscuous mode [ 1093.104031][T21839] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1093.142882][T21839] bond1: left promiscuous mode [ 1093.340735][T21854] binder: 21851:21854 ioctl 4018620d 0 returned -22 [ 1093.603261][T21860] loop7: detected capacity change from 0 to 4096 [ 1093.615009][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5173'. [ 1093.628369][T21860] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1093.656765][T21863] syz_tun: entered promiscuous mode [ 1093.667650][T21860] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1093.676295][T21860] System zones: 0-5 [ 1093.690506][T21860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1094.954429][T21888] binder: 21887:21888 ioctl 4018620d 0 returned -22 [ 1095.624327][T21907] loop5: detected capacity change from 0 to 1024 [ 1095.747351][T21907] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 1095.755977][T21907] System zones: 0-1, 3-36 [ 1095.806831][T21907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.789697][T21921] netlink: 'syz.3.5197': attribute type 10 has an invalid length. [ 1096.843920][T21921] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5197'. [ 1096.885622][T21921] dummy0: entered promiscuous mode [ 1096.891810][T21921] bridge0: port 3(dummy0) entered blocking state [ 1096.952474][T21921] bridge0: port 3(dummy0) entered disabled state [ 1096.987218][T21921] dummy0: entered allmulticast mode [ 1097.000367][T21923] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.018658][T21921] bridge0: port 3(dummy0) entered blocking state [ 1097.026857][T21921] bridge0: port 3(dummy0) entered forwarding state [ 1097.040732][T21923] binder: 21922:21923 ioctl 4018620d 2000000002c0 returned -16 [ 1097.687872][T20240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.704248][ T28] audit: type=1326 audit(1753967300.774:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21930 comm="syz.2.5201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323ef8e9a9 code=0x0 [ 1098.091175][T17560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.797697][T21951] loop2: detected capacity change from 0 to 256 [ 1098.819985][T21951] FAT-fs (loop2): Directory bread(block 64) failed [ 1098.826635][T21951] FAT-fs (loop2): Directory bread(block 65) failed [ 1098.833293][T21951] FAT-fs (loop2): Directory bread(block 66) failed [ 1098.839936][T21951] FAT-fs (loop2): Directory bread(block 67) failed [ 1098.846696][T21951] FAT-fs (loop2): Directory bread(block 68) failed [ 1098.853239][T21951] FAT-fs (loop2): Directory bread(block 69) failed [ 1098.860534][T21951] FAT-fs (loop2): Directory bread(block 70) failed [ 1098.867173][T21951] FAT-fs (loop2): Directory bread(block 71) failed [ 1098.873855][T21951] FAT-fs (loop2): Directory bread(block 72) failed [ 1098.880471][T21951] FAT-fs (loop2): Directory bread(block 73) failed [ 1099.573752][T21958] binder: BINDER_SET_CONTEXT_MGR already set [ 1099.605419][T21958] binder: 21957:21958 ioctl 4018620d 2000000002c0 returned -16 [ 1100.149471][T21968] loop3: detected capacity change from 0 to 4096 [ 1100.163093][T21968] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1100.173415][T21968] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1100.181744][T21968] System zones: 0-5 [ 1100.192589][T21968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1101.764487][T21995] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5220'. [ 1101.807465][T21996] loop2: detected capacity change from 0 to 1024 [ 1101.834415][T21996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 1101.842667][T21996] System zones: 0-1, 3-36 [ 1101.870412][T21996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1102.615172][T21487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.740850][T20548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.920586][T22009] tipc: Started in network mode [ 1102.927872][T22009] tipc: Node identity 4, cluster identity 4711 [ 1102.941925][T22009] tipc: Node number set to 4 [ 1102.950759][T22012] batadv_slave_1: entered promiscuous mode [ 1102.973874][T22011] batadv_slave_1: left promiscuous mode [ 1103.371220][T22026] futex_wake_op: syz.5.5229 tries to shift op by 32; fix this program [ 1103.529897][T22031] loop2: detected capacity change from 0 to 1024 [ 1103.542626][T22031] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 1103.550967][T22031] System zones: 0-1, 3-36 [ 1103.563447][T22031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.658638][T22034] loop3: detected capacity change from 0 to 4096 [ 1103.680650][T22034] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1103.701116][T22034] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1103.709514][T22034] System zones: 0-5 [ 1103.717168][T22034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.607110][T21487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.919123][T22044] batadv_slave_1: entered promiscuous mode [ 1104.928620][T22043] batadv_slave_1: left promiscuous mode [ 1105.981845][T22062] batadv_slave_1: entered promiscuous mode [ 1106.006328][T22061] batadv_slave_1: left promiscuous mode [ 1106.464613][T20548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.381844][T22076] loop3: detected capacity change from 0 to 256 [ 1107.406694][T22076] FAT-fs (loop3): Directory bread(block 64) failed [ 1107.413327][T22076] FAT-fs (loop3): Directory bread(block 65) failed [ 1107.420467][T22076] FAT-fs (loop3): Directory bread(block 66) failed [ 1107.427103][T22076] FAT-fs (loop3): Directory bread(block 67) failed [ 1107.433785][T22076] FAT-fs (loop3): Directory bread(block 68) failed [ 1107.440475][T22076] FAT-fs (loop3): Directory bread(block 69) failed [ 1107.447221][T22076] FAT-fs (loop3): Directory bread(block 70) failed [ 1107.453838][T22076] FAT-fs (loop3): Directory bread(block 71) failed [ 1107.461314][T22076] FAT-fs (loop3): Directory bread(block 72) failed [ 1107.468063][T22076] FAT-fs (loop3): Directory bread(block 73) failed [ 1107.593843][T22053] loop5: detected capacity change from 0 to 65536 [ 1107.658708][T22053] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1107.816466][T22053] XFS (loop5): Ending clean mount [ 1107.927058][T22093] loop7: detected capacity change from 0 to 1024 [ 1107.946794][T22093] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 1107.955406][T22093] System zones: 0-1, 3-36 [ 1107.962670][T22093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.043536][T22095] overlayfs: failed to resolve './bus': -2 [ 1108.380016][ T27] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 1108.392507][ T27] XFS (loop5): Unmount and run xfs_repair [ 1108.398477][ T27] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1108.406095][ T27] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1108.415319][ T27] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1108.424503][ T27] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1108.433589][ T27] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1108.443450][ T27] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1108.452623][ T27] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1108.462752][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1108.471845][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1108.480907][T22053] XFS (loop5): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 1108.497590][T22053] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1108.512529][T22053] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1108.641766][T20240] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1108.765245][T17560] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.290550][ T28] audit: type=1326 audit(1753967312.364:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22110 comm="syz.2.5263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f323ef8e9a9 code=0x0 [ 1109.799434][T22127] loop3: detected capacity change from 0 to 1024 [ 1109.831395][T22127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 1109.839808][T22127] System zones: 0-1, 3-36 [ 1109.848013][T22127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.081476][T22133] tipc: Started in network mode [ 1110.087904][T22133] tipc: Node identity 0a1bd5c50132, cluster identity 4711 [ 1110.095909][T22133] tipc: Enabled bearer , priority 0 [ 1110.103859][T22133] syzkaller0: entered promiscuous mode [ 1110.112715][T22133] syzkaller0: entered allmulticast mode [ 1110.207952][T22133] tipc: Resetting bearer [ 1110.287277][T22132] tipc: Resetting bearer [ 1110.364504][T22132] tipc: Disabling bearer [ 1110.602474][T20548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.982075][ T6568] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1111.126730][T21304] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1111.308258][ T6568] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.333110][T21304] usb 4-1: Using ep0 maxpacket: 16 [ 1111.340191][ T6568] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1111.363894][ T6568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.532218][ T6568] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1111.538337][T21304] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1111.578937][ T6568] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1111.608604][T21304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.642250][T21304] usb 4-1: Product: syz [ 1111.661400][T21304] usb 4-1: Manufacturer: syz [ 1111.674592][T21304] usb 4-1: SerialNumber: syz [ 1111.685055][T21304] usb 4-1: config 0 descriptor?? [ 1112.097365][T21304] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1112.147018][T21304] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1112.157225][T21304] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1112.165871][T21304] usb 4-1: media controller created [ 1112.195717][T21304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1112.296991][T22152] dtv5100: wlen = 0, aborting. [ 1112.484419][T21304] zl10353_read_register: readreg error (reg=127, ret==0) [ 1112.491630][T21304] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1112.652138][T22176] loop5: detected capacity change from 0 to 256 [ 1112.698449][T21304] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1112.799761][T22176] FAT-fs (loop5): Directory bread(block 64) failed [ 1112.807487][T22176] FAT-fs (loop5): Directory bread(block 65) failed [ 1112.814299][T22176] FAT-fs (loop5): Directory bread(block 66) failed [ 1112.820900][T22176] FAT-fs (loop5): Directory bread(block 67) failed [ 1112.827710][T22176] FAT-fs (loop5): Directory bread(block 68) failed [ 1112.834342][T22176] FAT-fs (loop5): Directory bread(block 69) failed [ 1112.840981][T22176] FAT-fs (loop5): Directory bread(block 70) failed [ 1112.847605][T22176] FAT-fs (loop5): Directory bread(block 71) failed [ 1112.854335][T22176] FAT-fs (loop5): Directory bread(block 72) failed [ 1112.860884][T22176] FAT-fs (loop5): Directory bread(block 73) failed [ 1112.919324][T21304] usb 4-1: USB disconnect, device number 14 [ 1113.018255][T21304] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1114.117444][ T6568] usb 3-1: USB disconnect, device number 16 [ 1115.952815][T22202] loop3: detected capacity change from 0 to 1024 [ 1116.526839][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.325605][T22202] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1126.326111][T22202] EXT4-fs: failed to create workqueue [ 1126.341540][T22202] EXT4-fs (loop3): mount failed [ 1126.374006][T22141] delete_channel: no stack [ 1127.511951][T22212] loop5: detected capacity change from 0 to 256 [ 1128.427676][T22212] FAT-fs (loop5): Directory bread(block 64) failed [ 1128.434963][T22212] FAT-fs (loop5): Directory bread(block 65) failed [ 1128.441636][T22212] FAT-fs (loop5): Directory bread(block 66) failed [ 1128.448499][T22212] FAT-fs (loop5): Directory bread(block 67) failed [ 1128.455979][T22212] FAT-fs (loop5): Directory bread(block 68) failed [ 1128.462552][T22212] FAT-fs (loop5): Directory bread(block 69) failed [ 1128.469349][T22212] FAT-fs (loop5): Directory bread(block 70) failed [ 1128.476002][T22212] FAT-fs (loop5): Directory bread(block 71) failed [ 1128.482671][T22212] FAT-fs (loop5): Directory bread(block 72) failed [ 1128.489374][T22212] FAT-fs (loop5): Directory bread(block 73) failed [ 1130.368081][T22217] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1130.528980][T22217] overlayfs: missing 'lowerdir' [ 1134.419432][T20550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1134.435482][T20550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1134.447402][T20550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1134.456055][T20550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1134.466433][T20550] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1134.473900][T20550] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1135.670809][T22223] chnl_net:caif_netlink_parms(): no params data found [ 1136.087172][T22230] input: syz0 as /devices/virtual/input/input27 [ 1136.554442][T20550] Bluetooth: hci1: command tx timeout [ 1138.707992][T20550] Bluetooth: hci1: command tx timeout [ 1140.503566][ T9450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.761240][T20550] Bluetooth: hci1: command tx timeout [ 1140.843589][T22241] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1141.241227][T22253] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1141.265580][T22253] overlayfs: missing 'lowerdir' [ 1141.904923][T22258] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1142.146127][ T9450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.201213][T22223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.307906][T22223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.354567][T22223] bridge_slave_0: entered allmulticast mode [ 1142.404629][T22223] bridge_slave_0: entered promiscuous mode [ 1142.436874][T22223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.444100][T22223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.492933][T22223] bridge_slave_1: entered allmulticast mode [ 1142.564820][T22223] bridge_slave_1: entered promiscuous mode [ 1142.782589][ T9450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.834709][T20550] Bluetooth: hci1: command tx timeout [ 1143.061022][T22223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.915708][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1265.604117][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1265.611272][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17560/1:b..l [ 1265.620179][ C1] rcu: (detected by 1, t=10503 jiffies, g=143121, q=496729 ncpus=2) [ 1265.628368][ C1] task:syz-executor state:R running task stack:20776 pid:17560 ppid:17534 flags:0x00004000 [ 1265.641577][ C1] Call Trace: [ 1265.644912][ C1] [ 1265.647896][ C1] __schedule+0x14d2/0x44d0 [ 1265.652461][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1265.657755][ C1] ? asan.module_dtor+0x20/0x20 [ 1265.662833][ C1] ? mark_lock+0x94/0x320 [ 1265.667757][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1265.673810][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 1265.679161][ C1] preempt_schedule_irq+0xb5/0x140 [ 1265.684327][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1265.690109][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1265.695967][ C1] irqentry_exit+0x67/0x70 [ 1265.700433][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1265.706497][ C1] RIP: 0010:kasan_check_range+0x16/0x290 [ 1265.712181][ C1] Code: ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc 66 0f 1f 00 b0 01 48 85 f6 0f 84 b8 01 00 00 55 41 57 41 56 41 55 <41> 54 53 4c 8d 04 37 49 39 f8 0f 82 5a 02 00 00 49 89 f9 49 c1 e9 [ 1265.731845][ C1] RSP: 0018:ffffc9000c887b40 EFLAGS: 00000202 [ 1265.737988][ C1] RAX: ffffffff81e7b101 RBX: 0000000000000005 RCX: ffffffff81e7b1aa [ 1265.746008][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888018e19028 [ 1265.754107][ C1] RBP: dffffc0000000000 R08: ffff888018e18fe7 R09: 1ffff110031c31fc [ 1265.762122][ C1] R10: dffffc0000000000 R11: ffffed10031c31fd R12: ffff888018e19028 [ 1265.770142][ C1] R13: 1ffffffff2de2924 R14: ffff888018e18fe8 R15: 0000000000000003 [ 1265.778180][ C1] ? __page_table_check_zero+0x111/0x4b0 [ 1265.783871][ C1] ? __page_table_check_zero+0x1ba/0x4b0 [ 1265.789572][ C1] __page_table_check_zero+0x1ba/0x4b0 [ 1265.795091][ C1] free_unref_page_prepare+0x7e1/0x8e0 [ 1265.800624][ C1] free_unref_page+0x32/0x2e0 [ 1265.805359][ C1] __unfreeze_partials+0x1cf/0x210 [ 1265.810550][ C1] put_cpu_partial+0x17c/0x250 [ 1265.815574][ C1] ? put_cpu_partial+0x6e/0x250 [ 1265.820609][ C1] __slab_free+0x31d/0x410 [ 1265.825095][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1265.830093][ C1] ? __phys_addr+0xba/0x170 [ 1265.834651][ C1] qlist_free_all+0x75/0xe0 [ 1265.839302][ C1] kasan_quarantine_reduce+0x143/0x160 [ 1265.844823][ C1] __kasan_slab_alloc+0x22/0x80 [ 1265.849738][ C1] slab_post_alloc_hook+0x6e/0x4d0 [ 1265.854922][ C1] kmem_cache_alloc+0x11e/0x2e0 [ 1265.859853][ C1] ? getname_flags+0xbb/0x500 [ 1265.864693][ C1] getname_flags+0xbb/0x500 [ 1265.869260][ C1] ? syscall_enter_from_user_mode+0x25/0x80 [ 1265.875227][ C1] __x64_sys_unlink+0x3c/0x50 [ 1265.880148][ C1] do_syscall_64+0x55/0xb0 [ 1265.884703][ C1] ? clear_bhb_loop+0x40/0x90 [ 1265.889427][ C1] ? clear_bhb_loop+0x40/0x90 [ 1265.894158][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1265.900110][ C1] RIP: 0033:0x7fb0edf8df57 [ 1265.904582][ C1] RSP: 002b:00007ffeb1bd3188 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1265.913142][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb0edf8df57 [ 1265.921777][ C1] RDX: 00007ffeb1bd31b0 RSI: 00007ffeb1bd3240 RDI: 00007ffeb1bd3240 [ 1265.929806][ C1] RBP: 00007ffeb1bd3240 R08: 0000000000000000 R09: 0000000000000000 [ 1265.937828][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffeb1bd42d0 [ 1265.945846][ C1] R13: 00007fb0ee010b55 R14: 0000000000117643 R15: 00007ffeb1bd4310 [ 1265.953888][ C1] [ 1265.956951][ C1] rcu: rcu_preempt kthread starved for 8448 jiffies! g143121 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1265.968202][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1265.978226][ C1] rcu: RCU grace-period kthread stack dump: [ 1265.984150][ C1] task:rcu_preempt state:R running task stack:27432 pid:17 ppid:2 flags:0x00004000 [ 1265.994995][ C1] Call Trace: [ 1265.998319][ C1] [ 1266.001293][ C1] __schedule+0x14d2/0x44d0 [ 1266.005861][ C1] ? __lock_acquire+0x12a0/0x7c80 [ 1266.011213][ C1] ? verify_lock_unused+0x140/0x140 [ 1266.016480][ C1] ? asan.module_dtor+0x20/0x20 [ 1266.021399][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1266.027445][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 1266.032787][ C1] preempt_schedule_irq+0xb5/0x140 [ 1266.037951][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1266.043822][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1266.049689][ C1] irqentry_exit+0x67/0x70 [ 1266.054165][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1266.060218][ C1] RIP: 0010:lockdep_init_map_type+0x253/0x880 [ 1266.066350][ C1] Code: 0b 00 48 ba 00 00 00 00 00 fc ff df 84 c0 75 1a 4c 89 ff e8 3f 06 00 00 48 ba 00 00 00 00 00 fc ff df 84 c0 0f 84 7d 01 00 00 <48> 89 d8 48 c1 e8 03 80 3c 10 00 74 12 48 89 df e8 08 f8 75 00 48 [ 1266.086013][ C1] RSP: 0018:ffffc90000167aa0 EFLAGS: 00000202 [ 1266.092128][ C1] RAX: 0000000000000001 RBX: ffffc90000167bc8 RCX: ffffffff96eaa401 [ 1266.100160][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc90000167be9 [ 1266.108181][ C1] RBP: ffffc90000167b68 R08: ffffc90000167bdf R09: 0000000000000000 [ 1266.116199][ C1] R10: ffffc90000167bd0 R11: fffff5200002cf7c R12: 0000000000000000 [ 1266.124213][ C1] R13: 0000000000000000 R14: ffffc90000167bea R15: ffffffff96eed360 [ 1266.132476][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 1266.137900][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1266.143866][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1266.148799][ C1] schedule_timeout+0x147/0x280 [ 1266.153716][ C1] ? console_conditional_schedule+0x40/0x40 [ 1266.159664][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1266.165751][ C1] ? update_process_times+0x1b0/0x1b0 [ 1266.171188][ C1] ? prepare_to_swait_event+0x339/0x360 [ 1266.176789][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 1266.181799][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1266.188110][ C1] ? rcu_gp_init+0x1510/0x1510 [ 1266.192930][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1266.197834][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1266.203085][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1266.208349][ C1] rcu_gp_kthread+0x99/0x380 [ 1266.213015][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1266.218189][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 1266.223192][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1266.228276][ C1] kthread+0x2fa/0x390 [ 1266.232378][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1266.237555][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1266.242195][ C1] ret_from_fork+0x48/0x80 [ 1266.246659][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1266.251290][ C1] ret_from_fork_asm+0x11/0x20 [ 1266.256116][ C1] [ 1266.259163][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1266.265588][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.100-syzkaller #0 [ 1266.273355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1266.283469][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 [ 1266.289774][ C1] Code: 48 8b 3d 5c ea c4 0c 48 89 de 5b e9 63 75 56 00 cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 70 24 7e 7e 65 8b 15 71 24 7e 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 1266.309438][ C1] RSP: 0018:ffffc900001efd00 EFLAGS: 00000202 [ 1266.315558][ C1] RAX: ffffffff813210a2 RBX: ffffc900001efdc0 RCX: ffff88801be5bc00 [ 1266.323574][ C1] RDX: 0000000080000101 RSI: 0000000080000101 RDI: 0000000000000000 [ 1266.331594][ C1] RBP: ffffc900001efd90 R08: ffff88801be5bc00 R09: 0000000000000003 [ 1266.339603][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8a6d3a8c [ 1266.347611][ C1] R13: 00000000000000f0 R14: ffffffff81747100 R15: ffffc900001efd08 [ 1266.355626][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1266.364779][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1266.371414][ C1] CR2: 0000200000065030 CR3: 000000002e53b000 CR4: 00000000003506e0 [ 1266.379438][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000508c [ 1266.387491][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1266.395532][ C1] Call Trace: [ 1266.398936][ C1] [ 1266.401839][ C1] arch_stack_walk+0x152/0x190 [ 1266.406660][ C1] ? do_idle+0x1eb/0x510 [ 1266.410951][ C1] stack_trace_save+0x9c/0xe0 [ 1266.415677][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1266.420841][ C1] ? secondary_startup_64_no_verify+0x178/0x17b [ 1266.427135][ C1] kasan_set_track+0x4e/0x70 [ 1266.431765][ C1] ? kasan_set_track+0x4e/0x70 [ 1266.436570][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1266.441639][ C1] ? slab_post_alloc_hook+0x6e/0x4d0 [ 1266.446974][ C1] ? kmem_cache_alloc_node+0x150/0x330 [ 1266.452479][ C1] ? __alloc_skb+0x108/0x2c0 [ 1266.457115][ C1] ? synproxy_send_client_synack+0x16d/0xdd0 [ 1266.463149][ C1] ? nft_synproxy_eval_v4+0x36f/0x560 [ 1266.468659][ C1] ? nft_synproxy_do_eval+0x342/0x570 [ 1266.474085][ C1] ? nft_do_chain+0x3f9/0x1580 [ 1266.478891][ C1] ? nft_do_chain_inet+0x25b/0x330 [ 1266.484052][ C1] ? nf_hook_slow+0xbd/0x200 [ 1266.488791][ C1] ? NF_HOOK+0x204/0x390 [ 1266.493072][ C1] ? NF_HOOK+0x303/0x390 [ 1266.497354][ C1] ? __netif_receive_skb+0xcc/0x290 [ 1266.502608][ C1] ? process_backlog+0x380/0x6e0 [ 1266.507593][ C1] ? __napi_poll+0xc0/0x460 [ 1266.512141][ C1] ? net_rx_action+0x5ea/0xbf0 [ 1266.516960][ C1] ? handle_softirqs+0x280/0x820 [ 1266.521931][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1266.526816][ C1] ? irq_exit_rcu+0x9/0x20 [ 1266.531278][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1266.537138][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1266.543358][ C1] ? pv_native_safe_halt+0x13/0x20 [ 1266.548528][ C1] ? default_idle+0x13/0x20 [ 1266.553078][ C1] ? default_idle_call+0x6c/0xa0 [ 1266.558100][ C1] ? irq_exit_rcu+0x9/0x20 [ 1266.562556][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1266.568425][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1266.573339][ C1] slab_post_alloc_hook+0x6e/0x4d0 [ 1266.578519][ C1] kmem_cache_alloc_node+0x150/0x330 [ 1266.583853][ C1] ? __alloc_skb+0x108/0x2c0 [ 1266.588509][ C1] __alloc_skb+0x108/0x2c0 [ 1266.593002][ C1] synproxy_send_client_synack+0x16d/0xdd0 [ 1266.598871][ C1] ? kasan_quarantine_put+0xd8/0x220 [ 1266.604226][ C1] ? synproxy_init_timestamp_cookie+0x2d0/0x2d0 [ 1266.610529][ C1] ? synproxy_pernet+0x45/0x270 [ 1266.615438][ C1] ? synproxy_pernet+0x45/0x270 [ 1266.620606][ C1] nft_synproxy_eval_v4+0x36f/0x560 [ 1266.625867][ C1] ? nft_synproxy_do_eval+0x570/0x570 [ 1266.631296][ C1] ? nf_ip_checksum+0x13c/0x520 [ 1266.636193][ C1] nft_synproxy_do_eval+0x342/0x570 [ 1266.641627][ C1] ? nft_synproxy_validate+0xc0/0xc0 [ 1266.646965][ C1] ? mark_lock+0x94/0x320 [ 1266.651359][ C1] nft_do_chain+0x3f9/0x1580 [ 1266.656031][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 1266.662019][ C1] ? nf_nat_packet+0xf0/0xf0 [ 1266.666666][ C1] nft_do_chain_inet+0x25b/0x330 [ 1266.671667][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 1266.676579][ C1] ? ipt_do_table+0x2b2/0x15f0 [ 1266.681401][ C1] ? nf_nat_ipv4_local_in+0x20d/0x5b0 [ 1266.686830][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 1266.691738][ C1] nf_hook_slow+0xbd/0x200 [ 1266.696220][ C1] NF_HOOK+0x204/0x390 [ 1266.700335][ C1] ? NF_HOOK+0x390/0x390 [ 1266.704634][ C1] ? NF_HOOK+0x9b/0x390 [ 1266.708829][ C1] ? ip_local_deliver+0x1b0/0x1b0 [ 1266.713895][ C1] ? ip_rcv_finish_core+0xd8f/0x1bc0 [ 1266.719245][ C1] ? NF_HOOK+0x390/0x390 [ 1266.723552][ C1] ? ip_local_deliver+0x122/0x1b0 [ 1266.728634][ C1] NF_HOOK+0x303/0x390 [ 1266.732755][ C1] ? ip_rcv_core+0xdb0/0xdb0 [ 1266.737394][ C1] ? NF_HOOK+0x9b/0x390 [ 1266.741606][ C1] ? ip_local_deliver+0x1b0/0x1b0 [ 1266.746679][ C1] ? ip_rcv_core+0xdb0/0xdb0 [ 1266.751330][ C1] ? ip_local_deliver_finish+0x510/0x510 [ 1266.757017][ C1] ? ip_local_deliver_finish+0x510/0x510 [ 1266.762700][ C1] __netif_receive_skb+0xcc/0x290 [ 1266.767783][ C1] ? process_backlog+0x2be/0x6e0 [ 1266.772770][ C1] process_backlog+0x380/0x6e0 [ 1266.777600][ C1] ? trigger_rx_softirq+0x60/0x60 [ 1266.782672][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1266.788705][ C1] ? lock_chain_count+0x20/0x20 [ 1266.793610][ C1] __napi_poll+0xc0/0x460 [ 1266.797999][ C1] ? net_rx_action+0x374/0xbf0 [ 1266.802826][ C1] net_rx_action+0x5ea/0xbf0 [ 1266.807481][ C1] ? net_tx_action+0x950/0x950 [ 1266.812306][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1266.818339][ C1] ? rebalance_domains+0x8ad/0x9d0 [ 1266.823495][ C1] ? lock_chain_count+0x20/0x20 [ 1266.828406][ C1] handle_softirqs+0x280/0x820 [ 1266.833216][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1266.838029][ C1] ? do_softirq+0x180/0x180 [ 1266.842580][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1266.848004][ C1] __irq_exit_rcu+0xc7/0x190 [ 1266.852636][ C1] ? irq_exit_rcu+0x20/0x20 [ 1266.857192][ C1] irq_exit_rcu+0x9/0x20 [ 1266.861474][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1266.867163][ C1] [ 1266.870139][ C1] [ 1266.873117][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1266.879158][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1266.884933][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 16 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1266.904590][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1266.910711][ C1] RAX: 36611ed36126f200 RBX: ffffffff81619a5b RCX: 36611ed36126f200 [ 1266.918725][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6700 [ 1266.926744][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 1266.934757][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a7da8 [ 1266.942775][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037cb780 [ 1266.950798][ C1] ? do_idle+0x1eb/0x510 [ 1266.955115][ C1] default_idle+0x13/0x20 [ 1266.959502][ C1] default_idle_call+0x6c/0xa0 [ 1266.964321][ C1] do_idle+0x1eb/0x510 [ 1266.968436][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1266.974665][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1266.979933][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1266.985201][ C1] ? do_idle+0x10/0x510 [ 1266.989417][ C1] cpu_startup_entry+0x43/0x60 [ 1266.994234][ C1] start_secondary+0xee/0xf0 [ 1266.998871][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1267.005014][ C1]