last executing test programs: 1m28.428342634s ago: executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x3f, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f00000004c0)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 1m15.056490515s ago: executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x3f, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f00000004c0)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 54.879451765s ago: executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x3f, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f00000004c0)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 38.915109848s ago: executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x3f, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f00000004c0)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 16.388188511s ago: executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x3f, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f00000004c0)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 8.109807653s ago: executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f0000000200), 0x2, 0x2f0, &(0x7f0000000880)="$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") close(r0) 7.464797462s ago: executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)={[{@noflushoncommit}, {@nodiscard}, {@user_subvol_rm}, {@treelog}, {@max_inline={'max_inline', 0x3d, [0x36, 0x33, 0x39, 0x38, 0x78, 0x38, 0x2d]}}, {@max_inline}, {@noflushoncommit}, {@nobarrier}, {@nossd}]}, 0xfe, 0x55a3, &(0x7f0000005680)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket(0x15, 0x5, 0x0) bind$l2tp(r1, &(0x7f0000000100)={0xa, 0x0, @local}, 0x1c) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000300)='./file1/file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0xfe, 0xedb, &(0x7f0000000f80)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSEUCVapQT21PrXrrCfVCpSqVgnpoIyWu4ry33n3xdNdjeza7+/tJn9++ebPzfbNrzMxk9m0AxlZj/efRo4tFCO9+9s6jLz9VfHJl2V3tNQ6s/yxirxVCaHb0i2x7X8QFly68dGKztgiH13+mfnjsfPu5syGE1XAgfB5a4aPlla8+fO+Rgx+/PnPLW2efeWWXdr8t3w8AABhF5/608rf7/vHHBxYuntt/PEy3l6fj81bsz8bj/kPxQDkdLzdCd7/oiE5T2XoTMRrZehPZepNZnsmSfM1sO82S9aZ65JvoWLbZfgIAAMAwSue1rVA0lrr6jcbS0tXz/iu+mJ8qlp47vXLqzIAKBQAAACr796vrN90KIYQQQgghhBBihGNtftBXIAAAAIBxk88Xdo3VnZ2pq721Vn/5zz/c2Pz5sAPq/v2Xf7jyf/CavzgAAFQ3qkeTab/ScXSaxyCfR3Aie95Wj/8b2XYmt1hn2byCwzLfYFmd+et6vSqrf6vv46CU1Z/Ph3m9Kqs/n6fzelVW/3TNdVRVVv9MzXVUVVb/nprrqKqs/r0111FVWf2zNddRVVn9czXXUVVZ/TfUXEdVZfXvq7mOqsrqH5bbasvqb9VcR1Vl9S/UXEdVZfXfWHMdVZXVf1PNdVRVVv/NNdcxKHfGNr0O+0vWm93knG5YzvEAAABg3P3X/H9CCCGEEEIIIcTIx6uDvgABAAAADFz6XED61PtalMYneoxPdo7PbKyQxps9nj/VY3y6xzgAAAAQwm/fOHXb28XGfHfbnQ8vzRu1J3xyOVSYxyifj3Cr+bc779l28w/LvGUAAACMl+J7n1++/9H3X1i4eG7/8Y6z38vxfDfNAzoZrw18GvvpvoC5rF+kc+jj3XkaJevl1wduKNve49vcUQAAABhj6fy9FYrGUsd5dys0GktLG+fji6FZnDq9cvJQ7KfvZ/nDfHP6yvKHaq4bAAAA6N/G+f7m5//pe3wXw1Sx9NzplVNnrvbn2subjc7rAvMby4vO6wKtbPnhkuVHYj99f+cP5vesL1868cOVp3Z65wEAAGBMnHnx7DNPrqyc/JEHHnjgQfvBoP8yAQAAO+3LL99p/vjI3O+ufv5/Y/679Pn/A7HfinP7/TmukO4TSJ8DuObz+k9055kvW+/57vVa2XoTMaazumc6thPW5xvsft5CWb5W93amSvLNZvnmsnz5PAWT2fop375seT4/YVpvPluez8M4meUosvx3BwAAACi3/MKzzy+fefHsg6efffLpk0+ffO7I4WPfPXbs0EPfeWh5/b7+5c67+wEAAIBhtHHT76ArAQAAAAAAAAAAAAAAAAAAgPFVx9eJDXofAQAAYNz969UQwqoQJZG+YHDQdYjrOdamB1/DaEfw36EQQgghhNh+rK3l3zQPAAAAsLsuXXjpRGd7jdViR/O1t9a62lyOeVM79+BfF65EWu38w93XS/buaDWMu7p//+UfrvwfvLaz+WfSg77//jW6N3C8q7en37z3Lv9ysTP/7ZN95s/3//F+M3Y7mOW/N/SXf+39LP8TXb1Gv/nvy/Lv7TP/Nfv/fL8Zu90f8y/G/sF7+s3fvYvTsU370e8vwLez/X8q9Js/2/9WnwkzD8T8ADCO+j5gGTLpKCEdR8/GftrfeLgZ8rsftnr838i2M7ntyru3m46Dbo399vH6anfeZKv1p9dlLrY3VKwzNyx3lZTVv1Pv424rq79Zcx1VldU/VXMdVZXVP11zHVWV1T9Tcx1VldXf94WIASurf1iuK5fVP1tzHVWV1T9Xcx1VldW/1f+PD0pZ/ftqrqOqsvrna66jqrL6K15Wq11Z/Qs111FVWf031lxHVWX131RzHVWV1X9zzXUMyh2xLTsfTuef83Es9VtZf3qT13JUry0AAADAsPmn+f+EEEIIIYQY+/jP2lWDrkMIsXuxtjboKxAM0u5+mhmA65W//+PN+z/evP/jzfvP/5Pu4S+yfjLRY3yyx3izx/hUNp7/vk73GL8p2+5auq4Z3dxj/Gs9xvf1GL+1x/hij/Hbeozf3mP8jh7jAAAAjIdbYuv8EAAAAEbXy7/69M3f3PvEhYWL5/YfD1PXzDt/KPan47+tvxH7+bz3STP+m/9PYv8Xsf19bP+ere/+EwAAANh96Xti/Ps/AAAAjK70PaXO/wEAAGB0LcTW+T8AAACMrhtj6/wfAAAARlgxs/ni2KbrAnfHtt95/QCA69/XY3tnbPfH9q7YfiO26Tjgnth+s6b6AICd8/Pv//TY28XGfP9HsvFLcXlqr7F69UpB0eieyX9PbPfG9lt91pN/H0C/+ZN9febZrfzz28wPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyOxvrPo0cXixDe/eydR3829eZfriy7q73GgfWfRey1QgjN9vPS6Eb/13HFSxdeOtHZXo5tEQ6HIhTt5eGx8+1MsyGE1XAgfB5a4aPlla8+fO+Rgx+/PnPLW2efeWUXX4Ku/QMAAIBR9L8AAAD//86BI5A=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, 0x0) r3 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800ebee22f54bec15f9cab9ca000000000000004bf4c6d3e9f9fb"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) write$6lowpan_control(r3, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 7.279788533s ago: executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000140)='P9', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f0000000240)='P', 0x0}, 0x20) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="9347409ae970a3bc85c30c903acd95baf5ba07a27bc0e854c09118911f24e88763504db0bfb90a7d6de33fcf11e4df2dcaf5cf51b18bf79f401eba081c13f9cbc7766d8bfb621898f1886da1a11c30f68da7a4bb3fb050ed7831bad8ef03b8112d5bc365fe11f6373beb09e60e7b3a9e9d5a18e128ba604aa0fc9c6410dfbb3a22d37af3a84cdc108cb60626acd0d504f5734e2a02a9f5109c96902dddc26e51ecf25e2a60ffcbdd368600b5f88964f7baad17666fc34f02fb1130e9c3", @ANYBLOB="000000000000000000000a0000005000018008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRESOCT=r1, @ANYBLOB="0804f086c3560000080001006a4d42ff3ff835492a520fb7fccecd22ec6a96862cd26306b6209c5957d640565017d9303734f81c963e2742bb30e34331752970d826f1c7810b7208f4bf658d352d3381115de714d4c904642951d35d03f87ecf3cc7e211af256b04f6111b2b3c78121fa32815002c38f15a3009924a08f14e141a35ff09d44887ac2623c409bfdd28ed300b9f94687de59e8c91c1ee46c2a5ac14276356e84bcba0", @ANYRES32=r1, @ANYBLOB="08000000c81d1cccc6a26767798dc224324a3577cd11d3548125525021a794760806ad323fa8", @ANYRES16=r0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f3100000800030060f44efb"], 0x6c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={r4, &(0x7f0000000000), &(0x7f0000000d40)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r4, &(0x7f0000000100)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000280)=@buf="b1e911a7288a14b57b38ba06297846ccf203e2c76ebb7f30c95622e14648377d5573f8167069a1a25977cbe2e5b8c0b74e93889f1d6c821b68b0c591a0df1c861d809c821ef4ef85065783ddaae206394167cc80bfe1a4e5498d7d57", 0xe55a45c175ef7809}, 0x20) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000d80)=ANY=[@ANYBLOB="980000000b06010100000000000000000200000c00078006fd3e037024000064ffffffff00028008000900ffffffff060a6da3ea2618e81a9f3e309d001df9ce40000400000800064000000004060005404e200000ea0000070900130073797a32000000001400170070696d3672656730090000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f31000000", @ANYBLOB="13f6ae154dc57d3ae24473a2a48020b58e598c11858ce8630852de7addd38973e8574fc468234400aca55c5858d240f44143b60ad5c8fd5946a53ab9c1ce485cfa348de990a99334ec6b60d8ff945ef2be2ca006750c65f73c0c387751e7dd135f473660f90f021975fdbf1ca23d317eb78e7014fb941e3fb8d16bfae7e0ec7e1f016ac8508291bb92344ed78573265c", @ANYRES64=r5], 0x98}}, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r5, &(0x7f0000000100)}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000180)="4a308f688a9b5833886998083aed56f80d8293239df673bdc0ed1f70b4cf01a295433617676462d9de762039167e9d0d3a5305b96f4edabe664d503b3ff993a6de2659cef11029b26bf8bd37186ce8b0ba1ec2b2dc2f6f9eaaa9fab17e469d094e4d4badcd19f75cbec6f45874ce666ea1d8d2d87752ddfeb3d2b4b56372") bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8, 0x1, 0xffffffe1, 0x9d0, r4, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r6 = syz_open_dev$vcsa(0x0, 0x200, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000c80)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=@setneightbl={0x2c, 0x43, 0x200, 0x70bd2b, 0x25dfdbfd, {0x1a}, [@NDTA_THRESH1={0x8, 0x2, 0x7}, @NDTA_THRESH3={0x8, 0x4, 0xc4c}, @NDTA_THRESH2={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4090) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES8=r6, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newlink={0x7c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff7}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x7c}}, 0x4000080) 7.14247398s ago: executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f0000000580)=[r2], 0x0, 0x0, 0x0}) 6.556628205s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) close(r2) 6.222937385s ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000280)="e5cf418f", 0x4) 6.171908759s ago: executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x200000071, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x7}) 5.464357541s ago: executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @multicast2}}]}, 0xc8}}, 0x0) 5.420169537s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000fbff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d00)='ext4_remove_blocks\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x12) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 5.273728282s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="89d40400000000001c0012800b0001006272696467650000000083aba210bf3759e607548516ca5bf0f2f328194003d3808e80b4b491f34d291ecd0dd4cb927fcc94aa54574ee160cbac363707ebdb84fdfe2e0cd97dfc4ab65668dc294bbe05b76ea16049ff6d36118fd3ee092560adb440977cc014c79bfea45d682a"], 0x3c}}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x7b, &(0x7f0000000880)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f00452f002001000000000000000000000000000200000000000000000000ffffffffffff2421880b"], 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0xc0844123, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x6, 0x2, r4, 0x10001, '\x00', 0x0, r6, 0xffffffff, 0x0, 0x0, 0x7}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008009776b704000000000000850000003300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000008f5d00850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) write$cgroup_int(r6, &(0x7f00000000c0)=0x4, 0x12) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/148, 0x94}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xffffffffdfffffff, 0x11) 5.215613533s ago: executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000240)={0x0, "756ec67cd1fd2ed13200a48d27d0cb1fc5d03caf99000000001000"}) 4.850157172s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000000240)) 4.800213415s ago: executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000240)="240000001a005f0400f9f407000904018020200000000000701d259316e7427b1a000000", 0x24) 4.780432702s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x28, r1, 0xc17, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) 4.632290092s ago: executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd0, 0x0, 0x0) 4.421421407s ago: executing program 5: r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0x7fff}], 0x1) semop(r0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f}], 0x2) semop(r0, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) 4.321417681s ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x4d6, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 4.217310604s ago: executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f0000000580)=[r2], 0x0, 0x0, 0x0}) 3.959685092s ago: executing program 2: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 3.869738602s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)={[{@noflushoncommit}, {@nodiscard}, {@user_subvol_rm}, {@treelog}, {@max_inline={'max_inline', 0x3d, [0x36, 0x33, 0x39, 0x38, 0x78, 0x38, 0x2d]}}, {@max_inline}, {@noflushoncommit}, {@nobarrier}, {@nossd}]}, 0xfe, 0x55a3, &(0x7f0000005680)="$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") socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket(0x15, 0x5, 0x0) bind$l2tp(r1, &(0x7f0000000100)={0xa, 0x0, @local}, 0x1c) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000300)='./file1/file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0xfe, 0xedb, &(0x7f0000000f80)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, 0x0) r3 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800ebee22f54bec15f9cab9ca000000000000004bf4c6d3e9f9fb"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) write$6lowpan_control(r3, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 3.735235416s ago: executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x2, 0x4e60, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)="ed4e82bdc44b4626f17240da75126c6c124490d6e1b548078f2bfbb3b2144213deecccecf4af153de115e85615196635cc86e4ff71d9588a9cb2aba8fd4b07268cf929808a43aaa7e4b44392d9c67e552eb54fb946da44baf093388610fd928d0798bacc3f33eef8267a318bed8dd50596c299dbc4a80c70d3f13ce3cca7301a10769248fa9347cae6ab712db36abae3dece3acffbb18053b17615661d55ad0fcd4799bdf8b390dd43465bf7840fa33567cd5a94db399d6d6d2c942aecc2714b60634c03e6e02b8f8af3d42e5b512cf459f830cb0b6de118b8ffdff41db05d54e8d56c301df18e88080d8e", 0xeb}, {&(0x7f00000007c0)="b80d8b0089b7cb61da8d5df472181a26b15679ac7f8c78272d864af732b8b28aa0e1a48cbdf44ccb0e4f2112c22ee96f25a9b1119789158355ab025feb9a844f50cd0c85f365ceda583622fc9f84927e238c2c5fab979ce0e9ecfcb11b749e7ebd7d22afb9611270a35da1ea5c669a26a0f70a238ac146a1fe973c084b5dbcf56506997a21a2072f27a03e323520f7b6391eacf105f808ec8557bcc1e5c52e6a6fcf9c072a5527a9f8c7ef28713c6cebccafc270de073f7504c11aea2450", 0xbe}, {&(0x7f0000000600)="7eaf5fb1b36ff33d10c45c93c9ff37ab09bd57dbcc850d56553b3d4acb92e6fb2178dc510264eb4a5608f3f608735ca6d50347c7f2592d2cfc9aec9f5b2ecb156782d6ddb2a0db5c98ef2da4686ce20b30b791a26685e46ef1688c2b38f01eddf912f20a6710605379d66ccb9f54c8a76c038c43cea0067e52c9ed4cbfff8385a6ac2d858aa9effdf04051c7ee95687af2c67c80b626a85e0fb1d88170e92b3df62001a529aea5b6817906b83604d869aacca56c7eac589695cfe1c4d1780693b33c9bf96c778ea88dc338bcfe71fe0944f3666716521d6c09b627884a395deb06a490f077d2617722096769e31036", 0xef}], 0x3}, 0x40040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50}, {0xb1, 0x0, 0x0, 0xbffff038}, {0x6}]}, 0x10) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="189700000000009eb044c4d4240ff0cd3aaaedaed300000000000000000018ea001720207025"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open$dir(&(0x7f0000000780)='./file0\x00', 0x44200, 0x54) open_tree(r4, &(0x7f0000000180)='./file0\x00', 0x9001) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)) 3.49417647s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000300)=""/222, 0xde, 0x0, &(0x7f0000001a40)=""/4108, 0x100c}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x67}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.800920301s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x6, 0x9, 0x0, @local, @mcast2, 0x40, 0x8000, 0x6, 0x7}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e21000fff0058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeffe809004000fff5dd000000100002000400080004000000224e0000", 0x58}], 0x1) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="080001003d5c4abb9b36d9d6950772c0b02bfbe99164085c510a481163e5015e30841bd218a95ae57b9968f71da127feb71d4380cca1c3d959969511e8f7c00113f7607c08c3d7e777b6581f843acae640c9e1a5d1a56cbbfe4b91177a47a14c25a625d7de2b7f3438e393aa78b247d6775454bd814d172d4e9bfc1e92212af0fc8252fae50e4587d919af80d9623f313c896e4022ba53e46e0a40ff4f32453a7b1b38b4c43700"/179, @ANYRES32=r9, @ANYBLOB="08000300000000006c00038066000400c9ecb3cd896f60835a611015cdbfd34e5b8c91e0e190cee60f12f2993e7fc6e1998beba7a54adb933cae22503991f3448e4e110e78f260d6aee5c59c32459b9f64b41ed7af65b0e7e586afda380d66705134db159361b88b91b6c2fa143ee34a11e30000040003802000018014000200776c616e3100000000000000000000000800030001000000"], 0x22c}, 0x1, 0x0, 0x0, 0x400c004}, 0x48010) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 1.734839703s ago: executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 1.633401665s ago: executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x103200, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x24}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map, r0, 0x24, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 1.19501951s ago: executing program 5: r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x4}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xb) ioperm(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)) 1.053633179s ago: executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000000)='-0', 0x2) 878.594636ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) 762.227097ms ago: executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00g\x00\b\x00', @ANYRES64=r0], 0x24}}, 0x0) 355.803639ms ago: executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x3f, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f00000004c0)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 0s ago: executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) kernel console output (not intermixed with test programs): onfined pid=11773 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8d387cf29 code=0x7ffc0000 [ 552.157776][ T29] audit: type=1326 audit(1718658214.849:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d387cf29 code=0x7ffc0000 [ 552.193496][ T29] audit: type=1326 audit(1718658214.849:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8d387a6a7 code=0x7ffc0000 [ 552.219028][ T29] audit: type=1326 audit(1718658214.849:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8d3840379 code=0x7ffc0000 [ 552.259729][ T29] audit: type=1326 audit(1718658214.849:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8d387a6a7 code=0x7ffc0000 [ 552.285777][ T29] audit: type=1326 audit(1718658214.849:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8d3840379 code=0x7ffc0000 [ 553.265064][ T2469] team0 (unregistering): Port device team_slave_1 removed [ 553.358675][ T2469] team0 (unregistering): Port device team_slave_0 removed [ 553.468677][ T5124] Bluetooth: hci0: command tx timeout [ 554.109530][T11701] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.151978][T11701] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.159330][T11701] bridge_slave_1: entered allmulticast mode [ 554.189830][T11701] bridge_slave_1: entered promiscuous mode [ 554.209197][T11790] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 554.322030][ T5176] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 554.396114][T11701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.435450][T11701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.535727][ T5176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 554.580553][T11701] team0: Port device team_slave_0 added [ 554.584982][ T5176] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=81.d9 [ 554.592947][T11701] team0: Port device team_slave_1 added [ 554.628837][ T5176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.646945][ T5176] usb 4-1: Product: syz [ 554.661465][ T5176] usb 4-1: Manufacturer: syz [ 554.683867][T11701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.687339][ T5176] usb 4-1: SerialNumber: syz [ 554.691775][T11701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.762871][ T5176] usb 4-1: config 0 descriptor?? [ 554.792018][T11701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.809396][T11701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.816847][T11701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.837788][T11803] block device autoloading is deprecated and will be removed. [ 554.843576][T11701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.006914][T11701] hsr_slave_0: entered promiscuous mode [ 555.030466][T11701] hsr_slave_1: entered promiscuous mode [ 555.030721][ T5176] usb 4-1: USB disconnect, device number 11 [ 555.050267][T11701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.069493][T11701] Cannot create hsr debugfs directory [ 555.542070][ T5124] Bluetooth: hci0: command tx timeout [ 555.704798][T11819] loop1: detected capacity change from 0 to 2048 [ 555.762882][T11819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.872569][T11701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 555.889146][T11701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 555.904422][T11701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 555.918158][T11701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 555.969774][ T1025] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 556.015553][ T1025] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 556.038038][ T1025] EXT4-fs (loop1): This should not happen!! Data will be lost [ 556.038038][ T1025] [ 556.051968][ T1025] EXT4-fs (loop1): Total free blocks count 0 [ 556.058185][ T1025] EXT4-fs (loop1): Free/Dirty block details [ 556.065375][ T1025] EXT4-fs (loop1): free_blocks=2415919104 [ 556.072483][ T1025] EXT4-fs (loop1): dirty_blocks=16 [ 556.079265][ T1025] EXT4-fs (loop1): Block reservation details [ 556.085523][ T1025] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 556.113886][ T1025] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 556.217606][T11701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.271201][T11701] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.288311][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.295507][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.338034][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.345371][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.448254][T11840] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 556.477723][T11701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.813208][T11701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.908635][T11701] veth0_vlan: entered promiscuous mode [ 556.938019][T11701] veth1_vlan: entered promiscuous mode [ 557.001840][T11701] veth0_macvtap: entered promiscuous mode [ 557.026076][T11701] veth1_macvtap: entered promiscuous mode [ 557.060448][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.084270][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.096292][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.108867][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.121975][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.132735][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.144823][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.157249][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.167125][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.177606][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.189803][T11701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.209538][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.220744][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.236041][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.248078][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.260125][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.272921][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.284621][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.297569][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.309838][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.320908][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.349541][T11701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.377389][T11701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.389319][T11701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.400396][T11701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.411348][T11701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.601081][ T5401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.632995][ T5401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.693359][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.723495][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.196637][T11868] loop5: detected capacity change from 0 to 128 [ 559.209418][T11861] loop4: detected capacity change from 0 to 32768 [ 559.233246][T11868] syz-executor.5: attempt to access beyond end of device [ 559.233246][T11868] loop5: rw=2049, sector=145, nr_sectors = 504 limit=128 [ 559.256911][T11861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11861) [ 559.285413][T11861] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 559.294446][T11867] syz-executor.5: attempt to access beyond end of device [ 559.294446][T11867] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 559.306415][T11861] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 559.330434][T11861] BTRFS info (device loop4): using free-space-tree [ 559.635771][ T9961] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 559.647556][T11894] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 560.543764][T11913] loop2: detected capacity change from 0 to 512 [ 560.583910][T11913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.597763][T11913] ext4 filesystem being mounted at /root/syzkaller-testdir2592935115/syzkaller.8kCNzj/26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.704513][T11919] loop3: detected capacity change from 0 to 64 [ 562.029712][ T5401] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.234201][T11926] loop1: detected capacity change from 0 to 16 [ 562.288723][T11926] erofs: (device loop1): mounted with root inode @ nid 36. [ 562.292825][T11321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.508991][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.519799][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.996359][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 563.006979][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 563.016725][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 563.032722][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 563.040578][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 563.048665][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 563.362135][T11933] loop4: detected capacity change from 0 to 32768 [ 563.371836][ T5170] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 563.417230][T11933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11933) [ 563.457195][T11940] chnl_net:caif_netlink_parms(): no params data found [ 563.466053][T11933] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 563.490516][T11933] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 563.508134][T11933] BTRFS info (device loop4): using free-space-tree [ 563.588378][ T5170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.618690][ T5170] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 563.644024][ T5170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.691065][ T5170] usb 4-1: config 0 descriptor?? [ 563.714582][T11940] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.723130][T11940] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.730544][T11940] bridge_slave_0: entered allmulticast mode [ 563.742018][T11940] bridge_slave_0: entered promiscuous mode [ 563.758098][T11940] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.766840][T11940] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.782956][T11977] loop1: detected capacity change from 0 to 512 [ 563.800051][T11940] bridge_slave_1: entered allmulticast mode [ 563.820543][T11940] bridge_slave_1: entered promiscuous mode [ 563.839080][T11977] ext4: Bad value for 'min_batch_time' [ 563.962362][T11940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.981311][T11940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.037185][ T9961] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 564.144550][ T5170] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 564.165830][ T5401] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.196377][ T5170] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input12 [ 564.283517][T11940] team0: Port device team_slave_0 added [ 564.412277][T11983] loop2: detected capacity change from 0 to 2048 [ 564.432236][ T5170] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 564.434951][ T5401] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.528211][T11940] team0: Port device team_slave_1 added [ 564.545777][T11983] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.618313][ T5170] usb 4-1: USB disconnect, device number 12 [ 564.668000][T11986] loop1: detected capacity change from 0 to 16 [ 564.720068][ T5401] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.747818][T11986] erofs: (device loop1): mounted with root inode @ nid 36. [ 564.808341][T11940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.816688][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.846224][T11940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.868454][T11940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.876183][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.903363][T11940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.992988][T11940] hsr_slave_0: entered promiscuous mode [ 565.006988][T11940] hsr_slave_1: entered promiscuous mode [ 565.015162][T11940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.023499][T11940] Cannot create hsr debugfs directory [ 565.142440][ T5124] Bluetooth: hci0: command tx timeout [ 565.227839][ T5401] bridge_slave_1: left allmulticast mode [ 565.235046][ T5401] bridge_slave_1: left promiscuous mode [ 565.244739][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.256263][ T5401] bridge_slave_0: left allmulticast mode [ 565.262382][ T5401] bridge_slave_0: left promiscuous mode [ 565.268355][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.594804][T12000] loop3: detected capacity change from 0 to 1024 [ 565.736571][T12000] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 565.975788][T12007] vivid-000: disconnect [ 566.018144][T12003] vivid-000: reconnect [ 566.353890][T11997] loop4: detected capacity change from 0 to 32768 [ 566.398404][T11997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11997) [ 566.446283][T11997] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 566.483003][T11997] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 566.500054][T11997] BTRFS info (device loop4): using free-space-tree [ 566.781623][ T5401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.809233][T12013] loop5: detected capacity change from 0 to 32768 [ 566.821346][ T5401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.839955][ T5401] bond0 (unregistering): Released all slaves [ 566.841931][T12013] BTRFS: device /dev/loop5 (7:5) using temp-fsid 00562a39-e794-4fe7-b7df-a75f13d1cd41 [ 566.857266][T12013] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (12013) [ 566.897623][T11994] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 566.903433][T12013] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 566.926085][T12013] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 566.944851][T12013] BTRFS info (device loop5): using free-space-tree [ 566.968427][ T9961] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 567.221739][ T5124] Bluetooth: hci0: command tx timeout [ 567.243672][T12049] loop3: detected capacity change from 0 to 16 [ 567.297643][T12049] erofs: (device loop3): mounted with root inode @ nid 36. [ 567.570628][T10407] BTRFS info (device loop5): last unmount of filesystem 00562a39-e794-4fe7-b7df-a75f13d1cd41 [ 567.619060][ T5401] hsr_slave_0: left promiscuous mode [ 567.666146][ T5401] hsr_slave_1: left promiscuous mode [ 567.714090][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.738536][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.764976][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.772978][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.988151][ T5401] veth1_macvtap: left promiscuous mode [ 567.997316][ T5401] veth0_macvtap: left promiscuous mode [ 568.020911][ T5401] veth1_vlan: left promiscuous mode [ 568.028160][ T5401] veth0_vlan: left promiscuous mode [ 568.237887][T12065] loop4: detected capacity change from 0 to 256 [ 568.329823][T12065] FAT-fs (loop4): Directory bread(block 64) failed [ 568.344137][T12065] FAT-fs (loop4): Directory bread(block 65) failed [ 568.352723][T12065] FAT-fs (loop4): Directory bread(block 66) failed [ 568.359352][T12065] FAT-fs (loop4): Directory bread(block 67) failed [ 568.368993][T12065] FAT-fs (loop4): Directory bread(block 68) failed [ 568.377247][T12065] FAT-fs (loop4): Directory bread(block 69) failed [ 568.384173][T12065] FAT-fs (loop4): Directory bread(block 70) failed [ 568.390934][T12065] FAT-fs (loop4): Directory bread(block 71) failed [ 568.405799][T12065] FAT-fs (loop4): Directory bread(block 72) failed [ 568.418112][T12065] FAT-fs (loop4): Directory bread(block 73) failed [ 568.458709][T12069] loop5: detected capacity change from 0 to 512 [ 568.551136][T12069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.565756][T12069] ext4 filesystem being mounted at /root/syzkaller-testdir3377950584/syzkaller.FlXry1/101/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.649368][T12069] EXT4-fs error (device loop5): ext4_do_update_inode:5075: inode #2: comm syz-executor.5: corrupted inode contents [ 568.694579][T12069] EXT4-fs error (device loop5): ext4_dirty_inode:5935: inode #2: comm syz-executor.5: mark_inode_dirty error [ 568.716046][T12069] EXT4-fs error (device loop5): ext4_do_update_inode:5075: inode #2: comm syz-executor.5: corrupted inode contents [ 568.762980][T12069] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz-executor.5: mark_inode_dirty error [ 569.089148][T10407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.217943][ T5401] team0 (unregistering): Port device team_slave_1 removed [ 569.284252][ T5401] team0 (unregistering): Port device team_slave_0 removed [ 569.306446][ T5124] Bluetooth: hci0: command tx timeout [ 569.440245][T12083] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 569.458819][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 569.458840][ T29] audit: type=1326 audit(1718658232.319:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d387cf29 code=0x0 [ 570.049757][T12081] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.367852][T11940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 570.380559][T11940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 570.448283][T11940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 570.469147][T11940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 570.544021][T12090] loop2: detected capacity change from 0 to 16 [ 570.591141][T12090] erofs: (device loop2): mounted with root inode @ nid 36. [ 570.729958][T11940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.799661][ T29] audit: type=1326 audit(1718658233.669:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12091 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf3ee7cf29 code=0x0 [ 570.803330][T11940] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.881350][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.888528][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.961888][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.969145][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.294823][T12110] loop2: detected capacity change from 0 to 256 [ 571.381994][ T5124] Bluetooth: hci0: command tx timeout [ 571.416832][T12110] FAT-fs (loop2): Directory bread(block 64) failed [ 571.436776][T12110] FAT-fs (loop2): Directory bread(block 65) failed [ 571.461637][T12110] FAT-fs (loop2): Directory bread(block 66) failed [ 571.479300][T12110] FAT-fs (loop2): Directory bread(block 67) failed [ 571.507099][T12110] FAT-fs (loop2): Directory bread(block 68) failed [ 571.555426][T12110] FAT-fs (loop2): Directory bread(block 69) failed [ 571.611741][T12110] FAT-fs (loop2): Directory bread(block 70) failed [ 571.618330][T12110] FAT-fs (loop2): Directory bread(block 71) failed [ 571.655801][T12110] FAT-fs (loop2): Directory bread(block 72) failed [ 571.676663][T12110] FAT-fs (loop2): Directory bread(block 73) failed [ 571.742598][T11940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.765741][T12118] loop3: detected capacity change from 0 to 2048 [ 571.819687][T11940] veth0_vlan: entered promiscuous mode [ 571.843480][T11940] veth1_vlan: entered promiscuous mode [ 571.858354][T12118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 571.915098][T11940] veth0_macvtap: entered promiscuous mode [ 571.936701][T11940] veth1_macvtap: entered promiscuous mode [ 571.988928][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.004060][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.014074][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.024938][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.037406][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.048379][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.058426][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.069138][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.079180][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.089813][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.105133][T11940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.116832][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.128012][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.138419][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.159634][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.169639][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.180649][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.196503][T12123] ip6t_srh: unknown srh match flags 4001 [ 572.202286][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.226655][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.241069][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.256342][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.274357][T11940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.309106][T11940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.318548][T11940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.328618][T11940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.337984][T11940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.476383][ T5401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.492134][ T5401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.534411][ T5401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.558306][ T5401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.604213][T12129] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 572.637088][ T29] audit: type=1326 audit(1718658235.509:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf3ee7cf29 code=0x0 [ 572.671677][T12132] loop5: detected capacity change from 0 to 16 [ 572.723936][T12132] erofs: (device loop5): mounted with root inode @ nid 36. [ 574.069883][T12149] loop1: detected capacity change from 0 to 512 [ 574.105867][T12149] EXT4-fs: journaled quota format not specified [ 574.373030][T12153] loop3: detected capacity change from 0 to 512 [ 574.453109][T12153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.503865][ T29] audit: type=1326 audit(1718658237.379:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf3ee7cf29 code=0x0 [ 574.526942][T12153] ext4 filesystem being mounted at /root/syzkaller-testdir716318039/syzkaller.lIC15I/404/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.625529][T12153] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 574.656844][T12153] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 574.696419][T12153] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 574.723703][T12164] loop5: detected capacity change from 0 to 2048 [ 574.730694][T12153] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 574.758254][T12164] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.821910][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 574.914544][T12168] loop1: detected capacity change from 0 to 256 [ 574.927691][T12155] loop2: detected capacity change from 0 to 32768 [ 574.939441][ T5350] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.958472][T12155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12155) [ 575.012473][T12155] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 575.012977][T12168] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 575.023302][T12155] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 575.044191][T12155] BTRFS info (device loop2): using free-space-tree [ 575.759901][T11321] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 576.292891][T12194] loop3: detected capacity change from 0 to 256 [ 576.347351][ T1072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.389749][T12194] exfat: Deprecated parameter 'utf8' [ 576.405650][T12194] exfat: Deprecated parameter 'utf8' [ 576.460757][T12194] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x14f16447, utbl_chksum : 0xe619d30d) [ 577.766464][T12211] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 577.864229][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 577.875666][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 577.892254][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 577.903295][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 577.916501][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 577.924114][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.120540][T12223] loop5: detected capacity change from 0 to 64 [ 578.251311][T12217] loop4: detected capacity change from 0 to 1024 [ 578.283403][T12228] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 578.314389][T12228] pim6reg0: linktype set to 768 [ 578.343395][T12217] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 578.510608][ T1072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.570179][T12214] chnl_net:caif_netlink_parms(): no params data found [ 579.380603][ T1072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.526518][ T1072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.559918][T12214] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.567205][T12214] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.574591][T12214] bridge_slave_0: entered allmulticast mode [ 579.584476][T12214] bridge_slave_0: entered promiscuous mode [ 579.603303][T12214] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.614098][T12214] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.628928][T12214] bridge_slave_1: entered allmulticast mode [ 579.638363][T12214] bridge_slave_1: entered promiscuous mode [ 579.687772][T12214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.702907][T12214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.765423][ T29] audit: type=1326 audit(1718658242.639:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x0 [ 579.787867][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.848618][T12214] team0: Port device team_slave_0 added [ 579.894440][T12214] team0: Port device team_slave_1 added [ 579.894811][T12247] loop3: detected capacity change from 0 to 256 [ 579.959809][T12247] exfat: Deprecated parameter 'utf8' [ 579.972860][T12247] exfat: Deprecated parameter 'utf8' [ 580.018796][T12247] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x14f16447, utbl_chksum : 0xe619d30d) [ 580.031663][ T5124] Bluetooth: hci0: command tx timeout [ 580.157287][T12214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.178561][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.204847][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.213097][T12214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.225011][ T1072] bridge_slave_1: left allmulticast mode [ 580.237543][ T1072] bridge_slave_1: left promiscuous mode [ 580.258267][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.277884][ T1072] bridge_slave_0: left allmulticast mode [ 580.307185][ T1072] bridge_slave_0: left promiscuous mode [ 580.318382][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.881982][T12256] Zero length message leads to an empty skb [ 580.931775][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 581.156577][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 581.171785][ T9] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=68.e0 [ 581.200793][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.211300][ T9] usb 3-1: Product: syz [ 581.226288][ T9] usb 3-1: Manufacturer: syz [ 581.230998][ T9] usb 3-1: SerialNumber: syz [ 581.248899][ T9] usb 3-1: config 0 descriptor?? [ 581.254804][ T1072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.279999][ T1072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.301782][ T1072] bond0 (unregistering): Released all slaves [ 581.327295][T12214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.334629][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.360766][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.371892][T12214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.655654][ T29] audit: type=1804 audit(1718658244.529:1347): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2592935115/syzkaller.8kCNzj/52/file0" dev="sda1" ino=1959 res=1 errno=0 [ 581.718747][ T5170] usb 3-1: USB disconnect, device number 9 [ 581.719376][T12214] hsr_slave_0: entered promiscuous mode [ 581.735708][T12214] hsr_slave_1: entered promiscuous mode [ 581.744304][T12272] loop3: detected capacity change from 0 to 64 [ 581.753350][T12214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.761194][T12214] Cannot create hsr debugfs directory [ 581.991697][ T1072] hsr_slave_0: left promiscuous mode [ 582.000872][ T1072] hsr_slave_1: left promiscuous mode [ 582.011224][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.022372][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.038438][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.046142][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.081883][ T1072] veth1_macvtap: left promiscuous mode [ 582.087704][ T1072] veth0_macvtap: left promiscuous mode [ 582.093577][ T1072] veth1_vlan: left promiscuous mode [ 582.099706][ T1072] veth0_vlan: left promiscuous mode [ 582.112035][ T5124] Bluetooth: hci0: command tx timeout [ 582.381290][T12287] loop4: detected capacity change from 0 to 256 [ 582.483930][T12287] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 582.656347][T12290] loop2: detected capacity change from 0 to 256 [ 582.697743][T12290] exfat: Deprecated parameter 'utf8' [ 582.704549][T12290] exfat: Deprecated parameter 'utf8' [ 582.739436][T12290] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x14f16447, utbl_chksum : 0xe619d30d) [ 583.760160][ T1072] team0 (unregistering): Port device team_slave_1 removed [ 583.833229][ T1072] team0 (unregistering): Port device team_slave_0 removed [ 584.160086][T12311] fscrypt (sda1, inode 1964): Mutually exclusive encryption flags (0x0c) [ 584.181793][ T5124] Bluetooth: hci0: command tx timeout [ 584.571373][T12276] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 584.580606][T12276] pim6reg0: linktype set to 768 [ 585.215839][T12327] loop2: detected capacity change from 0 to 256 [ 585.299994][T12327] exfat: Deprecated parameter 'utf8' [ 585.332052][T12327] exfat: Deprecated parameter 'utf8' [ 585.430166][T12327] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x14f16447, utbl_chksum : 0xe619d30d) [ 585.684195][T12214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 585.709446][T12214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 585.740579][T12214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 585.753026][T12214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 585.949700][T12214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.999916][T12214] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.039946][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.047196][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.070609][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.077850][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.315791][ T5124] Bluetooth: hci0: command tx timeout [ 587.185821][T12214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.244737][T12214] veth0_vlan: entered promiscuous mode [ 587.265269][T12214] veth1_vlan: entered promiscuous mode [ 587.307699][T12214] veth0_macvtap: entered promiscuous mode [ 587.319504][T12214] veth1_macvtap: entered promiscuous mode [ 587.338980][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.349593][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.361362][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.372152][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.382103][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.399471][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.409485][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.420297][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.431027][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.441938][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.479421][T12214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.500476][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.513624][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.523696][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.534380][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.544609][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.555856][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.567894][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.578540][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.588807][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.599341][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.611317][T12214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.642157][T12353] loop5: detected capacity change from 0 to 2048 [ 587.653372][T12214] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.662364][T12214] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.673338][T12214] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.687669][T12353] NILFS (loop5): invalid segment: Sequence number mismatch [ 587.689149][T12214] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.695219][T12353] NILFS (loop5): trying rollback from an earlier position [ 587.724246][T12353] NILFS (loop5): recovery complete [ 587.750305][T12355] fscrypt (sda1, inode 1961): Mutually exclusive encryption flags (0x0c) [ 587.767305][T12356] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 588.022346][ T5176] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 588.683456][T12360] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 588.732021][T12360] pim6reg0: linktype set to 768 [ 588.942998][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.958347][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.015567][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.036633][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.061597][ T5176] usb 3-1: Using ep0 maxpacket: 32 [ 589.083833][ T5176] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.101577][ T5176] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.119894][ T5176] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 589.129858][ T5176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.141363][ T5176] usb 3-1: config 0 descriptor?? [ 589.161557][ T5176] hub 3-1:0.0: bad descriptor, ignoring hub [ 589.169658][ T5176] hub 3-1:0.0: probe with driver hub failed with error -5 [ 589.183405][ T5176] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 589.473035][ T5219] usb 3-1: USB disconnect, device number 10 [ 591.166745][T12381] loop4: detected capacity change from 0 to 32768 [ 591.205618][T12381] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 591.342528][T12381] XFS (loop4): Ending clean mount [ 591.396050][T12407] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 591.524181][ T9961] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 592.191292][T12419] loop4: detected capacity change from 0 to 1024 [ 592.230300][T12420] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 592.353679][T12423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 592.362425][ T11] hfsplus: b-tree write err: -5, ino 4 [ 592.984880][T12440] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 593.375380][T12431] loop4: detected capacity change from 0 to 32768 [ 593.463182][T12431] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 593.490224][T12431] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 593.535472][T12435] loop2: detected capacity change from 0 to 32768 [ 593.600673][ T1025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.777903][ T29] audit: type=1326 audit(1718658256.649:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf6f87cf29 code=0x0 [ 593.782842][T12431] XFS (loop4): Ending clean mount [ 593.856972][T12439] loop5: detected capacity change from 0 to 32768 [ 593.888644][ T1025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.894238][T12431] XFS (loop4): Quotacheck needed: Please wait. [ 593.974842][T12439] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 593.985422][T12431] XFS (loop4): Quotacheck: Done. [ 594.027204][ T1025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.084137][T12439] XFS (loop5): Ending clean mount [ 594.175681][ T1025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.217275][ T9961] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 594.350334][T10407] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 594.431613][ T1025] bridge_slave_1: left allmulticast mode [ 594.452576][ T1025] bridge_slave_1: left promiscuous mode [ 594.458538][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.493817][ T1025] bridge_slave_0: left allmulticast mode [ 594.499512][ T1025] bridge_slave_0: left promiscuous mode [ 594.558042][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.777946][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 594.788525][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 594.797779][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 594.811178][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 594.822094][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 594.830042][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 595.396403][T12484] xt_TPROXY: Can be used only with -p tcp or -p udp [ 595.459926][T12480] binder: 12478:12480 ioctl c0306201 20000280 returned -14 [ 595.503184][T12489] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 595.922798][T12494] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 596.121897][T12496] nbd5: detected capacity change from 0 to 8388607 [ 596.148861][T12496] block nbd5: shutting down sockets [ 596.155565][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.177915][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.198916][ T1025] bond0 (unregistering): Released all slaves [ 596.281654][ T5172] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 596.511930][ T5172] usb 2-1: Using ep0 maxpacket: 16 [ 596.523669][ T5172] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 596.553135][ T5172] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 596.564795][ T5172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 596.575451][ T5172] usb 2-1: SerialNumber: syz [ 596.591317][ T5172] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 596.611621][ T5172] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 596.618078][ T5172] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 596.649700][ T1025] hsr_slave_0: left promiscuous mode [ 596.657975][ T1025] hsr_slave_1: left promiscuous mode [ 596.664772][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.673875][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.686484][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.694995][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.725723][ T1025] veth1_macvtap: left promiscuous mode [ 596.731645][ T1025] veth0_macvtap: left promiscuous mode [ 596.738565][ T1025] veth1_vlan: left promiscuous mode [ 596.744422][ T1025] veth0_vlan: left promiscuous mode [ 596.827404][ T5172] usb 2-1: USB disconnect, device number 17 [ 596.860713][T12507] loop5: detected capacity change from 0 to 64 [ 596.903178][ T5118] Bluetooth: hci0: command tx timeout [ 597.553950][T12509] loop4: detected capacity change from 0 to 32768 [ 597.634531][T12509] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 597.645802][T12509] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 597.731846][T12509] XFS (loop4): Ending clean mount [ 597.774305][T12509] XFS (loop4): Quotacheck needed: Please wait. [ 597.846024][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 597.885505][T12509] XFS (loop4): Quotacheck: Done. [ 597.892154][T12528] xt_TPROXY: Can be used only with -p tcp or -p udp [ 598.009923][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 598.137486][ T9961] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 598.389375][T12523] loop5: detected capacity change from 0 to 32768 [ 598.448661][T12523] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (12523) [ 598.504974][T12523] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 598.519173][T12523] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 598.531222][T12523] BTRFS info (device loop5): using free-space-tree [ 598.992024][ T5118] Bluetooth: hci0: command tx timeout [ 599.041102][T10407] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 599.046657][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 599.098214][T12552] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 599.207978][T12554] loop1: detected capacity change from 0 to 8 [ 599.284311][T12474] chnl_net:caif_netlink_parms(): no params data found [ 599.326437][T12554] SQUASHFS error: lzo decompression failed, data probably corrupt [ 599.378468][T12554] SQUASHFS error: Failed to read block 0x28d: -5 [ 599.398711][T12554] SQUASHFS error: Unable to read metadata cache entry [28b] [ 599.432362][T12554] SQUASHFS error: Unable to read inode 0x11f [ 599.536372][T12474] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.561533][T12474] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.561897][T12554] loop1: detected capacity change from 0 to 256 [ 599.568762][T12474] bridge_slave_0: entered allmulticast mode [ 599.590878][T12474] bridge_slave_0: entered promiscuous mode [ 599.600441][T12474] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.608836][T12560] nbd4: detected capacity change from 0 to 8388607 [ 599.615862][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.624471][T12560] block nbd4: shutting down sockets [ 599.630432][T12474] bridge_slave_1: entered allmulticast mode [ 599.639565][T12474] bridge_slave_1: entered promiscuous mode [ 599.765490][T12474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.804286][T12565] loop2: detected capacity change from 0 to 512 [ 599.804687][T12474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.897224][T12565] EXT4-fs (loop2): orphan cleanup on readonly fs [ 599.911593][T12565] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 599.921949][T12474] team0: Port device team_slave_0 added [ 599.934709][T12565] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 2683928664 (level 1) [ 599.961035][T12474] team0: Port device team_slave_1 added [ 599.988191][T12565] EXT4-fs (loop2): Remounting filesystem read-only [ 600.022836][T12565] EXT4-fs (loop2): 1 truncate cleaned up [ 600.043237][T12565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 600.067859][T12474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.080272][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.124600][T12474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.177013][T12474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.189401][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.216558][T12474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.006226][T12565] fuse: Bad value for 'fd' [ 601.029378][T12578] loop1: detected capacity change from 0 to 256 [ 601.032461][T12474] hsr_slave_0: entered promiscuous mode [ 601.047062][T12474] hsr_slave_1: entered promiscuous mode [ 601.055900][T12578] exfat: Deprecated parameter 'utf8' [ 601.061842][ T5118] Bluetooth: hci0: command tx timeout [ 601.066602][T12474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.083498][T12578] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 601.138064][T12474] Cannot create hsr debugfs directory [ 601.325673][T11321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.432348][T12583] xt_TPROXY: Can be used only with -p tcp or -p udp [ 601.788083][T12474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 601.803413][T12474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 601.814572][T12474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 601.826504][T12474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 602.016451][T12474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.050887][T12474] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.070682][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.077895][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.099422][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.106601][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.311049][T12598] nbd2: detected capacity change from 0 to 8388607 [ 602.317641][T12604] loop3: detected capacity change from 0 to 8 [ 602.327216][T12598] block nbd2: shutting down sockets [ 602.369353][T12604] SQUASHFS error: lzo decompression failed, data probably corrupt [ 602.377336][T12604] SQUASHFS error: Failed to read block 0x28d: -5 [ 602.389576][T12604] SQUASHFS error: Unable to read metadata cache entry [28b] [ 602.404091][T12604] SQUASHFS error: Unable to read inode 0x11f [ 602.477016][T12474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.479821][T12604] loop3: detected capacity change from 0 to 256 [ 602.600684][T12474] veth0_vlan: entered promiscuous mode [ 602.653468][T12474] veth1_vlan: entered promiscuous mode [ 602.785076][T12474] veth0_macvtap: entered promiscuous mode [ 602.843360][T12474] veth1_macvtap: entered promiscuous mode [ 602.928111][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.963922][T12617] loop3: detected capacity change from 0 to 512 [ 602.985074][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.020268][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.022064][T12617] EXT4-fs (loop3): orphan cleanup on readonly fs [ 603.065598][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.071415][T12617] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 603.075684][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.075706][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.075724][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.118715][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.130925][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.141774][ T5118] Bluetooth: hci0: command tx timeout [ 603.149018][T12617] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 2683928664 (level 1) [ 603.177886][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.198349][T12474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.202843][T12620] loop2: detected capacity change from 0 to 256 [ 603.210765][T12617] EXT4-fs (loop3): Remounting filesystem read-only [ 603.220017][T12617] EXT4-fs (loop3): 1 truncate cleaned up [ 603.231261][T12617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 603.251948][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.264203][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.281325][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.306729][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.335189][T12620] exfat: Deprecated parameter 'utf8' [ 603.340655][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.340680][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.632686][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.046805][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.056946][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.074239][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.099191][T12474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.182544][T12620] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 604.239305][T12474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.259404][T12474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.268291][T12617] fuse: Bad value for 'fd' [ 604.285022][T12474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.293833][T12474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.400292][T12608] loop5: detected capacity change from 0 to 32768 [ 604.553197][ T2469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.578810][ T2469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.620169][ T5350] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.649066][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.677077][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.697941][ T29] audit: type=1326 audit(1718658267.593:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x0 [ 604.815450][T12616] loop4: detected capacity change from 0 to 32768 [ 605.453333][T12639] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [RP.] L3 index 0 [ 605.781262][T12647] loop1: detected capacity change from 0 to 8 [ 605.836605][T12647] SQUASHFS error: lzo decompression failed, data probably corrupt [ 605.854622][T12647] SQUASHFS error: Failed to read block 0x28d: -5 [ 605.862296][T12647] SQUASHFS error: Unable to read metadata cache entry [28b] [ 605.880453][T12647] SQUASHFS error: Unable to read inode 0x11f [ 605.956810][T12647] loop1: detected capacity change from 0 to 256 [ 606.015447][T12640] loop4: detected capacity change from 0 to 32768 [ 606.061431][T12640] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (12640) [ 606.084010][T12640] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 606.098458][T12640] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 606.107585][T12640] BTRFS info (device loop4): using free-space-tree [ 606.187926][T12640] BTRFS info (device loop4): rebuilding free space tree [ 606.214450][T12640] BTRFS info (device loop4): checking UUID tree [ 606.345098][ T9961] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 606.537136][ T29] audit: type=1326 audit(1718658269.427:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6f87cf29 code=0x7ffc0000 [ 606.603910][ T29] audit: type=1326 audit(1718658269.427:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6f87cf29 code=0x7ffc0000 [ 606.645751][ T5118] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 606.673552][ T29] audit: type=1326 audit(1718658269.427:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf6f87cf29 code=0x7ffc0000 [ 606.733352][ T29] audit: type=1326 audit(1718658269.427:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6f87cf29 code=0x7ffc0000 [ 606.834523][ T29] audit: type=1326 audit(1718658269.427:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf6f87cf29 code=0x7ffc0000 [ 606.909784][ T1072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.931390][ T29] audit: type=1326 audit(1718658269.447:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6f87cf29 code=0x7ffc0000 [ 606.994684][ T29] audit: type=1326 audit(1718658269.447:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf6f87a6a7 code=0x7ffc0000 [ 607.044288][ T29] audit: type=1326 audit(1718658269.447:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf6f840379 code=0x7ffc0000 [ 607.100502][ T29] audit: type=1326 audit(1718658269.447:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf6f87a6a7 code=0x7ffc0000 [ 607.662686][T12680] loop5: detected capacity change from 0 to 32768 [ 608.563152][ T1072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.585243][T12699] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 608.844193][ T1072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.109730][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 609.126795][ T1072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.148822][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 609.161967][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 609.179914][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 609.201650][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 609.212956][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 609.231760][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 609.401820][T12690] loop1: detected capacity change from 0 to 32768 [ 609.474868][T12690] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 609.512593][T12690] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 609.642602][ T1072] bridge_slave_1: left allmulticast mode [ 609.655523][T12690] XFS (loop1): Ending clean mount [ 609.659739][ T1072] bridge_slave_1: left promiscuous mode [ 609.681087][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.697109][T12690] XFS (loop1): Quotacheck needed: Please wait. [ 609.759409][ T1072] bridge_slave_0: left allmulticast mode [ 609.778304][ T1072] bridge_slave_0: left promiscuous mode [ 609.832955][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.850370][T12690] XFS (loop1): Quotacheck: Done. [ 609.947263][T12707] infiniband „: set active [ 609.953498][T12707] infiniband „: added veth1_vlan [ 610.029910][T12707] „: rxe_create_cq: returned err = -12 [ 610.046381][T12707] infiniband „: Couldn't create ib_mad CQ [ 610.052413][T12707] infiniband „: Couldn't open port 1 [ 610.090437][ T8363] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 610.125470][T12707] RDS/IB: „: added [ 610.130184][T12707] smc: adding ib device „ with port count 1 [ 610.175007][T12707] smc: ib device „ port 1 has pnetid [ 610.684343][ T5124] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 610.699522][ T5124] Bluetooth: hci4: Injecting HCI hardware error event [ 610.726913][ T5124] Bluetooth: hci4: hardware error 0x00 [ 611.165517][T12725] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.180528][ T5172] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.241302][ T5172] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.264871][ T5172] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.305601][ T5172] rtc_cmos 00:00: Alarms can be up to one day in the future [ 611.320285][ T5118] Bluetooth: hci0: command tx timeout [ 611.335265][ T5172] rtc rtc0: __rtc_set_alarm: err=-22 [ 611.564326][T12735] loop3: detected capacity change from 0 to 2048 [ 611.613875][T12735] NILFS (loop3): invalid segment: Sequence number mismatch [ 611.621161][T12735] NILFS (loop3): trying rollback from an earlier position [ 611.638074][T12735] NILFS (loop3): recovery complete [ 611.655052][T12736] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 612.853602][T12734] loop4: detected capacity change from 0 to 32768 [ 612.868652][ T1072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.887063][ T1072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.899972][T12734] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (12734) [ 612.913645][ T5124] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 612.932620][ T1072] bond0 (unregistering): Released all slaves [ 612.933924][T12734] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 612.949299][T12734] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 612.961224][T12734] BTRFS info (device loop4): using free-space-tree [ 613.088997][T12749] loop1: detected capacity change from 0 to 2048 [ 613.097682][T12734] BTRFS info (device loop4): rebuilding free space tree [ 613.198828][T12734] BTRFS info (device loop4): checking UUID tree [ 613.205765][T12749] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 613.255721][T12761] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 613.395406][ T5124] Bluetooth: hci0: command tx timeout [ 613.447892][T12708] chnl_net:caif_netlink_parms(): no params data found [ 613.490009][ T9961] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 613.672077][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 613.924653][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 613.934827][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.938743][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.947623][T12708] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.974159][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 613.988102][T12708] bridge_slave_0: entered allmulticast mode [ 614.014013][T12708] bridge_slave_0: entered promiscuous mode [ 614.016238][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 614.048081][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.063608][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.082464][T12708] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.097223][T12708] bridge_slave_1: entered allmulticast mode [ 614.114245][ T8] usb 6-1: config 0 descriptor?? [ 614.128935][ T8] hub 6-1:0.0: bad descriptor, ignoring hub [ 614.131027][T12708] bridge_slave_1: entered promiscuous mode [ 614.135104][ T8] hub 6-1:0.0: probe with driver hub failed with error -5 [ 614.179199][ T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 614.264461][T12708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.292321][T12708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.386045][T12708] team0: Port device team_slave_0 added [ 614.395710][T12708] team0: Port device team_slave_1 added [ 614.473950][ T9] usb 6-1: USB disconnect, device number 7 [ 614.522219][T12708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.541628][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.721898][T12708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.762250][T12708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.778288][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.887318][ T5219] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 614.887324][T12708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.124581][ T5219] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 615.166745][ T5219] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 615.182507][T12784] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 615.190430][T12708] hsr_slave_0: entered promiscuous mode [ 615.191855][ T5219] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 615.212174][T12708] hsr_slave_1: entered promiscuous mode [ 615.222560][T12708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.236166][T12708] Cannot create hsr debugfs directory [ 615.243148][ T5219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.287214][T12780] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 615.466913][ T5124] Bluetooth: hci0: command tx timeout [ 615.759602][T12788] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 615.825215][T12788] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 615.881646][T12788] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 616.067204][T12781] loop3: detected capacity change from 0 to 32768 [ 616.380324][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 616.380347][ T29] audit: type=1326 audit(1718658279.344:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d387cf29 code=0x0 [ 616.973087][T12708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 617.006950][T12708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 617.031754][T12708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 617.070188][T12708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 617.524106][ T5124] Bluetooth: hci0: command tx timeout [ 617.578507][T12708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.589097][ T5219] usb 5-1: USB disconnect, device number 13 [ 617.721617][T12708] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.744324][T12793] loop1: detected capacity change from 0 to 32768 [ 617.761703][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.768933][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.801831][T12801] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 617.843413][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.850680][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.881225][T12793] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 617.908663][T12793] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 618.125731][T12793] XFS (loop1): Ending clean mount [ 618.173410][T12793] XFS (loop1): Quotacheck needed: Please wait. [ 618.389402][T12793] XFS (loop1): Quotacheck: Done. [ 618.538610][ T1072] hsr_slave_0: left promiscuous mode [ 618.567945][ T1072] hsr_slave_1: left promiscuous mode [ 618.596964][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.608555][ T8363] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 618.615057][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.632676][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.646899][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.769488][ T1072] veth1_macvtap: left promiscuous mode [ 618.775326][ T1072] veth0_macvtap: left promiscuous mode [ 618.786418][ T1072] veth1_vlan: left promiscuous mode [ 618.791767][ T1072] veth0_vlan: left promiscuous mode [ 619.020981][T12811] loop4: detected capacity change from 0 to 32768 [ 619.064289][T12811] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (12811) [ 619.093292][T12811] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 619.111239][T12811] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 619.123847][T12811] BTRFS info (device loop4): using free-space-tree [ 619.208682][T12831] loop5: detected capacity change from 0 to 2048 [ 619.265897][T12831] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 619.305786][T12811] BTRFS info (device loop4): rebuilding free space tree [ 619.375177][T12811] BTRFS info (device loop4): checking UUID tree [ 619.381644][T12847] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 619.653032][ T9961] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 620.413810][ T1072] team0 (unregistering): Port device team_slave_1 removed [ 620.487063][ T1072] team0 (unregistering): Port device team_slave_0 removed [ 620.693253][T12857] loop5: detected capacity change from 0 to 32768 [ 620.838101][ T29] audit: type=1326 audit(1718658283.831:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12855 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x0 [ 621.385026][T12708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.507741][T12708] veth0_vlan: entered promiscuous mode [ 621.528001][T12708] veth1_vlan: entered promiscuous mode [ 621.607028][T12708] veth0_macvtap: entered promiscuous mode [ 621.624152][T12708] veth1_macvtap: entered promiscuous mode [ 621.699757][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.745612][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.797635][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.835417][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.857283][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.898804][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.932327][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.965419][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.993176][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.028668][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.044753][T12708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.236247][T12873] rtc_cmos 00:00: Alarms can be up to one day in the future [ 622.730822][T12863] rtc_cmos 00:00: Alarms can be up to one day in the future [ 622.761943][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.813597][T12870] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 622.850042][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.872186][T12876] loop4: detected capacity change from 0 to 1024 [ 622.923291][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.937125][T12870] „: rxe_newlink: already configured on veth1_vlan [ 622.981829][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.009705][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.037870][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.049705][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.051717][T12876] hfsplus: request for non-existent node 2048 in B*Tree [ 623.071367][T12876] hfsplus: request for non-existent node 2048 in B*Tree [ 623.089780][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 623.101992][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.123603][T12876] hfsplus: request for non-existent node 2048 in B*Tree [ 623.138640][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 623.150845][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.171200][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 623.178731][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 623.200095][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.213361][T12876] hfsplus: request for non-existent node 2048 in B*Tree [ 623.222131][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 623.257882][T12708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.341436][T12708] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.359283][T12708] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.372752][T12708] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.389429][T12708] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.439308][ T5176] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 623.695659][ T5176] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 623.724129][ T5176] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 623.773773][T12888] loop1: detected capacity change from 0 to 512 [ 623.785612][ T5176] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 625.735508][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.870007][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.895235][ T5176] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.914114][T12888] ext4: Unexpected value for 'nobarrier' [ 625.996679][T12886] Bluetooth: hci6: Frame reassembly failed (-84) [ 626.008957][ T5401] Bluetooth: hci6: Frame reassembly failed (-84) [ 626.021449][ T5176] usb 6-1: can't set config #27, error -71 [ 626.029051][ T5176] usb 6-1: USB disconnect, device number 8 [ 626.069727][ T2469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.080725][ T2469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.125680][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.137793][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.341167][T12895] loop3: detected capacity change from 0 to 2048 [ 626.356236][ T29] audit: type=1800 audit(1718658289.392:1381): pid=12896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 626.388231][T12895] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 626.416803][T12898] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 626.938431][T12901] loop2: detected capacity change from 0 to 32768 [ 626.948002][T12907] netlink: 'syz-executor.3': attribute type 46 has an invalid length. [ 626.967247][T12907] netlink: 'syz-executor.3': attribute type 46 has an invalid length. [ 626.993457][T12901] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12901) [ 627.023435][T12901] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 627.039907][T12901] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 627.049250][T12901] BTRFS info (device loop2): using free-space-tree [ 627.100677][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.175635][T12901] BTRFS info (device loop2): rebuilding free space tree [ 627.267619][T12901] BTRFS info (device loop2): checking UUID tree [ 627.309335][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.410934][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.467779][T11321] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 627.644229][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.949797][ T51] bridge_slave_1: left allmulticast mode [ 627.982464][ T51] bridge_slave_1: left promiscuous mode [ 627.989521][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.034447][ T5118] Bluetooth: hci6: command 0x1003 tx timeout [ 628.034522][ T5124] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 628.119123][ T51] bridge_slave_0: left allmulticast mode [ 628.125244][ T51] bridge_slave_0: left promiscuous mode [ 628.131028][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.321476][T12938] loop4: detected capacity change from 0 to 1024 [ 628.344943][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 628.358988][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 628.374749][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 628.407970][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 628.432764][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 628.451477][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 628.984107][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.006381][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.018574][ T51] bond0 (unregistering): Released all slaves [ 629.137196][T12952] loop5: detected capacity change from 0 to 64 [ 629.527283][T12956] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3072 [ 629.734276][T12960] x_tables: duplicate underflow at hook 2 [ 629.828254][ T51] hsr_slave_0: left promiscuous mode [ 629.837180][ T51] hsr_slave_1: left promiscuous mode [ 629.855966][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.864657][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.873436][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.883147][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.929227][ T51] veth1_macvtap: left promiscuous mode [ 629.946264][ T51] veth0_macvtap: left promiscuous mode [ 629.962160][ T51] veth1_vlan: left promiscuous mode [ 629.967571][ T51] veth0_vlan: left promiscuous mode [ 630.558001][ T5124] Bluetooth: hci0: command tx timeout [ 630.629816][T12964] loop1: detected capacity change from 0 to 32768 [ 630.662103][T12964] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12964) [ 630.761978][T12964] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 630.784253][T12964] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 630.805574][T12964] BTRFS info (device loop1): using free-space-tree [ 631.009110][T12964] BTRFS info (device loop1): rebuilding free space tree [ 631.057759][T12964] BTRFS info (device loop1): checking UUID tree [ 631.296091][ T51] team0 (unregistering): Port device team_slave_1 removed [ 631.309869][ T8363] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 631.431490][ T51] team0 (unregistering): Port device team_slave_0 removed [ 631.466441][T13004] loop3: detected capacity change from 0 to 1024 [ 631.552156][T13007] loop4: detected capacity change from 0 to 1024 [ 631.685120][T13007] hfsplus: request for non-existent node 2048 in B*Tree [ 631.708560][T13007] hfsplus: request for non-existent node 2048 in B*Tree [ 631.767708][T13007] hfsplus: request for non-existent node 2048 in B*Tree [ 631.778651][T13007] hfsplus: request for non-existent node 2048 in B*Tree [ 632.576538][T12939] chnl_net:caif_netlink_parms(): no params data found [ 632.625771][ T5124] Bluetooth: hci0: command tx timeout [ 632.851875][T12939] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.880187][T12939] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.887449][T12939] bridge_slave_0: entered allmulticast mode [ 632.903241][T12939] bridge_slave_0: entered promiscuous mode [ 632.913958][T12939] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.921659][T12939] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.969485][T12939] bridge_slave_1: entered allmulticast mode [ 632.977061][T12939] bridge_slave_1: entered promiscuous mode [ 633.067383][T12939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.093488][T12939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.155345][T12939] team0: Port device team_slave_0 added [ 633.166761][T12939] team0: Port device team_slave_1 added [ 633.207634][T12939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.214657][T12939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.351493][T12939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.498501][T12939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.536878][T12939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.674804][T12939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.056906][T12939] hsr_slave_0: entered promiscuous mode [ 634.072561][T12939] hsr_slave_1: entered promiscuous mode [ 634.079317][T12939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.115345][T12939] Cannot create hsr debugfs directory [ 634.686715][ T5124] Bluetooth: hci0: command tx timeout [ 635.157960][T12939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 635.200160][T12939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 635.240080][T12939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 635.272544][T12939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 635.415048][T13062] loop3: detected capacity change from 0 to 1024 [ 635.544595][T12939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.695885][T12939] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.749534][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.756793][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.792814][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.800020][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.222636][T12939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.323004][T13063] loop2: detected capacity change from 0 to 40427 [ 636.339369][T12939] veth0_vlan: entered promiscuous mode [ 636.357073][T12939] veth1_vlan: entered promiscuous mode [ 636.363866][T13063] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 636.380238][T13063] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 636.403582][T12939] veth0_macvtap: entered promiscuous mode [ 636.423721][T12939] veth1_macvtap: entered promiscuous mode [ 636.429737][T13063] F2FS-fs (loop2): Found nat_bits in checkpoint [ 636.486328][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.506979][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.523332][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.559042][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.569986][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.582866][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.595145][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.598181][T13063] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 636.605886][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.605915][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.622670][T13063] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 636.624486][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.655267][T12939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.676292][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.688205][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.700359][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.711492][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.721609][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.735026][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.746538][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.757235][ T5124] Bluetooth: hci0: command tx timeout [ 636.763307][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.773416][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.785301][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.803567][T12939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.831969][T12939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.875792][T12939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.896663][T12939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.919281][T12939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.227198][T11321] syz-executor.2: attempt to access beyond end of device [ 637.227198][T11321] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 637.597259][T11321] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 637.657262][T11321] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 637.826875][ T5401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.834964][ T5401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.910528][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.954254][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.492866][T13113] loop3: detected capacity change from 0 to 1024 [ 639.593645][T13105] loop4: detected capacity change from 0 to 32768 [ 639.633570][T13105] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13105) [ 639.656715][T13105] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 639.675561][T13105] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 639.685147][T13105] BTRFS info (device loop4): using free-space-tree [ 639.878607][ T29] audit: type=1800 audit(1718658302.999:1382): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=258 res=0 errno=0 [ 640.074592][T13142] loop3: detected capacity change from 0 to 1024 [ 640.097895][ T9961] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 640.302365][ T2469] hfsplus: b-tree write err: -5, ino 4 [ 641.123357][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 642.004673][T13166] loop1: detected capacity change from 0 to 128 [ 642.045665][T13165] loop2: detected capacity change from 0 to 512 [ 642.132501][T13166] loop1: detected capacity change from 0 to 1024 [ 642.137305][T13171] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.4'. [ 642.174027][T13166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.331894][T13165] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 642.708673][T13186] loop3: detected capacity change from 0 to 1024 [ 642.762546][T13187] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.830733][ T12] hfsplus: b-tree write err: -5, ino 4 [ 643.098853][T13190] loop5: detected capacity change from 0 to 8192 [ 643.107959][ T5316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.191474][T13190] loop5: p2 p3 p4 [ 643.204384][T13190] loop5: p2 start 14935 is beyond EOD, truncated [ 643.251878][T13190] loop5: p3 size 196608 extends beyond EOD, truncated [ 643.276678][T13190] loop5: p4 start 4026530307 is beyond EOD, truncated [ 644.772340][T13212] loop1: detected capacity change from 0 to 2048 [ 644.790911][ T29] audit: type=1800 audit(1718658307.950:1383): pid=13215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="/" dev="fuse" ino=1 res=0 errno=0 [ 644.817660][ T5316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.823409][T13212] NILFS (loop1): invalid segment: Sequence number mismatch [ 644.837250][T13212] NILFS (loop1): trying rollback from an earlier position [ 644.857047][T13212] NILFS (loop1): recovery complete [ 644.869513][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 644.871024][T13218] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 644.895781][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 644.904741][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 644.915134][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 644.954009][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 644.964153][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 645.085321][ T5316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.209158][T13221] loop3: detected capacity change from 0 to 128 [ 645.791115][T13221] loop3: detected capacity change from 0 to 1024 [ 645.900383][ T5316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.925957][T13221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 646.004206][ T5118] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 646.147144][ T5316] bridge_slave_1: left allmulticast mode [ 646.162112][ T5316] bridge_slave_1: left promiscuous mode [ 646.168205][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.179704][ T5316] bridge_slave_0: left allmulticast mode [ 646.187921][ T5316] bridge_slave_0: left promiscuous mode [ 646.194794][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.531580][ T29] audit: type=1800 audit(1718658309.701:1384): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1946 res=0 errno=0 [ 646.599773][T13235] loop5: detected capacity change from 0 to 1024 [ 646.757273][ T12] hfsplus: b-tree write err: -5, ino 4 [ 647.708083][ T5118] Bluetooth: hci0: command tx timeout [ 648.093434][ T5316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.109904][ T5316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.129162][ T5316] bond0 (unregistering): Released all slaves [ 648.313742][T13248] loop5: detected capacity change from 0 to 8192 [ 648.378585][T13248] loop5: p2 p3 p4 [ 648.382461][T13248] loop5: p2 start 14935 is beyond EOD, truncated [ 648.398656][T13248] loop5: p3 size 196608 extends beyond EOD, truncated [ 648.409146][T13248] loop5: p4 start 4026530307 is beyond EOD, truncated [ 649.710681][ T5118] Bluetooth: hci0: command tx timeout [ 650.031893][ T5118] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 650.043070][ T5118] Bluetooth: hci3: Injecting HCI hardware error event [ 650.052930][ T5118] Bluetooth: hci3: hardware error 0x00 [ 650.126131][T13216] chnl_net:caif_netlink_parms(): no params data found [ 650.322117][ T5316] hsr_slave_0: left promiscuous mode [ 650.335825][ T5316] hsr_slave_1: left promiscuous mode [ 650.345819][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.363820][ T5316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.378070][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.406861][ T5316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.482263][ T5316] veth1_macvtap: left promiscuous mode [ 650.488312][ T5316] veth0_macvtap: left promiscuous mode [ 650.494026][ T5316] veth1_vlan: left promiscuous mode [ 650.499970][ T5316] veth0_vlan: left promiscuous mode [ 651.068444][T13283] loop1: detected capacity change from 0 to 1024 [ 651.187736][T13284] loop5: detected capacity change from 0 to 1024 [ 651.320649][ T12] hfsplus: b-tree write err: -5, ino 4 [ 651.399965][ T5316] team0 (unregistering): Port device team_slave_1 removed [ 651.459294][ T5316] team0 (unregistering): Port device team_slave_0 removed [ 651.559371][ T11] hfsplus: b-tree write err: -5, ino 4 [ 651.789365][ T5124] Bluetooth: hci0: command tx timeout [ 652.107907][ T5118] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 652.273025][T13216] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.289989][T13216] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.298286][T13216] bridge_slave_0: entered allmulticast mode [ 652.312426][T13216] bridge_slave_0: entered promiscuous mode [ 652.337085][T13216] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.349203][T13216] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.362404][T13216] bridge_slave_1: entered allmulticast mode [ 652.395305][T13216] bridge_slave_1: entered promiscuous mode [ 652.499533][T13216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.520276][T13216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.552517][T13301] loop5: detected capacity change from 0 to 2048 [ 652.681569][T13216] team0: Port device team_slave_0 added [ 652.695151][T13216] team0: Port device team_slave_1 added [ 652.794864][T13216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.808772][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.855911][T13301] NILFS (loop5): invalid segment: Sequence number mismatch [ 652.863244][T13301] NILFS (loop5): trying rollback from an earlier position [ 652.870888][T13216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.887533][T13216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.896643][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.900705][T13301] NILFS (loop5): recovery complete [ 652.937651][T13216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.090520][T13309] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 653.582412][T13305] loop3: detected capacity change from 0 to 4096 [ 653.633830][T13305] NILFS (loop3): invalid segment: Checksum error in segment payload [ 653.648731][T13305] NILFS (loop3): trying rollback from an earlier position [ 653.685051][T13305] NILFS (loop3): recovery complete [ 653.696176][T13312] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 653.848025][ T5118] Bluetooth: hci0: command tx timeout [ 655.222153][T13318] loop2: detected capacity change from 0 to 128 [ 657.381997][T13325] loop4: detected capacity change from 0 to 1024 [ 657.416417][T13216] hsr_slave_0: entered promiscuous mode [ 657.424309][T13216] hsr_slave_1: entered promiscuous mode [ 657.437452][T13216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.447115][T13216] Cannot create hsr debugfs directory [ 657.671158][ T1072] hfsplus: b-tree write err: -5, ino 4 [ 657.792598][T13329] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.931684][T13333] loop1: detected capacity change from 0 to 1024 [ 658.113254][T13216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 658.124838][T13216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 658.139956][T13216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 658.162968][T13216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 658.368305][T13216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.448702][T13216] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.475504][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.482847][ T8250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.534859][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.542173][ T8250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.995830][T13341] loop5: detected capacity change from 0 to 32768 [ 659.149118][T13341] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 659.160445][T13216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.857755][T13341] XFS (loop5): Ending clean mount [ 660.084199][T13216] veth0_vlan: entered promiscuous mode [ 660.137000][T13216] veth1_vlan: entered promiscuous mode [ 660.163047][T13373] loop2: detected capacity change from 0 to 128 [ 660.240405][T13373] FAT-fs (loop2): bogus sectors per cluster 0 [ 660.254961][T13216] veth0_macvtap: entered promiscuous mode [ 660.266764][T13373] FAT-fs (loop2): Can't find a valid FAT filesystem [ 660.291922][T13216] veth1_macvtap: entered promiscuous mode [ 660.339946][T10407] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 660.343215][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.360791][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.373610][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.386852][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.400580][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.414139][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.424119][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.434815][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.454865][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.654342][T13378] loop4: detected capacity change from 0 to 128 [ 660.977279][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.340757][T13216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.437098][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.474324][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.485810][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.497836][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.509083][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.529723][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.543082][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.557964][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.576992][T13216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.593863][T13216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.639177][T13216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.660077][T13216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.669245][T13216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.677997][T13216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.691103][T13216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.929503][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.940032][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.019470][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.035658][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.331978][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 662.423140][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 662.433724][T13395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.442254][T13395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.457535][T13395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.467762][T13395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.793279][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 663.827986][T13418] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 663.968935][T13413] loop5: detected capacity change from 0 to 32768 [ 664.098923][T13413] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 664.203685][T13413] XFS (loop5): Ending clean mount [ 664.315785][T13436] loop1: detected capacity change from 0 to 128 [ 664.353580][T13436] FAT-fs (loop1): bogus sectors per cluster 0 [ 664.365501][T13436] FAT-fs (loop1): Can't find a valid FAT filesystem [ 664.410954][T10407] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 665.127962][T13452] loop4: detected capacity change from 0 to 64 [ 665.711299][T13464] loop3: detected capacity change from 0 to 512 [ 666.206826][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.361623][T13464] ext4: Unexpected value for 'nobarrier' [ 666.437598][T13462] Bluetooth: hci0: Frame reassembly failed (-84) [ 666.451168][ T5316] Bluetooth: hci0: Frame reassembly failed (-84) [ 666.471919][T13466] kcapi: manufacturer command 0 unknown. [ 666.513297][T13467] loop2: detected capacity change from 0 to 512 [ 666.871972][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.136385][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.205144][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 667.438887][T11691] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 667.476532][T11691] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 667.495159][T11691] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 667.509452][T11691] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 667.523611][T11691] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 667.538376][T11691] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 667.545011][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.999849][ T1106] bridge_slave_1: left allmulticast mode [ 668.013194][ T1106] bridge_slave_1: left promiscuous mode [ 668.019799][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.046168][ T1106] bridge_slave_0: left allmulticast mode [ 668.053358][ T1106] bridge_slave_0: left promiscuous mode [ 668.064303][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.284661][T13472] loop5: detected capacity change from 0 to 32768 [ 668.444000][T13472] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 668.502672][T13504] loop1: detected capacity change from 0 to 512 [ 668.506284][T13472] XFS (loop5): Ending clean mount [ 668.514512][T11691] Bluetooth: hci0: command 0x1003 tx timeout [ 668.523936][ T5118] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 668.735039][T13504] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 668.756018][T13504] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 668.791734][T13504] EXT4-fs (loop1): 1 truncate cleaned up [ 668.807296][T13504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.145619][ T8363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.150102][T10407] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 669.344354][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.362153][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.381047][ T1106] bond0 (unregistering): Released all slaves [ 669.618177][ T5118] Bluetooth: hci6: command tx timeout [ 669.850499][T13521] kcapi: manufacturer command 0 unknown. [ 669.899088][T13484] chnl_net:caif_netlink_parms(): no params data found [ 670.227121][ T1106] hsr_slave_0: left promiscuous mode [ 670.243901][ T1106] hsr_slave_1: left promiscuous mode [ 670.251662][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.259190][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.273478][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.295201][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.326294][ T1106] veth1_macvtap: left promiscuous mode [ 670.334376][ T1106] veth0_macvtap: left promiscuous mode [ 670.340122][ T1106] veth1_vlan: left promiscuous mode [ 670.346520][ T1106] veth0_vlan: left promiscuous mode [ 671.081004][T13540] loop4: detected capacity change from 0 to 64 [ 671.123107][T13540] hfs: get root inode failed [ 671.695763][ T5118] Bluetooth: hci6: command tx timeout [ 671.861012][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 671.979576][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 672.148436][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.799418][T13561] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.5'. [ 673.027189][T13562] loop4: detected capacity change from 0 to 8192 [ 673.432912][T13484] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.457600][T13484] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.487384][T13484] bridge_slave_0: entered allmulticast mode [ 673.516121][T13484] bridge_slave_0: entered promiscuous mode [ 673.536325][T13484] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.554208][T13484] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.605382][T13484] bridge_slave_1: entered allmulticast mode [ 673.627806][T13484] bridge_slave_1: entered promiscuous mode [ 673.787367][ T5118] Bluetooth: hci6: command tx timeout [ 673.802153][T13484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.856569][T13566] loop3: detected capacity change from 0 to 32768 [ 673.863976][T13484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.011977][T13566] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 674.057645][T13484] team0: Port device team_slave_0 added [ 674.069001][T13484] team0: Port device team_slave_1 added [ 674.128304][T13484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.135899][T13484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.161812][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.171522][T13484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.188109][T13484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.195265][T13484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.221372][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.227825][T13484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.237688][T13566] XFS (loop3): Ending clean mount [ 674.312070][T13589] loop2: detected capacity change from 0 to 64 [ 674.367886][T13484] hsr_slave_0: entered promiscuous mode [ 674.386414][T13484] hsr_slave_1: entered promiscuous mode [ 674.396950][T13589] hfs: get root inode failed [ 674.398686][T13484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.413499][ T5350] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 674.415764][T13484] Cannot create hsr debugfs directory [ 674.668552][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.257693][T13595] loop5: detected capacity change from 0 to 32768 [ 675.290618][T13595] btrfs: Bad value for 'max_inline' [ 675.510549][ T29] audit: type=1326 audit(1718658338.789:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x7ffc0000 [ 675.537001][ T29] audit: type=1326 audit(1718658338.789:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x7ffc0000 [ 675.548261][T13595] loop5: detected capacity change from 0 to 4096 [ 675.562156][ T29] audit: type=1326 audit(1718658338.789:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x7ffc0000 [ 675.611790][T13607] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 675.623338][T13595] nilfs2: Unknown parameter 'ÿ' [ 675.643216][ T29] audit: type=1326 audit(1718658338.789:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x7ffc0000 [ 675.666234][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.702007][T13484] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 675.712756][ T29] audit: type=1326 audit(1718658338.789:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x7ffc0000 [ 675.736490][ T29] audit: type=1326 audit(1718658338.789:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fccbd27cf29 code=0x7ffc0000 [ 675.762950][ T29] audit: type=1326 audit(1718658338.789:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x7ffc0000 [ 675.789318][ T29] audit: type=1326 audit(1718658338.789:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x7ffc0000 [ 675.814628][ T29] audit: type=1326 audit(1718658338.789:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccbd27cf29 code=0x7ffc0000 [ 675.827517][T13484] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 675.841818][ T5118] Bluetooth: hci6: command tx timeout [ 675.913532][ T29] audit: type=1326 audit(1718658338.789:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbd27cf29 code=0x7ffc0000 [ 675.978262][T13484] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 676.039428][T13484] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 676.472847][T13484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.515672][T13484] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.541530][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.548889][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.570492][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.577821][ T5219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.654400][T13484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.909863][T13484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.011672][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 677.242528][T13484] veth0_vlan: entered promiscuous mode [ 677.306829][T13484] veth1_vlan: entered promiscuous mode [ 677.386185][T13484] veth0_macvtap: entered promiscuous mode [ 677.416723][T13484] veth1_macvtap: entered promiscuous mode [ 677.506141][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.522107][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.537610][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.551403][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.584081][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.601065][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.613175][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.624531][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.639588][T13484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.666839][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.678707][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.691628][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.710609][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.735946][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.751914][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.763734][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.776167][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.840342][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.850813][T13484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.866359][T13484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.875815][T13484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.887303][T13484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.896238][T13484] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.129168][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.152265][T11691] Bluetooth: hci6: command 0x0405 tx timeout [ 678.174225][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.218324][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.300980][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.504297][ C0] vkms_vblank_simulate: vblank timer overrun [ 678.797125][T13665] loop1: detected capacity change from 0 to 32768 [ 678.864540][T13665] btrfs: Bad value for 'max_inline' [ 679.848731][T13665] loop1: detected capacity change from 0 to 4096 [ 679.906319][T13665] nilfs2: Unknown parameter 'ÿ' [ 786.933662][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 786.940662][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13717/1:b..l P13693/1:b..l P13468/1:b..l [ 786.952132][ C0] rcu: (detected by 0, t=10503 jiffies, g=86809, q=456 ncpus=2) [ 786.959870][ C0] task:syz-executor.0 state:R running task stack:24672 pid:13468 tgid:13468 ppid:5084 flags:0x00004002 [ 786.973005][ C0] Call Trace: [ 786.976309][ C0] [ 786.979265][ C0] __schedule+0x17e8/0x4a20 [ 786.983823][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.989499][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.995172][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.000851][ C0] ? __pfx___schedule+0x10/0x10 [ 787.005740][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.011409][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 787.017485][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 787.022810][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 787.027963][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 787.033737][ C0] irqentry_exit+0x5e/0x90 [ 787.038181][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 787.044197][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 787.050427][ C0] Code: 00 d5 03 00 65 8b 15 f0 ad 6d 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 787.070058][ C0] RSP: 0018:ffffc9000adff6e0 EFLAGS: 00000246 [ 787.076152][ C0] RAX: ffffffff81410e72 RBX: 0000000080000000 RCX: ffff88807e8f9e00 [ 787.084146][ C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 787.092138][ C0] RBP: ffffc9000adff7c0 R08: ffffffff81410e65 R09: ffffffff8141095f [ 787.100134][ C0] R10: 0000000000000003 R11: ffff88807e8f9e00 R12: ffffc9000adffc60 [ 787.108129][ C0] R13: dffffc0000000000 R14: ffffc9000adf8000 R15: ffffc9000adffc68 [ 787.116131][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 787.121462][ C0] ? unwind_next_frame+0x1e75/0x2a00 [ 787.126781][ C0] ? unwind_next_frame+0x1e82/0x2a00 [ 787.132116][ C0] unwind_next_frame+0x1e82/0x2a00 [ 787.137277][ C0] ? __fput+0x408/0x8b0 [ 787.141468][ C0] ? __fput+0x408/0x8b0 [ 787.145915][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 787.152102][ C0] arch_stack_walk+0x151/0x1b0 [ 787.156918][ C0] ? task_work_run+0x251/0x310 [ 787.161730][ C0] stack_trace_save+0x118/0x1d0 [ 787.166615][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 787.172020][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.177700][ C0] save_stack+0xfb/0x1f0 [ 787.181984][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.187652][ C0] ? __pfx_save_stack+0x10/0x10 [ 787.192563][ C0] ? free_unref_page+0xd22/0xea0 [ 787.197538][ C0] ? vfree+0x186/0x2e0 [ 787.201627][ C0] ? kcov_close+0x2b/0x50 [ 787.205984][ C0] ? __fput+0x408/0x8b0 [ 787.210183][ C0] ? page_ext_get+0x20/0x2a0 [ 787.215071][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.220741][ C0] __reset_page_owner+0x75/0x3f0 [ 787.225719][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.231470][ C0] ? mod_memcg_page_state+0x4ae/0x770 [ 787.236880][ C0] free_unref_page+0xd22/0xea0 [ 787.241687][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.247359][ C0] vfree+0x186/0x2e0 [ 787.251285][ C0] kcov_close+0x2b/0x50 [ 787.255475][ C0] ? __pfx_kcov_close+0x10/0x10 [ 787.260356][ C0] __fput+0x408/0x8b0 [ 787.264393][ C0] task_work_run+0x251/0x310 [ 787.269036][ C0] ? __pfx_task_work_run+0x10/0x10 [ 787.274201][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.279877][ C0] ? kmem_cache_free+0x145/0x350 [ 787.284855][ C0] do_exit+0xa27/0x27e0 [ 787.289240][ C0] ? __pfx_do_exit+0x10/0x10 [ 787.294051][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.299725][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 787.305749][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 787.312121][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 787.317360][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.323031][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 787.328265][ C0] do_group_exit+0x207/0x2c0 [ 787.332915][ C0] __x64_sys_exit_group+0x3f/0x40 [ 787.337983][ C0] do_syscall_64+0xf3/0x230 [ 787.342537][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.348549][ C0] RIP: 0033:0x7fca0047cf29 [ 787.352997][ C0] RSP: 002b:00007ffdcb817ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 787.361469][ C0] RAX: ffffffffffffffda RBX: 00007fca005b49d8 RCX: 00007fca0047cf29 [ 787.369478][ C0] RDX: 00007fca0047bc30 RSI: 000000000000000c RDI: 0000000000000043 [ 787.377477][ C0] RBP: 00007ffdcb817cb0 R08: 00007ffdcb815946 R09: 00000000ffffffff [ 787.385472][ C0] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000043 [ 787.393465][ C0] R13: 00007fca005b3f40 R14: 0000000000000003 R15: 000000000000000c [ 787.401485][ C0] [ 787.404524][ C0] task:kworker/u8:12 state:R running task stack:24864 pid:13693 tgid:13693 ppid:2 flags:0x00004000 [ 787.416355][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 787.424207][ C0] Call Trace: [ 787.427504][ C0] [ 787.430464][ C0] __schedule+0x17e8/0x4a20 [ 787.435024][ C0] ? __pfx_validate_chain+0x10/0x10 [ 787.440262][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.445949][ C0] ? __pfx___schedule+0x10/0x10 [ 787.450840][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.456508][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 787.462531][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 787.467859][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 787.473010][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 787.478770][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.484511][ C0] irqentry_exit+0x5e/0x90 [ 787.488956][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 787.494973][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 787.500293][ C0] Code: 2b 00 74 08 4c 89 f7 e8 2a 84 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 787.520025][ C0] RSP: 0018:ffffc90004f17860 EFLAGS: 00000206 [ 787.526135][ C0] RAX: 0000000000000001 RBX: 1ffff920009e2f18 RCX: 0000000000000001 [ 787.534170][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1ff840 [ 787.542211][ C0] RBP: ffffc90004f179a8 R08: ffffffff92fab587 R09: 1ffffffff25f56b0 [ 787.550306][ C0] R10: dffffc0000000000 R11: fffffbfff25f56b1 R12: 1ffff920009e2f14 [ 787.558430][ C0] R13: dffffc0000000000 R14: ffffc90004f178c0 R15: 0000000000000246 [ 787.566551][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.572238][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 787.577409][ C0] ? batadv_iv_ogm_schedule+0x41e/0x1090 [ 787.583076][ C0] ? batadv_primary_if_get_selected+0x7a/0x510 [ 787.589267][ C0] ? __pfx_lock_release+0x10/0x10 [ 787.594326][ C0] ? batadv_primary_if_get_selected+0x3f4/0x510 [ 787.600615][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.606298][ C0] batadv_iv_ogm_schedule+0x43f/0x1090 [ 787.611789][ C0] ? batadv_iv_ogm_schedule+0x41e/0x1090 [ 787.617466][ C0] ? batadv_iv_ogm_schedule+0x41e/0x1090 [ 787.623139][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 787.629071][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.634742][ C0] ? batadv_send_skb_packet+0x41b/0x670 [ 787.640340][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 [ 787.647417][ C0] ? process_scheduled_works+0x945/0x1830 [ 787.653165][ C0] process_scheduled_works+0xa2e/0x1830 [ 787.658774][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 787.664795][ C0] ? assign_work+0x364/0x3d0 [ 787.669419][ C0] worker_thread+0x86d/0xd70 [ 787.674059][ C0] ? __kthread_parkme+0x169/0x1d0 [ 787.679118][ C0] ? __pfx_worker_thread+0x10/0x10 [ 787.684259][ C0] kthread+0x2f2/0x390 [ 787.688370][ C0] ? __pfx_worker_thread+0x10/0x10 [ 787.693511][ C0] ? __pfx_kthread+0x10/0x10 [ 787.698140][ C0] ret_from_fork+0x4d/0x80 [ 787.702593][ C0] ? __pfx_kthread+0x10/0x10 [ 787.707218][ C0] ret_from_fork_asm+0x1a/0x30 [ 787.712043][ C0] [ 787.715079][ C0] task:syz-executor.5 state:R running task stack:22656 pid:13717 tgid:13714 ppid:10407 flags:0x00004006 [ 787.726851][ C0] Call Trace: [ 787.730148][ C0] [ 787.733103][ C0] __schedule+0x17e8/0x4a20 [ 787.737646][ C0] ? mark_lock+0x9a/0x350 [ 787.742019][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 787.747089][ C0] ? __pfx___schedule+0x10/0x10 [ 787.751983][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.757666][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.763361][ C0] ? preempt_schedule+0xe1/0xf0 [ 787.768252][ C0] preempt_schedule_common+0x84/0xd0 [ 787.773582][ C0] preempt_schedule+0xe1/0xf0 [ 787.778303][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 787.783713][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.789388][ C0] preempt_schedule_thunk+0x1a/0x30 [ 787.794627][ C0] _raw_spin_unlock+0x3e/0x50 [ 787.799339][ C0] unmap_page_range+0x40f7/0x4bf0 [ 787.804443][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 787.809860][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.815536][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 787.820594][ C0] ? unmap_vmas+0x1f1/0x5f0 [ 787.825134][ C0] ? __pfx_lock_release+0x10/0x10 [ 787.830198][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.835865][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 787.840931][ C0] unmap_vmas+0x3cc/0x5f0 [ 787.845310][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 787.850218][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.855884][ C0] ? tlb_gather_mmu+0x24e/0x310 [ 787.860775][ C0] unmap_region+0x1ec/0x350 [ 787.865324][ C0] ? __pfx_unmap_region+0x10/0x10 [ 787.870393][ C0] ? __pfx_mas_prev_range+0x10/0x10 [ 787.875623][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.881397][ C0] ? __mas_set_range+0x133/0x3c0 [ 787.886416][ C0] do_vmi_align_munmap+0x1122/0x18c0 [ 787.891754][ C0] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 787.897429][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.903105][ C0] ? mtree_range_walk+0x6fd/0x8e0 [ 787.908176][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.913849][ C0] ? mas_find+0x8c0/0xbb0 [ 787.918205][ C0] ? __pfx___down_write_common+0x10/0x10 [ 787.923881][ C0] do_vmi_munmap+0x261/0x2f0 [ 787.928600][ C0] __vm_munmap+0x1fc/0x400 [ 787.933048][ C0] ? __pfx___vm_munmap+0x10/0x10 [ 787.938024][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 787.944389][ C0] ? do_syscall_64+0x100/0x230 [ 787.949191][ C0] __x64_sys_munmap+0x68/0x80 [ 787.953903][ C0] do_syscall_64+0xf3/0x230 [ 787.958446][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.964372][ C0] RIP: 0033:0x7fccbd27cfb7 [ 787.968810][ C0] RSP: 002b:00007fccbdf45ea8 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 787.977253][ C0] RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007fccbd27cfb7 [ 787.985253][ C0] RDX: 0000000000000000 RSI: 0000000008400000 RDI: 00007fccb3000000 [ 787.993251][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000005598 [ 788.001255][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000003 [ 788.009254][ C0] R13: 00007fccbdf45f80 R14: 00007fccbdf45f40 R15: 00007fccb3000000 [ 788.017277][ C0] [ 788.020324][ C0] rcu: rcu_preempt kthread starved for 10607 jiffies! g86809 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 788.031543][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 788.041529][ C0] rcu: RCU grace-period kthread stack dump: [ 788.047431][ C0] task:rcu_preempt state:R running task stack:25328 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 788.059379][ C0] Call Trace: [ 788.062677][ C0] [ 788.065634][ C0] __schedule+0x17e8/0x4a20 [ 788.070202][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.075882][ C0] ? __pfx___schedule+0x10/0x10 [ 788.080777][ C0] ? __pfx_lock_release+0x10/0x10 [ 788.085828][ C0] ? __asan_memset+0x23/0x50 [ 788.090455][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 788.096300][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 788.102664][ C0] ? schedule+0x90/0x320 [ 788.106991][ C0] schedule+0x14b/0x320 [ 788.111196][ C0] schedule_timeout+0x1be/0x310 [ 788.116089][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 788.121498][ C0] ? __pfx_process_timeout+0x10/0x10 [ 788.126822][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.132503][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 788.138085][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 788.142971][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 788.147946][ C0] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 788.154481][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 788.159791][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 788.165730][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.171404][ C0] ? finish_swait+0xd4/0x1e0 [ 788.176029][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 788.180653][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 788.185875][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 788.191812][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.197484][ C0] ? __kthread_parkme+0x169/0x1d0 [ 788.202547][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 788.207775][ C0] kthread+0x2f2/0x390 [ 788.211876][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 788.217154][ C0] ? __pfx_kthread+0x10/0x10 [ 788.221777][ C0] ret_from_fork+0x4d/0x80 [ 788.226229][ C0] ? __pfx_kthread+0x10/0x10 [ 788.230857][ C0] ret_from_fork_asm+0x1a/0x30 [ 788.235677][ C0] [ 788.238711][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 788.245046][ C0] Sending NMI from CPU 0 to CPUs 1: [ 788.250267][ C1] NMI backtrace for cpu 1 [ 788.250281][ C1] CPU: 1 PID: 13725 Comm: syz-executor.2 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 788.250304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 788.250319][ C1] RIP: 0010:lock_pin_lock+0x182/0x440 [ 788.250347][ C1] Code: 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 5d 02 00 00 45 31 ed 83 3d c0 e8 3a 0e 00 0f 84 fa 00 00 00 <4c> 89 7c 24 08 4d 8d bc 24 d8 0a 00 00 4d 89 fd 49 c1 ed 03 48 b8 [ 788.250366][ C1] RSP: 0018:ffffc900031ff720 EFLAGS: 00000002 [ 788.250386][ C1] RAX: 0000000000000000 RBX: 1ffff9200063fef0 RCX: dffffc0000000000 [ 788.250403][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcac860 RDI: ffffffff8c1ff840 [ 788.250421][ C1] RBP: ffffc900031ff7f0 R08: 0000000000000003 R09: fffff5200063fee8 [ 788.250437][ C1] R10: dffffc0000000000 R11: fffff5200063fee8 R12: ffff888026270000 [ 788.250455][ C1] R13: 0000000000000000 R14: ffffc900031ff780 R15: 1ffff9200063fee8 [ 788.250474][ C1] FS: 00007fcf705156c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 788.250494][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 788.250511][ C1] CR2: 0000001b30b23000 CR3: 0000000063c30000 CR4: 0000000000350ef0 [ 788.250529][ C1] Call Trace: [ 788.250538][ C1] [ 788.250551][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 788.250585][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 788.250612][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 788.250657][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 788.250685][ C1] ? nmi_handle+0x151/0x5a0 [ 788.250720][ C1] ? nmi_handle+0x2a/0x5a0 [ 788.250757][ C1] ? lock_pin_lock+0x182/0x440 [ 788.250780][ C1] ? default_do_nmi+0x63/0x160 [ 788.250815][ C1] ? exc_nmi+0x123/0x1f0 [ 788.250847][ C1] ? end_repeat_nmi+0xf/0x53 [ 788.250885][ C1] ? lock_pin_lock+0x182/0x440 [ 788.250911][ C1] ? lock_pin_lock+0x182/0x440 [ 788.250937][ C1] ? lock_pin_lock+0x182/0x440 [ 788.250962][ C1] [ 788.250970][ C1] [ 788.250981][ C1] ? __pfx_lock_pin_lock+0x10/0x10 [ 788.251004][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.251041][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.251073][ C1] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 788.251113][ C1] __schedule+0x3ca/0x4a20 [ 788.251156][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.251192][ C1] ? __pfx___schedule+0x10/0x10 [ 788.251224][ C1] ? schedule+0x90/0x320 [ 788.251255][ C1] ? __pfx_lock_release+0x10/0x10 [ 788.251283][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.251315][ C1] ? plist_check_list+0x2cb/0x300 [ 788.251348][ C1] ? futex_wait_queue+0x27/0x1d0 [ 788.251375][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.251409][ C1] ? schedule+0x90/0x320 [ 788.251439][ C1] schedule+0x14b/0x320 [ 788.251471][ C1] ? futex_wait_queue+0x27/0x1d0 [ 788.251498][ C1] futex_wait_queue+0x14e/0x1d0 [ 788.251529][ C1] __futex_wait+0x17f/0x320 [ 788.251559][ C1] ? mark_lock+0x9a/0x350 [ 788.251589][ C1] ? __pfx___futex_wait+0x10/0x10 [ 788.251619][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 788.251656][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.251691][ C1] futex_wait+0x101/0x360 [ 788.251720][ C1] ? __pfx_futex_wait+0x10/0x10 [ 788.251752][ C1] ? __pfx_lock_release+0x10/0x10 [ 788.251783][ C1] do_futex+0x33b/0x560 [ 788.251809][ C1] ? __pfx_do_futex+0x10/0x10 [ 788.251830][ C1] ? restore_altstack+0x10c/0x150 [ 788.251859][ C1] ? __pfx_restore_altstack+0x10/0x10 [ 788.251893][ C1] __se_sys_futex+0x3f9/0x480 [ 788.251921][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 788.251943][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 788.251970][ C1] ? do_syscall_64+0x100/0x230 [ 788.251999][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.252030][ C1] ? __x64_sys_futex+0x21/0xf0 [ 788.252054][ C1] do_syscall_64+0xf3/0x230 [ 788.252082][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 788.252116][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.252145][ C1] RIP: 0033:0x7fcf6f87cf29 [ 788.252163][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 788.252181][ C1] RSP: 002b:00007fcf70515178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 788.252204][ C1] RAX: ffffffffffffffda RBX: 00007fcf6f9b3f88 RCX: 00007fcf6f87cf29 [ 788.252221][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf6f9b3f88 [ 788.252236][ C1] RBP: 00007fcf6f9b3f80 R08: 00007fcf705156c0 R09: 00007fcf705156c0 [ 788.252253][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf6f9b3f8c [ 788.252268][ C1] R13: 000000000000000b R14: 00007ffe8fc9a630 R15: 00007ffe8fc9a718 [ 788.252296][ C1] [ 788.320037][ T5118] Bluetooth: hci1: command 0x0406 tx timeout