last executing test programs: 38.425700678s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ff03076808268cb89e14f089061be0ffff00fe4000632f77fbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.321607605s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x32}, 0x0, @in=@broadcast}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 38.115910408s ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) 37.105742408s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c506cc7c3bf6ba0b6ce"], 0x0}, 0x90) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) 36.797991377s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x10}]}}]}, 0x3c}}, 0x0) 35.703828261s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 35.514786781s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 35.495597054s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x30}}, 0x0) 35.419646726s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 34.598809407s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x10}]}}]}, 0x3c}}, 0x0) 33.50948893s ago: executing program 2: r0 = socket$inet(0x2, 0x16, 0x7fe00) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x3b, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e21, 0x4, 'wlc\x00', 0x20, 0x3f, 0x2}, 0x2c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = gettid() fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x10000, 0x10000, r2}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12, 0x3, @tid=r2}, &(0x7f0000000100)) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x101) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000003c0)={{r3}, r5, 0xa, @inherit={0x50, &(0x7f0000000340)={0x0, 0x1, 0x9, 0x1, {0x4, 0x9, 0x0, 0x7fff, 0xa000000000000000}, [0x6]}}, @name="f4acc75eeb9051bf8691bcb97fe590191d6a88e30dc577e3c5ca33eb3814f1402df2b2e66ad95f71c0182a117368d54dff178830d896b29304aa1ef8a79cb9806f190822e8e2d352b19a0b5fdbc4e7688e01e94ff2005c46b1e7ebce116977c0d4bf41efbd8d6bda388683e90a80d70e57f5699068765260407670e18ec17027da323933214ef0e39380185e465abee3a4349f7d6b39837476a1402e8e753c9d253ba25e4630c9b4c1a88d4cf657acd27a709245df25015be00fc4e27c0f86041ac9b1890dda79386beb7e110b93a625c705eb18d9c11b5e48afacfe4ff8553fda723e3eec33ea33b3d53601b635c0924f107555a6301968f913a2954d85b9fdd09875dac78ba8c7d1a6e8e2cc079ae8fbe24d07e30fa30c7e7821d376d6db34306daf1b743b1284386603081b96eca511ce7a7084392b8a3a1447b01e880f595030b9277eda503fdd3d282427aa8cf1292455fb0fffed4d68fb287c0b68942b8eb5497c4694417412475b5707e4209a08d94dc71b9b1abdebcd33541eed2205a7374ca70216e4c714fae1833734bacd780df70779abbb0afd50b59c26672c40e5e74eda3a1bbce6bf3c5b0b18d8bba3b835cd0d9e13cf1be98b1ebf12cff856802ef63a8e702a9bf58b96baec11666216605c6f058827473865465b6b7af6176702a92719fc8e970e5617081421427cdbe38d9e06bd158ce74a58c29b80242218b95a6dcaf02d20cdd2435b1b2c14b4dbe7e7b69b0c6db9ccf0afa5127216ffac9b32f83c5820e28ed997dfd9673fa55bb9b9d3c3aebef8b1726d10225d000cebf0e32c4417ec3887fde1298d0b99477cbc41faf8bb95b9d77339bfde0c04819ef083408b61bf74df24b5a7629b82b19617995642be78063f4533946bf9254d8dbbc0b7a07a0ddbd516dea7bcf43a221d3067243db4a9e97233f3881ff0b529e78030e0ea4cfd6ca509b091610ecfbb42ce3741db96626ecdaa0a6c7490989062fa258a9a0aed07a16d74293fe9de4f4beabe5eb1e0d06b12656c247c5d3840944f947ebef66bbbc750c38cb62a5d9a4c067f15609c7005394e85a57e51bf67b77d42d4cfd072d73474964f1a47539e93abff3a93cc4c0d3092b5bf6ba1302f7d8d71f5911445d8a44a02ba39b997dd0598b30bb957b768923bd8e7d72ea61a179af8a506aee272cee8742346e2ef501c6046895d5e7fe54b2a922faf46096adff2970886a083675fbf5605c778f5ff64ebf867502f6d3dec01f72b7e3dcfb21e45320d925542b16d434e4f2a589e371c082b44f0cc0548ef1dc6fc2fcb4d8b52d758e6ff8df386269a571a33ace2de4e3c7b3fdfd79a6668cd86bbf9f5395e718b4b7ed61d0b74b629021151942aa169afc14026b5c8d9d4d4c1931662ee86879891c17495a8e565f3e8a359362ab04e8c570d297901690b7dedeaf4e26a43829be1ba311d832f41945a9d7d3af4779d858be1e79eeb5c635333a81e129ed4cd89e58daabd674198c74da1d0d104468fdafc777db85b7e3eeba66e3530d0fee0aebfcd0848efc5bfa944ed0819aa82fda538ff631c3ac9bc27ab0fa46a05070a77ce107a8b7f4db78e86ae5bc3fae452c7a93215f35a4f570e656878dd78a19a96e335c07012fc1783e0d192bde32a6cd718f6bc504df424da5370ac2b658927ff34705cdd048c45d1475308c913ca4794d150a29446cbfa5f5a3626372e81cfd27c07a19f4b798a1d75e8567ca7cf750ae28e3c4e244abae9bd6e0b76e2b85c296762bb34909eefb27c7d8751840cb6eebdce751d7e1b18597c08940e6011317e6c415a27e5a772bc0e4ef8c49dac11badcbc51938b51da4b00cf2d16ca5671c21026ebd5a68dc9d77c7391fd62eabe8be8966e7b2879a605ebc9fe091298962358bb6ee97323cf02785c9892ca1c0560c4206a784e2814444ec33ec8816200407a08cfd5f46f3d5276c557f80998b309b261dcc698afdf6d4df2508bf37871c3bc3a475accff9a5ac99e210fbb7d3a4da29d8d77d9a438f06ab7ff39d7fbc4657d1fa49ec21cdc98fe99539b7b81ea6e8992cedcc24fb7d800f69a1133f3bcde9c57f125fba68b506521ae1c36926cc839cd370edd387a8248f326262ec514a71774e37f00918d0838e8c6a9aefec0876e582ec07c7fbbb6afab49d4dcd6e30ed4bc5c69a4a4b67073b0b577edae4eadbe4b19f48d4d74f977084332220e385d38b2da5c07427bdc5d516458b73306330236dbb4af7b628b6a93d58083e982504c5c2c17618e6d8fa9450029b96024ed31823470527fa0bcec6c3f03d54db7e61af53deda88fbd6fe2ccfd323f1fe78b2161a7ba3157c371fb94d8f6ccd62198975c1f430731772c0e1dc354d283526e3b39f2a3d80aea41c8fecef20e9b2cf91babe67d3d984e7cde73d1a9bcd5a1fd64e03bdf677e4388a8a20458a386f9b97e031d4e297ade3d865bba95f585ba6511b24a4b7553b5f0b9ddff27bdd12950fef93d490bf5bc5a54dbb109509a9d2d9dd3c53173256ce179e5132b33d6fef5f7ca35324dc2510309b7755c9e246bb45f7651a2359e0410a69ae8e3f8bd81cbb45feb656e186beae1ce84ea0197181aeb7501fea7c22b394a68c84611135d6e95be6b6c529e2ede09f1e4598c3ad83f1fc27aaa3279e7ea973e54603bebdf902f8ba91917c53baf0ae531ddafe70893a36c88c93f83dbbd3e10e2c789b1e1f7b10d374d48fb2e40e48c923ae08b62092f06d848bdae3763f60d27d6ec68a7aa29a92266c6a80d639e6091990e13fcf11a852334a551dd9d401c3b530bbc151b0633b5304ea5d1b94e009a0ef1568fab1b5ac9b6fe09e72b2fd7e7ae0d6749769f580c174b10ad7f8fdbedbba4f81fcbee8c7116ee43e526125315880515001a4c4272884d50be6a7bcc808fad1d448788c6a6f782049a51faa3c9a94f5b03070c509c4d49c0ee6a3255b61e756586ba98eb6ec89de99bb3dd07f4b3b0163f308fcff5029034cb642111127644d19bcbc6c47ee7ec0e55dd8a52c6c0307048acfc7b2c1f4fe9e95b9a4db5410f8a989edc488037678cbeb3b74e1753ece84441467dc8900bba5f380fa26899fb90e5e32e8dc2e6c9aa8699d3b90d152462dbaf665b1d39d62b3de0a8f737e0371156d82d5d1975e56664f9cfdd6367e7c5fa17e65873ccc463c0bf693d4f7b72f347377dadeee7871216cc4d26f667e412ef27083a9ed0e87536f549f32bb9315fd584b092fce5223651767e5ecdfc57d1f13a77d509aeaf3cc0c39ae4fdd15ea61364fa8821da0790d8670d80252415a6d6c28aa614d071614221adb538be2f09c014ba579b11a0feb1a848327c74f09eb684b4d63579be5944ef8f8f10454e4d43dd0454006827fd164549353d454c42c79396fbf7cbaa3d125e95ffae65e49b25a8234d1e61bd54f990f58230aeff90554cfdc7adef4fd2769f823c3919eb05022fb6477c705337f3aaa1d7e879ad59fe7aa299f91485f7888f8bb713994ffca2fb72e10650b3be15d51efc5772cc16a18564d677303b21166fdf01ba134eef599d836f22b24f9f20ffcf4b05d82d53eaf945b4fb36e3b652fa59e060d6f2471c1e2de0825b7f20d82d0370c91822d90aff2ed3f8c28e2f99efd60ff8db1053c20cbf9b09af008cd900e0d637098d74c21997b0b8707fd8492768a78e167ba551f11c535c12da588d71f9946345267880606dc76ee7214e7e418335ed216c0f6aa41125ed23bda4805642a418165b4e688f2076dd4eb8e6689111cac5ea6290c94f593cf37ad0458e0c025ea9fec0e8a331f8bf9a6822acbe2ce5aba1a614854bee386b904ad8ea8654a677efe92f2b3592ffab4a0ca51e9b15bbb34d2d4b4825c43f2081e523dad512e25178430998a89e779e0055399d19af22d43e67fc64b57ecde50ddfbdfad5cdbdf654a6fc93309f1a4cff2e6dafd72fa138e5016912371986079ac5e06a4f25b466f58539cef6837a4b1a5987bc0080243a51012a78b2375c4848de29f22969cd3a77dfa10a6aa9643367cd12c14b423e2f51aafcd5ab40c785983f8296a5974d5e0e73296acd592cba244588114ed665254e95a5fcfd30f269ac901d72c4fc9f503245f25d49e1791ad39c5f7e681a3b3f7676bd6fb263184151e4de914d751136efdb91395254f56e0d65db12663bc13b1dd80880fc5d8894d03b67d354065f611f9145cb0affc46ee54fa41dd915e3b7bd3d3772093ae7ff14710abb63e54af9f89a7012dcbbc036ec2b2335386b1290b65ddf2f41ccec9500beaa332d0f3253833df852b1b2467ad55db2339a580af60f40abffc3e7e797bc5365605a78068ab2935a678dd9b3801c1fbc69f9daddc7004581dbc96864809ccd179c921f7d7cad1e18ccfd170ed47984003f61086a874ec6cffba7ee1886e5b76d33c01b8e44087efde7cef1f4c3bc7cf5d491ff77ae3501ba4589fb3aae16a365603e52472f3d706eb0fb2c04eb2c3ac0b6629b0b982c4298b56a097c83cad328397f48f0724804ea7f894914d0b1d0bd28b8b51da04c6a80e22b6fa85281e7be68845fd02581435188e06a24f77bf28ae514d83c4d838ba1af6f1b25b191a3f325741cbafbcd188ba00229b1c44dcd58724d75b010e35b2a3a6235f8b3b1bd70b1423bc9bb8f76458260398b87fd226a696012bad3f997c34340e91ed7c5ae47388740cff9e03f6be191c29331a461710176162c54b7fddc7f2bccfa35663ffa917cdb2c550b0ade2a7a400765d6d66a314cb4f3bce4aa82cd4acbfc1cb3367ed60d1fffbf2e4a59ff9bc23a18b453664562615474457190350055f88f889de645fa45666d336fcfb1c9034654089e6066e1638c993068e920e758744dca552de91f30d68377cd4d035ece3ce451dd95747bbd78421c45d996bf50cfac10346662c006142c1375d54e3c572acd9709f90c3fea851eba26404fb9d3d4d18898654fe1b4286f9275e9eb91e936f84df1215b40af5c30718b873d031b6a02a82c5fa5e75eab9feb74957d8e57a405188ccfd7ed0476e79497f742e0e9cd5cc365f5bf6fbf74da653f62cd43045704266acb214e6af88c3718b2751b78c2a7a3ae1dd5e6c10f24ee2810b83bec03e660897432fc8f6ce2b2ea391ff666d60723800a98407f0876f9dcfc337f9146d27a6569182e17160effda491de78259f66b1ab4c0bd69ec06079fd81d0fb3d514af4506df1fd70d66b3b44a98192d83e3221f3af2855edf39b74834e737f62cedd1ca958ff28ab7244947c9f4f17655229bbe1055900a0181c01a2ca887b4148b290509f86137b54a2dcebb5e4977064171fd69375e8719c28f29d63b7bbdbe000c484ec7eaed4c54b12a2a53f40e6d01cc762aa0a33121a4355c0a108717eb1cd36555175b04fef8096b57c0ec37a925edd6f45437be29f72be520d7ac04e1484e4d4a0a97ac0cf76607efd2e968b6e9a7198f3f3d0866c6a5c3b8b59ecc3c1074fb206a4a97d1f280196272ed339fb4a4d13bb76ec64bfc59f76d9a5882edd4298de96aabfb53020ebd203d1d9e680c80c19ef159fd11f64e6bbbdadf7ab4fd58dd1b2ad6e9bea404e31f04ea09e83c54a9d683bb4b2d187191dec5d9209359b98d5087a7781ac4e43a167fb23413e0244fa0a2aef149e66fa24764b72c8e0976020373b7e47f47f251502cfe80439d280f4a033dc7a5e8b9fd7f846190cb0edfd1634a"}) open$dir(&(0x7f00000013c0)='./file0\x00', 0x4400, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001400), 0x802, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001440), 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000001480)=0x4) r8 = getpgid(r2) sched_setscheduler(r8, 0x5, &(0x7f00000014c0)=0x1) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r9, 0x8004af70, &(0x7f0000001540)) write$binfmt_script(r0, &(0x7f0000001580)={'#! ', './file0', [{0x20, '/dev/vhost-vsock\x00'}, {0x20, '/dev/vhost-vsock\x00'}], 0xa, "634275a28e764be3ec5c528a490e00e0d753a22157ac76b202ebe50eadcc159c5af0edf049c5c8dbd312282edf02abb1d52baf27b6dac3259106afef14a0e16e9610f8068d468d68cfbac40048c0b8c02ee71122fa232ac3c1dda3ea86e6cb6f5fe0d395f3e22fee6adb4b2e589d049698b2e573ee2e1ac4e9a97a25d9935f6081b4c0dedc54ebc924f9af"}, 0xba) ptrace$setsig(0x4203, r8, 0x0, &(0x7f0000001640)={0x1f, 0x3, 0x80}) r10 = add_key$keyring(&(0x7f0000001740), &(0x7f0000001780)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r11 = add_key$keyring(&(0x7f00000016c0), &(0x7f0000001700)={'syz', 0x2}, 0x0, 0x0, r10) r12 = add_key$keyring(&(0x7f00000017c0), &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, r11) keyctl$link(0x8, r10, r12) socket$netlink(0x10, 0x3, 0x4) add_key$fscrypt_provisioning(&(0x7f0000001840), &(0x7f0000001880)={'syz', 0x0}, &(0x7f00000018c0)={0x99a186cc3ae9e3d4, 0x0, @d}, 0x18, r10) sched_getaffinity(r2, 0x8, &(0x7f0000001900)) 32.963176137s ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) io_setup(0x685, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 32.854577464s ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="4f00030007"], 0xd) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000100)={[{@numtail}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_mixed}, {@shortname_lower}]}, 0x0, 0x2a1, &(0x7f0000000800)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000001e40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000380), 0x12) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 32.543823254s ago: executing program 4: munmap(&(0x7f0000724000/0x3000)=nil, 0xffff8001c273d000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x10, &(0x7f0000000000), 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) epoll_create(0x400) 32.456596408s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000680)=ANY=[], 0x1f7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) clock_adjtime(0x0, &(0x7f0000000000)) 32.37624849s ago: executing program 4: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f00000000c0)={[{@compress_force}, {@space_cache_v1}, {@space_cache_v1}, {@ssd}, {@nodatasum}, {@ref_verify}, {@user_subvol_rm}, {@clear_cache}]}, 0x1, 0x5102, &(0x7f000000a2c0)="$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") r0 = semget$private(0x0, 0x0, 0x4) semop(r0, &(0x7f0000000d00)=[{0x4, 0x6, 0x1800}, {0x0, 0x4, 0x1000}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, r4, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x28}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x94, &(0x7f0000000c40)="aebf91f839ae160d7a4a5c0659ed02ecc2386461fa764ab76faae3f91a408b57ad8ec441eec347fb49ae35c5c093c79b25c46aaaa70687af37206702cce47a1e969b11fad6b11b768b707e6f46230d303f46786124e5d96d6c7e7019e8a52fd12b42b373a69cdcc1ac9c40f39342aec81a3e22f30149938af3ad4cf87e82ea4f1a2245136fd936e01fba8da67b51570418b62c75") syz_extract_tcp_res$synack(&(0x7f0000000d40), 0x1, 0x0) socket$inet6(0xa, 0x0, 0x87) r5 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x1000012, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x0, 0x552f, &(0x7f0000005780)="$eJzs3M2LG2UYAPBndrv9ti7iwVsHirALTWi2H+itaosf2FKqHjxpNklD2iSzbNJ07UnBo3jwPxEFTx79Gzx49iYeFG+CMh/B3WrBstlNt/v7QfLMvHnnmecdlsAzsySAQ2s5/eO3JM7EyYhYjIjTEXEiIpKj2yZdLUOSRpyNiIVtryQiXoptA/lxebIzefIyZ1J99NX5ybnLv+aTjx059fV3P81nxcDT4OWIGGyU2w8GZcy6ZbxbjTcnvSIOLk2qWH4wuFftZ2V80FkvMjxoTuc1i3ixW87PNu6P8nin32zlsdu7U4xvDMsTjibdaZ7igLvNzWK/3VkvYm+UFbH7sKxr62H53fZwNC7ztKt8nxTpYzyexnK8s9Up17Nxr4it4bgaL/Nm7c5WHidVrE4XrazfLupY382Vfrq92xve30onnc1RLxuml+uNV+qNK7XGZtbujDuXas1B+8qldKXbz6fVxp3m4Go3y7r9Tr2VDVbTlW6rVWs00pVrnfVec5g2GvWL9Qu1y6vV1vn0zZsfpP12upLH13vD++Nef5TeyTbT8ojVdK1+8dXV9Fwjfe/GrfTW7evXb9x6/6NrH9587cbbb1ST/lVWurJ2YW2t1rhQW2usHqL1f14V/aTrP7a7awSPlcy7AICDZ9r/n3i0/9/+tVr1/3mfv/v+/53fv/9R/w+H3d71/5u3I564//8snrD/D/3/TByo/vew9/97sH7YFf0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCh9fPSN28VG8vl/qlq/Llq6IVqP4mIhYj46z8sxtEdORerPEuPmb/0SA0/JFFkyM9xrHqdjIir1evP5/f6KgAAAMCz69tPz35Zduvl2/K8C2I/lTdtFk5/PKN8SUQsLf8yo2wL+duLM0pW/H0fia0ZZStuYB2fUbLyltuRWWX7XxZ3hOPbQlKGhX0tBwAA2Bc7O4H97UIAAADYT1/MuwDmI4npo8zps+DiP+//eSB4YsceAAAAcAAl8y4AAAAA2HNF/+/3/wAAAODZVv7+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN/s3E9u2kAUB+Bngwv9p6Kq+16lOzhGj9Bll4gD9BIcgV6hF+AMdJcjRBDhcVCIkiiKx7ZCvk8yw1jw8zPCi5mRBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC79r4rF3+X3P21z9od2XnbVZduyAQAA4E3YVZtF/WaW+h+b85+bU1+bfhERZUQ8NHYfxbuzzFGTUz3y+epeDf8i6oTjNSbN8SEifjTH9ZeufwUAAAC4XNvVep5G6+llNnRB9ClN2pSffmbKKyKiml1lSiuPed8yhdX/73H8zpRWT2BNM4WlKbdxrrRnqR/306zd9E5TpKZ8+vvZ7h0AAOjR6KzpdxQCAABAn34NXQDDKOJ2KfO0FDhJTbO89/6sBwAAALxCxdAFAAAAAJ2rx//2/wMAAIDLlvb/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEu7arPYrtbztjn7Qzt57gYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADghv15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uYlBUIgCKJgzvjfSd//sJKga9dCBDQ8qigaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bLRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzs279v3FQcAPCv7fOFFhAhoAxBCCQGWGh6LS3dEAMoYuBPQIrSawm98qPNQKsKKQsbytwFwYgQEihs/R86t1KXsnXIUCTmIvvsxGmCevyIfSSfj/T8vmc5ft/nk6J8/V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDWbL27E2fFYXYcp9W5Ow9vrBT93cf6wq2NewtFK+KkzaT/H15ufkjmu0sEAACAoyOr6/uIuJ9vLhV9OlvW/3l9TVHzf/fsOK7r+cfr/rqva/+i/frLgxe3B5odj1Pc9MLqaHhybyq9g5vldHvuiVf0yidfvnvJyi8k/WD9ha28fJ7JN7dvv9cvw5k2sgUA/okTdV8F9d9DRT/oMjEAjoxeo/Cu6/9sttucAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANqwtR5P13ESEQu9nbhw9+GNlf36Wxv3Fup29ubNjeY9i1vkEXFhdTQ82eJcpt3Va9cvLY9Gwys7wUxE7D5zMMErEXHAQ/xl8E41/UsfTXBxxH8waNLSUxXsCdLqy56WfLoIHiV/96c6/KUEAMChlFetKI3u55tLxblkLuLR97vr/9cbcUxY/z/4+Oyd5ljN+n/Q2gyn3+La5c8Xr167/ubq5eWLw4vDT986NXh7cPrcmTPnFst3JYvemAAAAPDv9KvWrP/Tub3r/8cbcUxY/3/x7eCr5liZ+n9fO4t+XWcCAABwtD3/6h+/J/ucT/r9+HJ5be3KYHzc/nxqfOwg1d16T75kpmrN+j+bayE3AAAAoHNb68mu9f/zjTgmXP9/5oeXfmreM4uIY9X6/4mVz0bn25vOVGvjf4+7niMAAADdOla15vp/Xu7/T7e3PKQR8cZr47jeUjBJ/Z+9//WPzbGa+/9PtzfFqZTOj59H2c9H9Oa7zggAAIDD7KmqFcX+b/nm0ic/H/+wb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA//8mDDiO") ioctl$FS_IOC_GETVERSION(r5, 0x41009432, &(0x7f0000000000)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x15b060}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) 32.185168501s ago: executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) 32.101972674s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) write$cgroup_int(r1, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) r3 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r3, 0x10d, 0xd1, 0x0, &(0x7f0000000040)) 31.992190382s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x54, &(0x7f0000000ec0)={[{@bh}, {@errors_continue}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota}]}, 0x1, 0x477, &(0x7f00000002c0)="$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") write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 31.49774997s ago: executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r4, 0x0, r3, 0x0, 0xf3e, 0x0) write$binfmt_misc(r5, &(0x7f00000000c0)=ANY=[], 0xfdef) splice(r0, 0x0, r5, 0x0, 0x80, 0x2) 31.345601814s ago: executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) 31.295827802s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 31.24783146s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) shutdown(r0, 0x1) epoll_wait(r1, &(0x7f0000000240)=[{}], 0x1, 0x0) 30.267666216s ago: executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x5, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) 30.033539513s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001900)={'veth1_vlan\x00', @local}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) 5.401680091s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x3e}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 4.568939323s ago: executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0xbd, 0x4d, 0x96, 0x40, 0xfff0, 0xfff0, 0x3978, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xab, 0x93, 0x3b, 0x0, [], [{{0x9, 0x5, 0xf, 0x1}}]}}]}}]}}, 0x0) 1.277957577s ago: executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001240)={0x2020}, 0x2020) 250.92174ms ago: executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x6f64, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x1000, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 0s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) kernel console output (not intermixed with test programs): 1140][ T4662] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.874882][ T4662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.965609][ T3615] hub 3-1:1.1: bad descriptor, ignoring hub [ 95.570059][ T3615] hub: probe of 3-1:1.1 failed with error -5 [ 95.579322][ T4662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.589537][ T4662] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 95.603270][ T4662] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 95.613138][ T3615] usb 3-1: USB disconnect, device number 5 [ 95.638396][ T4662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.670568][ T4662] usb 2-1: config 0 descriptor?? [ 95.681231][ T2964] usb 4-1: config 0 has an invalid interface number: 37 but max is 0 [ 95.689354][ T2964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.700455][ T2964] usb 4-1: config 0 has no interface number 0 [ 95.707144][ T2964] usb 4-1: config 0 interface 37 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 95.721016][ T2964] usb 4-1: config 0 interface 37 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 95.731236][ T2964] usb 4-1: config 0 interface 37 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 95.745596][ T2964] usb 4-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=52.2d [ 95.754732][ T2964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.765720][ T2964] usb 4-1: config 0 descriptor?? [ 95.870483][ T4954] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 96.019483][ T3612] usb 4-1: USB disconnect, device number 3 [ 96.154641][ T4662] ntrig 0003:1B96:000A.0007: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 96.286805][ T4966] loop4: detected capacity change from 0 to 32768 [ 96.298303][ T4966] XFS (loop4): Mounting V5 Filesystem [ 96.362970][ T4662] usb 2-1: USB disconnect, device number 4 [ 96.374411][ T4966] XFS (loop4): Ending clean mount [ 96.490888][ T3568] XFS (loop4): Unmounting Filesystem [ 96.972241][ T3585] Bluetooth: hci5: command 0x1003 tx timeout [ 96.978734][ T3580] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 97.435240][ T4988] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 99.262711][ T5013] sched: RT throttling activated [ 100.029795][ T3617] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.347798][ T5002] loop0: detected capacity change from 0 to 32768 [ 100.366184][ T5002] XFS (loop0): Mounting V5 Filesystem [ 100.431033][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.443872][ T5002] XFS (loop0): Ending clean mount [ 100.448467][ T5037] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 100.461259][ T3617] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 100.469401][ T3617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.484195][ T3617] usb 2-1: config 0 has no interface number 0 [ 100.490454][ T3617] usb 2-1: config 0 interface 37 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 100.507485][ T3617] usb 2-1: config 0 interface 37 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 100.517526][ T3617] usb 2-1: config 0 interface 37 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 100.536758][ T3617] usb 2-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=52.2d [ 100.546008][ T3617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.562641][ T3617] usb 2-1: config 0 descriptor?? [ 100.585285][ T4093] XFS (loop0): Unmounting Filesystem [ 100.650552][ T3615] usb 2-1: USB disconnect, device number 5 [ 100.787789][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 100.991623][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.083750][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.224716][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.292121][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 101.298646][ T3585] Bluetooth: hci5: command 0x1003 tx timeout [ 101.523440][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 101.616930][ T22] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 101.626976][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.667268][ T22] usb 4-1: config 0 descriptor?? [ 101.814386][ T5061] loop0: detected capacity change from 0 to 512 [ 101.828694][ T5061] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.845928][ T5061] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.872282][ T5064] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 101.895401][ T5061] EXT4-fs (loop0): 1 truncate cleaned up [ 101.901390][ T5061] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.068004][ T5061] EXT4-fs (loop0): pa ffff8880752928c0: logic 0, phys. 129, len 64 [ 102.076639][ T5061] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4885: group 0, free 27, pa_free 4 [ 102.101371][ T5061] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 19: block 131:freeing already freed block (bit 130); block bitmap corrupt. [ 102.158073][ T22] ntrig 0003:1B96:000A.0008: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 102.205255][ T4093] EXT4-fs (loop0): unmounting filesystem. [ 102.219431][ T5057] loop4: detected capacity change from 0 to 40427 [ 102.303630][ T5057] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 102.321699][ T5057] F2FS-fs (loop4): invalid crc value [ 102.329376][ T5057] F2FS-fs (loop4): invalid crc value [ 102.340491][ T5057] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 102.383634][ T22] usb 4-1: USB disconnect, device number 4 [ 102.421126][ T3617] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.455956][ T3617] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 104.466141][ T3617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.499818][ T3617] usb 2-1: config 0 has no interface number 0 [ 104.506133][ T3617] usb 2-1: config 0 interface 37 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 104.524027][ T3617] usb 2-1: config 0 interface 37 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 104.548545][ T3617] usb 2-1: config 0 interface 37 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 104.565805][ T3617] usb 2-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=52.2d [ 104.593674][ T3617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.609008][ T5103] loop2: detected capacity change from 0 to 512 [ 104.613871][ T3617] usb 2-1: config 0 descriptor?? [ 104.620330][ T5103] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.652812][ T5103] EXT4-fs (loop2): 1 truncate cleaned up [ 104.659737][ T5103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.758995][ T5103] EXT4-fs (loop2): pa ffff8880738282a0: logic 0, phys. 129, len 64 [ 104.767163][ T5103] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4885: group 0, free 27, pa_free 4 [ 104.783187][ T5103] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 19: block 131:freeing already freed block (bit 130); block bitmap corrupt. [ 104.847299][ T3569] EXT4-fs (loop2): unmounting filesystem. [ 104.919756][ T3617] usb 2-1: USB disconnect, device number 6 [ 105.960658][ T5135] loop1: detected capacity change from 0 to 512 [ 105.984145][ T5135] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.051768][ T5135] EXT4-fs (loop1): 1 truncate cleaned up [ 106.068830][ T5139] loop2: detected capacity change from 0 to 2048 [ 106.076611][ T5135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.119361][ T5139] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz-executor.2: bad orphan inode 8192 [ 106.150371][ T5139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.171358][ T47] Bluetooth: hci5: command 0x1003 tx timeout [ 106.179952][ T3585] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 106.189774][ T5121] loop4: detected capacity change from 0 to 40427 [ 106.208875][ T5121] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 106.259888][ T5121] F2FS-fs (loop4): invalid crc value [ 106.271897][ T5135] EXT4-fs (loop1): pa ffff888073828e00: logic 0, phys. 129, len 64 [ 106.279892][ T5135] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4885: group 0, free 27, pa_free 4 [ 106.291832][ T5121] F2FS-fs (loop4): invalid crc value [ 106.297261][ T5121] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 106.301166][ T5135] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 19: block 131:freeing already freed block (bit 130); block bitmap corrupt. [ 106.324215][ T5148] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Out of memory [ 106.378228][ T3570] EXT4-fs (loop1): unmounting filesystem. [ 106.445920][ T5150] loop1: detected capacity change from 0 to 1024 [ 106.531721][ T5148] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #18: comm syz-executor.2: mark_inode_dirty error [ 107.356688][ T3569] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor.2: path /root/syzkaller-testdir2152141370/syzkaller.QB7dsd/77/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 107.416046][ T5154] loop1: detected capacity change from 0 to 256 [ 107.544768][ T3569] EXT4-fs (loop2): unmounting filesystem. [ 107.680781][ T5171] loop3: detected capacity change from 0 to 512 [ 107.856270][ T5171] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.905516][ T5173] loop0: detected capacity change from 0 to 1024 [ 108.325238][ T4943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.364346][ T5171] EXT4-fs (loop3): 1 truncate cleaned up [ 108.375648][ T5171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.462847][ T4943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.516827][ T5171] EXT4-fs (loop3): pa ffff88807518bc40: logic 0, phys. 129, len 64 [ 108.524924][ T5171] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4885: group 0, free 27, pa_free 4 [ 108.612686][ T5171] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 19: block 131:freeing already freed block (bit 130); block bitmap corrupt. [ 108.729642][ T4943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.214534][ T3577] EXT4-fs (loop3): unmounting filesystem. [ 109.486001][ T4943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.541092][ T5193] tap0: tun_chr_ioctl cmd 1074025673 [ 109.697073][ T5198] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 109.722036][ T3580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.736180][ T3580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.745703][ T3580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.756411][ T3580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.769029][ T3580] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 109.776484][ T3580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.802896][ T5205] loop1: detected capacity change from 0 to 256 [ 109.851127][ T3585] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 110.133284][ T5216] loop1: detected capacity change from 0 to 1024 [ 110.161742][ T5213] loop4: detected capacity change from 0 to 2048 [ 110.249708][ T5213] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 8192 [ 110.254639][ T5226] loop0: detected capacity change from 0 to 512 [ 110.262539][ T5213] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.292436][ T5226] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.339536][ T5231] tap0: tun_chr_ioctl cmd 1074025673 [ 110.369466][ T5226] EXT4-fs (loop0): 1 truncate cleaned up [ 110.376797][ T5199] chnl_net:caif_netlink_parms(): no params data found [ 110.407016][ T5226] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 110.453865][ T5235] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Out of memory [ 110.466098][ T5235] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #18: comm syz-executor.4: mark_inode_dirty error [ 110.608986][ T3568] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor.4: path /root/syzkaller-testdir4015345121/syzkaller.tGik94/143/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 110.622704][ T5226] EXT4-fs (loop0): pa ffff88807536b620: logic 0, phys. 129, len 64 [ 110.642290][ T5226] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4885: group 0, free 27, pa_free 4 [ 110.653543][ T5226] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 19: block 131:freeing already freed block (bit 130); block bitmap corrupt. [ 110.674640][ T3568] EXT4-fs (loop4): unmounting filesystem. [ 110.708943][ T5246] loop3: detected capacity change from 0 to 256 [ 110.715910][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.730103][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.758595][ T5199] device bridge_slave_0 entered promiscuous mode [ 110.791883][ T4093] EXT4-fs (loop0): unmounting filesystem. [ 110.810005][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.824148][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.842328][ T5199] device bridge_slave_1 entered promiscuous mode [ 110.988190][ T5256] loop0: detected capacity change from 0 to 1024 [ 110.997635][ T5199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.021071][ T5199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.034508][ T5254] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 111.214524][ T5199] team0: Port device team_slave_0 added [ 111.242746][ T5199] team0: Port device team_slave_1 added [ 111.267770][ T5265] tap0: tun_chr_ioctl cmd 1074025673 [ 111.302572][ T5264] loop3: detected capacity change from 0 to 2048 [ 111.371617][ T5199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.373242][ T5264] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 8192 [ 111.378575][ T5199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.378601][ T5199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.435948][ T4943] device hsr_slave_0 left promiscuous mode [ 111.449369][ T4943] device hsr_slave_1 left promiscuous mode [ 111.465675][ T5264] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.482369][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.489900][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.499808][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.508457][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.554233][ T4943] device bridge_slave_1 left promiscuous mode [ 111.566195][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.589317][ T4943] device bridge_slave_0 left promiscuous mode [ 111.599072][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.608018][ T5276] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Out of memory [ 111.630044][ T5276] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #18: comm syz-executor.3: mark_inode_dirty error [ 111.676461][ T5278] loop0: detected capacity change from 0 to 256 [ 111.697548][ T4943] device veth1_macvtap left promiscuous mode [ 111.705068][ T4943] device veth0_macvtap left promiscuous mode [ 111.717499][ T4943] device veth1_vlan left promiscuous mode [ 111.727097][ T4943] device veth0_vlan left promiscuous mode [ 111.803531][ T3580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.819321][ T3580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.830375][ T3580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.841796][ T3580] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.849833][ T3580] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 111.857018][ T47] Bluetooth: hci5: command tx timeout [ 111.865737][ T3580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.925678][ T3577] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor.3: path /root/syzkaller-testdir1642797913/syzkaller.C3BZuJ/101/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 111.997805][ T5284] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.998200][ T3577] EXT4-fs (loop3): unmounting filesystem. [ 112.158589][ T4943] team0 (unregistering): Port device team_slave_1 removed [ 112.170322][ T4943] team0 (unregistering): Port device team_slave_0 removed [ 112.194135][ T4943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.221645][ T4943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.249317][ T5290] loop1: detected capacity change from 0 to 1024 [ 112.315206][ T4943] bond0 (unregistering): Released all slaves [ 112.383584][ T5199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.390586][ T5199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.419642][ T5199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.441055][ T5296] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 112.599829][ T5199] device hsr_slave_0 entered promiscuous mode [ 112.607325][ T5199] device hsr_slave_1 entered promiscuous mode [ 112.618243][ T5199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.626670][ T5199] Cannot create hsr debugfs directory [ 112.696156][ T5302] tap0: tun_chr_ioctl cmd 1074025673 [ 113.025434][ T5282] chnl_net:caif_netlink_parms(): no params data found [ 113.059557][ T5313] loop1: detected capacity change from 0 to 256 [ 113.170183][ T5315] loop0: detected capacity change from 0 to 2048 [ 113.233358][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.240601][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.264733][ T5315] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 8192 [ 113.276252][ T5282] device bridge_slave_0 entered promiscuous mode [ 113.286325][ T5315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.329048][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.338506][ T3580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.349813][ T3580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.362718][ T3580] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.370670][ T3580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.378193][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.385559][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 113.394554][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.418139][ T5327] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Out of memory [ 113.436792][ T5282] device bridge_slave_1 entered promiscuous mode [ 113.446317][ T5325] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.447071][ T5327] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #18: comm syz-executor.0: mark_inode_dirty error [ 113.584320][ T5282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.634881][ T5282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.668273][ T5199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.768543][ T5199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.788541][ T4093] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor.0: path /root/syzkaller-testdir454618436/syzkaller.adyekf/51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 113.850066][ T5282] team0: Port device team_slave_0 added [ 113.870933][ T5199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.887014][ T4093] EXT4-fs (loop0): unmounting filesystem. [ 113.900249][ T5199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.917645][ T5282] team0: Port device team_slave_1 added [ 113.926176][ T3585] Bluetooth: hci0: command tx timeout [ 113.930951][ T47] Bluetooth: hci5: command tx timeout [ 113.978615][ T5334] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 114.129667][ T5282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.141195][ T5282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.187433][ T5282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.286287][ T5282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.311059][ T5282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.381085][ T5282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.514564][ T5282] device hsr_slave_0 entered promiscuous mode [ 114.548011][ T5282] device hsr_slave_1 entered promiscuous mode [ 114.569611][ T5282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.595092][ T5282] Cannot create hsr debugfs directory [ 114.632786][ T5344] tap0: tun_chr_ioctl cmd 1074025673 [ 114.638254][ T5321] chnl_net:caif_netlink_parms(): no params data found [ 114.898186][ T5199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.995675][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.007299][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.016490][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.024288][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.033245][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.038902][ T5199] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.052186][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.086240][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.096255][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.115211][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.127627][ T5321] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.136741][ T5321] device bridge_slave_0 entered promiscuous mode [ 115.172101][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.191517][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.200493][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.207764][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.235844][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.249428][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.270161][ T5357] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.280505][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.287639][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.295988][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.312166][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.336395][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.344740][ T5321] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.352655][ T5321] device bridge_slave_1 entered promiscuous mode [ 115.369416][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.411085][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.420556][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.438264][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.452169][ T3585] Bluetooth: hci2: command tx timeout [ 115.468112][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.477092][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.486092][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.494476][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.503357][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.515369][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.529880][ T5321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.544471][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.581265][ T5321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.626692][ T5282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.744337][ T4943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.778072][ T5282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.800206][ T5369] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 115.868556][ T5321] team0: Port device team_slave_0 added [ 115.900384][ T4943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.944228][ T5282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.979976][ T5321] team0: Port device team_slave_1 added [ 116.001053][ T3585] Bluetooth: hci5: command tx timeout [ 116.001291][ T47] Bluetooth: hci0: command tx timeout [ 116.044717][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.052777][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.078887][ T5321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.098475][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.115906][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.149960][ T5321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.164640][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.172303][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.181936][ T5199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.198121][ T4943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.222305][ T5282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.250452][ T5351] chnl_net:caif_netlink_parms(): no params data found [ 116.288421][ T4943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.348269][ T5383] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 116.370517][ T5321] device hsr_slave_0 entered promiscuous mode [ 116.380682][ T5321] device hsr_slave_1 entered promiscuous mode [ 116.389292][ T5321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.400071][ T5321] Cannot create hsr debugfs directory [ 116.540718][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.549808][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.578680][ T5199] device veth0_vlan entered promiscuous mode [ 116.634276][ T5351] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.651993][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.659830][ T5351] device bridge_slave_0 entered promiscuous mode [ 116.675729][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.685363][ T5395] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.689576][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.724607][ T5199] device veth1_vlan entered promiscuous mode [ 116.734400][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.745215][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.760760][ T5351] device bridge_slave_1 entered promiscuous mode [ 116.782250][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.789931][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.797841][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.847728][ T5351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.898900][ T5351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.909716][ T5282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.947284][ T4943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.003391][ T5199] device veth0_macvtap entered promiscuous mode [ 117.021390][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.030025][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.041832][ T5282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.067271][ T4943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.095722][ T5351] team0: Port device team_slave_0 added [ 117.107645][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.122261][ T47] Bluetooth: hci3: command tx timeout [ 117.137163][ T5282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.160832][ T5199] device veth1_macvtap entered promiscuous mode [ 117.171389][ T5351] team0: Port device team_slave_1 added [ 117.200409][ T5282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.249601][ T4943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.290613][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.298611][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.327135][ T5351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.339343][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.347299][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.377593][ T5351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.404631][ T4943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.466059][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.478463][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.488507][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.499522][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.510158][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.520795][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.521083][ T3585] Bluetooth: hci2: command tx timeout [ 117.536169][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.536193][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.554943][ T5199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.584909][ T5351] device hsr_slave_0 entered promiscuous mode [ 117.596362][ T5351] device hsr_slave_1 entered promiscuous mode [ 117.609052][ T5351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.620220][ T5351] Cannot create hsr debugfs directory [ 117.638306][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.654036][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.670064][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.686914][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.702072][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.712057][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.722942][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.732848][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.743390][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.754743][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.765531][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.777851][ T5199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.813713][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.827630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.895222][ T5199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.905138][ T5199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.915237][ T5199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.925188][ T5199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.086638][ T47] Bluetooth: hci5: command tx timeout [ 118.086645][ T3585] Bluetooth: hci0: command tx timeout [ 118.138217][ T5424] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.296956][ T5282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.370425][ T5282] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.380608][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.390116][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.405399][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.430981][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.506770][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.506930][ T4907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.517091][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.539467][ T4907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.541755][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.555990][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.563192][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.571813][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.590235][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.598927][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.606165][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.622706][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.638083][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.657360][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.667999][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.678431][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.720393][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.729415][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.739314][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.750458][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.800172][ T5282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.825536][ T5282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.847161][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.856609][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.866889][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.875887][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.888304][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.201292][ T3580] Bluetooth: hci3: command tx timeout [ 119.211494][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.412762][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.420340][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.430668][ T5282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.500345][ T5440] loop2: detected capacity change from 0 to 40427 [ 119.529452][ T5440] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 119.541624][ T5440] F2FS-fs (loop2): invalid crc value [ 119.551327][ T5440] F2FS-fs (loop2): invalid crc value [ 119.556831][ T5440] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 119.571699][ T22] usb 2-1: New USB device found, idVendor=07ca, idProduct=1835, bcdDevice=4f.ca [ 119.584002][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.588544][ T5321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.601915][ T3580] Bluetooth: hci2: command tx timeout [ 119.628634][ T5321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.634426][ T22] usb 2-1: config 0 descriptor?? [ 119.680423][ T22] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 119.697252][ T22] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22 [ 119.727744][ T5321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.749984][ T5321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.824972][ T5351] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.871399][ T5351] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.880234][ T22] usb 2-1: USB disconnect, device number 7 [ 119.894751][ T5351] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.931033][ T5351] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.065277][ T4943] device hsr_slave_0 left promiscuous mode [ 120.073283][ T4943] device hsr_slave_1 left promiscuous mode [ 120.079802][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.088326][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.098094][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.114362][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.128659][ T4943] device bridge_slave_1 left promiscuous mode [ 120.145483][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.158493][ T4943] device bridge_slave_0 left promiscuous mode [ 120.161986][ T3580] Bluetooth: hci0: command tx timeout [ 120.170046][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.199059][ T4943] device hsr_slave_0 left promiscuous mode [ 120.211712][ T4943] device hsr_slave_1 left promiscuous mode [ 120.218180][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.226273][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.235381][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.244245][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.263306][ T4943] device bridge_slave_1 left promiscuous mode [ 120.269474][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.280140][ T4943] device bridge_slave_0 left promiscuous mode [ 120.287704][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.302044][ T4943] device hsr_slave_0 left promiscuous mode [ 120.312462][ T4943] device hsr_slave_1 left promiscuous mode [ 120.319201][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.329472][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.347434][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.356878][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.371619][ T4943] device bridge_slave_1 left promiscuous mode [ 120.377852][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.387029][ T4943] device bridge_slave_0 left promiscuous mode [ 120.393947][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.421373][ T4943] device veth1_macvtap left promiscuous mode [ 120.427446][ T4943] device veth0_macvtap left promiscuous mode [ 120.433721][ T4943] device veth1_vlan left promiscuous mode [ 120.441328][ T4943] device veth0_vlan left promiscuous mode [ 120.451756][ T4943] device veth1_macvtap left promiscuous mode [ 120.457781][ T4943] device veth0_macvtap left promiscuous mode [ 120.466157][ T4943] device veth1_vlan left promiscuous mode [ 120.472762][ T4943] device veth0_vlan left promiscuous mode [ 120.482008][ T4943] device veth1_macvtap left promiscuous mode [ 120.488090][ T4943] device veth0_macvtap left promiscuous mode [ 120.496325][ T4943] device veth1_vlan left promiscuous mode [ 120.502654][ T4943] device veth0_vlan left promiscuous mode [ 120.901421][ T4943] team0 (unregistering): Port device team_slave_1 removed [ 120.919023][ T4943] team0 (unregistering): Port device team_slave_0 removed [ 120.934778][ T4943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.949470][ T4943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.023893][ T4943] bond0 (unregistering): Released all slaves [ 121.163075][ T4943] team0 (unregistering): Port device team_slave_1 removed [ 121.183900][ T4943] team0 (unregistering): Port device team_slave_0 removed [ 121.198924][ T4943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.213400][ T4943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.279713][ T4943] bond0 (unregistering): Released all slaves [ 121.288692][ T3580] Bluetooth: hci3: command tx timeout [ 121.408187][ T4943] team0 (unregistering): Port device team_slave_1 removed [ 121.421792][ T4943] team0 (unregistering): Port device team_slave_0 removed [ 121.433710][ T4943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.447276][ T4943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.506728][ T4943] bond0 (unregistering): Released all slaves [ 121.611219][ T5321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.621019][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.629832][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.681377][ T3580] Bluetooth: hci2: command tx timeout [ 121.721608][ T5321] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.752469][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.766439][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.785804][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.798110][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.823575][ T5282] device veth0_vlan entered promiscuous mode [ 121.883613][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.895049][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.903371][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.912436][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.921118][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.928252][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.940087][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.949084][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.968058][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.975209][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.983817][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.015970][ T5282] device veth1_vlan entered promiscuous mode [ 122.037960][ T5351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.065783][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.081771][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.090586][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.116478][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.148322][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.169174][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.191379][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.210077][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.255262][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.274483][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.293247][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.302154][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.310829][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.319813][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.328184][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.346028][ T5282] device veth0_macvtap entered promiscuous mode [ 122.362005][ T5351] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.387929][ T5321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.399423][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.411917][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.420178][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.437122][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.447917][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.457307][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.466346][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.473490][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.485057][ T5282] device veth1_macvtap entered promiscuous mode [ 122.502784][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.511358][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.531541][ T3616] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.540020][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.555119][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.578246][ T3856] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.585461][ T3856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.610695][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.661984][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.673991][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.684962][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.696190][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.708878][ T5282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.717785][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.727912][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.738072][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.746809][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.755930][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.766901][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.776516][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.791328][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.812345][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.821577][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.830002][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.861839][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.872884][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.912556][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.931488][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.937884][ T3616] usb 3-1: New USB device found, idVendor=07ca, idProduct=1835, bcdDevice=4f.ca [ 122.955442][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.958903][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.977974][ T3616] usb 3-1: config 0 descriptor?? [ 122.995910][ T5282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.016468][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.043005][ T3616] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 123.049444][ T3616] dvb_usb_af9035: probe of 3-1:0.0 failed with error -22 [ 123.064898][ T5321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.081507][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.095739][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.104908][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.119964][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.143580][ T5282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.162252][ T5282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.180733][ T5282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.189692][ T5282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.267581][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.280198][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.296161][ T22] usb 3-1: USB disconnect, device number 6 [ 123.353894][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.362431][ T3580] Bluetooth: hci3: command tx timeout [ 123.369698][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.380415][ T5321] device veth0_vlan entered promiscuous mode [ 123.466590][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.475530][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.487751][ T5321] device veth1_vlan entered promiscuous mode [ 123.520011][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.530299][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.596869][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.619745][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.630329][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.638414][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.649706][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.668997][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.686903][ T5321] device veth0_macvtap entered promiscuous mode [ 123.733374][ T5321] device veth1_macvtap entered promiscuous mode [ 123.753458][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.765660][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.774608][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.805908][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.852225][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.880997][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.902409][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.923965][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.948357][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.993217][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.029340][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.039813][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.048703][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.061491][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.082128][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.094352][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.170557][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.189099][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.200079][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.231585][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.671976][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.686341][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.726856][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.759429][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.827334][ T5351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.851859][ T5321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.860589][ T5321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.879267][ T5321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.888659][ T5321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.966112][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.981967][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.041194][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.049712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.080493][ T5351] device veth0_vlan entered promiscuous mode [ 125.106807][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.119528][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.190059][ T5351] device veth1_vlan entered promiscuous mode [ 125.222844][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.247909][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.299541][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.313501][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.339567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.364576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.391754][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.403318][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.404231][ T5351] device veth0_macvtap entered promiscuous mode [ 125.441956][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.447045][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.468455][ T5351] device veth1_macvtap entered promiscuous mode [ 125.485065][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.497020][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.559699][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.610958][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.620813][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.673437][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.701783][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.723462][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.768946][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.791286][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.825601][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.847616][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.865782][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.903484][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.921958][ T2964] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.922010][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.962407][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.985686][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.006696][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.055393][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.110290][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.131254][ T5550] loop1: detected capacity change from 0 to 32768 [ 126.147309][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.168406][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.179456][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.392876][ T5550] XFS (loop1): Mounting V5 Filesystem [ 126.673116][ T2964] usb 5-1: New USB device found, idVendor=07ca, idProduct=1835, bcdDevice=4f.ca [ 126.724829][ T2964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.870984][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.884602][ T5351] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.934719][ T5351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.946482][ T2964] usb 5-1: config 0 descriptor?? [ 126.990795][ T5351] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.001338][ T5550] XFS (loop1): Ending clean mount [ 127.012647][ T2964] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 127.018386][ T5351] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.019049][ T2964] dvb_usb_af9035: probe of 5-1:0.0 failed with error -22 [ 127.057590][ T5550] XFS (loop1): Quotacheck needed: Please wait. [ 127.141835][ T5550] XFS (loop1): Quotacheck: Done. [ 127.246730][ T3856] usb 5-1: USB disconnect, device number 3 [ 127.278417][ T3570] XFS (loop1): Unmounting Filesystem [ 127.321782][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.329816][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.406024][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.422429][ T26] kauditd_printk_skb: 184 callbacks suppressed [ 127.422445][ T26] audit: type=1326 audit(1717652210.922:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4947cf69 code=0x7ffc0000 [ 127.456608][ T5180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.485253][ T5180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.516003][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.586705][ T26] audit: type=1326 audit(1717652210.922:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a4947cf69 code=0x7ffc0000 [ 127.669816][ T26] audit: type=1326 audit(1717652210.922:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4947cf69 code=0x7ffc0000 [ 127.712860][ T26] audit: type=1326 audit(1717652210.922:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a4947cf69 code=0x7ffc0000 [ 127.744054][ T26] audit: type=1326 audit(1717652211.012:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4947cf69 code=0x7ffc0000 [ 127.776189][ T26] audit: type=1326 audit(1717652211.012:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a4947a6e7 code=0x7ffc0000 [ 127.845368][ T26] audit: type=1326 audit(1717652211.042:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a494403b9 code=0x7ffc0000 [ 127.930407][ T26] audit: type=1326 audit(1717652211.042:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5a4947cf69 code=0x7ffc0000 [ 127.946487][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.013260][ T26] audit: type=1326 audit(1717652211.042:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a4947a6e7 code=0x7ffc0000 [ 128.088032][ T26] audit: type=1326 audit(1717652211.042:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a494403b9 code=0x7ffc0000 [ 129.625383][ T3856] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.795447][ T5657] loop0: detected capacity change from 0 to 164 [ 129.950394][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.963834][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.968975][ T4943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.987515][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.995144][ T3856] usb 5-1: New USB device found, idVendor=07ca, idProduct=1835, bcdDevice=4f.ca [ 130.006313][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.014196][ T3856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.022655][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.029982][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.049110][ T3856] usb 5-1: config 0 descriptor?? [ 130.092724][ T3856] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 130.099172][ T3856] dvb_usb_af9035: probe of 5-1:0.0 failed with error -22 [ 130.116197][ T4943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.207481][ T4943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.208974][ T5635] loop2: detected capacity change from 0 to 32768 [ 130.275720][ T4943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.287438][ T5635] XFS (loop2): Mounting V5 Filesystem [ 130.324893][ T3617] usb 5-1: USB disconnect, device number 4 [ 130.349761][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.418276][ T5635] XFS (loop2): Ending clean mount [ 130.454675][ T5635] XFS (loop2): Quotacheck needed: Please wait. [ 130.513234][ T5635] XFS (loop2): Quotacheck: Done. [ 130.544893][ T5692] loop3: detected capacity change from 0 to 164 [ 130.618852][ T5199] XFS (loop2): Unmounting Filesystem [ 130.667512][ T5661] chnl_net:caif_netlink_parms(): no params data found [ 130.959123][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.992228][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.018933][ T5661] device bridge_slave_0 entered promiscuous mode [ 131.047376][ T5703] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 131.069266][ T5703] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.107485][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.116541][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.149670][ T5661] device bridge_slave_1 entered promiscuous mode [ 131.253138][ T5661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.280569][ T5661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.292236][ T5689] loop0: detected capacity change from 0 to 40427 [ 131.326804][ T5689] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 131.352448][ T5689] F2FS-fs (loop0): invalid crc value [ 131.368015][ T5661] team0: Port device team_slave_0 added [ 131.382393][ T5689] F2FS-fs (loop0): invalid crc value [ 131.405087][ T5689] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 131.414934][ T5661] team0: Port device team_slave_1 added [ 131.490675][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.510345][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.536298][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.571005][ T5661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.626979][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.639804][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.665742][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.754088][ T5661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.902844][ T5661] device hsr_slave_0 entered promiscuous mode [ 131.917747][ T5661] device hsr_slave_1 entered promiscuous mode [ 131.941700][ T5661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.949297][ T5661] Cannot create hsr debugfs directory [ 131.981375][ T4943] device hsr_slave_0 left promiscuous mode [ 131.999592][ T4943] device hsr_slave_1 left promiscuous mode [ 132.025296][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.037074][ T4505] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.071115][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.082010][ T47] Bluetooth: hci1: command tx timeout [ 132.082192][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.109871][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.126808][ T4943] device bridge_slave_1 left promiscuous mode [ 132.138451][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.149568][ T4943] device bridge_slave_0 left promiscuous mode [ 132.156954][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.181373][ T4943] device veth1_macvtap left promiscuous mode [ 132.187539][ T4943] device veth0_macvtap left promiscuous mode [ 132.195238][ T4943] device veth1_vlan left promiscuous mode [ 132.204865][ T4943] device veth0_vlan left promiscuous mode [ 132.274599][ T5721] loop4: detected capacity change from 0 to 32768 [ 132.329264][ T5721] XFS (loop4): Mounting V5 Filesystem [ 132.417192][ T5721] XFS (loop4): Ending clean mount [ 132.448253][ T5721] XFS (loop4): Quotacheck needed: Please wait. [ 132.520425][ T5721] XFS (loop4): Quotacheck: Done. [ 132.594291][ T5282] XFS (loop4): Unmounting Filesystem [ 132.694505][ T4505] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 132.714192][ T4505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.724394][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730889][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.748988][ T4505] usb 3-1: Product: syz [ 132.753442][ T4505] usb 3-1: Manufacturer: syz [ 132.758192][ T4505] usb 3-1: SerialNumber: syz [ 132.777873][ T4505] r8152-cfgselector 3-1: config 0 descriptor?? [ 132.814906][ T4943] team0 (unregistering): Port device team_slave_1 removed [ 132.866285][ T4943] team0 (unregistering): Port device team_slave_0 removed [ 132.908952][ T4943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.958144][ T4943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.050947][ T4505] r8152-cfgselector 3-1: Unknown version 0x0000 [ 133.066456][ T5761] loop0: detected capacity change from 0 to 164 [ 133.086929][ T4505] r8152-cfgselector 3-1: Unknown version 0x0000 [ 133.094623][ T4505] r8152-cfgselector 3-1: bad CDC descriptors [ 133.137245][ T4505] r8152-cfgselector 3-1: Unknown version 0x0000 [ 133.138577][ T4943] bond0 (unregistering): Released all slaves [ 133.145293][ T4505] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 133.347322][ T5769] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 133.356546][ T5769] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.809730][ T5785] input: syz0 as /devices/virtual/input/input9 [ 133.969246][ T5789] loop4: detected capacity change from 0 to 164 [ 134.164250][ T47] Bluetooth: hci1: command tx timeout [ 134.266551][ T5661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.308459][ T5661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.342137][ T5661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.370446][ T5661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.551309][ T5780] loop2: detected capacity change from 0 to 32768 [ 134.576756][ T5797] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 134.594501][ T5797] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.644206][ T5780] XFS (loop2): Mounting V5 Filesystem [ 134.712706][ T5661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.772808][ T5780] XFS (loop2): Ending clean mount [ 134.800784][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.822793][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.831394][ T5780] XFS (loop2): Quotacheck needed: Please wait. [ 134.878370][ T5661] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.925599][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.937201][ T5780] XFS (loop2): Quotacheck: Done. [ 134.951198][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.960466][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.967604][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.023599][ T5199] XFS (loop2): Unmounting Filesystem [ 135.062312][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.088856][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.098877][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.126531][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.133724][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.163301][ T3856] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.163537][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.209050][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.232059][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.256568][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.266884][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 135.266898][ T26] audit: type=1326 audit(1717652218.772:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa1c7cf69 code=0x7ffc0000 [ 135.289722][ T5661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.359527][ T5661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.389531][ T26] audit: type=1326 audit(1717652218.812:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effa1c7cf69 code=0x7ffc0000 [ 135.412334][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.450320][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.468132][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.491941][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.500671][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.501045][ T3856] usb 1-1: device descriptor read/all, error -71 [ 135.526980][ T26] audit: type=1326 audit(1717652218.812:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa1c7cf69 code=0x7ffc0000 [ 135.541597][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.586809][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.601613][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.618577][ T26] audit: type=1326 audit(1717652218.812:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effa1c7cf69 code=0x7ffc0000 [ 135.656310][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.697783][ T26] audit: type=1326 audit(1717652218.812:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa1c7cf69 code=0x7ffc0000 [ 135.738006][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.759755][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.788599][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.801186][ T26] audit: type=1326 audit(1717652218.822:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effa1c7a6e7 code=0x7ffc0000 [ 135.853067][ T26] audit: type=1326 audit(1717652218.822:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7effa1c403b9 code=0x7ffc0000 [ 135.887382][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.903100][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.944754][ T26] audit: type=1326 audit(1717652218.822:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7effa1c7cf69 code=0x7ffc0000 [ 135.996754][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.008239][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.024087][ T5661] device veth0_vlan entered promiscuous mode [ 136.035755][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.045584][ T26] audit: type=1326 audit(1717652218.822:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effa1c7a6e7 code=0x7ffc0000 [ 136.074602][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.099021][ T5828] loop0: detected capacity change from 0 to 256 [ 136.113280][ T5661] device veth1_vlan entered promiscuous mode [ 136.145394][ T26] audit: type=1326 audit(1717652218.822:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7effa1c403b9 code=0x7ffc0000 [ 136.168485][ T5830] loop2: detected capacity change from 0 to 1024 [ 136.172591][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.188557][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.199670][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.236144][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.241229][ T47] Bluetooth: hci1: command tx timeout [ 136.261781][ T5830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 136.265527][ T5661] device veth0_macvtap entered promiscuous mode [ 136.329924][ T5661] device veth1_macvtap entered promiscuous mode [ 136.369025][ T5835] "syz-executor.4" (5835) uses obsolete ecb(arc4) skcipher [ 136.379052][ T5830] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz-executor.2: attempt to clear invalid blocks 1886221359 len 1 [ 136.408013][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.425681][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.443669][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.464418][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.498815][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.523749][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.535275][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.545872][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.567279][ T5199] EXT4-fs (loop2): unmounting filesystem. [ 136.579615][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.609065][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.619639][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.628077][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.637354][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.665272][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.707462][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.750925][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.768110][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.790220][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.802014][ T5850] xt_TCPMSS: Only works on TCP SYN packets [ 136.826442][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.842924][ T5661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.857794][ T5661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.871981][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.879414][ T5835] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.910295][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.942417][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.951350][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.972711][ T5661] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.985063][ T5661] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.993985][ T5661] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.003855][ T5661] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.007283][ T5858] syz-executor.4 (pid 5858) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 137.147534][ T4946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.171089][ T3856] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.180984][ T4946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.236635][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.267077][ T4946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.299185][ T4946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.344068][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.501018][ T3856] usb 1-1: device descriptor read/all, error -71 [ 137.898926][ T5882] "syz-executor.3" (5882) uses obsolete ecb(arc4) skcipher [ 137.969823][ T5883] device syzkaller0 entered promiscuous mode [ 138.002298][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.145852][ T5888] device syzkaller0 entered promiscuous mode [ 138.302984][ T5904] loop0: detected capacity change from 0 to 1024 [ 138.321024][ T47] Bluetooth: hci1: command tx timeout [ 138.530115][ T11] hfsplus: b-tree write err: -5, ino 4 [ 138.658647][ T5914] xt_TCPMSS: Only works on TCP SYN packets [ 138.781373][ T5921] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 138.944368][ T5923] loop4: detected capacity change from 0 to 2048 [ 138.963715][ T5925] device syzkaller0 entered promiscuous mode [ 138.976329][ T5923] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.026472][ T5928] loop2: detected capacity change from 0 to 64 [ 139.043781][ T5923] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.092578][ T5923] EXT4-fs error (device loop4): ext4_search_dir:1548: inode #12: block 9: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 139.109918][ T5908] loop3: detected capacity change from 0 to 32768 [ 139.150467][ T5923] EXT4-fs (loop4): Remounting filesystem read-only [ 139.175248][ T5908] XFS (loop3): Mounting V5 Filesystem [ 139.194034][ T5282] EXT4-fs (loop4): unmounting filesystem. [ 139.233291][ T5940] loop2: detected capacity change from 0 to 2048 [ 139.264786][ T5940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.301352][ T5908] XFS (loop3): Ending clean mount [ 139.305172][ T5940] EXT4-fs error (device loop2): __ext4_get_inode_loc:4495: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 139.310813][ T5940] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 139.312086][ T5940] EXT4-fs error (device loop2): __ext4_unlink:3281: inode #2: comm syz-executor.2: mark_inode_dirty error [ 139.330495][ T5908] XFS (loop3): Quotacheck needed: Please wait. [ 139.341199][ T5199] EXT4-fs error (device loop2): __ext4_get_inode_loc:4495: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 139.406208][ T5908] XFS (loop3): Quotacheck: Done. [ 139.434426][ T5199] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 139.434782][ T5199] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz-executor.2: mark_inode_dirty error [ 139.435356][ T5199] EXT4-fs error (device loop2): __ext4_get_inode_loc:4495: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 139.440211][ T5199] EXT4-fs error (device loop2): __ext4_get_inode_loc:4495: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 139.618952][ T5321] XFS (loop3): Unmounting Filesystem [ 139.752439][ T11] EXT4-fs error (device loop2): __ext4_get_inode_loc:4495: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 139.769347][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.790549][ T5199] EXT4-fs (loop2): unmounting filesystem. [ 139.962222][ T5961] device syzkaller0 entered promiscuous mode [ 140.043148][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.058445][ T5965] "syz-executor.0" (5965) uses obsolete ecb(arc4) skcipher [ 140.163293][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.476709][ T5982] loop1: detected capacity change from 0 to 2048 [ 140.582965][ T5982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 140.602118][ T5982] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz-executor.1: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 140.614349][ T5992] loop0: detected capacity change from 0 to 256 [ 140.631904][ T5982] EXT4-fs (loop1): Remounting filesystem read-only [ 140.660575][ T5661] EXT4-fs (loop1): unmounting filesystem. [ 140.681827][ T5988] loop4: detected capacity change from 0 to 1024 [ 140.839555][ T5996] loop0: detected capacity change from 0 to 128 [ 140.922830][ T11] hfsplus: b-tree write err: -5, ino 4 [ 140.972375][ T3580] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.982455][ T3580] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.990827][ T3580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.000982][ T3580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.008579][ T3580] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.016409][ T3580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.295651][ T6008] xt_TCPMSS: Only works on TCP SYN packets [ 141.322026][ T6006] loop0: detected capacity change from 0 to 2048 [ 141.394055][ T6006] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 141.509536][ T6014] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.511476][ T6006] syz-executor.0: attempt to access beyond end of device [ 141.511476][ T6006] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 141.597674][ T5997] chnl_net:caif_netlink_parms(): no params data found [ 141.834039][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.865043][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.899776][ T5997] device bridge_slave_0 entered promiscuous mode [ 141.909115][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.916837][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.926183][ T5997] device bridge_slave_1 entered promiscuous mode [ 141.950290][ T6027] loop0: detected capacity change from 0 to 256 [ 141.975199][ T6011] loop1: detected capacity change from 0 to 32768 [ 141.976353][ T5997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.027770][ T6011] XFS (loop1): Mounting V5 Filesystem [ 142.028311][ T5997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.113844][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.179541][ T6011] XFS (loop1): Ending clean mount [ 142.205880][ T6011] XFS (loop1): Quotacheck needed: Please wait. [ 142.296204][ T5997] team0: Port device team_slave_0 added [ 142.305121][ T6011] XFS (loop1): Quotacheck: Done. [ 142.336186][ T5997] team0: Port device team_slave_1 added [ 142.421896][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.443821][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.481098][ T5661] XFS (loop1): Unmounting Filesystem [ 142.504689][ T5997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.567703][ T6050] loop3: detected capacity change from 0 to 64 [ 142.581043][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.589375][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.653533][ T5997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.799848][ T6055] device syzkaller0 entered promiscuous mode [ 142.891378][ T5997] device hsr_slave_0 entered promiscuous mode [ 142.921374][ T5997] device hsr_slave_1 entered promiscuous mode [ 143.041039][ T47] Bluetooth: hci4: command tx timeout [ 143.458092][ T4943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.583373][ T4943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.746960][ T4943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.838241][ T4943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.391423][ T6079] loop1: detected capacity change from 0 to 32768 [ 144.448715][ T6079] XFS (loop1): Mounting V5 Filesystem [ 144.510764][ T6100] loop4: detected capacity change from 0 to 40427 [ 144.521088][ T6100] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 144.521149][ T6100] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 144.523096][ T6100] F2FS-fs (loop4): invalid crc value [ 144.556182][ T6100] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.558855][ T6079] XFS (loop1): Ending clean mount [ 144.560453][ T6079] XFS (loop1): Quotacheck needed: Please wait. [ 144.643730][ T6079] XFS (loop1): Quotacheck: Done. [ 144.648120][ T6100] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 144.676907][ T6100] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 144.761027][ T5661] XFS (loop1): Unmounting Filesystem [ 144.839727][ T5282] syz-executor.4: attempt to access beyond end of device [ 144.839727][ T5282] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 145.104086][ T4943] device hsr_slave_0 left promiscuous mode [ 145.120963][ T47] Bluetooth: hci4: command tx timeout [ 145.127147][ T4943] device hsr_slave_1 left promiscuous mode [ 145.133731][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.141242][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.150608][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.158503][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.183071][ T4943] device bridge_slave_1 left promiscuous mode [ 145.189328][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.215783][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.242259][ T4943] device bridge_slave_0 left promiscuous mode [ 145.261129][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.282653][ T4943] device veth1_macvtap left promiscuous mode [ 145.288727][ T4943] device veth0_macvtap left promiscuous mode [ 145.328283][ T4943] device veth1_vlan left promiscuous mode [ 145.335091][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.352501][ T4943] device veth0_vlan left promiscuous mode [ 145.687691][ T6155] loop4: detected capacity change from 0 to 2048 [ 145.725659][ T6155] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.787616][ T6155] syz-executor.4: attempt to access beyond end of device [ 145.787616][ T6155] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 145.802414][ T6156] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.949324][ T4943] team0 (unregistering): Port device team_slave_1 removed [ 145.990935][ T4943] team0 (unregistering): Port device team_slave_0 removed [ 146.027782][ T4943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.071790][ T4943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.136531][ T4943] bond0 (unregistering): Released all slaves [ 146.336526][ T6165] loop4: detected capacity change from 0 to 256 [ 146.343107][ T5997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.365273][ T5997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.374247][ T6165] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 146.391070][ T6163] loop3: detected capacity change from 0 to 4096 [ 146.400411][ T6165] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 146.418969][ T6165] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 146.419255][ T5997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.427441][ T6165] UDF-fs: Scanning with blocksize 512 failed [ 146.445717][ T5997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.453075][ T6163] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 146.455101][ T6165] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 146.481952][ T6165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.576481][ T6163] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 146.706697][ T5997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.753166][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.782663][ T6168] loop0: detected capacity change from 0 to 2048 [ 146.786633][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.796332][ T26] kauditd_printk_skb: 795 callbacks suppressed [ 146.796345][ T26] audit: type=1800 audit(1717652230.292:1283): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 146.828273][ T5997] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.842373][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.851809][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.860455][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.867608][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.876325][ T26] audit: type=1800 audit(1717652230.342:1284): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 146.891087][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.905376][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.917217][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.926662][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.933808][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.957533][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.976106][ T6177] loop4: detected capacity change from 0 to 256 [ 146.986310][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.011090][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.052175][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.067697][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.090519][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.143917][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.162855][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.173802][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.201141][ T47] Bluetooth: hci4: command tx timeout [ 147.214601][ T5997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.247541][ T6182] loop0: detected capacity change from 0 to 64 [ 147.255353][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.265371][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.286865][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.449911][ T6188] loop3: detected capacity change from 0 to 2048 [ 147.463920][ T6188] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 147.579480][ T6192] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.580519][ T6188] syz-executor.3: attempt to access beyond end of device [ 147.580519][ T6188] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 147.617653][ T6174] kvm: emulating exchange as write [ 147.766101][ T6200] loop0: detected capacity change from 0 to 64 [ 147.784863][ T6198] loop1: detected capacity change from 0 to 256 [ 147.892942][ T6198] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 147.921417][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.928959][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.982491][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.008283][ T6198] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 148.028357][ T6208] loop0: detected capacity change from 0 to 6 [ 148.045099][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.054074][ T6208] Dev loop0: unable to read RDB block 6 [ 148.057789][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.067926][ T6208] loop0: unable to read partition table [ 148.068116][ T6208] loop0: partition table beyond EOD, truncated [ 148.068143][ T6208] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 148.068143][ T6208] ) failed (rc=-5) [ 148.100306][ T6198] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 148.108101][ T6198] UDF-fs: Scanning with blocksize 512 failed [ 148.121161][ T6198] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 148.159337][ T6198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.178241][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.189092][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.206370][ T5997] device veth0_vlan entered promiscuous mode [ 148.220136][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.246675][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.285637][ T5997] device veth1_vlan entered promiscuous mode [ 148.308283][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.388366][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.409497][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.430189][ T5997] device veth0_macvtap entered promiscuous mode [ 148.451928][ T6215] device syzkaller0 entered promiscuous mode [ 148.466832][ T5997] device veth1_macvtap entered promiscuous mode [ 148.493803][ T6215] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 148.570068][ T5997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.589597][ T5997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.599610][ T5997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.610554][ T6221] loop1: detected capacity change from 0 to 256 [ 148.615159][ T5997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.626748][ T5997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.651663][ T5997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.667107][ T5997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.678904][ T5997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.698761][ T6221] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 148.699109][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.729682][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.747675][ T6223] tipc: Started in network mode [ 148.755076][ T6223] tipc: Node identity 2e2f66696c6532006e, cluster identity 8 [ 148.768176][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.777043][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.892788][ T6225] loop0: detected capacity change from 0 to 2048 [ 148.941798][ T6225] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.956396][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.966042][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.984584][ T5997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.007448][ T5997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.280960][ T47] Bluetooth: hci4: command tx timeout [ 149.308419][ T6232] exFAT-fs (loop1): hint_cluster is invalid (17) [ 149.324112][ T6232] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 149.332675][ T6232] exFAT-fs (loop1): Filesystem has been set read-only [ 149.339779][ T6232] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 149.441252][ T6225] syz-executor.0: attempt to access beyond end of device [ 149.441252][ T6225] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 149.456149][ T6233] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.503923][ T5997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.533467][ T6204] loop4: detected capacity change from 0 to 32768 [ 149.568380][ T5997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.625886][ T6204] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6204) [ 149.634810][ T5997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.664425][ T6204] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.670941][ T5997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.692948][ T6204] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 149.704454][ T6204] BTRFS info (device loop4): force zlib compression, level 3 [ 149.720020][ T6204] BTRFS info (device loop4): enabling disk space caching [ 149.727204][ T5997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.737866][ T6204] BTRFS info (device loop4): enabling ssd optimizations [ 149.744941][ T5997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.755892][ T6204] BTRFS info (device loop4): setting nodatasum [ 149.781720][ T6204] BTRFS info (device loop4): doing ref verification [ 149.789483][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.796901][ T6204] BTRFS info (device loop4): force clearing of disk cache [ 149.821849][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.845155][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.857998][ T6204] BTRFS info (device loop4): disk space caching is enabled [ 149.878170][ T5997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.892675][ T5997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.909225][ T5997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.977779][ T5997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.085161][ T6204] BTRFS info (device loop4): rebuilding free space tree [ 150.196284][ T6204] BTRFS info (device loop4): disabling free space tree [ 150.205610][ T6204] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.220353][ T6204] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.317281][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.329145][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.363299][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.435027][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.470951][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.503157][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.736521][ T6280] loop1: detected capacity change from 0 to 4096 [ 150.776683][ T6280] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 150.841110][ T6292] loop2: detected capacity change from 0 to 64 [ 151.143789][ T6305] device syzkaller0 entered promiscuous mode [ 151.519270][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.569777][ T6320] tipc: Started in network mode [ 151.581141][ T6320] tipc: Node identity 2e2f66696c6532006e, cluster identity 8 [ 151.616708][ T5282] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.203875][ T6349] loop4: detected capacity change from 0 to 64 [ 152.226435][ T6350] loop3: detected capacity change from 0 to 512 [ 152.259018][ T6350] EXT4-fs: Ignoring removed nobh option [ 152.292811][ T6350] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 152.327624][ T6350] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 152.341440][ T6350] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #13: comm syz-executor.3: casefold flag without casefold feature [ 152.380667][ T6350] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #13: comm syz-executor.3: unexpected EA_INODE flag [ 152.424539][ T6350] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 152.443830][ T6350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 152.569332][ T5321] EXT4-fs (loop3): unmounting filesystem. [ 152.592839][ T6360] loop4: detected capacity change from 0 to 256 [ 153.016704][ T6371] loop0: detected capacity change from 0 to 128 [ 153.050030][ T6371] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.103129][ T6371] ext4 filesystem being mounted at /root/syzkaller-testdir456494988/syzkaller.K2nKCw/79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 153.194444][ T6341] loop1: detected capacity change from 0 to 40427 [ 153.253775][ T6341] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 153.264865][ T6356] loop2: detected capacity change from 0 to 32768 [ 153.275802][ T6356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6356) [ 153.289620][ T6341] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.293279][ T5351] EXT4-fs (loop0): unmounting filesystem. [ 153.312943][ T6356] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.339754][ T6356] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 153.358947][ T6356] BTRFS info (device loop2): force zlib compression, level 3 [ 153.431122][ T6356] BTRFS info (device loop2): enabling disk space caching [ 153.448971][ T6356] BTRFS info (device loop2): enabling ssd optimizations [ 153.473221][ T6356] BTRFS info (device loop2): setting nodatasum [ 153.495460][ T6356] BTRFS info (device loop2): doing ref verification [ 153.515006][ T6356] BTRFS info (device loop2): force clearing of disk cache [ 153.523620][ T3580] Bluetooth: hci4: command tx timeout [ 153.552204][ T6356] BTRFS info (device loop2): disk space caching is enabled [ 153.584256][ T6341] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.588725][ T6387] loop4: detected capacity change from 0 to 64 [ 153.677384][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.328616][ T6341] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 154.385498][ T6341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.508311][ T6356] BTRFS info (device loop2): rebuilding free space tree [ 154.542455][ T5661] syz-executor.1: attempt to access beyond end of device [ 154.542455][ T5661] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.561972][ T6356] BTRFS info (device loop2): disabling free space tree [ 154.592991][ T6356] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.635000][ T6356] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.839340][ T6421] loop4: detected capacity change from 0 to 1024 [ 154.921546][ T6421] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz-executor.4: casefold flag without casefold feature [ 154.953908][ T6421] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 155.003999][ T6421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.086327][ T5282] EXT4-fs (loop4): unmounting filesystem. [ 155.469066][ T6430] loop4: detected capacity change from 0 to 4096 [ 155.493463][ T6430] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 155.626921][ T6406] loop3: detected capacity change from 0 to 32768 [ 155.689716][ T6430] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 155.722331][ T6406] XFS (loop3): Mounting V5 Filesystem [ 155.728689][ T26] audit: type=1800 audit(1717652239.232:1285): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 156.296466][ T26] audit: type=1800 audit(1717652239.232:1286): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 156.508435][ T6406] XFS (loop3): Ending clean mount [ 156.548035][ T6406] XFS (loop3): Quotacheck needed: Please wait. [ 156.566895][ T5997] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.732266][ T6406] XFS (loop3): Quotacheck: Done. [ 156.812271][ T5321] XFS (loop3): Unmounting Filesystem [ 156.911362][ T6454] loop4: detected capacity change from 0 to 128 [ 156.948885][ T6454] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.976461][ T6454] ext4 filesystem being mounted at /root/syzkaller-testdir769077845/syzkaller.Ikbklb/83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 157.193769][ T5282] EXT4-fs (loop4): unmounting filesystem. [ 157.315716][ T6466] Bluetooth: MGMT ver 1.22 [ 157.350126][ T6466] loop4: detected capacity change from 0 to 128 [ 157.367163][ T6466] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.403755][ T6468] loop3: detected capacity change from 0 to 1024 [ 157.410375][ T6466] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.463845][ T6468] EXT4-fs error (device loop3): __ext4_fill_super:5399: inode #2: comm syz-executor.3: casefold flag without casefold feature [ 157.503404][ T6468] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 157.534500][ T6468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.663360][ T5321] EXT4-fs (loop3): unmounting filesystem. [ 157.760968][ T26] audit: type=1800 audit(1717652241.262:1287): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 158.149171][ T6484] loop3: detected capacity change from 0 to 512 [ 158.176705][ T6484] EXT4-fs: Ignoring removed bh option [ 158.209196][ T6484] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #11614: comm syz-executor.3: iget: illegal inode # [ 158.245205][ T6484] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 11614 err=-117 [ 158.266441][ T6484] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 158.272836][ T6476] loop4: detected capacity change from 0 to 32768 [ 158.289516][ T6476] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6476) [ 158.302863][ T6484] EXT4-fs (loop3): 1 truncate cleaned up [ 158.314411][ T6476] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.318299][ T6484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.324860][ T6476] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 158.324901][ T6476] BTRFS info (device loop4): force zlib compression, level 3 [ 158.324928][ T6476] BTRFS info (device loop4): enabling disk space caching [ 158.324950][ T6476] BTRFS info (device loop4): enabling ssd optimizations [ 158.324967][ T6476] BTRFS info (device loop4): setting nodatasum [ 158.324986][ T6476] BTRFS info (device loop4): doing ref verification [ 158.325006][ T6476] BTRFS info (device loop4): force clearing of disk cache [ 158.325019][ T6476] BTRFS info (device loop4): disk space caching is enabled [ 158.538249][ T6476] BTRFS info (device loop4): rebuilding free space tree [ 158.590019][ T6476] BTRFS info (device loop4): disabling free space tree [ 158.602035][ T6476] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.615414][ T6476] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 158.849381][ T5321] EXT4-fs (loop3): unmounting filesystem. [ 160.029780][ T5282] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.062332][ T3580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.072998][ T3580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.081095][ T3580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.088901][ T3580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.100169][ T3580] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 185.107435][ T3580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.767638][ T47] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.778589][ T47] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.786643][ T47] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.794808][ T47] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.805433][ T47] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 185.813725][ T47] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.201203][ T3580] Bluetooth: hci5: command tx timeout [ 187.840999][ T3580] Bluetooth: hci6: command tx timeout [ 189.052810][ T3585] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.062801][ T3585] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.070629][ T3585] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.078448][ T3585] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.086594][ T3585] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 189.093975][ T3585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.281002][ T3580] Bluetooth: hci5: command tx timeout [ 189.930979][ T3580] Bluetooth: hci6: command tx timeout [ 190.034205][ T47] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 190.052478][ T47] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 190.061207][ T47] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 190.070055][ T47] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 190.079564][ T3585] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 190.091278][ T3585] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 190.281698][ T3580] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 190.296239][ T3580] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 190.305451][ T3580] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 190.314086][ T3580] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 190.321957][ T3580] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 190.329176][ T3580] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 191.121916][ T3585] Bluetooth: hci7: command tx timeout [ 191.361041][ T3585] Bluetooth: hci5: command tx timeout [ 192.001057][ T3585] Bluetooth: hci6: command tx timeout [ 192.160990][ T3585] Bluetooth: hci8: command tx timeout [ 192.410981][ T3585] Bluetooth: hci9: command tx timeout [ 193.200970][ T3585] Bluetooth: hci7: command tx timeout [ 193.441003][ T3585] Bluetooth: hci5: command tx timeout [ 194.080903][ T3585] Bluetooth: hci6: command tx timeout [ 194.163527][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169845][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.240940][ T3585] Bluetooth: hci8: command tx timeout [ 194.480919][ T3585] Bluetooth: hci9: command tx timeout [ 195.281061][ T3585] Bluetooth: hci7: command tx timeout [ 196.326586][ T3585] Bluetooth: hci8: command tx timeout [ 196.560944][ T3585] Bluetooth: hci9: command tx timeout [ 197.362888][ T3585] Bluetooth: hci7: command tx timeout [ 198.400938][ T3585] Bluetooth: hci8: command tx timeout [ 198.650968][ T3585] Bluetooth: hci9: command tx timeout [ 237.200978][ T3584] Bluetooth: hci0: command 0x0406 tx timeout [ 237.201005][ T3585] Bluetooth: hci3: command 0x0406 tx timeout [ 237.207048][ T3584] Bluetooth: hci2: command 0x0406 tx timeout [ 250.396168][ T3580] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 250.405912][ T3580] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 250.414521][ T3580] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 250.424018][ T3580] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 250.431665][ T3580] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 250.440323][ T3580] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 250.755360][ T3580] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 250.772425][ T3580] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 250.781460][ T3580] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 250.793746][ T3580] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 250.801432][ T3580] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 250.808750][ T3580] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 252.481165][ T3585] Bluetooth: hci10: command tx timeout [ 252.561138][ T3585] Bluetooth: hci1: command 0x0406 tx timeout [ 252.891018][ T3585] Bluetooth: hci11: command tx timeout [ 254.098271][ T3584] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 254.109697][ T3584] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 254.119302][ T3584] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 254.127306][ T3584] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 254.137309][ T3574] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 254.153320][ T3574] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 254.561156][ T3585] Bluetooth: hci10: command tx timeout [ 254.960947][ T3585] Bluetooth: hci11: command tx timeout [ 255.157050][ T3574] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 255.167871][ T3574] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 255.176615][ T3574] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 255.185760][ T3574] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 255.203917][ T3574] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 255.212976][ T3574] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 255.417175][ T3574] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 255.427222][ T3574] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 255.436463][ T3574] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 255.448127][ T3574] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 255.455779][ T3574] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 255.465703][ T3574] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 255.604795][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.611185][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.241140][ T3585] Bluetooth: hci12: command tx timeout [ 256.641219][ T3585] Bluetooth: hci10: command tx timeout [ 257.040947][ T3585] Bluetooth: hci11: command tx timeout [ 257.280992][ T3585] Bluetooth: hci13: command tx timeout [ 257.521010][ T3585] Bluetooth: hci14: command tx timeout [ 258.321191][ T3585] Bluetooth: hci12: command tx timeout [ 258.721027][ T3585] Bluetooth: hci10: command tx timeout [ 259.120939][ T3584] Bluetooth: hci11: command tx timeout [ 259.360962][ T3584] Bluetooth: hci13: command tx timeout [ 259.601043][ T3584] Bluetooth: hci14: command tx timeout [ 260.410962][ T3584] Bluetooth: hci12: command tx timeout [ 261.450941][ T3584] Bluetooth: hci13: command tx timeout [ 261.680977][ T3584] Bluetooth: hci14: command tx timeout [ 262.480949][ T3584] Bluetooth: hci12: command tx timeout [ 263.521047][ T3584] Bluetooth: hci13: command tx timeout [ 263.761125][ T3584] Bluetooth: hci14: command tx timeout [ 308.881088][ T3574] Bluetooth: hci6: command 0x0406 tx timeout [ 308.881098][ T3580] Bluetooth: hci5: command 0x0406 tx timeout [ 314.000995][ T47] Bluetooth: hci7: command 0x0406 tx timeout [ 314.001165][ T3582] Bluetooth: hci9: command 0x0406 tx timeout [ 314.007068][ T47] Bluetooth: hci8: command 0x0406 tx timeout [ 315.121044][ T28] INFO: task kworker/u4:10:4943 blocked for more than 143 seconds. [ 315.131123][ T28] Not tainted 6.1.92-syzkaller #0 [ 315.136686][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.150824][ T28] task:kworker/u4:10 state:D stack:21504 pid:4943 ppid:2 flags:0x00004000 [ 315.160060][ T28] Workqueue: netns cleanup_net 2024/06/06 05:39:58 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 315.170277][ T28] Call Trace: [ 315.175243][ T28] [ 315.179885][ T28] __schedule+0x142d/0x4550 [ 315.190041][ T28] ? __mutex_lock+0x6b4/0xd80 [ 315.197514][ T28] ? __sched_text_start+0x8/0x8 [ 315.207804][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 315.213356][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 315.218493][ T28] schedule+0xbf/0x180 [ 315.227932][ T28] schedule_preempt_disabled+0xf/0x20 [ 315.233457][ T28] __mutex_lock+0x6b9/0xd80 [ 315.237975][ T28] ? __mutex_lock+0x53c/0xd80 [ 315.247944][ T28] ? cangw_pernet_exit_batch+0x1c/0x90 [ 315.253453][ T28] ? mutex_lock_nested+0x10/0x10 [ 315.258422][ T28] ? __kmem_cache_free+0x25c/0x3c0 [ 315.268795][ T28] ? cangw_pernet_init+0x40/0x40 [ 315.273820][ T28] cangw_pernet_exit_batch+0x1c/0x90 [ 315.279111][ T28] ? cangw_pernet_init+0x40/0x40 [ 315.290816][ T28] cleanup_net+0x763/0xb60 [ 315.295278][ T28] ? ops_free_list+0x3b0/0x3b0 [ 315.300055][ T28] ? process_one_work+0x7a9/0x11d0 [ 315.313345][ T28] process_one_work+0x8a9/0x11d0 [ 315.318333][ T28] ? worker_detach_from_pool+0x260/0x260 [ 315.326195][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 315.335084][ T28] ? kthread_data+0x4e/0xc0 [ 315.339613][ T28] ? wq_worker_running+0x97/0x190 [ 315.362995][ T28] worker_thread+0xa47/0x1200 [ 315.367708][ T28] ? _raw_spin_unlock+0x40/0x40 [ 315.394057][ T28] ? __sched_text_start+0x8/0x8 [ 315.399038][ T28] ? _raw_spin_unlock+0x40/0x40 [ 315.429142][ T28] kthread+0x28d/0x320 [ 315.433277][ T28] ? worker_clr_flags+0x190/0x190 [ 315.438305][ T28] ? kthread_blkcg+0xd0/0xd0 [ 315.470812][ T28] ret_from_fork+0x1f/0x30 [ 315.475297][ T28] [ 315.478357][ T28] INFO: task syz-executor.1:6442 blocked for more than 143 seconds. [ 315.500828][ T28] Not tainted 6.1.92-syzkaller #0 [ 315.506408][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.530830][ T28] task:syz-executor.1 state:D stack:27320 pid:6442 ppid:5661 flags:0x00004006 [ 315.540106][ T28] Call Trace: [ 315.550834][ T28] [ 315.553885][ T28] __schedule+0x142d/0x4550 [ 315.558427][ T28] ? __mutex_lock+0x6b4/0xd80 [