last executing test programs: 1m20.793297545s ago: executing program 0 (id=743): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14, 0x8}, [], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140)={0x2, 0x5}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095c83d9377b9919b1bc6a1604cf971aa28fc9c7b46a5392276c815d56260b08ad37e84a51568c714655a1ef97b15226446832c6a000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x4}) epoll_pwait2(r1, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getroute={0xd6, 0x1a, 0x10, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x40000) syz_emit_ethernet(0x57, &(0x7f0000000380)={@link_local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x2, 0x1, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@snap={0xff, 0xfe, "98", "319e27", 0x8809, "e323855ce453505a3fb61b15a23abe6c109c992e70810524fa8c2ff91c3b7c46b551a0472ba001a945cde0df016d6ac03f78eb91805533d911"}}}}}}, 0x0) 1m20.57191332s ago: executing program 0 (id=745): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffc}}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000011006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) getpgid(0xffffffffffffffff) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpid() 1m17.280130039s ago: executing program 0 (id=754): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$eJzs3Au4TtX2MPAx5pyLTdKb5D7HHIs3bUyXJLkkySVJkiNJbgkhSZKQ3G9JSELuSe4huYXkfr/lniRJkiQkJJnf45zO1zmn8//39f/3fZ7vv8fvedbzzvGud8w15h5773ettZ93f9NhSOW6VSrUZmb4b8G/PXQHgBQA6A8A1wFABAAlspTIcmV/Bo3d/3sHEX+uh6Zf7QrE1ST9T9uk/2mb9D9tk/6nbdL/tE36n7ZJ/9M26b8Qadn2GTmvly3tbnL/Py2T9///QY4WHvvFxsI3dvwDKdL/tE36n7ZJ/9M26X/aJv1P26T/aZv0P22T/guRlv3X7x3L3w7+J2xX+/tPCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUTacCH8ygDA38dXuy4hhBBCCCGEEEL8eUL6q12BEEIIIYQQQggh/u9DUKDBQATpID2kQAbICNdAJrgWMsN1kIDrIQvcAFnhRsgG2SEH5IRckBvygAUCBwwx5IV8kISbID/cDKlQAApCIfBQGIpAUSgGt0BxuBVKwG1QEm6HUlAaykBZuAPKwZ1QHu6CCnA3VIRKUBmqwD1QFe6FanAfVIf7oQY8ADXhQagFf4Ha8BDUgYehLjwC9eBRqA8NoCE0gsb/pfwXoAu8CF2hG3SHHtATekFv6AN9oR/0h5dgALwMA+EVGASDYQi8CkPhNRgGr8NwGAEj4Q0YBaNhDIyFcTAeJsCbMBHegknwNkyGKTAVpsF0mAEz4R2YBbNhDrwLc+E9mAfzYQEshEXwPiyGJbAUPoBl8CEshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHj2AH7IRdsBv2wF7YBx/DfvgEDsCncBA++4P55/8lvyMCAipUaNBgOkyHKZiCGTEjZsJMmBkzYwITmAWzYFbMitkwG+bAHJgLc2EezIOEhIyMeTEvJjGJ+TE/pmIqFsSC6NFjESyCxfAWLI7FsQSWwJJYEkthaSyNZbEslsNyWB7LYwWsgBWxIlbGyngP3oP3YjWshtWxOtbAGlgTa2ItrIW1sTbWwTpYF+tiPayH9bE+NsSG2BgbYxNsgk2xKTbH5tgCW2ArbIWtsTW2wTbYFttiO2yH7bE9dsAO2BE7YSd8AV/AF/FF7IYVVQ/siT2xN/bGvtgP++FLOABfxpfxFRyEg3EIvoqv4ms4DM/hcByBI3EkllOjcQyORVbjcQJOwIk4ESfhJJyMU3AKTsPpOANn4kychbNxNr6Lc/E9fA/n43xciItwES7GJbgUl+IyPI/LcQWuxFW4GtfgalyH63EdbsRNuBG34BbchtvwI/wId+JO3I27cS8aAPwYP8FPcBAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwBJ7Ek3gKT+MZPI1n8Syew/N4AS/gRbyIl/C5XF/V2VtgwyBQVxhlVDqVTqWoFJVRZVSZVCaVWWVWCZVQWVQWlVVlVdlUNpVD5VC5VC6VR+VRpEixilVelVclVVLlV/lVqkpVBVVB5ZVXRVQRVUwVU8VVcVVC3aZKqttVKVVaNfNlVVlVTjX35dVdqoKqoCqqSqqyqqKqqKqqqqqmqqnqqrqqoWqomupBVUv1wL74kLrSmbpqMNZTQ7C+aqAaqkbqNXxMNVHDsKlqppqrJ9QIHI6tVBPfWj2l2qgx2FY9o8bis6q9Go8d1POqo+qkOqsXVBfV1HdV3dRk7KF6qmnYW/VRfVU/NQsrqSsdq6xeUYPUYDVEvaoW4mtqmHpdDVcj1Ej1hhqlRqsxaqwap8arCepNNVG9pSapt9VkNUVNVdPUdDVDzVTvqFlqtpqj3lVz1XtqnpqvFqiFapF6Xy1WS9RS9YFapj5Uy9UKtVKtUqvVGrVWrVPr1Qa1UW1Sm9UWtVVtU9vVR2qH2ql2qd1qj9qr9qmP1X71iTqgPlUH1WfqkPpcHVZfqCPqS3VUfaWOqa/VcfWNOqG+VSfVd+qUOq3OqO/VWfWDOqfOqwvqR3VR/aQuqZ/VZRUUaNRKa210pNPp9DpFZ9AZ9TU6k75WZ9bX6YS+XmfRN+is+kadTWfXOXROnUvn1nm01aSdZh3rvDqfTuqbdH59s07VBXRBXUh7XVgX0UV1MX2LLq5v1SX0bbqkvl2X0qV1GV1W36HL6Tt1eX2XrqDv1hV1JV1ZV9H36Kr6Xl1N36er6/t1Df2Arqkf1LX0X3Rt/ZCuox/WdfUjup5+VNfXDXRD3Ug31o/pJvpx3VQ30831E7qFbqlb6Sd1a/2UbqOf1m31M7qdfla318/pDvp53VF30p31z/qyDrqr7qa76x66p+6le+s+uq/up/vrl/QA/bIeqF/Rg/RgPUS/qofq1/Qw/boerkfokfoNPUqP1mP0WD1Oj9cT9Jt6on5LT9Jv68l6ip6qp+npeobu+8tMc/4P8t/6N/kD/3r0bXq7/kjv0Dv1Lr1b79F79T69T+/X+/UBfUAf1Af1IX1IH9aH9RF9RB/VR/UxfUwf18f1CX1Cn9Qn9Sl9Wv+ov9dn9Q/6nD6vz+sf9UV9UV/65WsABo0y2hgTmXQmvUkxGUxGc43JZK41mc11JmGuN1nMDSarudFkM9lNDpPT5DK5TR5jDRln2MQmr8lnkuYm/OWEwhQ0hYw3hU0RU/SP5Jv85maTagr8U/7v1dfYNDZNTBPT1DQ1zU1z08K0MK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1X0910Nz1NL9Pb9DF9TT/T37xkBpgBZqAZaAaZQWaIGWKGmqFmmBlmhpvhZqQZaUaZUWaMGWPGmXFmgplgJpqJZpKZZCabyWaqmWqmm+lmpplpZplZZo6ZY+aauWaemWcWmAVmkVlkFpvFZqlZapaZZWa5WWFWmFVmlVlj1ph1Zp3ZYDaYTWaT2WK2mOVmu9ludpgdZpfZZfaYPWaf2Wf2m/3mgDlgDpqD5pA5ZA6bw+aIOWKOmqPmmDlmjpvj5oQ5YU6ak+aUOWXOmDPmrDlrzplz5oK5YC6ai+aSuWQum8tXTvsiFanIRCZKF6WLUqKUKGOUMcoUZYoyR5mjRJSIskRZoqzRjVG2KHuUI8oZ5YpyR3kiG1HkIo7iKG+UL0pGN0X5o5uj1KhAVDAqFPmocFQkKhoVi26Jike3RiWi26KS0e1Rqah0VCYqG90RlYvujMpHd0UVorujilGlqHJUJbonqhrdG1WL7ouqR/dHNaIHoprRg1Gt6C9R7eihqE70cFQ3eiSqFz0a1Y8aRA2jRlHjP3X+EM5lf9x3td1sd9vD9rS9bG/bx/a1/Wx/+5IdYF+2A+0rdpAdbIfYV+1Q+5odZl+3w+0IO9K+YUfZ0XaMHWvH2fF2gn3TTrRv2Un2bTvZTrFT7TQ73c6wM+07dpadbefYd+1c+56dZ+fbBXahXWTft4vtErvUfmCX2Q/tcrvCrrSr7Gq7xq616+x6u8FutJvsZrvFbrXb7Hb7kd1hd9pddrfdY/faffZju99+Yg/YT+1B+5k9ZD+3h+0X9oj90h61X9lj9mt73H5jT9hv7Un7nT1lT9sz9nt71v5gz9nz9oL90V60P9lL9md72YYrJ/dX3t7JkKF0lI5SKIUyUkbKRJkoM2WmBCUoC2WhrJSVslE2ykE5KBflojyUh65gYspLeSlJScpP+SmVUqkgFSRPnopQESpGxag4FacSVIJKUkkqRaWoDJWhO+gOupPupLvoLrqb7qZKVImqUBWqSlWpGlWj6lSdalANqkk1qRbVotpUm+pQHapLdake1aP6VJ8aUkNqTI2pCTWhptSUmlNzakEtqBW1otbUmtpQG2pLbakdtaP21J46UAfqSB2pM3WmLtSFulJX6k7dqSf1pN7Um/pSX+pP/WkADaCBNJAG0SAaQkNoKA2lYTSMhtMIGklv0CgaTWNoLI2j8TSBJtBEmkiTaBJNpsk0labSdJpOM2kmzaJZNIfm0FyaS/NoHi2gBbSIFtFiWkxLaSkto2W0nJbTSlpJq2k1raW1tJ7W00baSJtpM22lrbSdttMO2kG7aBftoT20j/bRftpPB+gAHaSDdIgOBQSgI3SEjtJROkbH6DgdpxN0gk7SSTpFp+gMnaGzdJbO0Tm6QBfoIv1El+hnukyBUlwGl9Fd4zK5a11md5371ziHy+lyudwuj7Mum8v+TzE551JdAVfw75eYrqhLTbnyWMh5V9gVcUVdKVfalXFl3R2unLvTlf9NXNXd66q5+1x1d7+r4u75p7iGe8DVdI+4Wu5RV9s1cHVcI1fXPeLquUddfdfANXSNXAvX0rVyT7rW7inXxj39m3ixW+LWuw1uo9vk9rtP3AX3ozvuvnEX3U+uq+vm+ruX3AD3shvoXnGD3ODfxCPdG26UG+3GuLFunBv/m3iqm+amuxlupnvHzXKzfxMvcu+7uW6pm+fmuwVu4V/jKzUtdR+4Ze5Dt9ytcCvdKrfarXFr3br/Xesqt8VtddvcPvex2+F2ul1ut9vj9v41vrKOA+5Td9B95o65r91h94U74k64o+6rv8ZX1nfCfetOuu/cKXfanXHfu7PuB3fOnb+y/nBl7d+7n91lFxwwsmLNhiNOx+k5hTNwRr6GM/G1nJmv4wRfz1n4Bs7KN3I2zs45OCfn4tychy0TO2aOOS/n4yTfxPn5Zk7lAlyQC7HnwlyEi3IxvoWL861cgm/jknw7l+LSXIbL8h1cju/k8nwXV+C7uSJX4spche/hqnwvV+P7uDrfzzX4Aa7JD3It/gvX5oe4Dj/MdfkRrsePcn1uwA25ETfmx7gJP85NuRk35ye4BbfkVvwkt+anuA0/zW35GW7Hz3J7fo478PPckTtxZ36Bu/CL3JW7cXfuwT25F/fmPtyX+3F/fokH8Ms8kF/hQTyYh/CrPJRf42H8Og/nETyS3+BRPJrH8Fgex+N5Ar/JE/ktnsRv82SewlN5Gk/nGTyT3+FZPJvn8Ls8l9/jeTyfF/BCXsTv82Jewkv5A17GH/JyXsEreRWv5jW8ltfxet7AG3kTb+YtvJW38Xb+iHfwTt7Fu3kP7+V9/DHv5wy//MB9xof4cz7MX/AR/pKP8ld8jL/m4/wNn+Bv+SR/x6f4NJ/h7/ks/8Dn+Dxf4B/5Iv/El/hnvsyBIcZYxTo2cRSni9PHKXGGOGN8TZwpvjbOHF8XJ+Lr4yzxDXHW+MY4W5w9zhHnjHPFueM8sY0pdjHHcZw3zhcn45vi/PHNcWpcIC4YF4p9XDguEheNi8W3xMXjW+MS8W1xyfj2uFRcOn7k/rLxHXG5+M64fHxXXCG+O64YV4orx1Xie+Kq8b1xtfi+uHp8f1w8fiCuGT8Ywy+fV6kTPxzXjR+J68WPxvXjBnHDuFHcOH4sbhI/HjeNm8XN4yfiFnHLuFX8ZNw6fipuEz/9u/u7xz3innGvuFccwn16QXJhclHy/eTi5JLk0uQHyWXJD5PLkyuSK5OrkquTa5Jrk+uS65MbkhuTm5Kbk1uSW5PbkiFUSQ8evfLaGx/5dD69T/EZfEZ/jc/kr/WZ/XU+4a/3WfwNPqu/0Wfz2X0On9Pn8rl9Hm89eefZxz6vz+eT/iaf39/sU30BX9AX8t4X9kV8I9/YN/ZN/OO+qW/mm/sn/BO+pW/pn/RP+qd8G/+0b+uf8e38s769f84/55/3HX0n39m/4Lv4F31X38139919T9/T9/a9fV/f1/f3/f0AP8AP9AP9ID/ID/FD/FA/1A/zw/xwP9yP9CP9KD/Kj/Fj/Dg/zk/wE/xEP9FP8pN8BABT/VQ/3U/3M/1MP8vP8nP8HD83da6f5+f5BX6BX+QX+cV+sV/ql/plfplf7pf7lX6lX+1X+7V+rV/v1/uNfqPf7Df7rX6r3+63+x1+h9/ld/k9fo/f5/f5/X6/P+AP+IP+oD/kD/nD/rA/4r/0R/1X/pj/2h/33/gT/lt/0n/nT/nT/oz/3p/1P/hz/ry/4H/0F/1P/pL/2V/2wU9IvJmYmHgrMSnxdmJyYkpiamJaYnpiRmJm4p3ErMTsxJzEu4m5ifcS8xLzEwsSCxOLEu8nFieWJJYmPkgsS3yYWJ5YkViZWJVYnVhjIOTeEYe8IV9IhptC/nBzSA0FQsFQKPhQOBQJRUOxcEsoHm4NJcJtoWS4PZQKpUOZ8GioHxqEhqFRaBweC03C46FpaBaahydCi9AytApPhtbhqdAmPB3ahmdCu/BsaB+eCx3C86Fj6BQ6hxdCl/Bi6Bq6he6hR+gZeoXeoU/oG/qF/uGlMCC8HAaGV8KgMDgMCa+GoeG1MCy8HoaHEWFkeCOMCqPDmDA2jAvjw4TwZpgY3gqTwtthcpgSpoZpYXqYEWaGd8KsMDvMCe+GueG9MC/MDwvCwrAovB8WhyVhafggLAsfhuVhRVgZVoXVYU1YG9aF9WFD2Bg2hc1hS9gatoXt4aOwI+wMu8LusCfsDfvCx2F/+CQcCJ+Gg+GzcCh8Hg6HL8KR8GU4Gr4Kx8LX4Xj4JpwI34aT4btwKpwOZ8L34Wz4IZwL58OF8GO4GH4Kl8LP4fIf/MxapT/zFroQQgghxP9Hev3O/h7/5jkDAOqX8U8hhGt35jz6j/s1AGzO9rdxH5WrRQIAnurW4aG/bxUrdu/e/ZfXLtcQ5ZsPAIl/OcAv8QpoDi2hNTSDYv+2vj6q00X+nfmTtwFk/IecFPg1/nX+z/+D+R97YuTikvGFLP/J/PMBUvP9mnPlKvzv8QpofmU10AyK/wfzZ2/yO/Vn+GICQNN/yMkEAE0z/Gv9ReBxeBpa/9MrhRBCCCGEEEKIv+mjyrT7vevnK9fnucyvOenh1/j3rs+FEEIIIYQQQghx9T3bqfOTj7Vu3aydDGQggzQ2aPmfvOZq/2YSQgghhBBC/Nl+Pen/9bkMV7MgIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAiDfp/8Z/GrvYahRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiKvtfwUAAP//D5g3fQ==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') lseek(r3, 0x7fffffffffffffff, 0x0) 1m12.924310762s ago: executing program 0 (id=759): syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000240)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x6563, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) 1m5.971271439s ago: executing program 2 (id=767): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x4000007, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r2, 0x0) listen(r1, 0x0) close(r2) 1m5.584036276s ago: executing program 2 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x60, 0x0, 0x0, 0x0, 0x43, 0x1f, 0x0}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)={[{@nodiscard}, {@order_strict}, {@nobarrier}, {@norecovery}, {@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xa75, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x80186e82, &(0x7f0000000800)={@desc={0x4, 0x0, @auto="000010005c00"}}) 1m4.202159543s ago: executing program 0 (id=774): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000280)={[{@datacow}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x3, 0x50d4, &(0x7f00000051c0)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64c42, 0x43) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendfile(r4, r4, 0x0, 0x1000200201005) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m4.155605667s ago: executing program 2 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x3, 0x18a, &(0x7f0000002480)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xf, 0x0, 0x0) getrlimit(0x9, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000005b40), 0x200000, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x6) open(0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff00403c002001000000000000000000"], 0x0) open$dir(&(0x7f0000005b80)='./file0\x00', 0x181000, 0x21) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2200000, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x5509, &(0x7f0000000500)="$eJzs3E1rY+UXAPCTdjrv//kXceFuLgxCC5Mw6cugu6oz+IIdyqgLV5omachMkluaNK1duXApLvwmouDKpZ/BhWt34kJxJyi591anvoBDk8a2vx/cnPs8eXLuecIwcO4tCeDcmk9+/rEUN+JKRMxGxPWI7LxUHJm1PDwXETcjYuaJo1TM/z5xMSKuRsSNUfI8Z6l469Pbw1urP7zx01ffXLpw7bMvv53eroFpez4iutv5+V43j2krj4+K+dqwncXuyrCI+Rvdx8U4zeNeczPLsFc7XFfL4nIrX59u7/ZHcatTq49iq72VzW/38gv2h63DPNkHHtV2snGjuZnFdj/NYusgr2v/IP+/7aA/yPM0inwfZOljMDiM+Xxzv5nvZ/txFuu9QTGf500bzf1RHBaxuFzU004jq2PzON/0f9ub7d7ufjJs7vTbaS9ZrVRfqFTvlqs7aaM5aK6Ua93G3ZVkodUZLSsPmrXuWitNW51mpZ52F5OFVr1erlaThXvNzXatl1SrleXKnfLqYnF2O3n1wTtJp5EsjOLL7d7uoN3pJ1vpTpJ/YjFZqiy/uJjcqiZvrW8kGw/v31/fePu9e+8+eGn99VeKRX8pK1lYurO0VK7eKS9VF8/R/j8qih7j/uFYSk+3/NKk6gA4RfT/wDRMrv/feRgx+f4/9P9jcar63/Pe/09g/3AsT9n/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdnw39/lr2cl8Pr5WzP+vmHqmGJciYiYifv0bs3HxSM7ZIs/cP6yf+1MNX5ciyzC6xqXiuBoRa8Xxy/8n/S0AAADA2fXFhzc/ybv1/GV+2gVxkvKbNjPX3x9TvlJEzM1/P6ZsM6OXZ8eULPv3fSH2x5Qtu4F1eUzJ8ltuF8aV7V+ZPRIuPxFKeZg50XIAAIATcbQTONkuBAAAgJP08bQLYDpKcfgo8/BZcPaX9388ELxyZAQAAACcQqVpFwAAAABMXNb/+/0/AAAAONvy3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+Y+d+bhMHojgAPxu8sP+0aLX3bWVvUMaWsMc9RhSQJiiBtJAGqIHcUkIEER4HhYhEkTy2FfR9khnGgh8zCA7zRhoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0l21Xtxc/b5um7Pbt5NnNgAAAMA522q9qJ/MUv9rc/97c+tn0y8iooyIc2v3UXw6yRw1OdUrr69ejOE2ok44fMakub5ExJ/mevjR9bcAAAAAl2uzXM3Taj09zIYeEH1KRZvy299MeUVEVLP7TGnlIe9XprD69z2O/5nS6gLWNFNYKrmNc6W9S/13P1btps+aIjXl2+/PNncAAKBHo5Om31UIAAAAffo39AAYRhFPW5nHrcBJaprtvc8nPQAAAOADKoYeAAAAANC5ev3v/D8AAAC4bOn8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq0rdaLzXI1b5uz27eTZzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj+zPOwqEQBiEwd71ncnc/7DSoKmpSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT+3KQCCQBgGt7Kvf+H9Dxsv6BkimAHhYRcFAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiRe8YyTq0ztsRTVS3TxJ5xr6ojq8SZVeLKhT4ebP3DHwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC879/MaRxUHAPzNzM42rYprlBwiYsGDXmy6ra29iQclePBPEEK6rbFbf7Q52FKEXLxJzr2IHkUEJd76P/TcQi/11sMeKnhW5lfy0gZchc5ssp8PvHnfGYZ53zcLId99LwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCfyft7cVYcBlWc1tfuPb61XvT3n+gLd7YfLBetiJM2kz4cXotPkqXoZKH9ZAAAAJgPWVPfhxAe5jurRZ8Oyvo/b+4pav4fXqjipp5/su5v+qb2L9rvvz16ZXegQTVO8dBLG+PR6adT6T27Wc62F//1jl755svvXrLyA0k/2np5kpfvM/nu7t0P+mV4rI1sAYD/41TT10Hz+1DRD7tMDIC50YsK76b+zwbd5gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQhslWeK6JkxDCcm8vLtx/fGv9oP7O9oPlpp2/fXs7fmbxiDyEcGljPDodFlqczWy7fuPmlbXxeHSt/eD1EEJXo79XT//KJ1PcHMIzSuNkR29+zoK0/rBnJZ/DEXT4QwkAgCMpr1tR1z/Md1aLa8liCH//uL/+fzOKw5T1/6NPz9+Lx4rr/2FrM5x9K5tXv1y5fuPm2xtX1y6PLo8+f+fM8N3h2Qvnzl1YKb8rqY5dpwkAAMAh1q9bXP+ni0+v/5+I4jBl/f/V98Nv4rEy9f+B9hb9us4EAABgvr108q8/kwOuJ/1++Hptc/PasDrunp+pjh2k+p8dq1tc/2eLXWcFAAAAtGGylexb/78YxWHK9f/nf3r1l/iZWQjheL3+f2r9i/HF9qYz09r4c+Ku5wgAAEC3jtctXv/Py/3/6e6WhzSE8NYbVVz/G8Cp6v/sw29/jseK9/+fbW+KMyldqt5H2S+F0FvqOiMAAACOsoWyDcr6/498Z/WzX0983Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//LVo+Qw==") r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r4, &(0x7f0000001c00)={0x2020}, 0x2020) 1m3.297533186s ago: executing program 2 (id=777): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x200000001) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000400)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 1m1.525609096s ago: executing program 0 (id=782): r0 = syz_open_dev$vivid(&(0x7f0000001bc0), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000001c00)={0x0, 0xc, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1e93eff9"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x9101a, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004400)={0x2020}, 0x2020) 1m0.894036367s ago: executing program 2 (id=784): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 57.775453739s ago: executing program 2 (id=789): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = getpid() getrusage(0xfffffffffffffffe, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 21.731292985s ago: executing program 1 (id=848): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000180), &(0x7f0000000280)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x4, 0x71, 0x11, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x70}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r6, @ANYRESOCT=r6, @ANYRES32, @ANYRES8=r6, @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x4045}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x78, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, r7, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 20.547923705s ago: executing program 5 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000090) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000002240)=@updpolicy={0x1c8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {}, {0xfffffffffffffffe, 0x0, 0x8001}}, [@policy_type={0xa, 0x10, {0x1}}, @tmpl={0x104, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x2, @in6=@private1, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in6=@loopback}, {{@in6=@remote, 0x0, 0x32}, 0x2, @in6=@private0, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@private0, 0x0, 0x1, 0x0, 0x0, 0x9}]}]}, 0x1c8}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0xd, 0x0, 0x1, 0x3, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x6c}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() syz_open_dev$sg(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14.96271344s ago: executing program 1 (id=855): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) 14.949939994s ago: executing program 5 (id=856): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000000480)=ANY=[], 0xfd, 0x697, &(0x7f00000009c0)="$eJzs3UtsHHcdB/DvrDdrO6DUbdMHCKlRIyJoRGJnKQkCREAI5VChSFx64WAlTmNlk1aOi9wKUZfnlWMPPRShcOgJ9YBUxKGiXLggIXHiknsk7j6xaGZn1+tu7KzjJruBz0eanf/M/zG/+Xke+5A1Af5vXXg5hzZT5MLJlzbK5du32p3bt9rX++Uks0kaSbM3S3EjKT5Ozqc35XPlynq4YrftvHjnw3dPvPN+u7fUrKeqfWOvfiPu2nKznnIsyUw9P4Ad41068HjFIO4yYcf7iYNJ646ojvv8bbzu45+3wNQqevfNEQvJ4SRz9fuA3l2xd89+pG1OOgAAAAB4CB7bylY2cmTScQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCjpH7+f1FPjX75WIr+8/9b1bpW1bw16XgP6qNJBwAAAAAAAAAAn4LntrKVjRzpL3eL6jf/56uFo9XrZ/J6bmYlazmVjSxnPetZy1KShar+7eq1tbG8vr62tFvPbrf7Vnem6nlm0DNDPc+MhFbsHXl39sA7DwAAAAAAAACPmD1+LP9ZLmz//g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANOgSGZ6s2o62i8vpNFMMpekVbbbTP7cLz/KPpp0AAAAAPAQPLaVrWzkSPGf3nK3qD7zP1197p/L67mR9axmPZ2s5HL1XUDvU3/jH5vtzu1b7evlNDrud/69rzCqEdP77uHuW16sWjxVt99M8v38MCdzLBezltX8OMtZz0qO5XtVaTlFFqqx/vWtpI5zJN7Z8uX8jlAu3ivWZ6tI5nMlq1Vsp3Jp8DVIo99maGt/bCU7MtTI22V2im/XxszR5Xpe/g1+U8+nw0K1U4cGGVmsc19m4/Hbu+W+0jtOZve/pWa9pjH4DuroXlu6z5wfrudlrn81nPPnxo34QRnOeRnVmTQGR9/Te+c8+fI//3LxaufGtatXbp6cnsNoV91u963daz959LUHmZjLM+NnYnOXTHywc3Hmbm3m9rlDD0irzkYvxu2rZXJh+GrZ7SYjV8vnq75Hspof5NVczkrOZjFLOZfFfD1n0t5xhD21d16rc62xv3Pt+JfqwnySX9fz6VDm9fGhvA5f6RaquuE121l6Yows7fOK1Px8XSi38fOhO86k9a7Cw5lYGsrEk3tn4rflEZmbnRvX1q4uvzbmFk/U8/K0/eXO++HvDr4/B1Hm4onyj1Ut7Tw6yron71q3VNUdHdQ1RuqeGtTd60xt1e/hRkfq1T1z17p2VffsUN2Odzl5NZ3BuxAApkV3dNXhFw635u/M/33+vflfzF+df2nuu7PnZr/QyqG/Nv8084fG7xvfLF7Ie/lpjkwiYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+F9z8403ry13OitrU1Ro1IU09te93J+JBz+thdkk++1VND/dMD5Ict/d+88K7K/5Ymcln92jV3PoCN/uNRV/i4MXvvGjOhn3aNzc32k+Xw84LQ8XAx6k0+vXXzt98403v7J6ffmVlVdWbpw5d/bc2fbXlr56+spqZ2Wx9zrpKIEHYfvuP+lIAAAAAAAAAAAAgHE9jP9YmPQ+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+2Cy/n0GaKLC2eWiyXb99qd8qpX95u2UzSSFL8JCk+Ts6nN2VhaLhit+28eOfDd0+88357e6xmv31jr37j2aynHEsyU88/2WDU7FjjXRoer3E/4RWDPSwTdryfOJi0/wYAAP//bqMAcg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x1a3840, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002480)='./file1\x00', 0x101042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 13.792539226s ago: executing program 1 (id=858): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x0, 0xc0000) r1 = socket$rds(0x15, 0x5, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x703, 0x60) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000040)={&(0x7f0000000240)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) 11.46895507s ago: executing program 3 (id=864): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e9488820a629fbf61482e779fe677d802f4fdfb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f2409000000005e9299d7a3ffff531126f8c5b59b3e9a83964da1c7aeb1e1", @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYRESOCT=r2, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688db94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b5779e5f5259bfe19c0efe18aefa4d385e7f9e33730333759efdf030756e8bf8962e6fcf3b8c519c233fff4bda5ca", @ANYRESOCT], 0x2, 0x1eb, &(0x7f0000000900)="$eJzsmb/P0kAYx7937Qvv+8YYXRxcHHyNr1FKW9SwEIOJuwn4a5NIIWgBAzUBEhOJC4ujg4mr/4CDA5ODm5urDmpi4iCjc81dj7a0WPHHoPH5JFy/z91zz91zLU8TAEEQ/y0fP3x9/+hiuX4GwAHsIa/6P2uRD4/5v3ty7/TjyqWnz98+e9U7eH+ejMcA+P7m6+8AeFnV4AXmg63E+J661sFDfQUcp5S+BoYTSt8Ex1WlHTDcUPp2TPd3lHAd41bfbbY6rmOKxhKN3dIS6+sAFlOGJoBtmZvvs9j4cDy503BdZ5AUW/5yndTQJiKHaHrW+cn9VTkqyhb7E/fr+uzhVNiG6jdj52eBw1K6BIaa0mXkYRhGdCSx/I/qUXwtK3+WTgns5/PPEjik7vGPnA8XVnou/NltkPhHReoRFV/osOfIYv46PevT37L5XxCycAFIDb3Z/b3IyyK11ieqT0wHTsbqkw49rB9Fr3u3OBxPCp1uo+20nZ5tl86bZ03znF2UhShoM+rftqxPu7H4yXfIkhzLYdTwvIE1AryBFdp20EYJoPai/0XO4bL+cewfD2KIR0WmnV+/BlMfLq9C7SdfKQRBEARBEARBEARBEARBEBszW7GOgclfQdUfVf53sC9L728BAAD//8J6XIQ=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000001c0)=0x3, 0x2) fadvise64(r4, 0x0, 0x0, 0x3) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f0000000c00)=""/136, 0x88}], 0x3}}], 0x1, 0x0, 0x0) 10.400474217s ago: executing program 5 (id=865): socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 10.144256847s ago: executing program 3 (id=867): socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x4000}, 0x0, &(0x7f0000002840)={0xff, 0x356, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, &(0x7f0000002880)={0x0, 0x989680}, 0x0) 9.879916813s ago: executing program 1 (id=868): syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x140000, {{0xa, 0x4e21, 0x400, @mcast1, 0x80000000}}}, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='contention_end\x00', r4}, 0x10) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000000)) connect$pppl2tp(r3, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, 0x0) r6 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000680), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f00000018c0)={0x0, 0x3}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]}, 0x78) 8.928704374s ago: executing program 5 (id=869): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @loopback}, r4}}, 0x48) 7.919849045s ago: executing program 3 (id=871): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0xfffe}, @rumble}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) setregid(0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1508}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}]}}}]}, 0x44}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)="1047c014e055303b6bcbf5910789ebeb57dac0125f3532e94604d2e02093da3570fabb5fa574fd8d2e416afb02f6dc078a64bb448e85af6fc439760430f2e4f5abd7c78faec94b6c893cfdb6df23afe98fed527168a8df545e8f61f47559143f87cb18f392ed0774a389ece547b52adab0", 0x71}], 0x1, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffb0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000d80)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e40)="78e3488741fae8f539f62cc8f23f1259d3333f1a3f6c64e910de33bf90eee9623cfd0b532597236d28b03e13c94e56f73b41cc3a0e06c0d0dc52959059f24840d7d125c61f5ba1eff69428876676", 0x4e}], 0x1, &(0x7f0000003d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb3}}], 0x30}}, {{&(0x7f0000001000)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000003f80)=[{&(0x7f0000003dc0)}, {&(0x7f0000003ec0)}], 0x2, &(0x7f0000003fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_ttl={{0x14}}], 0x48}}], 0x4, 0x81) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 7.727626391s ago: executing program 4 (id=872): pipe2(&(0x7f0000000080), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000000c0), 0xe, 0x4f7, &(0x7f0000002a80)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="6f59bb69296212101db2d25d7d1550eabd8017f1dcae8582eee7d0417821deba372ff17566312ebdfed0dee4fcaabfcd0f157495460a5f6fcd15448f", 0x3c}], 0x1}}], 0x1, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x83}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x0, r1}) read(r1, &(0x7f0000000040)=""/14, 0xe) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x800800, &(0x7f00000000c0)=ANY=[], 0x1, 0x1ca, &(0x7f00000024c0)="$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") setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000840)={@remote}, 0x14) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000640)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 7.57403968s ago: executing program 5 (id=873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000008000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0xe8, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@random="64059bf280de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'sit0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@multicast1, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'hsr0\x00', 'netdevsim0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ec759c9bd8abef17d071680057cd9a6d71ad0e76926c26a2c1ab2520dfb4ce00814bdaac3aa171fdd8a6cca413899529bed424eb7511bd4aa223ebea3bcf29b0"}}}, {{@arp={@broadcast, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @remote, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r4 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x705c, &(0x7f0000000040)={0x0, 0x9a7b, 0x0, 0x1}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x18, 0x20000000, r8) 6.344741041s ago: executing program 5 (id=874): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x4161, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r2, 0x0) socket$inet6(0xa, 0x1, 0x0) 6.31661236s ago: executing program 4 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2) ioperm(0xf636, 0xff, 0x5) 5.329381227s ago: executing program 3 (id=876): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_io_uring_setup(0x24fc, &(0x7f0000000400), 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x9, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x1, @stop_pts=0x81}) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clock_gettime(0x2, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r3, 0x3, r1, 0x6}) socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f00003c6000/0x2000)=nil, 0x2000, 0x1000003, 0x10010, r1, 0x0) 5.280779737s ago: executing program 4 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff000) 3.991789865s ago: executing program 4 (id=878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ec0301000000000000000000000000c20805f156e108880a14000000ed"], 0x28}}, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) execve(0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "9343b30143784bd83a618bfbc699a7868e544f"}) unshare(0x24020400) syz_emit_ethernet(0x93, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv4={0x800, @generic={{0xe, 0x4, 0x1, 0x1, 0x85, 0x64, 0x0, 0x0, 0xc, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4, 0x1}, @noop, @generic={0x94, 0x12, "1d8d3131ccee10950588f5fd9c2c23e8"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x5, [{@remote, 0x18a}]}]}}, "7bdab863a1efa78a16cc3e414d237869db91ebc1fd1d6be942f1183eb90a0f9218f8626af8c0180d0f602b7b7e94bba41ba1ca04bc4108b84bf7b54430062a197b6a61c53b5777f6b2ce629c20"}}}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) 3.646712837s ago: executing program 4 (id=879): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.610596143s ago: executing program 1 (id=880): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af60, 0xffffffffffffffff) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d312c6e6f7374726963742c6c617374626c6f636b3d30303030303030303030303030303030303534362c6769643d666f726765742c6c6f6e6761642c6c6f6e6761642c756e64656c6574652c6d6f64653d30303030303030303030303030303030303030303030352c66696c657365743d30303030303030303030303030303030303030352c00dec7384d8361a83b0c62d0234b0736200709c52d3e3f9a6b8c5dc6bb7c76b4915fba54683d202192d9190f2b60a16fc088c41f1a3eb4a78b4ac61f8bee04ae1cf7901c792b3a8eff396e2065bc6c5f90f860a13e0bd7a8f1ff"], 0x1, 0xc43, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @long}, 0x14, &(0x7f0000000140)={0x0}}, 0x0) 3.588530625s ago: executing program 3 (id=881): write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf, 0x0, "cd2cf7680800000100f200a0fc380e43c96d22"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000000f9, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f00000000c0)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 1.161188623s ago: executing program 4 (id=882): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) mmap$xdp(&(0x7f0000ceb000/0x1000)=nil, 0x1002, 0x0, 0x10, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r0, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d0", 0x40) syz_open_dev$hidraw(&(0x7f0000000040), 0x7, 0x10000) 945.941897ms ago: executing program 3 (id=883): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e21, 0x80000, @local}, 0x1c, 0x0, 0x0, 0x0, 0xf}, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) 0s ago: executing program 1 (id=884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, &(0x7f00000003c0), 0x0, 0x35c556aae2ce9086}, 0x40800) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) kernel console output (not intermixed with test programs): 8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.987437][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.998536][ T8120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.007981][ T8120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.017100][ T8120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.025892][ T8120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.876885][ T8610] loop0: detected capacity change from 0 to 256 [ 465.905625][ T8339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.007986][ T8339] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.069217][ T8339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.109917][ T8339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.189245][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.196514][ T5377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.225361][ T5225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 466.235366][ T5225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 466.243450][ T5225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 466.252646][ T5225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 466.261535][ T5225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 466.273593][ T5225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 466.275087][ T8599] loop5: detected capacity change from 0 to 32768 [ 466.341565][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.348771][ T5377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.435801][ T8610] loop0: detected capacity change from 0 to 128 [ 466.527534][ T29] audit: type=1326 audit(1726868530.436:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 466.571424][ T29] audit: type=1326 audit(1726868530.476:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 466.935841][ T29] audit: type=1326 audit(1726868530.516:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab9c37c9df code=0x7ffc0000 [ 466.969752][ T5335] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 467.713312][ T29] audit: type=1326 audit(1726868530.516:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 467.735791][ T29] audit: type=1326 audit(1726868530.516:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 467.758176][ T29] audit: type=1326 audit(1726868530.516:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 467.790013][ T29] audit: type=1326 audit(1726868530.516:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 468.048715][ T8644] loop0: detected capacity change from 0 to 32768 [ 468.057078][ T29] audit: type=1326 audit(1726868530.516:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 468.079444][ T8644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.567 (8644) [ 468.094473][ T29] audit: type=1326 audit(1726868530.516:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 468.118064][ T29] audit: type=1326 audit(1726868530.516:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 468.214269][ T8599] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 468.216799][ T8648] loop4: detected capacity change from 0 to 128 [ 468.241120][ T8599] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop5": -EINTR [ 468.241594][ T8599] XFS (loop5): log mount failed [ 468.255816][ T8644] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.266016][ T8644] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 468.275243][ T8644] BTRFS info (device loop0): using free-space-tree [ 468.349882][ T5225] Bluetooth: hci6: command tx timeout [ 468.411710][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.423179][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.433042][ T5335] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 468.442218][ T5335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.455006][ T5335] usb 2-1: config 0 descriptor?? [ 468.542812][ T8339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.594714][ T8648] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 468.775493][ T8648] sysv_free_block: trying to free block not in datazone [ 469.023080][ T5335] appleir 0003:05AC:8241.0006: item fetching failed at offset 5/7 [ 469.073271][ T5335] appleir 0003:05AC:8241.0006: parse failed [ 469.079292][ T5335] appleir 0003:05AC:8241.0006: probe with driver appleir failed with error -22 [ 470.429722][ T5225] Bluetooth: hci6: command tx timeout [ 470.500499][ T8685] netlink: 148 bytes leftover after parsing attributes in process `syz.5.570'. [ 471.244541][ T5377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.352597][ T5285] usb 2-1: USB disconnect, device number 4 [ 472.295094][ T5377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.328828][ T7011] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 472.345059][ T8692] loop1: detected capacity change from 0 to 512 [ 472.354182][ T8113] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 472.367720][ T8692] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 472.471839][ T8625] chnl_net:caif_netlink_parms(): no params data found [ 472.518241][ T8692] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.573: iget: bad i_size value: -6917529027641081756 [ 472.532532][ T5225] Bluetooth: hci6: command tx timeout [ 472.539822][ T8339] veth0_vlan: entered promiscuous mode [ 472.540810][ T8692] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.573: couldn't read orphan inode 17 (err -117) [ 472.558709][ T8339] veth1_vlan: entered promiscuous mode [ 472.627841][ T8692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.358462][ T5377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.390557][ T8700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 474.653891][ T5225] Bluetooth: hci6: command tx timeout [ 474.743826][ T7811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.792420][ T5377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.420718][ T8726] loop0: detected capacity change from 0 to 8 [ 476.608981][ T8729] loop1: detected capacity change from 0 to 512 [ 476.697271][ T8736] input: syz0 as /devices/virtual/input/input9 [ 477.001009][ T8339] veth0_macvtap: entered promiscuous mode [ 477.146377][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.154183][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.165106][ T8625] bridge_slave_0: entered allmulticast mode [ 477.185251][ T8729] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 477.195807][ T8625] bridge_slave_0: entered promiscuous mode [ 477.284375][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.311639][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.409999][ T8625] bridge_slave_1: entered allmulticast mode [ 477.413706][ T8728] loop1: detected capacity change from 0 to 16 [ 477.471207][ T8728] erofs: (device loop1): mounted with root inode @ nid 36. [ 477.475911][ T8625] bridge_slave_1: entered promiscuous mode [ 477.677195][ T8738] loop4: detected capacity change from 0 to 512 [ 477.709001][ T8339] veth1_macvtap: entered promiscuous mode [ 477.809953][ T8738] EXT4-fs error (device loop4): __ext4_iget:4982: inode #11: block 1: comm syz.4.583: invalid block [ 477.824056][ T8742] loop0: detected capacity change from 0 to 256 [ 477.846096][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.857277][ T8738] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.583: couldn't read orphan inode 11 (err -117) [ 477.924673][ T8742] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 477.949193][ T8738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.337230][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.385327][ T7011] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.734620][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.801446][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.819085][ T8753] loop1: detected capacity change from 0 to 8 [ 479.834089][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 479.834115][ T29] audit: type=1326 audit(1726868543.746:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 479.844818][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.923106][ T29] audit: type=1326 audit(1726868543.746:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 479.961331][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.963090][ T29] audit: type=1326 audit(1726868543.746:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 479.992996][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.994776][ T29] audit: type=1326 audit(1726868543.746:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 480.025184][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.029986][ T29] audit: type=1326 audit(1726868543.746:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 480.055277][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.058791][ T29] audit: type=1326 audit(1726868543.746:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 480.088981][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.108359][ T29] audit: type=1326 audit(1726868543.756:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 480.117789][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.134934][ T29] audit: type=1326 audit(1726868543.756:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 480.164565][ T29] audit: type=1326 audit(1726868543.756:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 480.179653][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.188153][ T29] audit: type=1326 audit(1726868543.756:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c37def9 code=0x7ffc0000 [ 480.219661][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.235877][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.258367][ T8339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.368083][ T8625] team0: Port device team_slave_0 added [ 480.413437][ T8625] team0: Port device team_slave_1 added [ 480.452672][ T5377] bridge_slave_1: left allmulticast mode [ 480.458574][ T5377] bridge_slave_1: left promiscuous mode [ 480.490214][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.530551][ T5377] bridge_slave_0: left allmulticast mode [ 480.536431][ T5377] bridge_slave_0: left promiscuous mode [ 480.545836][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.621702][ T8761] loop4: detected capacity change from 0 to 512 [ 480.631278][ T8761] EXT4-fs: Ignoring removed nobh option [ 480.693711][ T8761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 480.748599][ T8761] EXT4-fs (loop4): 1 truncate cleaned up [ 480.760300][ T8761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.809211][ T7011] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.358034][ T8776] loop4: detected capacity change from 0 to 4096 [ 484.425145][ T8780] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.472784][ T8787] loop5: detected capacity change from 0 to 256 [ 486.497231][ T8790] loop4: detected capacity change from 0 to 256 [ 486.505594][ T8787] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 486.530213][ T8790] vfat: Unknown parameter '000000000000000000000000x0000000000000000' [ 486.543099][ T8792] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 486.810983][ T5377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.825550][ T5377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.862422][ T5377] bond0 (unregistering): Released all slaves [ 486.907154][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.925199][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.946907][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.968883][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.987959][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.999101][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.019257][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.040063][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.055315][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.075665][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.088329][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.108406][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.188726][ T8339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.239888][ T8791] smc: net device lo applied user defined pnetid SYZ2 [ 487.272378][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.283279][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.395908][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.453705][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.492957][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.574294][ T8815] loop1: detected capacity change from 0 to 1024 [ 487.575293][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.596926][ T8815] EXT4-fs: Ignoring removed orlov option [ 487.691638][ T8821] cgroup: fork rejected by pids controller in /syz5 [ 487.774041][ T8815] EXT4-fs (loop1): Test dummy encryption mode enabled [ 487.965920][ T8815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.335294][ T8339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.356856][ T8339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.369765][ T8339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.378503][ T8339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.495163][ T7811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.656636][ T5377] hsr_slave_0: left promiscuous mode [ 489.724505][ T5377] hsr_slave_1: left promiscuous mode [ 489.747864][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.769943][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.788286][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.809965][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.827414][ T8839] loop4: detected capacity change from 0 to 2048 [ 489.886352][ T5377] veth1_macvtap: left promiscuous mode [ 489.899443][ T5377] veth0_macvtap: left promiscuous mode [ 489.908664][ T8839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.929145][ T5377] veth1_vlan: left promiscuous mode [ 489.935201][ T5377] veth0_vlan: left promiscuous mode [ 489.956030][ T8839] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 490.001606][ T8839] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 490.109943][ T8839] EXT4-fs (loop4): This should not happen!! Data will be lost [ 490.109943][ T8839] [ 490.131603][ T8839] EXT4-fs (loop4): Total free blocks count 0 [ 490.137727][ T8839] EXT4-fs (loop4): Free/Dirty block details [ 490.157227][ T8839] EXT4-fs (loop4): free_blocks=2415919104 [ 490.187016][ T8839] EXT4-fs (loop4): dirty_blocks=32 [ 490.201750][ T8839] EXT4-fs (loop4): Block reservation details [ 490.231508][ T8839] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 490.278152][ T8845] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 490.320596][ T8839] EXT4-fs: Ignoring removed orlov option [ 492.291559][ T5228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 492.302148][ T5228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 492.311173][ T5228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 492.319016][ T5228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 492.332861][ T5228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 492.340664][ T5228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 492.595482][ T8857] loop1: detected capacity change from 0 to 1024 [ 492.923056][ T5630] hfsplus: b-tree write err: -5, ino 4 [ 493.996477][ T5377] team0 (unregistering): Port device team_slave_1 removed [ 494.064770][ T8866] syz.1.612[8866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.064904][ T8866] syz.1.612[8866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.089443][ T5377] team0 (unregistering): Port device team_slave_0 removed [ 494.434263][ T5228] Bluetooth: hci4: command tx timeout [ 494.734951][ T8625] hsr_slave_0: entered promiscuous mode [ 494.741787][ T8625] hsr_slave_1: entered promiscuous mode [ 494.748070][ T8625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.757952][ T8625] Cannot create hsr debugfs directory [ 494.764750][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.604'. [ 494.775079][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.604'. [ 495.006658][ T36] EXT4-fs: 1 callbacks suppressed [ 495.006682][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 495.090918][ T36] EXT4-fs (loop4): This should not happen!! Data will be lost [ 495.090918][ T36] [ 495.112389][ T36] EXT4-fs (loop4): Total free blocks count 0 [ 495.118413][ T36] EXT4-fs (loop4): Free/Dirty block details [ 495.155021][ T36] EXT4-fs (loop4): free_blocks=2415919104 [ 495.195041][ T36] EXT4-fs (loop4): dirty_blocks=32 [ 495.230800][ T36] EXT4-fs (loop4): Block reservation details [ 495.264108][ T36] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 495.326009][ T7011] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.740295][ T5228] Bluetooth: hci4: command tx timeout [ 498.191898][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.206009][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.216966][ T5228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.245361][ T5228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.253675][ T5228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 498.261294][ T5228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.350596][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 498.753351][ T5228] Bluetooth: hci4: command tx timeout [ 499.029709][ T8906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.230349][ T8852] chnl_net:caif_netlink_parms(): no params data found [ 499.374578][ T8906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.425444][ T8920] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 499.444926][ T8920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'. [ 499.565119][ T8906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.763452][ T8924] netlink: 'syz.4.622': attribute type 7 has an invalid length. [ 499.771339][ T8924] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.622'. [ 499.802557][ T8924] netlink: 'syz.4.622': attribute type 3 has an invalid length. [ 499.810374][ T8924] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.622'. [ 500.361350][ T5228] Bluetooth: hci3: command tx timeout [ 500.492614][ T8926] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 500.608540][ T8906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.956481][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.963124][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.378202][ T8936] loop0: detected capacity change from 0 to 256 [ 501.394618][ T5228] Bluetooth: hci4: command tx timeout [ 502.079855][ T8936] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 502.430145][ T5228] Bluetooth: hci3: command tx timeout [ 502.490052][ T8939] loop4: detected capacity change from 0 to 40427 [ 502.545462][ T8939] F2FS-fs (loop4): invalid crc value [ 502.559954][ T8939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 502.623972][ T8939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 503.260375][ T5377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.306369][ T8952] loop0: detected capacity change from 0 to 512 [ 503.399534][ T8852] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.415101][ T8952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.447850][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.457900][ T8952] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.479133][ T8852] bridge_slave_0: entered allmulticast mode [ 503.489031][ T8852] bridge_slave_0: entered promiscuous mode [ 503.517490][ T8852] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.595110][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.613762][ T8852] bridge_slave_1: entered allmulticast mode [ 503.621177][ T8852] bridge_slave_1: entered promiscuous mode [ 503.670396][ T8906] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.762039][ T5377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.024939][ T8906] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.033387][ T5225] Bluetooth: hci2: command 0x0406 tx timeout [ 504.052762][ T8906] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.483330][ T5377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.510335][ T5225] Bluetooth: hci3: command tx timeout [ 505.555182][ T5377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.040427][ T8852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.456022][ T8852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.631853][ T5225] Bluetooth: hci3: command tx timeout [ 506.662973][ T8906] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.212905][ T9019] loop4: detected capacity change from 0 to 2048 [ 508.010220][ T9019] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 508.088261][ T8899] chnl_net:caif_netlink_parms(): no params data found [ 508.110464][ T9021] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.110754][ T9019] syz.4.632: attempt to access beyond end of device [ 508.110754][ T9019] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 508.487718][ T8113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.616270][ T8852] team0: Port device team_slave_0 added [ 509.709295][ T8852] team0: Port device team_slave_1 added [ 510.242344][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 511.289441][ T9055] loop0: detected capacity change from 0 to 128 [ 512.223318][ T9055] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 512.494805][ T9055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 512.869501][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.935976][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.961493][ T8899] bridge_slave_0: entered allmulticast mode [ 512.968630][ T8899] bridge_slave_0: entered promiscuous mode [ 513.001460][ T8625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 513.034746][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.047688][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.053160][ T9064] loop4: detected capacity change from 0 to 2048 [ 513.091800][ T8852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.119943][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.127127][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.155208][ T9064] EXT4-fs: Ignoring removed mblk_io_submit option [ 513.219271][ T9064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.251028][ T8852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.342143][ T9064] EXT4-fs (loop4): shut down requested (0) [ 513.403880][ T5377] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.461180][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.490333][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.497704][ T8899] bridge_slave_1: entered allmulticast mode [ 513.524585][ T8899] bridge_slave_1: entered promiscuous mode [ 513.637700][ T8625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 513.656684][ T8625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 513.745991][ T9060] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.640: bg 0: block 234: padding at end of block bitmap is not set [ 513.823847][ T9060] EXT4-fs (loop4): Remounting filesystem read-only [ 513.902316][ T5377] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.008854][ T8625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 514.086515][ T8852] hsr_slave_0: entered promiscuous mode [ 514.144215][ T8852] hsr_slave_1: entered promiscuous mode [ 514.157257][ T8852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.186663][ T8852] Cannot create hsr debugfs directory [ 514.246954][ T8899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.297740][ T5377] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.759266][ T8899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.086877][ T5377] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.389190][ T8899] team0: Port device team_slave_0 added [ 515.403248][ T8899] team0: Port device team_slave_1 added [ 516.714553][ T9107] loop0: detected capacity change from 0 to 1024 [ 516.719985][ T8899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.747733][ T8899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.790882][ T8899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.874858][ T8899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.884562][ T8899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.915086][ T8899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.147667][ T5377] bridge_slave_1: left allmulticast mode [ 517.162680][ T5377] bridge_slave_1: left promiscuous mode [ 517.168706][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.299897][ T5377] bridge_slave_0: left allmulticast mode [ 517.305587][ T5377] bridge_slave_0: left promiscuous mode [ 517.321394][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.366324][ T5377] bridge_slave_1: left allmulticast mode [ 517.407262][ T5377] bridge_slave_1: left promiscuous mode [ 517.444153][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.870452][ T9125] syz.1.647 (9125): drop_caches: 2 [ 517.925041][ T9125] syz.1.647 (9125): drop_caches: 2 [ 518.132671][ T5377] bridge_slave_0: left allmulticast mode [ 518.138364][ T5377] bridge_slave_0: left promiscuous mode [ 518.144519][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.218901][ T5377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.237848][ T5377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.250139][ T5377] bond0 (unregistering): Released all slaves [ 519.396795][ T5377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.410924][ T5377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.423057][ T5377] bond0 (unregistering): Released all slaves [ 519.575691][ T8899] hsr_slave_0: entered promiscuous mode [ 519.603206][ T8899] hsr_slave_1: entered promiscuous mode [ 519.620735][ T8899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.628368][ T8899] Cannot create hsr debugfs directory [ 519.639999][ T9135] loop0: detected capacity change from 0 to 512 [ 519.649251][ T9135] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 519.664013][ T9135] EXT4-fs (loop0): invalid journal inode [ 519.673148][ T9135] EXT4-fs (loop0): can't get journal size [ 519.725060][ T9135] EXT4-fs (loop0): 1 truncate cleaned up [ 519.735415][ T9135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.756452][ T9127] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 519.764894][ T9127] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 519.785017][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 519.785042][ T29] audit: type=1800 audit(1726868583.696:95): pid=9135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.651" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 519.848917][ T29] audit: type=1804 audit(1726868583.756:96): pid=9135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.651" name="/newroot/26/file0/bus" dev="loop0" ino=19 res=1 errno=0 [ 520.077342][ T8113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.339286][ T29] audit: type=1326 audit(1726868584.236:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd975b7def9 code=0x0 [ 521.082897][ T8625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.256166][ T8625] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.146316][ T5377] hsr_slave_0: left promiscuous mode [ 522.172356][ T5377] hsr_slave_1: left promiscuous mode [ 522.183219][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.222788][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.254066][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.281878][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.396829][ T5377] hsr_slave_0: left promiscuous mode [ 522.410349][ T5377] hsr_slave_1: left promiscuous mode [ 522.425702][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.449782][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.467039][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.498167][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.624638][ T5377] veth1_macvtap: left promiscuous mode [ 522.630315][ T5377] veth0_macvtap: left promiscuous mode [ 522.636550][ T5377] veth1_vlan: left promiscuous mode [ 522.642068][ T5377] veth0_vlan: left promiscuous mode [ 522.649839][ T5377] veth1_macvtap: left promiscuous mode [ 522.655369][ T5377] veth0_macvtap: left promiscuous mode [ 522.665535][ T5377] veth1_vlan: left promiscuous mode [ 522.671061][ T5377] veth0_vlan: left promiscuous mode [ 524.731209][ T5228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.743949][ T5228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.753423][ T5228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.770721][ T5228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.778393][ T5228] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 524.786679][ T5228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 526.834268][ T5225] Bluetooth: hci5: command tx timeout [ 527.210476][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 527.222292][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 527.231243][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 527.239966][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 527.247705][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 527.255367][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 528.075823][ T5377] team0 (unregistering): Port device team_slave_1 removed [ 528.142132][ T5377] team0 (unregistering): Port device team_slave_0 removed [ 529.161253][ T5225] Bluetooth: hci1: command 0x0406 tx timeout [ 529.167344][ T5225] Bluetooth: hci5: command tx timeout [ 529.396360][ T5228] Bluetooth: hci7: command tx timeout [ 530.676495][ T9196] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 531.229790][ T5228] Bluetooth: hci5: command tx timeout [ 531.478372][ T5228] Bluetooth: hci7: command tx timeout [ 532.765188][ T5377] team0 (unregistering): Port device team_slave_1 removed [ 533.252034][ T5377] team0 (unregistering): Port device team_slave_0 removed [ 533.319749][ T5228] Bluetooth: hci5: command tx timeout [ 533.514607][ T9206] loop0: detected capacity change from 0 to 8 [ 533.550412][ T5228] Bluetooth: hci7: command tx timeout [ 535.629947][ T5228] Bluetooth: hci7: command tx timeout [ 535.670527][ T5281] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 535.919813][ T29] audit: type=1326 audit(1726868599.826:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037017def9 code=0x7ffc0000 [ 535.974375][ T9215] loop0: detected capacity change from 0 to 512 [ 536.025638][ T29] audit: type=1326 audit(1726868599.826:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037017def9 code=0x7ffc0000 [ 536.042563][ T8852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 536.074967][ T9215] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 536.124104][ T29] audit: type=1326 audit(1726868599.826:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f037017def9 code=0x7ffc0000 [ 536.164800][ T29] audit: type=1326 audit(1726868599.826:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037017def9 code=0x7ffc0000 [ 536.261260][ T5281] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 536.269240][ T29] audit: type=1326 audit(1726868599.826:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037017def9 code=0x7ffc0000 [ 536.368611][ T29] audit: type=1326 audit(1726868599.866:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037017def9 code=0x7ffc0000 [ 536.394029][ T5225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 536.441889][ T5225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 536.476995][ T5225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 536.479810][ T29] audit: type=1326 audit(1726868599.866:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037017def9 code=0x7ffc0000 [ 536.549795][ T8852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 536.556832][ T5225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 536.585729][ T5225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 536.606729][ T5225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 536.620689][ T29] audit: type=1326 audit(1726868599.866:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037017def9 code=0x7ffc0000 [ 536.673775][ T29] audit: type=1326 audit(1726868599.866:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f037017def9 code=0x7ffc0000 [ 536.698809][ T29] audit: type=1326 audit(1726868599.866:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037017def9 code=0x7ffc0000 [ 536.894473][ T8852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 536.913613][ T8852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 537.293513][ T9178] chnl_net:caif_netlink_parms(): no params data found [ 537.779035][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.796934][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.817621][ T9178] bridge_slave_0: entered allmulticast mode [ 537.827927][ T9178] bridge_slave_0: entered promiscuous mode [ 537.897619][ T9178] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.911521][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.918912][ T9178] bridge_slave_1: entered allmulticast mode [ 538.059658][ T9178] bridge_slave_1: entered promiscuous mode [ 538.374637][ T9164] chnl_net:caif_netlink_parms(): no params data found [ 538.674922][ T5225] Bluetooth: hci6: command tx timeout [ 538.730004][ T8899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 538.745612][ T9244] loop0: detected capacity change from 0 to 128 [ 538.892036][ T8852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.904093][ T8899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 538.922966][ T9178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.949215][ T8899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 539.006201][ T9178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.028419][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.072174][ T8899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 539.141284][ T9249] x_tables: unsorted underflow at hook 3 [ 539.185748][ T9164] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.193339][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.201090][ T9164] bridge_slave_0: entered allmulticast mode [ 539.216174][ T9164] bridge_slave_0: entered promiscuous mode [ 539.237134][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.258703][ T9219] chnl_net:caif_netlink_parms(): no params data found [ 539.308023][ T9178] team0: Port device team_slave_0 added [ 539.317105][ T9164] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.328849][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.341123][ T9164] bridge_slave_1: entered allmulticast mode [ 539.349972][ T9164] bridge_slave_1: entered promiscuous mode [ 539.385875][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.409936][ T9178] team0: Port device team_slave_1 added [ 539.481981][ T9164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.523469][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.650785][ T9164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.692837][ T8852] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.716015][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.729840][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.779967][ T9178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.904785][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.912000][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.932793][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.940017][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.969586][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.976878][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.019691][ T9178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.046438][ T9164] team0: Port device team_slave_0 added [ 540.075738][ T9164] team0: Port device team_slave_1 added [ 540.191828][ T9219] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.202206][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.209412][ T9219] bridge_slave_0: entered allmulticast mode [ 540.218897][ T9219] bridge_slave_0: entered promiscuous mode [ 540.310010][ T9178] hsr_slave_0: entered promiscuous mode [ 540.318489][ T9178] hsr_slave_1: entered promiscuous mode [ 540.339438][ T9164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.353065][ T9164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.392383][ T9164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.419078][ T9164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.429925][ T9164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.470258][ T9164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.494088][ T9219] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.517478][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.530040][ T9219] bridge_slave_1: entered allmulticast mode [ 540.544180][ T9219] bridge_slave_1: entered promiscuous mode [ 540.865131][ T5228] Bluetooth: hci6: command tx timeout [ 541.306150][ T9219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.335941][ T9219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.526110][ T9164] hsr_slave_0: entered promiscuous mode [ 541.532942][ T9164] hsr_slave_1: entered promiscuous mode [ 541.541786][ T9164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.549898][ T9164] Cannot create hsr debugfs directory [ 541.733016][ T9219] team0: Port device team_slave_0 added [ 541.747198][ T9219] team0: Port device team_slave_1 added [ 541.945807][ T9219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.954162][ T9219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.980780][ T9219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.078558][ T9219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.085798][ T9219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.112257][ T9219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.337415][ T9219] hsr_slave_0: entered promiscuous mode [ 542.355318][ T9219] hsr_slave_1: entered promiscuous mode [ 542.367661][ T9219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.378472][ T9219] Cannot create hsr debugfs directory [ 542.687181][ T9164] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.791538][ T8852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.892231][ T9164] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.921272][ T5228] Bluetooth: hci6: command tx timeout [ 542.949004][ T8899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.071205][ T9164] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.143451][ T12] bridge_slave_1: left allmulticast mode [ 543.160979][ T12] bridge_slave_1: left promiscuous mode [ 543.176274][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.191064][ T12] bridge_slave_0: left allmulticast mode [ 543.196854][ T12] bridge_slave_0: left promiscuous mode [ 543.209056][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.222861][ T12] bridge_slave_1: left allmulticast mode [ 543.228596][ T12] bridge_slave_1: left promiscuous mode [ 543.234498][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.252952][ T12] bridge_slave_0: left allmulticast mode [ 543.258621][ T12] bridge_slave_0: left promiscuous mode [ 543.279989][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.286198][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.305535][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.324709][ T12] bond0 (unregistering): Released all slaves [ 544.713621][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.733801][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.754043][ T12] bond0 (unregistering): Released all slaves [ 544.820446][ T8899] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.966869][ T9164] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.037988][ T5228] Bluetooth: hci6: command tx timeout [ 545.563658][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.570853][ T5377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.623085][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.630280][ T8995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.800773][ T8852] veth0_vlan: entered promiscuous mode [ 545.948142][ T8852] veth1_vlan: entered promiscuous mode [ 546.606203][ T12] hsr_slave_0: left promiscuous mode [ 546.620431][ T12] hsr_slave_1: left promiscuous mode [ 546.654257][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.672705][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.690537][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.697958][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.728042][ T12] hsr_slave_0: left promiscuous mode [ 546.740694][ T12] hsr_slave_1: left promiscuous mode [ 546.758859][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.777159][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.857695][ T12] veth1_macvtap: left promiscuous mode [ 546.863644][ T12] veth0_macvtap: left promiscuous mode [ 546.869294][ T12] veth1_vlan: left promiscuous mode [ 546.874715][ T12] veth0_vlan: left promiscuous mode [ 547.957185][ T9278] futex_wake_op: syz.0.681 tries to shift op by 144; fix this program [ 548.270411][ T12] team0 (unregistering): Port device team_slave_1 removed [ 548.333820][ T12] team0 (unregistering): Port device team_slave_0 removed [ 549.022555][ T12] smc: removing net device lo with user defined pnetid SYZ2 [ 549.221089][ T12] team0 (unregistering): Port device team_slave_1 removed [ 549.277997][ T12] team0 (unregistering): Port device team_slave_0 removed [ 549.838408][ T9278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.681'. [ 549.864082][ T9278] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.874205][ T9278] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.949198][ T8852] veth0_macvtap: entered promiscuous mode [ 550.008179][ T9164] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 550.057093][ T9164] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 550.274812][ T9286] loop0: detected capacity change from 0 to 2048 [ 550.326967][ T9286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.469280][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 550.469335][ T29] audit: type=1800 audit(1726868614.296:139): pid=9286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.682" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 551.032243][ T9164] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 551.091514][ T9164] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 551.297933][ T8899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.507460][ T5225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 552.518297][ T5225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 552.526256][ T5225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 552.541051][ T5225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 552.548643][ T5225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 552.558577][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 552.721448][ T9301] syz_tun: entered promiscuous mode [ 552.737589][ T9301] Bluetooth: MGMT ver 1.23 [ 552.742748][ T9164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.847002][ T9164] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.910136][ T9300] syz_tun: left promiscuous mode [ 552.932945][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.940108][ T6337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.043261][ T9305] netlink: 'syz.0.686': attribute type 3 has an invalid length. [ 553.050264][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.053071][ T9305] netlink: 'syz.0.686': attribute type 3 has an invalid length. [ 553.058598][ T6337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.075333][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.686'. [ 553.185754][ T9178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 553.277478][ T12] IPVS: stop unused estimator thread 0... [ 553.339796][ T9178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 553.354843][ T9178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 553.412846][ T9178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 553.678503][ T5228] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 553.738645][ T9311] loop0: detected capacity change from 0 to 1024 [ 553.754396][ T9311] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 553.764472][ T9311] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 553.784842][ T9311] jbd2_journal_init_inode: Cannot locate journal superblock [ 553.792330][ T9311] EXT4-fs (loop0): Could not load journal inode [ 554.261461][ T8899] veth0_vlan: entered promiscuous mode [ 554.291431][ T8899] veth1_vlan: entered promiscuous mode [ 554.671488][ T5228] Bluetooth: hci2: command tx timeout [ 554.738964][ T9297] chnl_net:caif_netlink_parms(): no params data found [ 554.942533][ T8899] veth0_macvtap: entered promiscuous mode [ 555.042005][ T8899] veth1_macvtap: entered promiscuous mode [ 555.057999][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.069356][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.079307][ T9297] bridge_slave_0: entered allmulticast mode [ 555.093786][ T9297] bridge_slave_0: entered promiscuous mode [ 555.128691][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.136678][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.145618][ T9297] bridge_slave_1: entered allmulticast mode [ 555.154262][ T9297] bridge_slave_1: entered promiscuous mode [ 555.194428][ T9178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.267467][ T9297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.304910][ T9297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.333651][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.356399][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.369774][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.380691][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.391871][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.403259][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.417308][ T8899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.434537][ T9219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 555.534191][ T9178] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.562905][ T9164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.570880][ T9219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 555.601110][ T9219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.709728][ T5228] Bluetooth: hci1: command 0x0406 tx timeout [ 555.744219][ T9297] team0: Port device team_slave_0 added [ 555.781810][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.816419][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.835665][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.864596][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.886611][ T8899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.916119][ T8899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.941237][ T8899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.964066][ T9329] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 556.003635][ T9219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 556.029499][ T12] bridge_slave_1: left allmulticast mode [ 556.099969][ T12] bridge_slave_1: left promiscuous mode [ 556.119838][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.160393][ T12] bridge_slave_0: left allmulticast mode [ 556.166086][ T12] bridge_slave_0: left promiscuous mode [ 556.202694][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.250468][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 556.262354][ T5225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 556.272150][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 556.280826][ T5225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 556.295033][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 556.302385][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 556.749848][ T5228] Bluetooth: hci2: command tx timeout [ 557.583167][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.606897][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.622617][ T12] bond0 (unregistering): Released all slaves [ 557.648494][ T9297] team0: Port device team_slave_1 added [ 557.739171][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.746351][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.885994][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.893166][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.941419][ T12] hsr_slave_0: left promiscuous mode [ 557.947509][ T12] hsr_slave_1: left promiscuous mode [ 557.960920][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.035146][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.099326][ T12] veth0_macvtap: left promiscuous mode [ 558.110518][ T12] veth1_vlan: left promiscuous mode [ 558.126577][ T12] veth0_vlan: left promiscuous mode [ 558.403073][ T5228] Bluetooth: hci4: command tx timeout [ 558.904549][ T5228] Bluetooth: hci2: command tx timeout [ 559.542705][ T12] team0 (unregistering): Port device team_slave_1 removed [ 559.606273][ T12] team0 (unregistering): Port device team_slave_0 removed [ 560.199338][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.206906][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.242304][ T9297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.320453][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.327481][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.388952][ T9297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.408209][ T9356] loop0: detected capacity change from 0 to 128 [ 560.431380][ T5228] Bluetooth: hci4: command tx timeout [ 560.588794][ T9178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 560.599966][ T9178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.743158][ T9297] hsr_slave_0: entered promiscuous mode [ 560.751517][ T9297] hsr_slave_1: entered promiscuous mode [ 560.758257][ T9297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.766252][ T9297] Cannot create hsr debugfs directory [ 560.836964][ T9355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.990117][ T5228] Bluetooth: hci2: command tx timeout [ 561.117653][ T9164] veth0_vlan: entered promiscuous mode [ 561.359152][ T9164] veth1_vlan: entered promiscuous mode [ 561.508937][ T9178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.650724][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 561.752630][ T9219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.835859][ T9178] veth0_vlan: entered promiscuous mode [ 561.873761][ T9178] veth1_vlan: entered promiscuous mode [ 561.890775][ T9164] veth0_macvtap: entered promiscuous mode [ 561.991957][ T9164] veth1_macvtap: entered promiscuous mode [ 562.072565][ T9219] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.111090][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.124518][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.133064][ T9330] bridge_slave_0: entered allmulticast mode [ 562.140967][ T9330] bridge_slave_0: entered promiscuous mode [ 562.154230][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.161384][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.197559][ T12] bridge_slave_1: left allmulticast mode [ 562.203668][ T12] bridge_slave_1: left promiscuous mode [ 562.211160][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.220892][ T12] bridge_slave_0: left allmulticast mode [ 562.231875][ T12] bridge_slave_0: left promiscuous mode [ 562.246013][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.359261][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.365691][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.505642][ T9378] loop0: detected capacity change from 0 to 512 [ 562.517350][ T5228] Bluetooth: hci4: command tx timeout [ 562.549838][ T9378] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 562.921266][ T9380] capability: warning: `syz.0.696' uses deprecated v2 capabilities in a way that may be insecure [ 563.706011][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.725487][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.737983][ T12] bond0 (unregistering): Released all slaves [ 563.761592][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.768777][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.782784][ T9330] bridge_slave_1: entered allmulticast mode [ 563.792463][ T9330] bridge_slave_1: entered promiscuous mode [ 563.817778][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.824992][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.893796][ T12] hsr_slave_0: left promiscuous mode [ 563.902086][ T12] hsr_slave_1: left promiscuous mode [ 563.908053][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.915962][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.924016][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.931874][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.949848][ T5317] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 563.964069][ T12] veth1_macvtap: left promiscuous mode [ 563.970158][ T12] veth0_macvtap: left promiscuous mode [ 563.975779][ T12] veth1_vlan: left promiscuous mode [ 563.981545][ T12] veth0_vlan: left promiscuous mode [ 564.142262][ T5317] usb 1-1: Using ep0 maxpacket: 8 [ 564.172764][ T5317] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 564.181260][ T5317] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 564.199702][ T5317] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 564.209488][ T5317] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 564.220075][ T5317] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.233238][ T5317] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 564.244132][ T5317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.483101][ T5317] usb 1-1: usb_control_msg returned -32 [ 564.488750][ T5317] usbtmc 1-1:16.0: can't read capabilities [ 564.590123][ T5228] Bluetooth: hci4: command tx timeout [ 564.758068][ T12] team0 (unregistering): Port device team_slave_1 removed [ 564.823160][ T12] team0 (unregistering): Port device team_slave_0 removed [ 565.041496][ T5317] usb 1-1: USB disconnect, device number 4 [ 565.047744][ T9383] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 565.499435][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.510385][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.523225][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.536063][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.546245][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.557912][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.569382][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.621685][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.633912][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.649847][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.660655][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.670557][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.681332][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.696541][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.727665][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.748420][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.825795][ T9164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.836709][ T9164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.846153][ T9164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.855063][ T9164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.192686][ T9297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 566.327393][ T9297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 566.538730][ T9330] team0: Port device team_slave_0 added [ 566.614512][ T9330] team0: Port device team_slave_1 added [ 566.711796][ T9297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 566.793428][ T9297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 566.897453][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.909392][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.960326][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.973600][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.981234][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.031252][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.771378][ T9178] veth0_macvtap: entered promiscuous mode [ 567.821107][ T9178] veth1_macvtap: entered promiscuous mode [ 568.047744][ T9330] hsr_slave_0: entered promiscuous mode [ 568.060512][ T9330] hsr_slave_1: entered promiscuous mode [ 568.080484][ T9330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.098405][ T9330] Cannot create hsr debugfs directory [ 568.301799][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.330942][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.349864][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.370882][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.390869][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.411904][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.448405][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.474057][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.492440][ T9178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.560697][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.582429][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.603084][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.623837][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.639232][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.660457][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.681197][ T9178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.701094][ T9178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.720858][ T9178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.736329][ T9219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.769130][ T9178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.789073][ T9178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.800297][ T9178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.809034][ T9178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.875475][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.900848][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.108894][ T6337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.128211][ T6337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.178700][ T9297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.340254][ T9219] veth0_vlan: entered promiscuous mode [ 569.424235][ T9219] veth1_vlan: entered promiscuous mode [ 569.563546][ T6337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.603448][ T9219] veth0_macvtap: entered promiscuous mode [ 569.609791][ T6337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.650615][ T9297] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.907102][ T9219] veth1_macvtap: entered promiscuous mode [ 570.409101][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.416314][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.476608][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.521747][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.603766][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.610965][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.663842][ T9297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.697198][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.759741][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.780024][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.799994][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.819448][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.852691][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.879983][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.919949][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.957073][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.999013][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.061531][ T9219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.706315][ T9425] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 572.975506][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.140136][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.162702][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.309451][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.329687][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.349768][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.369281][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.380877][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.389354][ T9428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 573.391280][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.409575][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.421258][ T9219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.481561][ T9330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 573.530615][ T9219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.539382][ T9219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.559938][ T9219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.576252][ T9219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.596938][ T9330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 573.600153][ T9435] capability: warning: `syz.4.706' uses 32-bit capabilities (legacy support in use) [ 573.617341][ T9330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 573.673649][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.989260][ T9330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 574.603605][ T9297] veth0_vlan: entered promiscuous mode [ 574.787551][ T9401] coredump: 251(syz.0.700): written to core: VMAs: 36, size 97550336; core: 60044342 bytes, pos 97558528 [ 574.802597][ T9297] veth1_vlan: entered promiscuous mode [ 574.987056][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.006107][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.044610][ T9330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 575.055185][ T9330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.079002][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.086350][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.096353][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.103525][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.141623][ T6337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.141914][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.149509][ T6337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.282068][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.000483][ T9297] veth0_macvtap: entered promiscuous mode [ 576.022743][ T9297] veth1_macvtap: entered promiscuous mode [ 576.094026][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.105852][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.130197][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.196932][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.208803][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.220564][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.232507][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.245486][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.256751][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.274013][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.284063][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.294978][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.512036][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.533923][ T9455] dummy0: entered promiscuous mode [ 576.546248][ T9455] macvlan2: entered allmulticast mode [ 576.624914][ T9455] dummy0: entered allmulticast mode [ 576.641353][ T9455] dummy0: left allmulticast mode [ 576.654964][ T9455] dummy0: left promiscuous mode [ 576.900737][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.942472][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.006265][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.108691][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.189415][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.418616][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.428842][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.439536][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.449640][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.460424][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.477481][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.613021][ T9470] xt_hashlimit: max too large, truncated to 1048576 [ 578.172993][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.188889][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.203434][ T9297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.212228][ T9297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.221053][ T9297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.229847][ T9297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.252578][ T9467] loop0: detected capacity change from 0 to 1024 [ 578.318260][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.531793][ T9000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.762515][ T9000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.687080][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.696604][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.323378][ T9487] loop3: detected capacity change from 0 to 512 [ 581.359496][ T9487] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 581.448476][ T9487] EXT4-fs (loop3): invalid journal inode [ 581.529939][ T9487] EXT4-fs (loop3): can't get journal size [ 581.638265][ T9487] EXT4-fs (loop3): 1 truncate cleaned up [ 581.648651][ T9496] loop2: detected capacity change from 0 to 1024 [ 581.757133][ T931] IPVS: starting estimator thread 0... [ 581.942614][ T9499] IPVS: using max 16 ests per chain, 38400 per kthread [ 581.964029][ T9487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.304714][ T9501] hfsplus: bad catalog entry type [ 582.827050][ T9330] veth0_vlan: entered promiscuous mode [ 582.850275][ T11] hfsplus: b-tree write err: -5, ino 4 [ 582.859136][ T9330] veth1_vlan: entered promiscuous mode [ 583.018591][ T9330] veth0_macvtap: entered promiscuous mode [ 583.052605][ T9330] veth1_macvtap: entered promiscuous mode [ 583.068887][ T9514] loop2: detected capacity change from 0 to 256 [ 583.145888][ T9517] Zero length message leads to an empty skb [ 583.199171][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.218359][ T29] audit: type=1107 audit(1726868647.126:140): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 583.243411][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.274301][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.316567][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.369204][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.414410][ T9517] loop0: detected capacity change from 0 to 512 [ 583.449847][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.484198][ T9517] ext4: Bad value for 'sb' [ 583.514371][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.559749][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.572671][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.583546][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.594480][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.605640][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.619738][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.639807][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.652010][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.673066][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.689804][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.717394][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.740537][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.769827][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.789756][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.809749][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.830180][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.845043][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.845907][ T9524] loop0: detected capacity change from 0 to 8 [ 583.862880][ T9524] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 583.868399][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.890181][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.030478][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.049756][ T9330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.069719][ T9330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.091907][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.412207][ T9330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.874794][ T9330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.937872][ T9330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.011808][ T9330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.204406][ T9528] loop2: detected capacity change from 0 to 256 [ 585.218377][ T9528] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 585.338536][ T29] audit: type=1800 audit(1726868649.246:141): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.727" name="file1" dev="loop2" ino=1048700 res=0 errno=0 [ 586.355023][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.379720][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.387362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.395371][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.718283][ T9178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.235219][ T9544] loop2: detected capacity change from 0 to 256 [ 588.280975][ T9544] exfat: Deprecated parameter 'namecase' [ 588.287659][ T9544] exfat: Deprecated parameter 'utf8' [ 588.944083][ T9544] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 589.650934][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 589.748955][ T9565] batadv0: entered promiscuous mode [ 590.974884][ T9569] loop3: detected capacity change from 0 to 1024 [ 591.025810][ T9569] hfsplus: bad catalog folder entry [ 594.800822][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 595.145641][ T9606] netlink: 'syz.0.745': attribute type 10 has an invalid length. [ 595.153897][ T9606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.745'. [ 596.808496][ T9610] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 596.816482][ T9610] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 596.884960][ T9614] vhci_hcd: connection closed [ 596.887299][ T9610] vhci_hcd vhci_hcd.0: Device attached [ 597.126197][ T8997] vhci_hcd: stop threads [ 597.137208][ T8997] vhci_hcd: release socket [ 597.239692][ T8997] vhci_hcd: disconnect device [ 597.273191][ T5335] vhci_hcd: vhci_device speed not set [ 598.454513][ T9635] overlayfs: failed to resolve './file2': -2 [ 599.536761][ T9639] loop0: detected capacity change from 0 to 256 [ 600.317237][ T9642] loop3: detected capacity change from 0 to 2048 [ 600.357412][ T9642] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 601.229064][ T9642] syz.3.753: attempt to access beyond end of device [ 601.229064][ T9642] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 601.251844][ T9649] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 601.717565][ T9648] loop2: detected capacity change from 0 to 4096 [ 602.390140][ T9648] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 606.970398][ T9648] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 606.997929][ T9648] ntfs3: loop2: Failed to load $MFT (-22). [ 609.080033][ T5284] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 609.437512][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 609.474100][ T5284] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 609.497427][ T5284] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 609.524147][ T5284] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.563523][ T5284] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.605838][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.663259][ T5284] usb 1-1: Product: syz [ 609.683612][ T5284] usb 1-1: Manufacturer: syz [ 609.702117][ T5284] usb 1-1: SerialNumber: syz [ 610.828761][ T9705] loop2: detected capacity change from 0 to 2048 [ 610.880171][ T9705] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 610.980446][ T9711] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 610.980747][ T9705] syz.2.770: attempt to access beyond end of device [ 610.980747][ T9705] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 611.079272][ T5284] usb 1-1: 0:2 : does not exist [ 611.128210][ T5284] usb 1-1: USB disconnect, device number 5 [ 611.290072][ T9718] loop2: detected capacity change from 0 to 8 [ 611.361682][ T5219] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 611.386081][ T9546] udevd[9546]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.731892][ T9723] loop0: detected capacity change from 0 to 32768 [ 611.762446][ T9723] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.774 (9723) [ 611.846490][ T9723] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 611.857349][ T9723] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 611.866486][ T9723] BTRFS info (device loop0): using free-space-tree [ 611.901342][ T5219] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 611.911315][ T5219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.923844][ T5219] usb 6-1: config 0 descriptor?? [ 611.948501][ T29] audit: type=1326 audit(1726868675.856:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447cf7def9 code=0x7ffc0000 [ 611.972020][ T29] audit: type=1326 audit(1726868675.856:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447cf7def9 code=0x7ffc0000 [ 611.994302][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.003583][ T29] audit: type=1326 audit(1726868675.906:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f447cf7def9 code=0x7ffc0000 [ 612.027970][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.034802][ T29] audit: type=1326 audit(1726868675.906:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447cf7def9 code=0x7ffc0000 [ 612.057256][ T29] audit: type=1326 audit(1726868675.906:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447cf7def9 code=0x7ffc0000 [ 612.079513][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.087871][ T29] audit: type=1326 audit(1726868675.906:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f447cf7c890 code=0x7ffc0000 [ 612.110195][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.118331][ T29] audit: type=1326 audit(1726868675.906:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f447cf7f727 code=0x7ffc0000 [ 612.142291][ T29] audit: type=1326 audit(1726868675.906:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f447cf7def9 code=0x7ffc0000 [ 612.165157][ T29] audit: type=1326 audit(1726868675.906:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f447cf7f727 code=0x7ffc0000 [ 612.190125][ T29] audit: type=1326 audit(1726868675.906:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f447cf7cb8a code=0x7ffc0000 [ 612.212188][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.426617][ T9726] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 612.450148][ T9726] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 612.872424][ T5219] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 612.890251][ T5219] asix 6-1:0.0: probe with driver asix failed with error -71 [ 613.155514][ T9754] sd 0:0:1:0: device reset [ 613.855326][ T5219] usb 6-1: USB disconnect, device number 5 [ 616.008981][ T5335] kernel write not supported for file /dsp (pid: 5335 comm: kworker/1:7) [ 617.673525][ T8113] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 623.802202][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.808569][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.284483][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 625.299874][ T9810] loop1: detected capacity change from 0 to 1024 [ 625.307262][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 625.359791][ T9406] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 625.377622][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 625.570695][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 625.579759][ T5225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 625.587579][ T5225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 626.429936][ T9406] usb 5-1: Using ep0 maxpacket: 32 [ 626.458240][ T9406] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 626.469879][ T9406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.492501][ T9406] usb 5-1: config 0 descriptor?? [ 626.593476][ T9406] usb 5-1: can't set config #0, error -71 [ 626.605250][ T9406] usb 5-1: USB disconnect, device number 8 [ 627.950689][ T5225] Bluetooth: hci3: command tx timeout [ 628.650452][ T9806] chnl_net:caif_netlink_parms(): no params data found [ 628.680815][ T9000] Bluetooth: (null): Invalid header checksum [ 628.698440][ T9000] Bluetooth: (null): Invalid header checksum [ 628.780043][ T11] Bluetooth: (null): Too short H5 packet [ 628.785907][ T11] Bluetooth: (null): Invalid header checksum [ 628.956383][ T5635] Bluetooth: (null): Invalid header checksum [ 628.962567][ T5635] Bluetooth: (null): Invalid header checksum [ 628.986537][ T5228] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 629.023265][ T5228] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 629.053329][ T5228] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 629.063197][ T5228] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 629.077018][ T5228] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 629.086068][ T5228] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 630.561783][ T8997] hfsplus: b-tree write err: -5, ino 4 [ 630.679770][ T5225] Bluetooth: hci3: command tx timeout [ 630.968413][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.160657][ T5228] Bluetooth: hci8: command tx timeout [ 631.585803][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.524155][ T1811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.768172][ T5228] Bluetooth: hci3: command tx timeout [ 633.057551][ T1811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.232166][ T5228] Bluetooth: hci8: command tx timeout [ 633.438127][ T1811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.571845][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.579196][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.608113][ T9806] bridge_slave_0: entered allmulticast mode [ 633.681530][ T9806] bridge_slave_0: entered promiscuous mode [ 633.743228][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.759798][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.767158][ T9806] bridge_slave_1: entered allmulticast mode [ 633.777154][ T9806] bridge_slave_1: entered promiscuous mode [ 633.976013][ T1811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.174151][ T9833] chnl_net:caif_netlink_parms(): no params data found [ 634.303352][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.444934][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.722304][ T9886] usb usb8: usbfs: process 9886 (syz.4.814) did not claim interface 0 before use [ 634.843313][ T5228] Bluetooth: hci3: command tx timeout [ 635.375498][ T5228] Bluetooth: hci8: command tx timeout [ 635.451086][ T9806] team0: Port device team_slave_0 added [ 635.775352][ T9806] team0: Port device team_slave_1 added [ 635.797073][ T9889] loop5: detected capacity change from 0 to 2048 [ 635.916543][ T9892] syz.4.816: attempt to access beyond end of device [ 635.916543][ T9892] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 635.931806][ T9892] qnx4: unable to read the superblock [ 636.793237][ T9889] loop5: p1 < > p4 [ 636.814424][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.894109][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.940669][ T9889] loop5: p4 size 8388608 extends beyond EOD, truncated [ 637.016928][ T4674] loop5: p1 < > p4 [ 637.022709][ T4674] loop5: p4 size 8388608 extends beyond EOD, truncated [ 637.063973][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.302295][ T9376] udevd[9376]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 637.314874][ T9546] udevd[9546]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 637.389902][ T5225] Bluetooth: hci8: command tx timeout [ 637.436991][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.472947][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.595386][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.631620][ T1811] bridge_slave_1: left allmulticast mode [ 637.644868][ T1811] bridge_slave_1: left promiscuous mode [ 637.693987][ T1811] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.800378][ T1811] bridge_slave_0: left allmulticast mode [ 637.806133][ T1811] bridge_slave_0: left promiscuous mode [ 637.812576][ T1811] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.905390][ T9916] loop1: detected capacity change from 0 to 512 [ 638.960413][ T9916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 639.041079][ T9916] EXT4-fs (loop1): 1 truncate cleaned up [ 639.047845][ T9916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.119334][ T9925] syz.1.822 (pid 9925) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 641.236335][ T9219] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.614230][ T9928] loop1: detected capacity change from 0 to 1024 [ 643.261516][ T9938] hfsplus: request for non-existent node 2048 in B*Tree [ 643.269212][ T9938] hfsplus: request for non-existent node 2048 in B*Tree [ 645.119017][ T9949] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 645.161882][ T1811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.175384][ T1811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.187821][ T1811] bond0 (unregistering): Released all slaves [ 645.202011][ T9833] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.209099][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.216705][ T9833] bridge_slave_0: entered allmulticast mode [ 645.224581][ T9833] bridge_slave_0: entered promiscuous mode [ 645.233876][ T9833] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.250401][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.259157][ T9833] bridge_slave_1: entered allmulticast mode [ 645.266275][ T9833] bridge_slave_1: entered promiscuous mode [ 645.303961][ T9941] dummy0: entered promiscuous mode [ 645.323771][ T9941] batadv0: entered promiscuous mode [ 645.510677][ T9954] loop1: detected capacity change from 0 to 2048 [ 645.526536][ T9954] NILFS (loop1): invalid segment: Sequence number mismatch [ 645.534628][ T9954] NILFS (loop1): trying rollback from an earlier position [ 645.634011][ T9954] NILFS (loop1): recovery complete [ 645.650340][ T9962] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 647.639404][ T9833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.802605][ T9833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.879133][ T9806] hsr_slave_0: entered promiscuous mode [ 647.890632][ T9971] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 647.897137][ T9971] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 647.937457][ T9971] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 647.944704][ T9971] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 647.954585][ T9806] hsr_slave_1: entered promiscuous mode [ 647.963365][ T9971] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 647.971317][ T9806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.978896][ T9806] Cannot create hsr debugfs directory [ 648.011194][ T9971] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 648.017288][ T9971] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 648.070223][ T9971] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 648.090514][ T9971] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 648.099411][ T9971] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 648.109449][ T9971] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 648.112438][ T9833] team0: Port device team_slave_0 added [ 648.229818][ T9971] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 648.269781][ T9971] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 648.954336][ T9971] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 648.963946][ T9971] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.970322][ T9971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 648.984484][ T9971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 648.994390][ T9971] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 649.000399][ T9971] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 649.011836][ T9971] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 649.353491][ T9985] loop3: detected capacity change from 0 to 256 [ 649.392547][ T5219] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 649.462889][ T9985] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 649.541483][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 649.541506][ T29] audit: type=1800 audit(1726868713.456:189): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.840" name="file1" dev="loop3" ino=1048706 res=0 errno=0 [ 649.579852][ T5219] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 649.611047][ T5219] usb 6-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 649.636641][ T9833] team0: Port device team_slave_1 added [ 649.643229][ T9985] syz.3.840: attempt to access beyond end of device [ 649.643229][ T9985] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 649.663285][ T5219] usb 6-1: config 0 interface 0 has no altsetting 1 [ 649.689972][ T5219] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 649.719466][ T5219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.795826][ T5219] usb 6-1: config 0 descriptor?? [ 649.959136][ T5225] Bluetooth: hci0: command 0x0406 tx timeout [ 649.971403][ T9833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.978379][ T9833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.014907][ T9976] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 650.030762][ T5225] Bluetooth: hci7: command 0x0c1a tx timeout [ 650.039413][ T5228] Bluetooth: hci5: command 0x0c1a tx timeout [ 650.111785][ T5225] Bluetooth: hci6: command 0x0c1a tx timeout [ 650.513371][ T5219] Bluetooth: Can't get state to change to load ram patch err [ 650.554490][ T5219] Bluetooth: Loading patch file failed [ 650.565688][ T5219] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 650.589484][ T9833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.604300][ T5225] Bluetooth: hci4: command 0x0c1a tx timeout [ 650.658294][ T5219] usb 6-1: USB disconnect, device number 6 [ 650.968957][ T1811] hsr_slave_0: left promiscuous mode [ 651.000550][ T5225] Bluetooth: hci3: command 0x0c1a tx timeout [ 651.070380][ T5225] Bluetooth: hci8: command 0x0c1a tx timeout [ 651.200308][ T1811] hsr_slave_1: left promiscuous mode [ 651.243809][ T1811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.291757][ T1811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.041561][ T5225] Bluetooth: hci0: command 0x0406 tx timeout [ 652.118098][ T5228] Bluetooth: hci7: command 0x0c1a tx timeout [ 652.125264][ T5225] Bluetooth: hci5: command 0x0c1a tx timeout [ 652.363923][ T1811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.372368][ T5225] Bluetooth: hci6: command 0x0c1a tx timeout [ 652.420237][ T1811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.679747][ T5225] Bluetooth: hci4: command 0x0c1a tx timeout [ 652.888131][T10011] loop5: detected capacity change from 0 to 8 [ 652.901740][T10011] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 653.499790][ T5225] Bluetooth: hci3: command 0x0c1a tx timeout [ 653.505917][ T5225] Bluetooth: hci8: command 0x0c1a tx timeout [ 653.654553][ T1811] veth1_macvtap: left promiscuous mode [ 653.662108][ T1811] veth0_macvtap: left promiscuous mode [ 653.667730][ T1811] veth1_vlan: left promiscuous mode [ 653.676847][ T1811] veth0_vlan: left promiscuous mode [ 654.190214][ T5228] Bluetooth: hci5: command 0x0c1a tx timeout [ 654.197570][ T5228] Bluetooth: hci7: command 0x0c1a tx timeout [ 654.430013][ T5225] Bluetooth: hci6: command 0x0c1a tx timeout [ 654.462996][ C1] vkms_vblank_simulate: vblank timer overrun [ 654.569867][ T5219] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 654.829748][ T5225] Bluetooth: hci4: command 0x0c1a tx timeout [ 654.856877][ T5219] usb 5-1: Using ep0 maxpacket: 8 [ 654.870546][ T5219] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 654.896943][ T5219] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 654.908699][ T5219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 127, changing to 10 [ 654.920108][ T5219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33936, setting to 1024 [ 654.931343][ T5219] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 655.111768][ T5219] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 655.121010][ T5219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.129021][ T5219] usb 5-1: Product: syz [ 655.133287][ T5219] usb 5-1: Manufacturer: syz [ 655.137900][ T5219] usb 5-1: SerialNumber: syz [ 655.155387][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.190901][ T5219] usb 5-1: config 0 descriptor?? [ 655.205099][T10023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 655.359490][ T5219] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 655.434837][T10030] loop3: detected capacity change from 0 to 8 [ 655.469979][T10030] squashfs image failed sanity check [ 655.479876][ T5219] imon:send_packet: packet tx failed (-71) [ 655.510035][ T5219] imon 5-1:0.0: panel buttons/knobs setup failed [ 655.557233][ T5225] Bluetooth: hci8: command 0x0c1a tx timeout [ 655.564360][ T5225] Bluetooth: hci3: command 0x0c1a tx timeout [ 656.840124][ T5219] rc_core: IR keymap rc-imon-pad not found [ 656.846105][ T5219] Registered IR keymap rc-empty [ 656.851233][ T5219] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 656.861548][ T5219] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 656.875950][ T5219] imon:send_packet: packet tx failed (-71) [ 656.936387][ T5219] imon 5-1:0.0: remote input dev register failed [ 656.940048][T10036] netlink: 'syz.4.853': attribute type 30 has an invalid length. [ 656.943376][ T5219] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 657.141063][ T5219] imon 5-1:0.0: unable to initialize intf0, err 0 [ 657.147625][ T5219] imon:imon_probe: failed to initialize context! [ 657.157944][ T5219] imon 5-1:0.0: unable to register, err -19 [ 657.200267][ T5219] usb 5-1: USB disconnect, device number 9 [ 657.560012][ T5219] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 657.596706][ T1811] team0 (unregistering): Port device team_slave_1 removed [ 657.781272][ T5219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.820830][ T5219] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.834708][ T1811] team0 (unregistering): Port device team_slave_0 removed [ 657.900916][ T5219] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.910395][ T5219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.961803][ T5219] usb 5-1: config 0 descriptor?? [ 658.432782][T10042] loop3: detected capacity change from 0 to 256 [ 658.462692][ T29] audit: type=1804 audit(1726868722.376:190): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.854" name="/newroot/36/file1/file0" dev="loop3" ino=1048708 res=1 errno=0 [ 658.721779][ T5219] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 658.730788][ T5219] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 658.746938][ T5219] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 659.191056][ T5317] usb 5-1: USB disconnect, device number 10 [ 660.257956][ T9833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.267336][ T9833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.294127][ T9833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.560558][ T29] audit: type=1326 audit(1726868724.476:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.4.857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84d7f7def9 code=0x0 [ 660.764726][T10055] loop5: detected capacity change from 0 to 1024 [ 661.673604][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 661.691515][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 661.769023][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 661.785090][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 661.864863][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 661.907686][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 661.922639][T10064] hfsplus: request for non-existent node 33423360 in B*Tree [ 661.933998][ T9833] hsr_slave_0: entered promiscuous mode [ 661.940980][T10064] hfsplus: request for non-existent node 33423360 in B*Tree [ 661.966324][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 661.974147][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 661.988614][ T9833] hsr_slave_1: entered promiscuous mode [ 661.989937][ T5335] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 662.009295][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 662.016996][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 662.020269][ T9833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.032569][ T9833] Cannot create hsr debugfs directory [ 662.039301][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 662.080178][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 662.321608][T10064] hfsplus: request for non-existent node 33423360 in B*Tree [ 662.340005][T10064] hfsplus: request for non-existent node 33423360 in B*Tree [ 663.293400][T10070] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 663.293400][T10070] The task syz.3.861 (10070) triggered the difference, watch for misbehavior. [ 663.355029][ T5335] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 663.403407][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 663.417189][ T5335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.419914][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 663.471715][ T5335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 663.520199][ T5335] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.622612][ T5335] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 663.640071][ T5335] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 663.719182][ T5335] usb 2-1: Product: syz [ 663.728052][T10064] hfsplus: request for non-existent node 33423360 in B*Tree [ 663.738059][ T5335] usb 2-1: Manufacturer: syz [ 663.749954][T10064] hfsplus: request for non-existent node 33423360 in B*Tree [ 663.781672][T10071] hfsplus: request for non-existent node 33423360 in B*Tree [ 663.794087][ T5335] cdc_wdm 2-1:1.0: skipping garbage [ 663.815299][ T5335] cdc_wdm 2-1:1.0: skipping garbage [ 663.817659][T10071] hfsplus: request for non-existent node 33423360 in B*Tree [ 663.835095][ T5335] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 663.842216][T10072] hfsplus: request for non-existent node 33423360 in B*Tree [ 663.855380][ T5335] cdc_wdm 2-1:1.0: Unknown control protocol [ 663.859737][T10072] hfsplus: request for non-existent node 33423360 in B*Tree [ 663.898389][T10076] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 663.915988][T10076] 9pnet_fd: Insufficient options for proto=fd [ 663.976115][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 664.022984][T10055] hfsplus: request for non-existent node 33423360 in B*Tree [ 664.100077][T10064] hfsplus: request for non-existent node 33423360 in B*Tree [ 664.113289][T10064] hfsplus: request for non-existent node 33423360 in B*Tree [ 664.240345][T10082] loop3: detected capacity change from 0 to 16 [ 664.281437][T10082] erofs: (device loop3): erofs_read_inode: negative i_size @ nid 36 [ 664.295485][ T5285] usb 2-1: USB disconnect, device number 5 [ 665.084684][ T5377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.071485][ T5377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.176951][ T9806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 667.648759][ T5377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.730819][ T9806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 667.777259][ T9806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 667.817258][ T9806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 667.999999][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.087630][ T5377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.177502][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.197931][ T9806] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.249968][ T5377] bridge_slave_1: left allmulticast mode [ 670.263393][ T5377] bridge_slave_1: left promiscuous mode [ 670.281847][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.428692][ T5377] bridge_slave_0: left allmulticast mode [ 671.438280][ T5377] bridge_slave_0: left promiscuous mode [ 671.511167][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.836557][T10142] loop1: detected capacity change from 0 to 2048 [ 673.885243][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.320169][ T29] audit: type=1326 audit(1726868738.206:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7f7def9 code=0x7ffc0000 [ 674.368202][ T29] audit: type=1326 audit(1726868738.206:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7f7def9 code=0x7ffc0000 [ 674.435280][T10142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 674.446120][ T29] audit: type=1326 audit(1726868738.206:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f84d7f7def9 code=0x7ffc0000 [ 674.731450][ T29] audit: type=1326 audit(1726868738.206:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7f7def9 code=0x7ffc0000 [ 674.753880][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.325869][ T29] audit: type=1326 audit(1726868738.206:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7f7def9 code=0x7ffc0000 [ 675.345316][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.348347][ T29] audit: type=1326 audit(1726868738.206:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f84d7f7def9 code=0x7ffc0000 [ 675.475323][ T29] audit: type=1326 audit(1726868738.206:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7f7def9 code=0x7ffc0000 [ 675.513639][ T29] audit: type=1326 audit(1726868738.206:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7f7def9 code=0x7ffc0000 [ 675.649993][ T30] INFO: task syz.4.640:9076 blocked for more than 144 seconds. [ 675.657621][ T30] Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 675.675932][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 675.687401][ T30] task:syz.4.640 state:D stack:27360 pid:9076 tgid:9059 ppid:7011 flags:0x00000004 [ 675.825394][ T29] audit: type=1326 audit(1726868738.206:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f84d7f7def9 code=0x7ffc0000 [ 675.949162][ T30] Call Trace: [ 676.039464][ T30] [ 676.126792][ T30] __schedule+0x1893/0x4b50 [ 676.196439][ T30] ? __pfx___schedule+0x10/0x10 [ 676.210068][ T29] audit: type=1326 audit(1726868738.206:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7f7def9 code=0x7ffc0000 [ 676.398074][ T30] ? __pfx_lock_release+0x10/0x10 [ 676.428742][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 676.446793][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 676.466952][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.492811][ T30] ? schedule+0x90/0x320 [ 676.506291][ T30] schedule+0x14b/0x320 [ 676.519769][ T30] ? percpu_rwsem_wait+0x34c/0x450 [ 676.537416][ T30] percpu_rwsem_wait+0x3c2/0x450 [ 676.552720][ T30] ? __pfx_percpu_rwsem_wait+0x10/0x10 [ 676.573313][ T30] ? __pfx_percpu_rwsem_wake_function+0x10/0x10 [ 676.592757][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.653540][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.034866][ T30] ? rcu_is_watching+0x15/0xb0 [ 677.054918][ T30] __percpu_down_read+0xee/0x130 [ 677.067306][ T30] sb_start_write+0x184/0x1c0 [ 677.334905][T10150] coredump: 188(syz.4.882): interrupted: fatal signal pending [ 677.343645][ T30] mnt_want_write+0x3f/0x90 [ 677.349379][ T30] vfs_truncate+0xd3/0x3b0 [ 677.354018][ T30] do_sys_truncate+0xdb/0x190 [ 677.355448][T10150] coredump: 188(syz.4.882): Error writing out the process memory [ 677.358824][ T30] ? __pfx_do_sys_truncate+0x10/0x10 [ 677.372058][ T30] ? exc_page_fault+0x590/0x8c0 [ 677.377091][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.383003][ T30] ? do_syscall_64+0xb6/0x230 [ 677.392364][T10150] coredump: 188(syz.4.882): written to core: VMAs: 34, size 97419264; core: 14416522 bytes, pos 14876672 [ 677.404616][ T30] do_syscall_64+0xf3/0x230 [ 677.410963][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.421585][ T30] RIP: 0033:0x7fab9c37def9 [ 677.426136][ T30] RSP: 002b:00007fab9d1a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 677.448636][ T30] RAX: ffffffffffffffda RBX: 00007fab9c536130 RCX: 00007fab9c37def9 [ 677.463629][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001980 [ 677.479644][ T30] RBP: 00007fab9c3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 677.502653][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.530632][ T30] R13: 0000000000000001 R14: 00007fab9c536130 R15: 00007fff145c6f28 [ 677.538754][ T30] [ 677.570288][ T30] INFO: task kmmpd-loop4:9068 blocked for more than 145 seconds. [ 677.579292][ T30] Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 677.589869][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 677.598716][ T30] task:kmmpd-loop4 state:D stack:27680 pid:9068 tgid:9068 ppid:2 flags:0x00004000 [ 677.610467][ T30] Call Trace: [ 677.615916][ T30] [ 677.619273][ T30] __schedule+0x1893/0x4b50 [ 677.628371][ T30] ? __pfx___schedule+0x10/0x10 [ 677.655922][ T30] ? __pfx_lock_release+0x10/0x10 [ 677.672697][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.699411][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 677.719532][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.725812][ T30] ? schedule+0x90/0x320 [ 677.752814][ T30] schedule+0x14b/0x320 [ 677.778268][ T30] ? percpu_rwsem_wait+0x34c/0x450 [ 677.791749][ T30] percpu_rwsem_wait+0x3c2/0x450 [ 677.806293][ T30] ? __pfx_percpu_rwsem_wait+0x10/0x10 [ 677.818952][ T30] ? __pfx_percpu_rwsem_wake_function+0x10/0x10 [ 677.828730][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.834674][ T30] ? rcu_is_watching+0x15/0xb0 [ 677.839514][ T30] __percpu_down_read+0xee/0x130 [ 677.859264][ T30] ? kmmpd+0x26d/0xaa0 [ 677.866281][ T30] write_mmp_block+0x2f2/0x3a0 [ 677.878537][ T30] kmmpd+0x26d/0xaa0 [ 677.883022][ T30] ? __pfx_kmmpd+0x10/0x10 [ 677.891214][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.896962][ T30] ? __kthread_parkme+0x169/0x1d0 [ 677.904956][ T30] ? __pfx_kmmpd+0x10/0x10 [ 677.915281][ T30] kthread+0x2f2/0x390 [ 677.922870][ T30] ? __pfx_kmmpd+0x10/0x10 [ 677.927424][ T30] ? __pfx_kthread+0x10/0x10 [ 677.935958][ T30] ret_from_fork+0x4d/0x80 [ 677.945996][ T30] ? __pfx_kthread+0x10/0x10 [ 677.951803][ T30] ret_from_fork_asm+0x1a/0x30 [ 677.956804][ T30] [ 677.995208][ T30] [ 677.995208][ T30] Showing all locks held in the system: [ 678.008468][ T30] 3 locks held by kworker/u8:0/11: [ 678.016576][ T30] #0: ffff88814b457948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 678.032381][ T30] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 678.045725][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 678.057503][ T30] 1 lock held by khungtaskd/30: [ 678.062831][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 678.073085][ T30] 2 locks held by kworker/u8:3/36: [ 678.078285][ T30] 2 locks held by dhcpcd/4888: [ 678.083540][ T30] #0: ffff88802f0c06c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 678.094499][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 678.107401][ T30] 2 locks held by getty/4970: [ 678.113296][ T30] #0: ffff888031ce00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 678.124507][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 678.136873][ T30] 3 locks held by kworker/1:4/5285: [ 678.142391][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 678.154616][ T30] #1: ffffc90004127d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 678.168428][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 678.179246][ T30] 3 locks held by kworker/1:6/5331: [ 678.184880][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 678.197818][ T30] #1: ffffc900040c7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 678.211529][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 678.224456][ T30] 5 locks held by kworker/u8:9/5377: [ 678.231271][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 678.243408][ T30] #1: ffffc900033afd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 678.257492][ T30] #2: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 678.269188][ T30] #3: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 678.278683][ T30] #4: ffffffff8e93df78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 678.290199][ T30] 3 locks held by kworker/u8:12/5635: [ 678.295714][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 678.308195][ T30] #1: ffffc9000322fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 678.319962][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 678.329338][ T30] 1 lock held by syz.4.640/9076: [ 678.338264][ T30] #0: ffff888027f06420 (sb_writers#4){++++}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 678.348100][ T30] 1 lock held by kmmpd-loop4/9068: [ 678.353783][ T30] #0: ffff888027f06420 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x26d/0xaa0 [ 678.368585][ T30] 1 lock held by syz-executor/9806: [ 678.375215][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 678.385282][ T30] 7 locks held by syz-executor/9833: [ 678.390959][ T30] #0: ffff888031f64420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 678.403816][ T30] #1: ffff88802fdd1488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 678.427796][ T30] #2: ffff8880266a13c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 678.446423][ T30] #3: ffffffff8f5676c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 678.459293][ T30] #4: ffff88807e5310e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 678.472570][ T30] #5: ffff88807e530250 (&devlink->lock_key#38){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 678.485832][ T30] #6: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 678.522239][ T30] [ 678.524747][ T30] ============================================= [ 678.524747][ T30] [ 678.535956][ T30] NMI backtrace for cpu 0 [ 678.540309][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 678.550479][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 678.560551][ T30] Call Trace: [ 678.563839][ T30] [ 678.566774][ T30] dump_stack_lvl+0x241/0x360 [ 678.571478][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.576703][ T30] ? __pfx__printk+0x10/0x10 [ 678.581324][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 678.586378][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 678.591847][ T30] ? _printk+0xd5/0x120 [ 678.596021][ T30] ? __pfx__printk+0x10/0x10 [ 678.600633][ T30] ? __wake_up_klogd+0xcc/0x110 [ 678.605504][ T30] ? __pfx__printk+0x10/0x10 [ 678.610111][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.615855][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 678.620906][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 678.626912][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 678.632907][ T30] watchdog+0xff4/0x1040 [ 678.637184][ T30] ? watchdog+0x1ea/0x1040 [ 678.641643][ T30] ? __pfx_watchdog+0x10/0x10 [ 678.646335][ T30] kthread+0x2f2/0x390 [ 678.650412][ T30] ? __pfx_watchdog+0x10/0x10 [ 678.655103][ T30] ? __pfx_kthread+0x10/0x10 [ 678.659704][ T30] ret_from_fork+0x4d/0x80 [ 678.664144][ T30] ? __pfx_kthread+0x10/0x10 [ 678.668738][ T30] ret_from_fork_asm+0x1a/0x30 [ 678.673540][ T30] [ 678.678074][ T30] Sending NMI from CPU 0 to CPUs 1: [ 678.684082][ C1] NMI backtrace for cpu 1 [ 678.684099][ C1] CPU: 1 UID: 0 PID: 931 Comm: kworker/1:2 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 678.684126][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 678.684142][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 678.684188][ C1] RIP: 0010:wg_ratelimiter_gc_entries+0x3db/0x470 [ 678.684226][ C1] Code: 24 18 74 35 e8 86 52 2b fb 48 c7 c7 40 ff 97 8c be 4e 00 00 00 31 d2 e8 83 4d fb fa 2e 2e 2e 31 c0 48 ff c3 8b 05 25 25 07 14 <48> 39 c3 73 11 e8 5b 52 2b fb e9 6a fc ff ff e8 51 52 2b fb eb e1 [ 678.684248][ C1] RSP: 0018:ffffc90003d07b68 EFLAGS: 00000202 [ 678.684268][ C1] RAX: 0000000000002000 RBX: 0000000000001b1c RCX: ffff888025540000 [ 678.684286][ C1] RDX: dffffc0000000000 RSI: ffff888025540000 RDI: ffffc90003d07ae0 [ 678.684304][ C1] RBP: ffffc90003d07dc0 R08: ffffffff8f43cea3 R09: 1ffffffff1e879d4 [ 678.684324][ C1] R10: dffffc0000000000 R11: fffffbfff1e879d5 R12: 0000000000000000 [ 678.684342][ C1] R13: dffffc0000000000 R14: 0000009e02b00eec R15: ffffffff8f43cfc0 [ 678.684363][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 678.684384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.684401][ C1] CR2: 000000002002e000 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 678.684421][ C1] Call Trace: [ 678.684430][ C1] [ 678.684439][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 678.684468][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 678.684512][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 678.684538][ C1] ? nmi_handle+0x2a/0x5a0 [ 678.684575][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 678.684613][ C1] ? nmi_handle+0x151/0x5a0 [ 678.684637][ C1] ? nmi_handle+0x2a/0x5a0 [ 678.684662][ C1] ? wg_ratelimiter_gc_entries+0x3db/0x470 [ 678.684697][ C1] ? default_do_nmi+0x63/0x160 [ 678.684728][ C1] ? exc_nmi+0x123/0x1f0 [ 678.684754][ C1] ? end_repeat_nmi+0xf/0x53 [ 678.684809][ C1] ? wg_ratelimiter_gc_entries+0x3db/0x470 [ 678.684845][ C1] ? wg_ratelimiter_gc_entries+0x3db/0x470 [ 678.684883][ C1] ? wg_ratelimiter_gc_entries+0x3db/0x470 [ 678.684919][ C1] [ 678.684927][ C1] [ 678.684939][ C1] ? process_scheduled_works+0x976/0x1850 [ 678.684979][ C1] process_scheduled_works+0xa65/0x1850 [ 678.685032][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 678.685073][ C1] ? assign_work+0x364/0x3d0 [ 678.685110][ C1] worker_thread+0x870/0xd30 [ 678.685148][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.685189][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 678.685227][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 678.685268][ C1] ? __kthread_parkme+0x169/0x1d0 [ 678.685310][ C1] ? __pfx_worker_thread+0x10/0x10 [ 678.685346][ C1] kthread+0x2f2/0x390 [ 678.685368][ C1] ? __pfx_worker_thread+0x10/0x10 [ 678.685403][ C1] ? __pfx_kthread+0x10/0x10 [ 678.685426][ C1] ret_from_fork+0x4d/0x80 [ 678.685466][ C1] ? __pfx_kthread+0x10/0x10 [ 678.685489][ C1] ret_from_fork_asm+0x1a/0x30 [ 678.685539][ C1] [ 678.991574][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 678.998447][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 679.008606][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 679.018693][ T30] Call Trace: [ 679.021978][ T30] [ 679.024921][ T30] dump_stack_lvl+0x241/0x360 [ 679.029649][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.034881][ T30] ? __pfx__printk+0x10/0x10 [ 679.039500][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 679.045529][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.051206][ T30] ? vscnprintf+0x5d/0x90 [ 679.055559][ T30] panic+0x349/0x880 [ 679.059474][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.065116][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 679.071282][ T30] ? __pfx_panic+0x10/0x10 [ 679.075722][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 679.081108][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.086749][ T30] ? __irq_work_queue_local+0x137/0x410 [ 679.092307][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.097974][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 679.103364][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 679.109527][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 679.115693][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.121349][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 679.127513][ T30] watchdog+0x1033/0x1040 [ 679.131863][ T30] ? watchdog+0x1ea/0x1040 [ 679.136298][ T30] ? __pfx_watchdog+0x10/0x10 [ 679.140991][ T30] kthread+0x2f2/0x390 [ 679.145071][ T30] ? __pfx_watchdog+0x10/0x10 [ 679.149766][ T30] ? __pfx_kthread+0x10/0x10 [ 679.154374][ T30] ret_from_fork+0x4d/0x80 [ 679.158816][ T30] ? __pfx_kthread+0x10/0x10 [ 679.163414][ T30] ret_from_fork_asm+0x1a/0x30 [ 679.168217][ T30] [ 679.171610][ T30] Kernel Offset: disabled [ 679.175934][ T30] Rebooting in 86400 seconds..