last executing test programs: 6m20.129726392s ago: executing program 4 (id=5): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875", @ANYRES64, @ANYRES16], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 6m16.945221381s ago: executing program 4 (id=17): r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x1b1, @time={0x1, 0xffffffff}}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6f, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @initial, @device_b, @broadcast, {0x1, 0x1}}, @a_msdu=[{@device_b, @broadcast}, {@device_a, @device_a, 0x68, "deb7b2bed8aa271c1d3e04a41f1fc4b0144188439eb0b5920985811b84a31329ac39dd5aa1c6730a236a505134963b1a1a3d7e159c6324dbc0a41cef66ea42ba7effa83dfc38c039d600930fae7fd11f9feb5d33062232f4c8601ef1ce2492052edfa573883675d5"}, {@device_b, @device_a, 0x22, "01b6035c9eacfabb844c1b4343a889d4b0bca9ae8ab7f359b2d0f749a28738ffc66c"}]}, 0xd0) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc04c5349, &(0x7f0000001380)={0x0, 0x0, 0x0, 'queue1\x00'}) tkill(r1, 0x7) 6m15.593389159s ago: executing program 4 (id=19): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000500), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)=0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"9c3b00", 0x0, 0x0, {0xffffffffffffe697, 0xefd}, {0x2, 0x3}, 0xf, [0x10, 0xff91, 0x6, 0x786, 0x7, 0x9, 0x7, 0x7, 0x8e7b, 0x1, 0x8, 0x9, 0x6, 0x3, 0x7, 0xffff]}) 6m13.509208781s ago: executing program 4 (id=31): socket(0x200000100000011, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_GET_NAME(0x25, &(0x7f0000000000)=""/25) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getrusage(0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpgrp(0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) 5m58.306725203s ago: executing program 32 (id=31): socket(0x200000100000011, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_GET_NAME(0x25, &(0x7f0000000000)=""/25) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getrusage(0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) socket$inet6(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpgrp(0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) 4m42.02322905s ago: executing program 2 (id=233): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') io_uring_setup(0x901, &(0x7f00000004c0)={0x0, 0x894c, 0x10, 0xfff7ffff, 0x1fc}) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) close_range(r8, r2, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x40000) 4m40.162681231s ago: executing program 2 (id=235): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c000714"], 0xf) 4m39.992491872s ago: executing program 2 (id=238): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x253, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @vbi={0x5, 0x2, 0x5, 0xb5315241, [0x4, 0x4], [0x7, 0x9], 0x13a}}}) 4m39.785442563s ago: executing program 2 (id=240): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r1 = gettid() timer_create(0xb, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x8, 0x4, @tid=r1}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+60000000}}, &(0x7f0000000380)) r5 = syz_open_dev$cec(0x0, 0x0, 0x80) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r0, 0x13, 0x1, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), &(0x7f0000000400)=[0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup=r0, r6, 0xc, 0x2000, r0, @value=r0, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r0, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r9 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r9, 0x3, &(0x7f0000000180)=""/165) 4m38.919357288s ago: executing program 2 (id=244): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fc2, 0x1, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r4, 0x114, 0x271d, 0x0, 0x20000000) 4m37.732281085s ago: executing program 2 (id=245): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x8020000) r4 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x7902c3a1e60df15c}) 4m22.655045566s ago: executing program 33 (id=245): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x8020000) r4 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x7902c3a1e60df15c}) 10.825637676s ago: executing program 5 (id=954): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e8a3785200"/18], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg$inet(r4, &(0x7f0000003340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}, {{&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x4000804) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x2, [{}, {}]}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='--\x00') mremap(&(0x7f0000211000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) 8.972667966s ago: executing program 0 (id=957): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00'}, 0x2c) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000200)=""/69) 6.808665729s ago: executing program 3 (id=964): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/4096, 0x0, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 5.767408816s ago: executing program 1 (id=965): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x80000, 0x8000000000000003}) 5.219626479s ago: executing program 3 (id=966): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0xe0, 0x43, 0xa0, 0xe0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x3}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@multicast2}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) 5.147009739s ago: executing program 6 (id=967): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 5.1462119s ago: executing program 1 (id=968): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev}, {@multicast2, 0x7}, {@private=0xa010101}, {@broadcast, 0x52b1}, {@multicast2, 0xfffffffe}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.12025974s ago: executing program 3 (id=969): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e47f0000010000000000", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r4, 0x200002) fcntl$setstatus(r3, 0x4, 0x2400) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r5, r4, 0x0, 0x80001d00c0d0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.07700965s ago: executing program 5 (id=970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) write$FUSE_ENTRY(r2, &(0x7f0000000440)={0x90}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 5.07648649s ago: executing program 6 (id=971): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$SIOCAX25CTLCON(r1, 0x89e8, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000001c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 4.911168451s ago: executing program 6 (id=972): getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r0, &(0x7f00000068c0)='./cgroup\x00', 0x800, 0x2, 0x0) 4.872959961s ago: executing program 6 (id=973): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$getown(r0, 0x9) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x2f) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) eventfd2(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 4.017096016s ago: executing program 3 (id=974): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x4b52, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x3}}, 0x10, 0x0}, 0x0) socket$inet6(0x10, 0x6, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) 3.951091657s ago: executing program 5 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='xprtrdma_op_connect\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000200), 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="100001800400048008000100000001"], 0x28}, 0x1, 0x1000000000000000}, 0x10) setsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000280)=0x1, 0x4) socket(0x80000000000000a, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073787a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400009000008000440000000220500020007000000380001800c000100626974776973650028000280080003400000000208000140000000140800024000000012080006400000"], 0x10c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.525239799s ago: executing program 3 (id=976): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/4096, 0x0, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 3.30995296s ago: executing program 1 (id=977): pidfd_send_signal(0xffffffffffffffff, 0x1b, 0x0, 0x700) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) getpid() r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) getsockname$qrtr(r2, &(0x7f0000000040), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xd71e, 0x1}) 3.147216811s ago: executing program 0 (id=978): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001000100"], 0x114}], 0x1}, 0x0) 2.975534112s ago: executing program 5 (id=979): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0xe0, 0x43, 0xa0, 0xe0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x3}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@multicast2}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) 2.820827723s ago: executing program 0 (id=980): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e8a3785200"/18], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg$inet(r4, &(0x7f0000003340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}, {{&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x4000804) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x2, [{}, {}]}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='--\x00') mremap(&(0x7f0000211000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) 2.631700444s ago: executing program 5 (id=981): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xd7}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962b7df694a3fcae3697bd7b85"], 0x114}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8923, 0x20000000) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.475107705s ago: executing program 5 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0xc080, 0x4, 0x28}, 0x18) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)={0x248, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x21e, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast, {0x0, 0xffe}}, @random="d19933e68032dd679513068e96f439f7e9c567138e56d42ed71c3e7038d9ab3ceba1dd66eabcb3cd43c6890cd6adebf7c545da6c0f87fa2937481a37cc5265786bc784eb2908003746a5cfa4cbf51658c89f06ea75cad7216b43beb58c08e7fdd784477f2deeb9647e9a30bc8dfe71f8ab5ad3b6afe2ca2f3ad55b620000000f00a7ad3c8695f1e6978b1d60ef16cd51f3281ddcae52825c2a15e33b7b871a85d0a4067f80b0547e8717557a681e3d2542cdcd08b886a3036d348864be0d59e2b1316e3c1aacfbd634ea5b9a0825f3bb585566c251f3fc7d22571a5e804d517afa4fe49b08d62e9b9fd94892d02364f947212837043e44afe91854a018eb7624a9854796bf785b349160a0fb0706855dce459b883e4f50463488255150b4fa6277d45660e524b260e998ae485020948e47148b1091e71a254bb327584dbe281d02db48db76b37a38b2b0122c31fe0a0319e085a2a63908c105d86d95ba1e0083e3760a8ff71cf17b435634f2b3094700d5a30a1ed4010d851fdaec184921c122a4f4a5614f8c59d14cda62034b4b6dc010c3c721356de5815bb741987f2eba971f522206776bdc71b794a6bec092bb9fd2a2cf2e96124e6bb3b0cd5caa0de9edb554b45141af53a9b9e2af4af7ad73bd4bae39349d0728409c66b1c66c0301c538610bc78fe2caa5c3e704df841c1db62a4caf74781f42efd21851678c18b6187ef5"}}]}, 0x248}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r6 = dup(r3) read$FUSE(r6, &(0x7f0000008940)={0x2020}, 0x2020) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') getresuid(&(0x7f0000000400), 0x0, &(0x7f00000004c0)) r8 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xba) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x8, 0xbe54, 0x24, @mcast1, @private1, 0x8, 0x7800, 0xb, 0xc0d}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r9, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004ddacc20410e50479c26010203010902"], 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x2, 0x2}, 0x2) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000840)={0x40, 0x12, 0x57, "7c706e3cc359ca7332ba745a60499845fa32b196a3c1b5ca8adafdbc7c5eb707be745e6fda6daa440b68eb4c088487ff8f9f8b8d71c3ba3f4c017673b3f40eb25bd4582b37a60debfbcb234e7d4293c6535e36643d6ce7"}, 0x0, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000a40)={0x40, 0xb, 0x2, 'D\''}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x2}, 0x0, &(0x7f0000000b00)={0x40, 0x17, 0x6, @local}, 0xfffffffffffffffe, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x8}}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0x3}, 0x2) mount$afs(&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 2.448678806s ago: executing program 1 (id=983): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) 2.342513676s ago: executing program 1 (id=984): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x4000000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x98f6}]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 2.139601067s ago: executing program 6 (id=985): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 1.071317024s ago: executing program 0 (id=986): socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000005c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050d00c80000"], 0x7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.033727734s ago: executing program 0 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) ioctl$SNDCTL_TMR_TEMPO(r5, 0x40085112, &(0x7f0000000180)=0x8) r6 = dup(r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) readv(r6, &(0x7f00000034c0)=[{&(0x7f0000000280)=""/4096, 0x4}, {0x0, 0x4}], 0x2) 225.565629ms ago: executing program 6 (id=988): r0 = syz_mount_image$minix(&(0x7f00000001c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="7665b56bff7d13a2d819dd99d7b7fb44d89826e61bdd16b72b7b4b28466b2dd5276d640c15e37c725cc51cf9ccb08269fbbcf21642cf3700d39319aedab841312becd7508764407fc111e219d48aff23cec7bff40e31ce41ce552026be34aef66f44ef30690a7b52e1dd15b63c9d5de5b8fd41279c39eaa7c3660cdf0466414f5b966df46c5dd09f5d724a4d956293d161bf6a0aab3287558cfa91db1a051d07", @ANYRES64, @ANYRESOCT=0x0, @ANYRES16, @ANYRES8=0x0], 0x1, 0x1e5, &(0x7f0000000400)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = msgget$private(0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) msgget(0x1, 0x4) msgsnd(r4, &(0x7f0000000080)=ANY=[], 0x2000, 0x800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={0x0, 0x0, 0x0, r0}, 0x18) mkdir(&(0x7f0000000380)='./file0\x00', 0x10) fchown(r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) pwritev2(r1, 0x0, 0x0, 0x800001, 0x0, 0x0) 111.102369ms ago: executing program 1 (id=989): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='xprtrdma_op_connect\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000200), 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="100001800400048008000100000001"], 0x28}, 0x1, 0x1000000000000000}, 0x10) setsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000280)=0x1, 0x4) socket(0x80000000000000a, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073787a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400009000008000440000000220500020007000000380001800c000100626974776973650028000280080003400000000208000140000000140800024000000012080006400000"], 0x10c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 74.0834ms ago: executing program 0 (id=990): pidfd_send_signal(0xffffffffffffffff, 0x1b, 0x0, 0x700) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) getpid() r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xe9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x9) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) getsockname$qrtr(r2, &(0x7f0000000040), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xd71e, 0x1}) 0s ago: executing program 3 (id=991): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) kernel console output (not intermixed with test programs): CONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.738451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.753064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.762318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.799785][ T4167] device veth0_vlan entered promiscuous mode [ 54.828254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.836054][ T4213] Bluetooth: hci1: command 0x041b tx timeout [ 54.836609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.843244][ T4213] Bluetooth: hci2: command 0x041b tx timeout [ 54.866139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.874328][ T4213] Bluetooth: hci0: command 0x041b tx timeout [ 54.874658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.890609][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.910638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.918248][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 54.925872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.929615][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 54.935381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.948493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.957805][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.964909][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.973995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.983516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.993006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.006452][ T4167] device veth1_vlan entered promiscuous mode [ 55.019845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.028871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.037131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.046515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.055241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.063819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.073021][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.080061][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.093297][ T4165] device veth0_macvtap entered promiscuous mode [ 55.109954][ T4167] device veth0_macvtap entered promiscuous mode [ 55.124307][ T4165] device veth1_macvtap entered promiscuous mode [ 55.134166][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.141376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.150489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.167961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.178962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.187704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.195360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.203956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.213905][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.226467][ T4167] device veth1_macvtap entered promiscuous mode [ 55.247117][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.273445][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.280441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.293576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.302176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.310710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.320325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.337519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.362237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.373406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.382980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.391425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.400110][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.409506][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.420381][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.430379][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.440419][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.453794][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.464948][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.476464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.486752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.496058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.505637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.525061][ T4165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.534329][ T4165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.543386][ T4165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.552388][ T4165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.592651][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.604239][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.617066][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.626661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.637897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.646820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.655440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.671115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.680294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.694429][ T4166] device veth0_vlan entered promiscuous mode [ 55.711519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.723637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.731414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.741465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.757484][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.766793][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.775716][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.784644][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.842060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.850239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.863941][ T4168] device veth0_vlan entered promiscuous mode [ 55.877474][ T4166] device veth1_vlan entered promiscuous mode [ 55.885448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.894473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.903011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.924957][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.943113][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.950493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.959797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.969971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.977756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.998371][ T4168] device veth1_vlan entered promiscuous mode [ 56.011499][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.061110][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.061385][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.069921][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.083462][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.085725][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.101062][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.109827][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.132081][ T4166] device veth0_macvtap entered promiscuous mode [ 56.146213][ T4166] device veth1_macvtap entered promiscuous mode [ 56.149863][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.164031][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.170577][ T4168] device veth0_macvtap entered promiscuous mode [ 56.180839][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.190668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.200122][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.210026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.220072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.229707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.238240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.263392][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.275782][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.286649][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.297235][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.308148][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.318496][ T4168] device veth1_macvtap entered promiscuous mode [ 56.334667][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.343991][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.362907][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.391482][ T4169] device veth0_vlan entered promiscuous mode [ 56.402469][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.410512][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.411583][ T4169] device veth1_vlan entered promiscuous mode [ 56.440092][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.455101][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.486515][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.498298][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.519534][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.535506][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.548152][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.560303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.576977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.587335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.614867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.626270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.637262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.649243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.657435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.681787][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.692815][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.703120][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.736343][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.891251][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.408511][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 57.432200][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 57.438314][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 57.464404][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.481275][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 57.499497][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.511895][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.559082][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 57.572831][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.582894][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.593399][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.604533][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.612787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.621387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.630132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.640458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.677022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.686214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.694855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.706441][ T4166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.725619][ T4166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.737005][ T4166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.747833][ T4166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.754962][ T4253] loop3: detected capacity change from 0 to 2048 [ 57.765033][ T4169] device veth0_macvtap entered promiscuous mode [ 57.846913][ T4254] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 58.087647][ T4169] device veth1_macvtap entered promiscuous mode [ 58.432215][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.440939][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.461367][ T4258] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.476669][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.487996][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.523163][ T4253] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 58.541506][ T4253] Remounting filesystem read-only [ 58.547964][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.559014][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.570942][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.581951][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.592879][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.603551][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.613605][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.624096][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.635764][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.652509][ T4253] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 58.668185][ T4253] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 58.675872][ T4253] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 58.684283][ T4253] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.696136][ T4253] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.702051][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.707590][ T4253] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.713188][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.726285][ T4253] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 58.730122][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.741457][ T4253] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.746545][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.763836][ T4253] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.773461][ T4253] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 58.779042][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.780823][ T4253] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 58.790593][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.799132][ T4253] NILFS (loop3): discard dirty page: offset=0, ino=12 [ 58.813714][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.815612][ T4253] NILFS (loop3): discard dirty block: blocknr=17, size=1024 [ 58.828027][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.833305][ T4253] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.848939][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.852704][ T4253] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.868085][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.872832][ T4253] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 58.890080][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.901899][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.928657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.938769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.978465][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.987555][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.001264][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.013492][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.226715][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.240625][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.443066][ T4267] loop3: detected capacity change from 0 to 16 [ 60.584958][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 60.609113][ T4211] Bluetooth: hci0: command 0x0419 tx timeout [ 60.618552][ T4211] Bluetooth: hci1: command 0x0419 tx timeout [ 60.625008][ T4213] Bluetooth: hci4: command 0x0419 tx timeout [ 60.631146][ T4213] Bluetooth: hci3: command 0x0419 tx timeout [ 60.652237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.653251][ T4267] erofs: Unknown parameter 'tÙX:tÒùÍ' [ 60.775593][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.783834][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.811752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.314680][ T4269] syz.1.8 (4269) used greatest stack depth: 19832 bytes left [ 61.426276][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.461543][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.486515][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.494693][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.511228][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.520500][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.541761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.614255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.677067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.686832][ T4279] loop3: detected capacity change from 0 to 256 [ 61.707208][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.742236][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.790408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.807872][ T4279] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 61.869029][ T4281] loop4: detected capacity change from 0 to 4096 [ 62.042435][ T4281] NILFS (loop4): invalid segment: Checksum error in segment payload [ 62.050636][ T4281] NILFS (loop4): trying rollback from an earlier position [ 62.919610][ T4275] loop1: detected capacity change from 0 to 32768 [ 62.933187][ T4281] NILFS (loop4): recovery complete [ 62.944975][ T4288] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.419742][ T4275] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.11 (4275) [ 63.531770][ T4275] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 63.541555][ T4275] BTRFS info (device loop1): force zlib compression, level 3 [ 63.549056][ T4275] BTRFS info (device loop1): force clearing of disk cache [ 63.561860][ T4275] BTRFS info (device loop1): enabling ssd optimizations [ 63.618362][ T4275] BTRFS info (device loop1): turning on async discard [ 63.665927][ T4275] BTRFS info (device loop1): enabling disk space caching [ 63.696262][ T4275] BTRFS error (device loop1): unrecognized mount option 'smackfstransmute=journal_path' [ 63.815828][ T4275] BTRFS error (device loop1): open_ctree failed [ 63.984084][ T1110] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.467752][ T4283] loop2: detected capacity change from 0 to 32768 [ 64.570609][ T4283] (syz.2.3,4283,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.614004][ T4283] (syz.2.3,4283,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.631817][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 64.645110][ T4275] loop1: detected capacity change from 0 to 512 [ 64.682120][ T4275] ======================================================= [ 64.682120][ T4275] WARNING: The mand mount option has been deprecated and [ 64.682120][ T4275] and is ignored by this kernel. Remove the mand [ 64.682120][ T4275] option from the mount to silence this warning. [ 64.682120][ T4275] ======================================================= [ 64.716938][ C1] vkms_vblank_simulate: vblank timer overrun [ 64.732465][ T4283] JBD2: Ignoring recovery information on journal [ 64.746200][ T4275] EXT4-fs (loop1): error: journal path ./file1 is not a block device [ 64.756444][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 64.809163][ T4283] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 64.812025][ T1110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.829156][ T4300] loop3: detected capacity change from 0 to 32768 [ 64.861634][ T1110] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 64.872153][ T1110] usb 1-1: config 0 interface 0 has no altsetting 0 [ 64.892635][ T4300] XFS: ikeep mount option is deprecated. [ 64.964262][ T4166] ocfs2: Unmounting device (7,2) on (node local) [ 64.966236][ T4300] XFS (loop3): Mounting V5 Filesystem [ 65.045913][ T4300] XFS (loop3): Ending clean mount [ 65.059096][ T4300] XFS (loop3): Quotacheck needed: Please wait. [ 65.073330][ T1110] usb 1-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 65.115197][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.129350][ T1110] usb 1-1: Product: syz [ 65.134032][ T1110] usb 1-1: Manufacturer: syz [ 65.138629][ T1110] usb 1-1: SerialNumber: syz [ 65.199419][ T4300] XFS (loop3): Quotacheck: Done. [ 65.215649][ T1110] usb 1-1: config 0 descriptor?? [ 65.404182][ T4315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.142119][ T4318] loop2: detected capacity change from 0 to 40427 [ 66.256063][ T4318] F2FS-fs (loop2): invalid crc value [ 66.292112][ T4170] usb 1-1: USB disconnect, device number 2 [ 66.343024][ T4318] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.448864][ T4318] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.549714][ T26] audit: type=1800 audit(1733177988.188:2): pid=4318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 66.642763][ T4335] loop1: detected capacity change from 0 to 1024 [ 66.652009][ T4166] attempt to access beyond end of device [ 66.652009][ T4166] loop2: rw=2049, want=45104, limit=40427 [ 66.869049][ T4165] XFS (loop3): Unmounting Filesystem [ 67.022043][ T4339] loop1: detected capacity change from 0 to 256 [ 67.036185][ T4332] loop4: detected capacity change from 0 to 32768 [ 67.086246][ T4332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.19 (4332) [ 67.812608][ T4332] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 67.851814][ T4332] BTRFS info (device loop4): using free space tree [ 67.872156][ T4332] BTRFS info (device loop4): has skinny extents [ 68.093859][ T4367] loop3: detected capacity change from 0 to 128 [ 68.209829][ T4367] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.221923][ T4332] BTRFS info (device loop4): enabling ssd optimizations [ 68.278532][ T4367] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.001793][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.072065][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.475172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #248!!! [ 69.741631][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 69.750701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 69.759691][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.768720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.777671][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.786691][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 71.327977][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.701330][ T4421] loop2: detected capacity change from 0 to 2048 [ 71.999804][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.355927][ T4421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.389751][ T4425] loop0: detected capacity change from 0 to 256 [ 72.629297][ T4423] loop1: detected capacity change from 0 to 4096 [ 73.392439][ T4423] ntfs3: Unknown parameter '/dev/video#' [ 73.397686][ T4432] loop2: detected capacity change from 0 to 512 [ 73.400496][ T4425] FAT-fs (loop0): Directory bread(block 64) failed [ 73.434367][ T4432] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.451740][ T4432] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.461993][ T4425] FAT-fs (loop0): Directory bread(block 65) failed [ 73.468546][ T4425] FAT-fs (loop0): Directory bread(block 66) failed [ 73.917242][ T4425] FAT-fs (loop0): Directory bread(block 67) failed [ 73.931872][ T4425] FAT-fs (loop0): Directory bread(block 68) failed [ 73.938450][ T4425] FAT-fs (loop0): Directory bread(block 69) failed [ 73.965982][ T4425] FAT-fs (loop0): Directory bread(block 70) failed [ 73.974542][ T4425] FAT-fs (loop0): Directory bread(block 71) failed [ 73.987556][ T4425] FAT-fs (loop0): Directory bread(block 72) failed [ 73.996224][ T4425] FAT-fs (loop0): Directory bread(block 73) failed [ 74.074298][ T26] audit: type=1800 audit(1733177995.718:3): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.42" name="file1" dev="loop0" ino=1048590 res=0 errno=0 [ 74.111438][ T4432] EXT4-fs (loop2): 1 truncate cleaned up [ 74.176371][ T4432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.451596][ C0] sched: RT throttling activated [ 76.453437][ T1345] cfg80211: failed to load regulatory.db [ 76.660984][ T4451] loop3: detected capacity change from 0 to 512 [ 77.026584][ T4461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 77.379138][ T4451] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 77.437091][ T4451] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.026901][ T4451] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 808464432 (only 1 groups) [ 79.589248][ T4467] loop2: detected capacity change from 0 to 32768 [ 79.655483][ T4478] loop3: detected capacity change from 0 to 2048 [ 80.363713][ T4478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.400579][ T4467] XFS (loop2): Mounting V5 Filesystem [ 81.355081][ T4467] XFS (loop2): Ending clean mount [ 81.604254][ T4495] loop0: detected capacity change from 0 to 736 [ 82.395083][ T4166] XFS (loop2): Unmounting Filesystem [ 82.539637][ T4501] input: syz0 as /devices/virtual/input/input5 [ 84.653468][ T4523] loop1: detected capacity change from 0 to 2048 [ 87.152918][ T4385] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.350100][ T4538] loop1: detected capacity change from 0 to 8192 [ 87.410474][ T4538] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 89.127770][ T4212] Bluetooth: hci5: command 0x0409 tx timeout [ 89.151824][ T4385] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 89.226120][ T4385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.251884][ T4385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.287327][ T4385] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 89.290205][ T4529] chnl_net:caif_netlink_parms(): no params data found [ 89.424684][ T4534] loop3: detected capacity change from 0 to 32768 [ 89.458546][ T4385] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 89.468627][ T4385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.478467][ T4385] usb 3-1: config 0 descriptor?? [ 89.565153][ T4534] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 89.703159][ T4534] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 90.233942][ T4165] ocfs2: Unmounting device (7,3) on (node local) [ 90.240352][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.271922][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.317259][ T4529] device bridge_slave_0 entered promiscuous mode [ 90.405815][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.421950][ T4385] usbhid 3-1:0.0: can't add hid device: -71 [ 91.047168][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.143254][ T4385] usbhid: probe of 3-1:0.0 failed with error -71 [ 91.150206][ T4529] device bridge_slave_1 entered promiscuous mode [ 91.174892][ T4385] usb 3-1: USB disconnect, device number 2 [ 91.261817][ T4212] Bluetooth: hci5: command 0x041b tx timeout [ 91.335754][ T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.016063][ T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.240184][ T4529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.294405][ T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.234660][ T4587] loop3: detected capacity change from 0 to 2048 [ 94.804451][ T4213] Bluetooth: hci5: command 0x040f tx timeout [ 94.845838][ T4529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.960810][ T4529] team0: Port device team_slave_0 added [ 94.998187][ T4529] team0: Port device team_slave_1 added [ 95.101411][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.164285][ T4587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.187718][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.219335][ T4529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.233452][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.240507][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.266603][ T4529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.430674][ T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.235592][ T4595] loop1: detected capacity change from 0 to 8192 [ 96.264779][ T4529] device hsr_slave_0 entered promiscuous mode [ 96.279905][ T4529] device hsr_slave_1 entered promiscuous mode [ 96.301255][ T4595] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 96.345427][ T4529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.353713][ T4529] Cannot create hsr debugfs directory [ 96.913615][ T4601] loop0: detected capacity change from 0 to 32768 [ 96.921883][ T4211] Bluetooth: hci5: command 0x0419 tx timeout [ 97.020042][ T4598] loop3: detected capacity change from 0 to 32768 [ 97.101407][ T4601] (syz.0.85,4601,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.377116][ T4601] (syz.0.85,4601,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.802185][ T4601] JBD2: Ignoring recovery information on journal [ 97.855668][ T4598] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.961419][ T4598] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 263 [ 98.014753][ T4598] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 98.025209][ T4598] OCFS2: File system is now read-only. [ 98.030675][ T4598] (syz.3.84,4598,1):ocfs2_find_leaf:1933 ERROR: status = -30 [ 98.033882][ T4601] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.038869][ T4598] (syz.3.84,4598,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 98.063795][ T4598] (syz.3.84,4598,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 98.071361][ T4598] (syz.3.84,4598,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 98.081834][ T4598] (syz.3.84,4598,1):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 98.091084][ T4598] (syz.3.84,4598,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 98.157157][ T4598] (syz.3.84,4598,1):ocfs2_find_dir_space_el:3487 ERROR: status = -5 [ 98.387959][ T4598] (syz.3.84,4598,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -5 [ 98.606432][ T4598] (syz.3.84,4598,1):ocfs2_mknod:296 ERROR: status = -5 [ 98.642410][ T4598] (syz.3.84,4598,0):ocfs2_mknod:500 ERROR: status = -5 [ 98.650549][ T4598] (syz.3.84,4598,0):ocfs2_mkdir:657 ERROR: status = -5 [ 98.679165][ T4621] loop1: detected capacity change from 0 to 256 [ 98.823955][ T4621] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 98.851107][ T4598] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.900956][ T4529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.934478][ T4631] No such timeout policy "syz1" [ 98.948557][ T4529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.509040][ T4529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.669787][ T4169] ocfs2: Unmounting device (7,0) on (node local) [ 99.784770][ T4529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.006092][ T4165] ocfs2: Unmounting device (7,3) on (node local) [ 100.892930][ T4529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.976349][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.988741][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.999692][ T4529] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.240607][ T4657] loop1: detected capacity change from 0 to 512 [ 101.828919][ T4657] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.323013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.369313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.378800][ T4657] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.393094][ T4657] EXT4-fs (loop1): 1 truncate cleaned up [ 102.398746][ T4657] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 102.408652][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.427529][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.561474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.640550][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.690399][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.747947][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.755085][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.023578][ T4663] loop3: detected capacity change from 0 to 32768 [ 103.242184][ T4683] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 104.548920][ T4686] loop0: detected capacity change from 0 to 256 [ 104.606247][ T4663] XFS (loop3): Mounting V5 Filesystem [ 104.673643][ T4663] XFS (loop3): Ending clean mount [ 104.698656][ T4663] XFS (loop3): Quotacheck needed: Please wait. [ 104.754990][ T4686] FAT-fs (loop0): Unrecognized mount option "{hortname=lower" or missing value [ 104.761392][ T4529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.775555][ T4529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.788984][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.791996][ T4663] XFS (loop3): Quotacheck: Done. [ 104.798360][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.810541][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.824653][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.827228][ T4697] loop2: detected capacity change from 0 to 256 [ 104.833257][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.848517][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.857441][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.865948][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.874777][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.892350][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.903369][ T4697] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 104.912847][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.928902][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.014647][ T4165] XFS (loop3): Unmounting Filesystem [ 105.239115][ T155] device hsr_slave_0 left promiscuous mode [ 105.310430][ T155] device hsr_slave_1 left promiscuous mode [ 105.321323][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.341404][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.559172][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.616967][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.776440][ T155] device bridge_slave_1 left promiscuous mode [ 105.899183][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.244188][ T155] device bridge_slave_0 left promiscuous mode [ 106.331756][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.395170][ T155] device veth1_macvtap left promiscuous mode [ 106.419490][ T155] device veth0_macvtap left promiscuous mode [ 106.451774][ T155] device veth1_vlan left promiscuous mode [ 106.458871][ T155] device veth0_vlan left promiscuous mode [ 106.545662][ T4724] loop2: detected capacity change from 0 to 512 [ 106.739789][ T4726] loop3: detected capacity change from 0 to 2048 [ 106.817453][ T4724] EXT4-fs (loop2): Ignoring removed oldalloc option [ 106.938766][ T4724] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.212458][ T4726] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.239323][ T4724] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 107.304887][ T4724] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.104: invalid indirect mapped block 8 (level 2) [ 107.508487][ T4733] loop0: detected capacity change from 0 to 512 [ 108.123342][ T4724] EXT4-fs (loop2): 1 truncate cleaned up [ 108.161979][ T4733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.201474][ T4724] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,oldalloc,nolazytime,test_dummy_encryption=v1,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4,errors=continue. Quota mode: writeback. [ 108.233575][ T4733] EXT4-fs (loop0): 1 truncate cleaned up [ 108.239248][ T4733] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 108.345810][ T4717] loop1: detected capacity change from 0 to 40427 [ 108.365450][ T4724] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.104: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 108.460120][ T4717] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 108.498703][ T4717] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.566674][ T4717] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.718391][ T4717] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.736176][ T4717] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.875252][ T4184] block nbd0: Receive control failed (result -32) [ 108.897184][ T4182] block nbd0: Receive control failed (result -32) [ 108.906952][ T4746] block nbd0: shutting down sockets [ 109.001121][ T155] team0 (unregistering): Port device team_slave_1 removed [ 109.117976][ T155] team0 (unregistering): Port device team_slave_0 removed [ 109.165583][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.246608][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.488211][ T4180] block nbd2: Receive control failed (result -32) [ 109.504658][ T155] bond0 (unregistering): Released all slaves [ 109.515621][ T4184] block nbd2: Receive control failed (result -32) [ 109.522313][ T4183] block nbd2: Receive control failed (result -32) [ 109.528991][ T4743] block nbd2: shutting down sockets [ 110.033221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.045384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.074371][ T4529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.856662][ T4749] loop0: detected capacity change from 0 to 32768 [ 112.047392][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.078920][ T4749] XFS (loop0): Invalid device [./file0], error=-13 [ 112.094928][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.160980][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.181501][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.200176][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.210929][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.232577][ T4529] device veth0_vlan entered promiscuous mode [ 112.366849][ T4776] loop3: detected capacity change from 0 to 256 [ 112.377510][ T4529] device veth1_vlan entered promiscuous mode [ 112.470371][ T4776] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 112.485649][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.517616][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.552478][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.593204][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.605377][ T4529] device veth0_macvtap entered promiscuous mode [ 112.762725][ T4529] device veth1_macvtap entered promiscuous mode [ 113.270840][ T4787] loop0: detected capacity change from 0 to 512 [ 113.302259][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.395818][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.488615][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.556475][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.611637][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.671609][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.681468][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.692663][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.706995][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.750657][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.798682][ T4794] loop3: detected capacity change from 0 to 512 [ 113.859682][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.177070][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.216508][ T4787] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.115: invalid indirect mapped block 4294967295 (level 1) [ 114.326529][ T4787] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.115: invalid indirect mapped block 4294967295 (level 1) [ 114.342125][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.365733][ T4787] EXT4-fs (loop0): 2 truncates cleaned up [ 114.372284][ T4787] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 114.396849][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.419237][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.440410][ T4529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.461406][ T4529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.492854][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.507116][ T4794] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.530374][ T4794] EXT4-fs (loop3): 1 truncate cleaned up [ 114.536111][ T4794] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 114.574747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.589010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.598295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.662867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.811269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.860043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.522554][ T4529] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.523369][ T4529] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.523555][ T4529] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.523674][ T4529] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.887197][ T4815] loop0: detected capacity change from 0 to 2048 [ 116.978445][ T4815] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.079175][ T26] audit: type=1800 audit(1733178038.718:4): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.119" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 117.225411][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.326764][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.336366][ T4825] futex_wake_op: syz.2.121 tries to shift op by 144; fix this program [ 117.751718][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.759697][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.769160][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.804841][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.924799][ T4831] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.956310][ T4831] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 119.252755][ T4813] loop1: detected capacity change from 0 to 40427 [ 119.334877][ T4813] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.401931][ T4813] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.513621][ T4813] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.691059][ T4813] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 119.701764][ T4813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.035309][ T4832] loop3: detected capacity change from 0 to 32768 [ 120.102313][ T4832] XFS: noikeep mount option is deprecated. [ 120.235705][ T4832] XFS (loop3): Mounting V5 Filesystem [ 120.305407][ T4832] XFS (loop3): Ending clean mount [ 120.332996][ T4832] XFS (loop3): Quotacheck needed: Please wait. [ 120.449389][ T4832] XFS (loop3): Quotacheck: Done. [ 120.652666][ T26] audit: type=1800 audit(1733178042.278:5): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.124" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 121.227769][ T4165] XFS (loop3): Unmounting Filesystem [ 121.466268][ T4880] loop0: detected capacity change from 0 to 32768 [ 121.657874][ T4880] (syz.0.128,4880,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.978159][ T4880] (syz.0.128,4880,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.138650][ T4880] JBD2: Ignoring recovery information on journal [ 122.200348][ T4880] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 124.014727][ T4169] ocfs2: Unmounting device (7,0) on (node local) [ 125.472145][ T4170] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.669689][ T4943] loop0: detected capacity change from 0 to 32768 [ 125.748392][ T4943] (syz.0.134,4943,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.751661][ T4170] usb 4-1: Using ep0 maxpacket: 8 [ 125.801709][ T4943] (syz.0.134,4943,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.851413][ T4943] JBD2: Ignoring recovery information on journal [ 125.921880][ T4170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.937358][ T4170] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 125.959566][ T4170] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 125.973888][ T4943] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 126.070005][ T4946] loop5: detected capacity change from 0 to 32768 [ 126.799425][ T4970] loop1: detected capacity change from 0 to 2048 [ 127.732257][ T4946] XFS: ikeep mount option is deprecated. [ 127.822022][ T4170] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 127.852738][ T4970] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.310102][ T4170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 128.324998][ T4170] usb 4-1: Product: syz [ 128.341603][ T4170] usb 4-1: Manufacturer: syz [ 128.346216][ T4170] usb 4-1: SerialNumber: syz [ 128.353524][ T4170] usb 4-1: config 0 descriptor?? [ 128.401858][ T4170] usb 4-1: can't set config #0, error -71 [ 128.429806][ T4170] usb 4-1: USB disconnect, device number 2 [ 128.440378][ T4976] loop3: detected capacity change from 0 to 4096 [ 128.700356][ T4169] ocfs2: Unmounting device (7,0) on (node local) [ 129.697335][ T4986] loop1: detected capacity change from 0 to 512 [ 130.957559][ T4986] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.146: inode #1: comm syz.1.146: iget: illegal inode # [ 130.999544][ T4986] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.146: error while reading EA inode 1 err=-117 [ 131.054719][ T4986] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.146: inode #1: comm syz.1.146: iget: illegal inode # [ 131.103268][ T4986] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.146: error while reading EA inode 1 err=-117 [ 131.160015][ T4986] EXT4-fs (loop1): 1 orphan inode deleted [ 131.195496][ T4986] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,jqfmt=vfsv0,debug_want_extra_isize=0x000000000000005c,data_err=abort,noload,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 132.217734][ T5028] loop3: detected capacity change from 0 to 256 [ 132.395621][ T5025] loop0: detected capacity change from 0 to 4096 [ 132.419208][ T5028] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 132.491308][ T5035] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 132.677071][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.683537][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.398858][ T5041] loop2: detected capacity change from 0 to 64 [ 134.440994][ T5049] loop2: detected capacity change from 0 to 256 [ 134.484215][ T5049] exfat: Deprecated parameter 'utf8' [ 134.510912][ T5049] exfat: Deprecated parameter 'namecase' [ 134.553162][ T5049] exfat: Deprecated parameter 'utf8' [ 134.648185][ T5049] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 135.898893][ T5043] loop3: detected capacity change from 0 to 32768 [ 136.092431][ T5043] XFS: ikeep mount option is deprecated. [ 136.468819][ T5046] loop0: detected capacity change from 0 to 40427 [ 137.053645][ T5081] loop0: detected capacity change from 0 to 512 [ 137.155288][ T5081] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 137.182554][ T5081] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.688985][ T5106] loop3: detected capacity change from 0 to 256 [ 137.849172][ T5108] loop1: detected capacity change from 0 to 2048 [ 137.922599][ T5108] UDF-fs: bad mount option "ÿÿÿÿ00000000000000000000" or missing value [ 137.954070][ T5106] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 140.646360][ T5132] loop0: detected capacity change from 0 to 256 [ 140.657807][ T5115] loop3: detected capacity change from 0 to 32768 [ 140.744202][ T5132] FAT-fs (loop0): Unrecognized mount option "{hortname=lower" or missing value [ 140.772475][ T5122] loop1: detected capacity change from 0 to 32768 [ 140.826000][ T5124] loop2: detected capacity change from 0 to 40427 [ 140.833575][ T5115] XFS (loop3): Mounting V5 Filesystem [ 140.878676][ T5124] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 140.887644][ T5122] (syz.1.173,5122,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.911205][ T5124] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.920617][ T5122] (syz.1.173,5122,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.145695][ T5115] XFS (loop3): Ending clean mount [ 141.146374][ T5122] JBD2: Ignoring recovery information on journal [ 142.304620][ T5115] XFS (loop3): Quotacheck needed: Please wait. [ 142.346783][ T5124] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.833719][ T5115] XFS (loop3): Quotacheck: Done. [ 142.950767][ T5122] JBD2: recovery failed [ 142.972723][ T5122] (syz.1.173,5122,0):ocfs2_journal_load:1083 ERROR: Failed to load journal! [ 142.981459][ T5122] (syz.1.173,5122,0):ocfs2_check_volume:2429 ERROR: ocfs2 journal load failed! -5 [ 143.000036][ T5122] (syz.1.173,5122,0):ocfs2_check_volume:2485 ERROR: status = -5 [ 143.007808][ T5122] (syz.1.173,5122,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 143.018437][ T4165] XFS (loop3): Unmounting Filesystem [ 143.081807][ T5122] (syz.1.173,5122,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 143.478800][ T5171] loop5: detected capacity change from 0 to 4096 [ 143.663538][ T5181] capability: warning: `syz.1.184' uses 32-bit capabilities (legacy support in use) [ 143.705179][ T5171] ntfs3: Unknown parameter 'ÿ01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 145.292168][ T5195] loop3: detected capacity change from 0 to 256 [ 145.672168][ T5199] loop1: detected capacity change from 0 to 256 [ 145.709597][ T5195] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 145.782690][ T5199] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 147.909805][ T5227] loop2: detected capacity change from 0 to 256 [ 148.191339][ T5227] FAT-fs (loop2): Unrecognized mount option "{hortname=lower" or missing value [ 148.201665][ T13] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 149.451928][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.471602][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 151.022474][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.121314][ T13] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 151.547285][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.568675][ T13] usb 6-1: config 0 descriptor?? [ 151.591793][ T13] usb 6-1: can't set config #0, error -71 [ 151.603290][ T13] usb 6-1: USB disconnect, device number 2 [ 151.829699][ T5262] loop1: detected capacity change from 0 to 256 [ 152.307730][ T5262] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 152.358460][ T5271] loop0: detected capacity change from 0 to 256 [ 152.413492][ T5271] FAT-fs (loop0): Unrecognized mount option "{hortname=lower" or missing value [ 155.620102][ T5332] 9pnet: Unknown protocol version 9p200 [ 157.414516][ T5350] loop3: detected capacity change from 0 to 256 [ 157.792924][ T5350] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 158.241826][ T5356] netlink: 32 bytes leftover after parsing attributes in process `syz.2.230'. [ 158.517610][ T5354] loop0: detected capacity change from 0 to 8192 [ 158.980193][ T5354] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 162.194395][ T5399] unsupported nlmsg_type 40 [ 164.375999][ T5404] overlayfs: statfs failed on './file0' [ 165.178392][ T5424] loop5: detected capacity change from 0 to 8192 [ 165.921271][ T4386] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 165.931940][ T4386] Bluetooth: hci1: Injecting HCI hardware error event [ 165.939366][ T5424] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 165.940730][ T4183] Bluetooth: hci1: hardware error 0x00 [ 173.625526][ T5573] netlink: 'syz.5.265': attribute type 10 has an invalid length. [ 174.223127][ T5588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.267'. [ 174.232129][ T5588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.267'. [ 176.029909][ T4211] Bluetooth: hci3: command 0x0406 tx timeout [ 176.037200][ T4211] Bluetooth: hci0: command 0x0406 tx timeout [ 176.123939][ T4211] Bluetooth: hci4: command 0x0406 tx timeout [ 178.972720][ T4385] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 179.491297][ T4385] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.710627][ T4385] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.661923][ T4385] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.670985][ T4385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.715202][ T4385] usb 1-1: Product: syz [ 180.719391][ T4385] usb 1-1: Manufacturer: syz [ 180.780226][ T4385] usb 1-1: SerialNumber: syz [ 180.873514][ T4385] usb 1-1: selecting invalid altsetting 1 [ 181.806798][ T4385] cdc_ncm 1-1:1.0: bind() failure [ 181.820411][ T4385] usb 1-1: USB disconnect, device number 3 [ 182.953961][ T4381] Bluetooth: hci2: command 0x0409 tx timeout [ 183.931239][ T5626] chnl_net:caif_netlink_parms(): no params data found [ 184.416142][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.450693][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.505228][ T5626] device bridge_slave_0 entered promiscuous mode [ 184.533743][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.574377][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.606768][ T5626] device bridge_slave_1 entered promiscuous mode [ 185.154414][ T4381] Bluetooth: hci2: command 0x041b tx timeout [ 185.310824][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.326633][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.410480][ T5676] process 'syz.1.291' launched '/dev/fd/5' with NULL argv: empty string added [ 185.722906][ T4216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.081426][ T5626] team0: Port device team_slave_0 added [ 186.562969][ T4216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.113518][ T5626] team0: Port device team_slave_1 added [ 187.348463][ T4212] Bluetooth: hci2: command 0x040f tx timeout [ 188.934458][ T4216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.028988][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.048738][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.074410][ T5712] binder: 5707:5712 ioctl c0306201 20000940 returned -14 [ 189.092747][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.116214][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.141403][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.193503][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.236080][ T4216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.832716][ T5626] device hsr_slave_0 entered promiscuous mode [ 190.013150][ T5626] device hsr_slave_1 entered promiscuous mode [ 190.040190][ T5626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.268295][ T5626] Cannot create hsr debugfs directory [ 191.137569][ T4212] Bluetooth: hci2: command 0x0419 tx timeout [ 193.843816][ T5626] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 193.962983][ T5626] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 194.052293][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.058625][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.440351][ T5743] loop1: detected capacity change from 0 to 64 [ 194.659833][ T5626] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 194.877820][ T5626] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 195.124806][ T5775] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 198.974977][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.164019][ T5794] loop5: detected capacity change from 0 to 8192 [ 199.317339][ T5794] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 199.345894][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.524107][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.621628][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.697948][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.949855][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.101798][ T5497] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.108899][ T5497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.241563][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.289955][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.298355][ T5497] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.305461][ T5497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.404737][ T5812] netlink: 16 bytes leftover after parsing attributes in process `syz.5.325'. [ 200.449699][ T5813] sg_write: data in/out 1521864121/1 bytes for SCSI command 0x8a-- guessing data in; [ 200.449699][ T5813] program syz.0.326 not setting count and/or reply_len properly [ 200.483551][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.530399][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.572476][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.587247][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.626175][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.634785][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.662169][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.724459][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.873274][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.895330][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.935089][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.984822][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.212728][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.525788][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.534550][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.579394][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.868224][ T4216] device hsr_slave_0 left promiscuous mode [ 201.885258][ T4216] device hsr_slave_1 left promiscuous mode [ 201.943829][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.973357][ T4216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.009375][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.039822][ T4216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.065895][ T4216] device bridge_slave_1 left promiscuous mode [ 202.083692][ T5860] loop1: detected capacity change from 0 to 512 [ 202.093096][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.133055][ T4216] device bridge_slave_0 left promiscuous mode [ 202.153243][ T5860] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.159444][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.219803][ T5860] EXT4-fs (loop1): 1 truncate cleaned up [ 202.236185][ T4216] device veth1_macvtap left promiscuous mode [ 202.266226][ T4216] device veth0_macvtap left promiscuous mode [ 202.276011][ T5860] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 202.303763][ T4216] device veth1_vlan left promiscuous mode [ 202.310095][ T4216] device veth0_vlan left promiscuous mode [ 204.456196][ T4216] team0 (unregistering): Port device team_slave_1 removed [ 204.744520][ T4216] team0 (unregistering): Port device team_slave_0 removed [ 204.940221][ T4216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.190544][ T4216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.320769][ T5886] loop3: detected capacity change from 0 to 64 [ 205.393857][ T4216] bond0 (unregistering): Released all slaves [ 207.172964][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.186433][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.204696][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.220125][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.356731][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.429742][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.442563][ T5626] device veth0_vlan entered promiscuous mode [ 207.528415][ T5626] device veth1_vlan entered promiscuous mode [ 207.552135][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.582396][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.599898][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.660929][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.953017][ T5936] loop3: detected capacity change from 0 to 512 [ 210.422103][ T5626] device veth0_macvtap entered promiscuous mode [ 210.589801][ T5626] device veth1_macvtap entered promiscuous mode [ 210.718100][ T5945] loop0: detected capacity change from 0 to 256 [ 210.769380][ T5936] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.842547][ T5936] EXT4-fs (loop3): 1 truncate cleaned up [ 210.848263][ T5936] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 210.890621][ T5945] FAT-fs (loop0): Unrecognized mount option "{hortname=lower" or missing value [ 211.282407][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.293156][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.303024][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.314471][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.324905][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.335384][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.350853][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.487861][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.531794][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.542488][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.552951][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.562861][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.573684][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.583529][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.596574][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.614191][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.790351][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.004939][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.113482][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.139189][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.148935][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.165145][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.193219][ T5626] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.215062][ T5626] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.253617][ T5626] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.551557][ T5981] loop0: detected capacity change from 0 to 64 [ 212.559580][ T5626] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.987632][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 214.526845][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.587227][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.631100][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.665956][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.678999][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.738146][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.762077][ T6037] loop6: detected capacity change from 0 to 256 [ 215.893660][ T6037] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 216.233245][ T4381] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 216.508466][ T6047] loop1: detected capacity change from 0 to 64 [ 216.549615][ T4381] usb 1-1: Using ep0 maxpacket: 8 [ 216.700557][ T4381] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 216.733392][ T4381] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.324719][ T4381] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.772787][ T4381] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.928928][ T4381] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.071307][ T4381] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 218.154831][ T4381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.227337][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.377'. [ 220.561832][ T4381] usb 1-1: usb_control_msg returned -32 [ 220.574971][ T4381] usbtmc 1-1:16.0: can't read capabilities [ 220.686980][ T4381] usb 1-1: USB disconnect, device number 4 [ 222.189587][ T6087] loop0: detected capacity change from 0 to 64 [ 222.340369][ T6102] loop5: detected capacity change from 0 to 64 [ 222.432104][ T6106] loop6: detected capacity change from 0 to 256 [ 222.625519][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 223.405380][ T6106] FAT-fs (loop6): Unrecognized mount option "{hortname=lower" or missing value [ 225.289611][ T6129] loop1: detected capacity change from 0 to 256 [ 225.489205][ T6129] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 225.632689][ T1535] block nbd6: Attempted send on invalid socket [ 225.640228][ T1535] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.653227][ T6141] (syz.6.393,6141,0):ocfs2_get_sector:1774 ERROR: status = -5 [ 225.660762][ T6141] (syz.6.393,6141,0):ocfs2_sb_probe:750 ERROR: status = -5 [ 225.667957][ T6141] (syz.6.393,6141,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 225.676500][ T6141] (syz.6.393,6141,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 229.488174][ T6172] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 231.166488][ T6204] loop1: detected capacity change from 0 to 64 [ 234.249896][ T6238] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 238.990941][ T6270] loop0: detected capacity change from 0 to 64 [ 239.974481][ T6272] 9pnet: Unknown protocol version 9p200 [ 240.939219][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.424'. [ 240.948296][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.424'. [ 246.550946][ T6341] loop5: detected capacity change from 0 to 256 [ 246.730851][ T6337] 9pnet: Unknown protocol version 9p200 [ 246.810532][ T6341] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 246.816725][ T6346] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 248.732832][ T6360] loop0: detected capacity change from 0 to 512 [ 249.327148][ T6360] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 249.394590][ T6360] EXT4-fs (loop0): 1 truncate cleaned up [ 249.400340][ T6360] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 253.428172][ T6426] loop3: detected capacity change from 0 to 256 [ 253.451392][ T6397] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 253.572841][ T6426] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 258.162423][ T6474] tipc: Started in network mode [ 258.167598][ T6474] tipc: Node identity f0, cluster identity 4711 [ 258.189540][ T6474] tipc: Node number set to 240 [ 259.744129][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.756845][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.898375][ T4386] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 259.981694][ T6479] loop3: detected capacity change from 0 to 512 [ 260.368328][ T6500] loop1: detected capacity change from 0 to 256 [ 260.410791][ T6479] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 260.445479][ T4386] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.459047][ T6500] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 260.479491][ T6479] EXT4-fs (loop3): 1 truncate cleaned up [ 260.485155][ T6479] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 260.498909][ T4386] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12592, setting to 1024 [ 260.573606][ T6482] device syz_tun entered promiscuous mode [ 260.608564][ T4386] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 260.640675][ T4386] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.652623][ T4386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.723494][ T6470] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 261.761194][ T4170] usb 7-1: USB disconnect, device number 2 [ 261.854453][ T6482] device syz_tun left promiscuous mode [ 264.227142][ T6531] Zero length message leads to an empty skb [ 264.303982][ T6535] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 264.937375][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.223150][ T6566] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 271.473237][ T6608] loop3: detected capacity change from 0 to 512 [ 271.635302][ T6608] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.493: invalid indirect mapped block 4294967295 (level 1) [ 271.688915][ T6608] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.493: invalid indirect mapped block 4294967295 (level 1) [ 271.727416][ T6608] EXT4-fs (loop3): 2 truncates cleaned up [ 271.733338][ T6608] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 273.306118][ T6635] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 273.313210][ T6635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.605609][ T6615] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 275.628054][ T6635] vhci_hcd vhci_hcd.0: Device attached [ 275.903813][ T4386] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 279.323956][ T6694] loop1: detected capacity change from 0 to 256 [ 279.459112][ T6694] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 281.618959][ T6641] vhci_hcd: connection reset by peer [ 281.628946][ T144] vhci_hcd: stop threads [ 281.633817][ T144] vhci_hcd: release socket [ 281.676764][ T144] vhci_hcd: disconnect device [ 281.740994][ T4386] vhci_hcd: vhci_device speed not set [ 284.151640][ T6760] loop1: detected capacity change from 0 to 256 [ 284.618835][ T6760] FAT-fs (loop1): Unrecognized mount option "{hortname=lower" or missing value [ 286.271742][ T6781] tmpfs: Bad value for 'mpol' [ 287.758637][ T6804] 9pnet: Unknown protocol version 9p200 [ 293.993510][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.6.550'. [ 294.002477][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.6.550'. [ 295.600531][ T6891] loop6: detected capacity change from 0 to 512 [ 295.672388][ T6893] 9pnet: Unknown protocol version 9p200 [ 295.785721][ T6891] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.554: invalid block [ 295.817287][ T6891] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.554: invalid indirect mapped block 4294967295 (level 1) [ 295.943295][ T6891] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.554: invalid indirect mapped block 4294967295 (level 1) [ 296.018908][ T6891] EXT4-fs (loop6): 2 truncates cleaned up [ 296.029891][ T6891] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 296.767278][ T6918] loop3: detected capacity change from 0 to 256 [ 296.922825][ T6918] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 297.235242][ T6891] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 297.241861][ T6891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.249546][ T6891] vhci_hcd vhci_hcd.0: Device attached [ 297.299616][ T6932] vhci_hcd: connection closed [ 297.525932][ T6900] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 299.326253][ T4244] vhci_hcd: stop threads [ 299.330993][ T1345] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 299.338616][ T4244] vhci_hcd: release socket [ 299.726233][ T4244] vhci_hcd: disconnect device [ 300.237939][ T6947] 9pnet: Unknown protocol version 9p200 [ 301.551101][ T4212] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 301.700393][ T4386] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 302.096515][ T4386] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.320448][ T4386] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 302.339167][ T4386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.418127][ T4386] usb 7-1: config 0 descriptor?? [ 302.716168][ T4212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.769381][ T4212] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 302.959506][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.592705][ T4170] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 303.725260][ T4212] usb 4-1: config 0 descriptor?? [ 303.777239][ T4212] pwc: Askey VC010 type 2 USB webcam detected. [ 303.974931][ T4170] usb 2-1: Using ep0 maxpacket: 16 [ 303.976847][ T4386] pwc: Askey VC010 type 2 USB webcam detected. [ 303.998944][ T4386] pwc: send_video_command error -71 [ 304.004160][ T4386] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 304.020180][ T4386] Philips webcam: probe of 7-1:0.0 failed with error -71 [ 304.041648][ T4386] usb 7-1: USB disconnect, device number 3 [ 304.061206][ T6982] loop0: detected capacity change from 0 to 256 [ 304.128917][ T6982] FAT-fs (loop0): Unrecognized mount option "{hortname=lower" or missing value [ 304.141144][ T4170] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 304.159670][ T4170] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.170250][ T4170] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.234278][ T4212] pwc: recv_control_msg error -32 req 02 val 2b00 [ 304.287706][ T4212] pwc: recv_control_msg error -32 req 02 val 2700 [ 304.346973][ T4212] pwc: recv_control_msg error -32 req 02 val 2c00 [ 304.362735][ T4170] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.377948][ T4170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.386929][ T4170] usb 2-1: Product: syz [ 304.391236][ T4170] usb 2-1: Manufacturer: syz [ 304.541542][ T4212] pwc: recv_control_msg error -32 req 04 val 1000 [ 304.559631][ T4170] usb 2-1: SerialNumber: syz [ 304.629930][ T4212] pwc: recv_control_msg error -32 req 04 val 1300 [ 304.704643][ T4212] pwc: recv_control_msg error -32 req 04 val 1400 [ 305.303208][ T4212] pwc: recv_control_msg error -71 req 02 val 2100 [ 305.324587][ T4212] pwc: recv_control_msg error -71 req 04 val 1500 [ 305.351404][ T4212] pwc: recv_control_msg error -71 req 02 val 2500 [ 305.371150][ T1345] vhci_hcd: vhci_device speed not set [ 305.549574][ T4212] pwc: recv_control_msg error -71 req 02 val 2400 [ 305.581191][ T4212] pwc: recv_control_msg error -71 req 02 val 2600 [ 305.605646][ T4212] pwc: recv_control_msg error -71 req 02 val 2900 [ 305.711239][ T7001] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 305.722903][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.584'. [ 305.764984][ T4170] usb 2-1: 0:2 : does not exist [ 305.770948][ T4212] pwc: recv_control_msg error -71 req 02 val 2800 [ 305.816515][ T4212] pwc: recv_control_msg error -71 req 04 val 1100 [ 305.900009][ T4212] pwc: recv_control_msg error -71 req 04 val 1200 [ 306.125281][ T4212] pwc: Registered as video103. [ 306.362451][ T4212] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 306.459659][ T4212] usb 4-1: USB disconnect, device number 3 [ 308.339840][ T4170] usb 2-1: USB disconnect, device number 2 [ 308.678899][ T7024] loop3: detected capacity change from 0 to 256 [ 308.688407][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.757593][ T7024] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 309.071879][ T7034] loop1: detected capacity change from 0 to 64 [ 310.297127][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.597'. [ 313.591327][ T7079] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 313.591327][ T7079] program syz.0.604 not setting count and/or reply_len properly [ 314.364378][ T7083] loop3: detected capacity change from 0 to 256 [ 314.571560][ T7087] loop1: detected capacity change from 0 to 64 [ 316.215081][ T7083] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 318.113002][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.6.614'. [ 318.122066][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.6.614'. [ 318.819988][ T7121] 9pnet: Unknown protocol version 9p200 [ 319.763231][ T7123] loop6: detected capacity change from 0 to 40427 [ 320.140017][ T7123] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 320.252581][ T7123] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 320.462395][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 320.530813][ T7135] binder: BINDER_SET_CONTEXT_MGR already set [ 320.553781][ T7123] F2FS-fs (loop6): Found nat_bits in checkpoint [ 320.603204][ T7135] binder: 7134:7135 ioctl 4018620d 200001c0 returned -16 [ 320.713992][ T7148] loop5: detected capacity change from 0 to 256 [ 320.854269][ T7123] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 320.861521][ T7123] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 320.880617][ T7148] FAT-fs (loop5): Unrecognized mount option "{hortname=lower" or missing value [ 321.135459][ T7156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'. [ 321.144509][ T7156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'. [ 322.633445][ T1107] usb 4-1: config 0 has no interfaces? [ 322.639734][ T1107] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 322.648993][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.660367][ T1107] usb 4-1: config 0 descriptor?? [ 323.067874][ T23] usb 4-1: USB disconnect, device number 4 [ 323.219691][ T7159] team0: Port device team_slave_1 removed [ 323.380105][ T26] audit: type=1107 audit(1733178236.720:6): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 325.016508][ T4386] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 325.348141][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.354475][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.711621][ T4386] usb 7-1: Using ep0 maxpacket: 16 [ 325.922537][ T7197] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 326.416194][ T4386] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 326.899960][ T4386] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 326.973513][ T4386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.986286][ T4386] usb 7-1: Product: syz [ 326.990793][ T4386] usb 7-1: Manufacturer: syz [ 327.068276][ T4386] usb 7-1: SerialNumber: syz [ 327.601225][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 327.701161][ T4386] usb 7-1: config 0 descriptor?? [ 327.721333][ T4386] usb 7-1: can't set config #0, error -71 [ 327.741542][ T4386] usb 7-1: USB disconnect, device number 4 [ 329.188970][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.645'. [ 329.578929][ T7233] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 330.014552][ T7218] [U] é [ 330.032472][ T7238] input: syz0 as /devices/virtual/input/input9 [ 331.404152][ T26] audit: type=1107 audit(1733178243.689:7): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 333.048497][ T7260] mac80211_hwsim hwsim9 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 333.676026][ T1107] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 335.155584][ T7284] loop0: detected capacity change from 0 to 40427 [ 335.230842][ T7284] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 335.244677][ T7284] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 335.300256][ T7284] F2FS-fs (loop0): Found nat_bits in checkpoint [ 335.394719][ T7284] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 335.406546][ T7284] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 335.792104][ T4216] wlan0: Trigger new scan to find an IBSS to join [ 336.157702][ T7314] overlayfs: missing 'lowerdir' [ 336.979466][ T1107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 337.354646][ T1107] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 337.368078][ T1107] usb 6-1: can't read configurations, error -71 [ 338.495334][ T7339] loop0: detected capacity change from 0 to 512 [ 339.461623][ T7339] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 339.506594][ T7339] EXT4-fs (loop0): 1 truncate cleaned up [ 339.512255][ T7339] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 339.849977][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 340.037000][ T4345] wlan0: Trigger new scan to find an IBSS to join [ 340.204793][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 340.213816][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 341.227662][ T7341] loop6: detected capacity change from 0 to 40427 [ 341.322280][ T7341] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 341.339547][ T7341] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 341.348454][ T4345] wlan0: Creating new IBSS network, BSSID 6e:0d:e4:7e:37:90 [ 341.413163][ T7341] F2FS-fs (loop6): Found nat_bits in checkpoint [ 342.291277][ T7382] binder: 7381:7382 ioctl c0306201 20000940 returned -14 [ 342.724446][ T7388] loop1: detected capacity change from 0 to 512 [ 342.862799][ T7388] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 343.004495][ T7388] EXT4-fs (loop1): 1 truncate cleaned up [ 343.010387][ T7388] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 343.626040][ T7401] loop1: detected capacity change from 0 to 512 [ 343.665275][ T7401] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.699: invalid indirect mapped block 4294967295 (level 1) [ 343.802115][ T7401] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.699: invalid indirect mapped block 4294967295 (level 1) [ 343.836810][ T7401] EXT4-fs (loop1): 2 truncates cleaned up [ 343.851758][ T7401] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 344.436013][ T7419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.703'. [ 344.444920][ T7419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.703'. [ 345.786842][ T7418] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 345.793461][ T7418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.801912][ T7418] vhci_hcd vhci_hcd.0: Device attached [ 345.805555][ T7421] vhci_hcd: connection closed [ 345.906742][ T154] vhci_hcd: stop threads [ 345.916265][ T154] vhci_hcd: release socket [ 345.965993][ T154] vhci_hcd: disconnect device [ 347.529695][ T7443] loop5: detected capacity change from 0 to 512 [ 348.055220][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 348.355267][ T7424] loop6: detected capacity change from 0 to 40427 [ 348.478570][ T7443] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 348.489311][ T7424] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 348.559885][ T7424] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 348.745910][ T7443] EXT4-fs (loop5): 1 truncate cleaned up [ 348.751754][ T7443] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 349.042526][ T7424] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-4) [ 349.079285][ T7462] loop1: detected capacity change from 0 to 512 [ 349.167334][ T7462] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 349.549209][ T7462] EXT4-fs (loop1): 1 truncate cleaned up [ 349.554990][ T7462] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 350.709155][ T7473] loop5: detected capacity change from 0 to 512 [ 350.773151][ T7473] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.718: invalid indirect mapped block 4294967295 (level 1) [ 350.900223][ T7473] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.718: invalid indirect mapped block 4294967295 (level 1) [ 350.922316][ T7473] EXT4-fs (loop5): 2 truncates cleaned up [ 350.928244][ T7473] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 351.116599][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.715'. [ 352.517224][ T7489] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 352.523899][ T7489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.531631][ T7489] vhci_hcd vhci_hcd.0: Device attached [ 352.572886][ T7493] vhci_hcd: connection closed [ 352.574581][ T154] vhci_hcd: stop threads [ 352.625608][ T154] vhci_hcd: release socket [ 352.664581][ T154] vhci_hcd: disconnect device [ 352.758785][ T4214] vhci_hcd: vhci_device speed not set [ 353.222354][ T7456] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 355.262635][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.729'. [ 357.581394][ T7537] sp0: Synchronizing with TNC [ 357.624310][ T7541] sp0: Found TNC [ 357.817709][ T7550] netlink: 'syz.5.738': attribute type 8 has an invalid length. [ 357.832460][ T7534] [U] è` [ 357.879576][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'. [ 357.931131][ T7553] loop1: detected capacity change from 0 to 512 [ 358.075502][ T7553] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.739: invalid indirect mapped block 4294967295 (level 1) [ 358.145212][ T7553] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.739: invalid indirect mapped block 4294967295 (level 1) [ 358.220378][ T7553] EXT4-fs (loop1): 2 truncates cleaned up [ 358.253303][ T7553] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 359.218047][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 360.068258][ T7580] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 360.074883][ T7580] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 360.082597][ T7580] vhci_hcd vhci_hcd.0: Device attached [ 360.089377][ T7583] vhci_hcd: cannot find the pending unlink 6 [ 360.250702][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.744'. [ 360.259653][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.744'. [ 360.314454][ T7583] vhci_hcd: connection closed [ 360.315611][ T4345] vhci_hcd: stop threads [ 360.335548][ T4345] vhci_hcd: release socket [ 360.372193][ T4345] vhci_hcd: disconnect device [ 360.691374][ T7557] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 363.331714][ T4215] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 363.877163][ T4215] usb 7-1: Using ep0 maxpacket: 32 [ 363.898778][ T4170] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 364.198369][ T4215] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.219888][ T4215] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.106404][ T7634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'. [ 365.115293][ T7634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'. [ 366.631220][ T4170] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 366.643973][ T4170] usb 6-1: config 0 has no interface number 0 [ 366.656894][ T4170] usb 6-1: config 0 interface 136 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 366.674132][ T4170] usb 6-1: New USB device found, idVendor=06cd, idProduct=0152, bcdDevice=a8.a4 [ 366.683625][ T4170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.832788][ T4170] usb 6-1: config 0 descriptor?? [ 366.880972][ T4215] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 366.890037][ T4215] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 366.903726][ T7646] loop5: detected capacity change from 0 to 512 [ 366.921076][ T4215] usb 7-1: Product: syz [ 366.946762][ T4170] usb 6-1: can't set config #0, error -71 [ 366.977537][ T4215] usb 7-1: can't set config #4, error -71 [ 366.986628][ T4215] usb 7-1: USB disconnect, device number 5 [ 367.036474][ T4170] usb 6-1: USB disconnect, device number 5 [ 367.142628][ T7646] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.762: invalid block [ 367.160221][ T7646] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.762: invalid indirect mapped block 4294967295 (level 1) [ 367.177498][ T7646] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.762: invalid indirect mapped block 4294967295 (level 1) [ 367.194132][ T7646] EXT4-fs (loop5): 2 truncates cleaned up [ 367.199871][ T7646] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 367.351453][ T4225] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 367.588125][ T7663] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 367.594751][ T7663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.602554][ T7663] vhci_hcd vhci_hcd.0: Device attached [ 367.619259][ T7664] vhci_hcd: cannot find the pending unlink 6 [ 367.665112][ T4225] usb 1-1: Using ep0 maxpacket: 8 [ 367.749943][ T7664] vhci_hcd: connection closed [ 367.756534][ T4345] vhci_hcd: stop threads [ 367.771253][ T4345] vhci_hcd: release socket [ 367.789632][ T4345] vhci_hcd: disconnect device [ 367.789699][ T4225] usb 1-1: config 0 has an invalid interface number: 224 but max is 0 [ 367.803746][ T4225] usb 1-1: config 0 has no interface number 0 [ 367.810124][ T4225] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 367.819580][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.836569][ T4215] vhci_hcd: vhci_device speed not set [ 367.844944][ T4225] usb 1-1: config 0 descriptor?? [ 368.159087][ T4225] usb 1-1: USB disconnect, device number 5 [ 368.450748][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.6.770'. [ 368.459735][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.6.770'. [ 372.090954][ T7710] loop3: detected capacity change from 0 to 8192 [ 372.123322][ T7713] loop0: detected capacity change from 0 to 512 [ 372.163506][ T7710] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 372.194265][ T4214] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 372.377318][ T7713] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.781: invalid indirect mapped block 4294967295 (level 1) [ 372.391997][ T7713] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.781: invalid indirect mapped block 4294967295 (level 1) [ 372.409396][ T7713] EXT4-fs (loop0): 2 truncates cleaned up [ 372.415136][ T7713] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 374.261694][ T154] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 374.526499][ T4214] usb 7-1: Using ep0 maxpacket: 16 [ 374.664389][ T4214] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.695449][ T4214] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.859307][ T4214] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.905756][ T4214] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.971229][ T4214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.065760][ T4214] usb 7-1: config 0 descriptor?? [ 375.126824][ T4214] usb 7-1: can't set config #0, error -71 [ 375.182073][ T4214] usb 7-1: USB disconnect, device number 6 [ 376.987364][ T7769] loop6: detected capacity change from 0 to 512 [ 377.124297][ T7763] loop0: detected capacity change from 0 to 8192 [ 377.140980][ T7769] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.798: invalid block [ 377.175400][ T7769] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.798: invalid indirect mapped block 4294967295 (level 1) [ 377.213984][ T7769] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.798: invalid indirect mapped block 4294967295 (level 1) [ 377.256293][ T7763] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 377.334986][ T7769] EXT4-fs (loop6): 2 truncates cleaned up [ 377.382049][ T7769] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 381.363285][ T7820] loop1: detected capacity change from 0 to 512 [ 381.381081][ T7815] loop5: detected capacity change from 0 to 8192 [ 381.431940][ T7815] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ0000000000000000000000000000000000000000000" or missing value [ 381.450232][ T7820] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.812: invalid indirect mapped block 4294967295 (level 1) [ 381.482576][ T7820] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.812: invalid indirect mapped block 4294967295 (level 1) [ 381.508286][ T7820] EXT4-fs (loop1): 2 truncates cleaned up [ 381.514116][ T7820] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 381.833906][ T4214] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 382.136733][ T4214] usb 1-1: Using ep0 maxpacket: 16 [ 382.275873][ T4214] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 382.326167][ T4214] usb 1-1: config 0 has no interface number 0 [ 382.543003][ T4214] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 384.796755][ T4214] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 385.110862][ T4214] usb 1-1: string descriptor 0 read error: -71 [ 385.117731][ T4214] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 385.128149][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 385.167050][ T4214] usb 1-1: config 0 descriptor?? [ 385.194051][ T4214] usb 1-1: can't set config #0, error -71 [ 385.204978][ T4214] usb 1-1: USB disconnect, device number 6 [ 387.279886][ T7853] loop1: detected capacity change from 0 to 40427 [ 387.384132][ T7853] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 387.402599][ T7869] loop3: detected capacity change from 0 to 512 [ 387.417351][ T7853] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 387.659582][ T7853] F2FS-fs (loop1): Found nat_bits in checkpoint [ 387.740131][ T7869] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.828: invalid block [ 387.792743][ T7853] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 387.793872][ T7869] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.828: invalid indirect mapped block 4294967295 (level 1) [ 387.802098][ T7853] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 387.825857][ T7869] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.828: invalid indirect mapped block 4294967295 (level 1) [ 387.848560][ T7869] EXT4-fs (loop3): 2 truncates cleaned up [ 387.860096][ T7869] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 389.326631][ T7894] binder: BINDER_SET_CONTEXT_MGR already set [ 389.350184][ T7894] binder: 7893:7894 ioctl 4018620d 20000040 returned -16 [ 389.580829][ T7899] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 390.672314][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 391.853334][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.859677][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.907906][ T7941] loop1: detected capacity change from 0 to 512 [ 395.089790][ T7953] binder: 7949:7953 ioctl c0306201 20000940 returned -14 [ 395.099568][ T7941] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.845: invalid indirect mapped block 4294967295 (level 1) [ 395.196458][ T7941] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.845: invalid indirect mapped block 4294967295 (level 1) [ 395.421310][ T7941] EXT4-fs (loop1): 2 truncates cleaned up [ 395.500721][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.850'. [ 395.853330][ T7941] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 396.443221][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 397.102837][ T7975] overlayfs: failed to set xattr on upper [ 397.204392][ T7975] overlayfs: ...falling back to index=off,metacopy=off. [ 400.420120][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 401.352912][ T8010] loop5: detected capacity change from 0 to 512 [ 401.693701][ T8010] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.868: invalid indirect mapped block 4294967295 (level 1) [ 401.894142][ T8010] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.868: invalid indirect mapped block 4294967295 (level 1) [ 402.149582][ T8010] EXT4-fs (loop5): 2 truncates cleaned up [ 402.275254][ T8010] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 402.737262][ T8022] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 404.262614][ T8066] binder: 8065:8066 ioctl c0306201 20000940 returned -14 [ 406.896056][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.6.878'. [ 407.374545][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'. [ 407.393921][ T8086] device syz_tun entered promiscuous mode [ 407.452632][ T8086] device syz_tun left promiscuous mode [ 407.506398][ T8092] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 407.515995][ T8092] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 407.968078][ T4345] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.596791][ T8117] netlink: 'syz.1.892': attribute type 10 has an invalid length. [ 408.649833][ T8117] device syz_tun entered promiscuous mode [ 408.910747][ T8117] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 409.975686][ T8135] device syz_tun entered promiscuous mode [ 409.999012][ T8135] device syz_tun left promiscuous mode [ 411.237732][ T8157] loop1: detected capacity change from 0 to 512 [ 411.701975][ T8157] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 412.834254][ T8169] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 412.947826][ T8157] EXT4-fs (loop1): 1 truncate cleaned up [ 412.953519][ T8157] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 413.441960][ T8185] device syz_tun entered promiscuous mode [ 413.476640][ T8185] device syz_tun left promiscuous mode [ 415.374076][ T8211] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 417.213340][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 417.706759][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 418.089321][ T8230] loop6: detected capacity change from 0 to 512 [ 418.221597][ T8230] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 418.907392][ T8230] EXT4-fs (loop6): 1 truncate cleaned up [ 418.913176][ T8230] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 419.407108][ T8221] device hsr_slave_1 left promiscuous mode [ 419.500977][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.924'. [ 419.509896][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.924'. [ 419.818675][ T8251] loop3: detected capacity change from 0 to 256 [ 420.431268][ T8251] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 420.773588][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 422.721877][ T26] audit: type=1326 audit(1733178329.662:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.1.937" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ae8a1ff19 code=0x0 [ 424.086967][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.939'. [ 424.095935][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.939'. [ 425.871745][ T4386] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 426.042925][ T8293] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 427.507511][ T26] audit: type=1107 audit(1733178334.095:9): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 427.996434][ T8314] loop3: detected capacity change from 0 to 256 [ 428.152015][ T8314] FAT-fs (loop3): Unrecognized mount option "{hortname=lower" or missing value [ 430.661296][ T4386] usb 7-1: unable to read config index 0 descriptor/all [ 431.060920][ T4386] usb 7-1: can't read configurations, error -71 [ 431.341591][ T8331] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 431.660506][ T1107] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 432.799356][ T1107] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 433.082068][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.099564][ T1107] usb 2-1: Product: syz [ 433.103752][ T1107] usb 2-1: Manufacturer: syz [ 433.108341][ T1107] usb 2-1: SerialNumber: syz [ 433.190965][ T1107] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 434.023785][ T4385] usb 2-1: USB disconnect, device number 3 [ 434.058931][ T1107] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 434.104388][ T4385] usb 2-1: ath9k_htc: USB layer deinitialized [ 434.431259][ T26] audit: type=1107 audit(1733178340.615:10): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 436.425335][ T8369] batman_adv: batadv0: Adding interface: dummy0 [ 436.432032][ T8369] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.459800][ T8369] batman_adv: batadv0: Interface activated: dummy0 [ 437.776323][ T8386] kvm: emulating exchange as write [ 438.165545][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.975'. [ 438.655016][ T8405] sp0: Synchronizing with TNC [ 438.693276][ T8409] sp0: Found TNC [ 438.699858][ T8408] netlink: 224 bytes leftover after parsing attributes in process `syz.0.978'. [ 438.810756][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.978'. [ 439.214260][ T8404] [U] è` [ 439.292913][ T8415] netlink: 224 bytes leftover after parsing attributes in process `syz.5.981'. [ 439.308013][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.981'. [ 439.760308][ T4386] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 440.325403][ T4386] usb 6-1: Using ep0 maxpacket: 32 [ 440.333267][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 440.343107][ T4184] CPU: 0 PID: 4184 Comm: kworker/u5:8 Not tainted 5.15.173-syzkaller #0 [ 440.351443][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 440.361499][ T4184] Workqueue: hci0 hci_rx_work [ 440.366186][ T4184] Call Trace: [ 440.369446][ T4184] [ 440.372355][ T4184] dump_stack_lvl+0x1e3/0x2d0 [ 440.377026][ T4184] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 440.382647][ T4184] ? panic+0x860/0x860 [ 440.386709][ T4184] ? sysfs_create_dir_ns+0x282/0x390 [ 440.391983][ T4184] sysfs_create_dir_ns+0x2c6/0x390 [ 440.397087][ T4184] ? sysfs_warn_dup+0xa0/0xa0 [ 440.401754][ T4184] ? do_raw_spin_unlock+0x137/0x8b0 [ 440.406942][ T4184] kobject_add_internal+0x6e0/0xe00 [ 440.412126][ T4184] kobject_add+0x14e/0x210 [ 440.416527][ T4184] ? device_add+0x3c2/0xfd0 [ 440.421012][ T4184] ? kobject_init+0x1d0/0x1d0 [ 440.425676][ T4184] ? __raw_spin_lock_init+0x41/0x100 [ 440.430945][ T4184] ? get_device_parent+0x128/0x400 [ 440.436124][ T4184] device_add+0x476/0xfd0 [ 440.440438][ T4184] hci_conn_add_sysfs+0xe4/0x1f0 [ 440.445355][ T4184] le_conn_complete_evt+0xc15/0x1500 [ 440.450743][ T4184] ? cs_le_create_conn+0x5f0/0x5f0 [ 440.455865][ T4184] hci_le_meta_evt+0x28c/0x3f50 [ 440.460711][ T4184] ? __lock_acquire+0x1ff0/0x1ff0 [ 440.465723][ T4184] ? __mutex_lock_common+0x444/0x25a0 [ 440.471093][ T4184] ? hci_remote_host_features_evt+0x280/0x280 [ 440.477148][ T4184] ? __mutex_unlock_slowpath+0x218/0x750 [ 440.482772][ T4184] ? hci_event_packet+0x3b4/0x1550 [ 440.487876][ T4184] ? mutex_unlock+0x10/0x10 [ 440.492372][ T4184] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 440.498344][ T4184] ? print_irqtrace_events+0x210/0x210 [ 440.503792][ T4184] hci_event_packet+0xc41/0x1550 [ 440.508724][ T4184] ? rcu_lock_release+0x20/0x20 [ 440.513585][ T4184] ? hci_send_to_monitor+0x99/0x4d0 [ 440.518783][ T4184] hci_rx_work+0x232/0x990 [ 440.523196][ T4184] process_one_work+0x8a1/0x10c0 [ 440.528130][ T4184] ? worker_detach_from_pool+0x260/0x260 [ 440.533753][ T4184] ? _raw_spin_lock_irqsave+0x120/0x120 [ 440.539287][ T4184] ? kthread_data+0x4e/0xc0 [ 440.543777][ T4184] ? wq_worker_running+0x97/0x170 [ 440.548785][ T4184] worker_thread+0xaca/0x1280 [ 440.553449][ T4184] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 440.559346][ T4184] kthread+0x3f6/0x4f0 [ 440.563403][ T4184] ? rcu_lock_release+0x20/0x20 [ 440.568237][ T4184] ? kthread_blkcg+0xd0/0xd0 [ 440.572812][ T4184] ret_from_fork+0x1f/0x30 [ 440.577226][ T4184] [ 440.591248][ T4184] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 440.605823][ T4184] Bluetooth: hci0: failed to register connection device [ 440.669737][ T26] audit: type=1326 audit(1733178346.452:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.1.984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f6ae8a16ee7 code=0x0 [ 440.742654][ T4386] usb 6-1: config 0 has no interfaces? [ 440.967332][ T4386] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 441.606944][ T4386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.634295][ T4302] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 441.693506][ T8436] loop6: detected capacity change from 0 to 64 [ 441.731466][ T4386] usb 6-1: Product: syz [ 441.741998][ T4386] usb 6-1: Manufacturer: syz [ 441.822603][ T4386] usb 6-1: SerialNumber: syz [ 441.859789][ T4386] usb 6-1: config 0 descriptor?? [ 441.971205][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 442.038053][ T8443] sp0: Synchronizing with TNC [ 442.050324][ T8445] sp0: Found TNC [ 442.065774][ T8442] [ 442.068112][ T8442] ====================================================== [ 442.075119][ T8442] WARNING: possible circular locking dependency detected [ 442.082128][ T8442] 5.15.173-syzkaller #0 Not tainted [ 442.087317][ T8442] ------------------------------------------------------ [ 442.094322][ T8442] syz.3.991/8442 is trying to acquire lock: [ 442.100201][ T8442] ffff888076b51920 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf6a/0x1cb0 [ 442.109771][ T8442] [ 442.109771][ T8442] but task is already holding lock: [ 442.117121][ T8442] ffffc900018ce5a8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x869/0x1330 [ 442.126686][ T8442] [ 442.126686][ T8442] which lock already depends on the new lock. [ 442.126686][ T8442] [ 442.137073][ T8442] [ 442.137073][ T8442] the existing dependency chain (in reverse order) is: [ 442.146077][ T8442] [ 442.146077][ T8442] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 442.153978][ T8442] lock_acquire+0x1db/0x4f0 [ 442.158997][ T8442] _raw_spin_lock+0x2a/0x40 [ 442.164017][ T8442] __inet_hash+0xe4/0x8e0 [ 442.168862][ T8442] inet_csk_listen_start+0x231/0x310 [ 442.174664][ T8442] inet_listen+0x2c9/0x7c0 [ 442.179603][ T8442] __sys_listen+0x1a7/0x220 [ 442.184630][ T8442] __x64_sys_listen+0x56/0x60 [ 442.189821][ T8442] do_syscall_64+0x3b/0xb0 [ 442.194752][ T8442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.201166][ T8442] [ 442.201166][ T8442] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 442.208912][ T8442] validate_chain+0x1649/0x5930 [ 442.214287][ T8442] __lock_acquire+0x1295/0x1ff0 [ 442.219656][ T8442] lock_acquire+0x1db/0x4f0 [ 442.224686][ T8442] mptcp_diag_get_info+0x276/0xa10 [ 442.230316][ T8442] inet_sk_diag_fill+0xf6a/0x1cb0 [ 442.235861][ T8442] mptcp_diag_dump+0xd1d/0x1330 [ 442.241258][ T8442] __inet_diag_dump+0x20e/0x3a0 [ 442.246637][ T8442] inet_diag_dump_compat+0x1bd/0x2d0 [ 442.252449][ T8442] netlink_dump+0x5a4/0xca0 [ 442.257469][ T8442] __netlink_dump_start+0x50f/0x6d0 [ 442.263182][ T8442] inet_diag_rcv_msg_compat+0x202/0x4e0 [ 442.269258][ T8442] sock_diag_rcv_msg+0xd5/0x400 [ 442.274627][ T8442] netlink_rcv_skb+0x1cf/0x410 [ 442.279911][ T8442] sock_diag_rcv+0x26/0x40 [ 442.284842][ T8442] netlink_unicast+0x7b6/0x980 [ 442.290121][ T8442] netlink_sendmsg+0xa30/0xd60 [ 442.295400][ T8442] ____sys_sendmsg+0x59e/0x8f0 [ 442.300679][ T8442] ___sys_sendmsg+0x252/0x2e0 [ 442.305874][ T8442] __se_sys_sendmsg+0x19a/0x260 [ 442.311251][ T8442] do_syscall_64+0x3b/0xb0 [ 442.316184][ T8442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.322602][ T8442] [ 442.322602][ T8442] other info that might help us debug this: [ 442.322602][ T8442] [ 442.332820][ T8442] Possible unsafe locking scenario: [ 442.332820][ T8442] [ 442.340263][ T8442] CPU0 CPU1 [ 442.345629][ T8442] ---- ---- [ 442.350979][ T8442] lock(&h->lhash2[i].lock); [ 442.355650][ T8442] lock(sk_lock-AF_INET6); [ 442.362669][ T8442] lock(&h->lhash2[i].lock); [ 442.369867][ T8442] lock(sk_lock-AF_INET6); [ 442.374375][ T8442] [ 442.374375][ T8442] *** DEADLOCK *** [ 442.374375][ T8442] [ 442.382512][ T8442] 6 locks held by syz.3.991/8442: [ 442.387533][ T8442] #0: ffffffff8dc4b0c8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 442.396846][ T8442] #1: ffffffff8dc4af28 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0xb8/0x400 [ 442.407123][ T8442] #2: ffff88807e417690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6d0 [ 442.417842][ T8442] #3: ffffffff8dd27928 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x191/0x3a0 [ 442.428121][ T8442] #4: ffffffff8cb1fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 442.437431][ T8442] #5: ffffc900018ce5a8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x869/0x1330 [ 442.447454][ T8442] [ 442.447454][ T8442] stack backtrace: [ 442.453328][ T8442] CPU: 0 PID: 8442 Comm: syz.3.991 Not tainted 5.15.173-syzkaller #0 [ 442.461389][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 442.471436][ T8442] Call Trace: [ 442.474714][ T8442] [ 442.477639][ T8442] dump_stack_lvl+0x1e3/0x2d0 [ 442.482318][ T8442] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 442.487951][ T8442] ? print_circular_bug+0x12b/0x1a0 [ 442.493150][ T8442] check_noncircular+0x2f8/0x3b0 [ 442.498082][ T8442] ? add_chain_block+0x850/0x850 [ 442.503012][ T8442] ? lockdep_lock+0x11f/0x2a0 [ 442.507687][ T8442] validate_chain+0x1649/0x5930 [ 442.512539][ T8442] ? reacquire_held_locks+0x660/0x660 [ 442.517901][ T8442] ? register_lock_class+0x100/0x9a0 [ 442.523182][ T8442] ? is_dynamic_key+0x1f0/0x1f0 [ 442.528026][ T8442] ? mark_lock+0x98/0x340 [ 442.532345][ T8442] ? __lock_acquire+0x1295/0x1ff0 [ 442.537363][ T8442] ? mark_lock+0x98/0x340 [ 442.541689][ T8442] __lock_acquire+0x1295/0x1ff0 [ 442.546550][ T8442] lock_acquire+0x1db/0x4f0 [ 442.551051][ T8442] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 442.556249][ T8442] ? read_lock_is_recursive+0x10/0x10 [ 442.561615][ T8442] ? memcpy+0x3c/0x60 [ 442.565591][ T8442] ? nla_put+0x12d/0x1e0 [ 442.569827][ T8442] ? skb_put+0x110/0x1f0 [ 442.574067][ T8442] ? nla_put+0x12d/0x1e0 [ 442.578313][ T8442] ? memcpy+0x3c/0x60 [ 442.582289][ T8442] ? nla_put+0x12d/0x1e0 [ 442.586527][ T8442] mptcp_diag_get_info+0x276/0xa10 [ 442.591630][ T8442] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 442.596826][ T8442] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 442.602028][ T8442] ? mptcp_diag_dump_one+0x280/0x280 [ 442.607310][ T8442] ? memset+0x1f/0x40 [ 442.611283][ T8442] ? nla_reserve_64bit+0x121/0x1c0 [ 442.616388][ T8442] inet_sk_diag_fill+0xf6a/0x1cb0 [ 442.621414][ T8442] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 442.627134][ T8442] ? __might_sleep+0xc0/0xc0 [ 442.631726][ T8442] ? inet_diag_bc_sk+0x19d/0x10d0 [ 442.636743][ T8442] ? __rwlock_init+0x140/0x140 [ 442.641501][ T8442] ? do_raw_spin_unlock+0x137/0x8b0 [ 442.646696][ T8442] mptcp_diag_dump+0xd1d/0x1330 [ 442.651542][ T8442] ? __netlink_dump_start+0x50f/0x6d0 [ 442.656917][ T8442] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 442.663502][ T8442] __inet_diag_dump+0x20e/0x3a0 [ 442.668355][ T8442] inet_diag_dump_compat+0x1bd/0x2d0 [ 442.673635][ T8442] ? inet_diag_dump_start_compat+0x20/0x20 [ 442.679442][ T8442] ? __alloc_skb+0x397/0x590 [ 442.684026][ T8442] netlink_dump+0x5a4/0xca0 [ 442.688532][ T8442] ? netlink_lookup+0x1d0/0x1d0 [ 442.693373][ T8442] ? __inet_diag_dump_start+0x8a/0x990 [ 442.698827][ T8442] ? __inet_diag_dump_start+0x831/0x990 [ 442.704374][ T8442] __netlink_dump_start+0x50f/0x6d0 [ 442.709574][ T8442] inet_diag_rcv_msg_compat+0x202/0x4e0 [ 442.715118][ T8442] ? inet_diag_unregister+0xb0/0xb0 [ 442.720316][ T8442] ? read_lock_is_recursive+0x10/0x10 [ 442.725677][ T8442] ? sock_diag_rcv_msg+0xb8/0x400 [ 442.730698][ T8442] ? __mutex_trylock_common+0x17e/0x2e0 [ 442.736236][ T8442] ? mutex_lock_io_nested+0x60/0x60 [ 442.741426][ T8442] ? __inet_diag_dump+0x3a0/0x3a0 [ 442.746446][ T8442] ? inet_diag_dump_start_compat+0x20/0x20 [ 442.752243][ T8442] ? inet_diag_dump+0x50/0x50 [ 442.756912][ T8442] ? rcu_lock_release+0x20/0x20 [ 442.761762][ T8442] ? __copy_skb_header+0x47b/0x600 [ 442.766869][ T8442] ? dev_queue_xmit+0x20/0x20 [ 442.771541][ T8442] ? inet_diag_unregister+0xb0/0xb0 [ 442.776734][ T8442] sock_diag_rcv_msg+0xd5/0x400 [ 442.781580][ T8442] netlink_rcv_skb+0x1cf/0x410 [ 442.786340][ T8442] ? sock_diag_bind+0xa0/0xa0 [ 442.791012][ T8442] ? netlink_ack+0xb10/0xb10 [ 442.795608][ T8442] sock_diag_rcv+0x26/0x40 [ 442.800020][ T8442] netlink_unicast+0x7b6/0x980 [ 442.804782][ T8442] ? netlink_detachskb+0x90/0x90 [ 442.809711][ T8442] ? __virt_addr_valid+0x3bb/0x460 [ 442.814816][ T8442] ? 0xffffffff81000000 [ 442.818961][ T8442] ? __check_object_size+0x300/0x410 [ 442.823472][ T8440] [U] è` [ 442.824248][ T8442] ? bpf_lsm_netlink_send+0x5/0x10 [ 442.832186][ T8442] netlink_sendmsg+0xa30/0xd60 [ 442.836951][ T8442] ? netlink_getsockopt+0x5b0/0x5b0 [ 442.842141][ T8442] ? futex_wait+0x634/0x740 [ 442.846649][ T8442] ? aa_sock_msg_perm+0x91/0x150 [ 442.851581][ T8442] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 442.856855][ T8442] ? security_socket_sendmsg+0x7d/0xa0 [ 442.862307][ T8442] ? netlink_getsockopt+0x5b0/0x5b0 [ 442.867504][ T8442] ____sys_sendmsg+0x59e/0x8f0 [ 442.872262][ T8442] ? iovec_from_user+0x300/0x390 [ 442.877199][ T8442] ? __sys_sendmsg_sock+0x30/0x30 [ 442.882224][ T8442] ___sys_sendmsg+0x252/0x2e0 [ 442.886895][ T8442] ? __sys_sendmsg+0x260/0x260 [ 442.891665][ T8442] ? __fdget+0x191/0x220 [ 442.895904][ T8442] __se_sys_sendmsg+0x19a/0x260 [ 442.900750][ T8442] ? __x64_sys_sendmsg+0x80/0x80 [ 442.905696][ T8442] ? syscall_enter_from_user_mode+0x2e/0x240 [ 442.911669][ T8442] ? lockdep_hardirqs_on+0x94/0x130 [ 442.916951][ T8442] ? syscall_enter_from_user_mode+0x2e/0x240 [ 442.922931][ T8442] do_syscall_64+0x3b/0xb0 [ 442.927343][ T8442] ? clear_bhb_loop+0x15/0x70 [ 442.932014][ T8442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.937899][ T8442] RIP: 0033:0x7f1f0ce52f19 [ 442.942306][ T8442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.961915][ T8442] RSP: 002b:00007f1f0acc9058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.970324][ T8442] RAX: ffffffffffffffda RBX: 00007f1f0d018fa0 RCX: 00007f1f0ce52f19 [ 442.978292][ T8442] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 442.986262][ T8442] RBP: 00007f1f0cec6986 R08: 0000000000000000 R09: 0000000000000000 [ 442.994228][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.002198][ T8442] R13: 0000000000000000 R14: 00007f1f0d018fa0 R15: 00007ffe66205208 [ 443.010175][ T8442] [ 443.041651][ T8442] BUG: sleeping function called from invalid context at net/core/sock.c:3282 [ 443.094304][ T8442] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8442, name: syz.3.991 [ 443.104145][ T8442] INFO: lockdep is turned off. [ 443.109349][ T8442] Preemption disabled at: [ 443.109969][ T8442] [<0000000000000000>] 0x0 [ 443.119826][ T8442] CPU: 0 PID: 8442 Comm: syz.3.991 Not tainted 5.15.173-syzkaller #0 [ 443.127888][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 443.137934][ T8442] Call Trace: [ 443.141209][ T8442] [ 443.144134][ T8442] dump_stack_lvl+0x1e3/0x2d0 [ 443.148818][ T8442] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 443.154443][ T8442] ? panic+0x860/0x860 [ 443.158510][ T8442] ___might_sleep+0x547/0x6a0 [ 443.163183][ T8442] ? __might_sleep+0xc0/0xc0 [ 443.167765][ T8442] ? memcpy+0x3c/0x60 [ 443.171737][ T8442] ? nla_put+0x12d/0x1e0 [ 443.175975][ T8442] ? skb_put+0x110/0x1f0 [ 443.180211][ T8442] ? nla_put+0x12d/0x1e0 [ 443.184454][ T8442] ? memcpy+0x3c/0x60 [ 443.188435][ T8442] __lock_sock_fast+0x2f/0xe0 [ 443.191419][ T4212] usb 6-1: USB disconnect, device number 6 [ 443.193106][ T8442] mptcp_diag_get_info+0x282/0xa10 [ 443.193134][ T8442] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 443.209181][ T8442] ? mptcp_diag_dump_one+0x280/0x280 [ 443.214470][ T8442] ? memset+0x1f/0x40 [ 443.218453][ T8442] ? nla_reserve_64bit+0x121/0x1c0 [ 443.223568][ T8442] inet_sk_diag_fill+0xf6a/0x1cb0 [ 443.228593][ T8442] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 443.234298][ T8442] ? __might_sleep+0xc0/0xc0 [ 443.238874][ T8442] ? inet_diag_bc_sk+0x19d/0x10d0 [ 443.243884][ T8442] ? __rwlock_init+0x140/0x140 [ 443.248636][ T8442] ? do_raw_spin_unlock+0x137/0x8b0 [ 443.253809][ T8442] mptcp_diag_dump+0xd1d/0x1330 [ 443.258636][ T8442] ? __netlink_dump_start+0x50f/0x6d0 [ 443.263986][ T8442] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 443.270552][ T8442] __inet_diag_dump+0x20e/0x3a0 [ 443.275393][ T8442] inet_diag_dump_compat+0x1bd/0x2d0 [ 443.280670][ T8442] ? inet_diag_dump_start_compat+0x20/0x20 [ 443.286457][ T8442] ? __alloc_skb+0x397/0x590 [ 443.291025][ T8442] netlink_dump+0x5a4/0xca0 [ 443.295510][ T8442] ? netlink_lookup+0x1d0/0x1d0 [ 443.300334][ T8442] ? __inet_diag_dump_start+0x8a/0x990 [ 443.305769][ T8442] ? __inet_diag_dump_start+0x831/0x990 [ 443.311294][ T8442] __netlink_dump_start+0x50f/0x6d0 [ 443.316473][ T8442] inet_diag_rcv_msg_compat+0x202/0x4e0 [ 443.321993][ T8442] ? inet_diag_unregister+0xb0/0xb0 [ 443.327170][ T8442] ? read_lock_is_recursive+0x10/0x10 [ 443.332517][ T8442] ? sock_diag_rcv_msg+0xb8/0x400 [ 443.337514][ T8442] ? __mutex_trylock_common+0x17e/0x2e0 [ 443.343036][ T8442] ? mutex_lock_io_nested+0x60/0x60 [ 443.348207][ T8442] ? __inet_diag_dump+0x3a0/0x3a0 [ 443.353206][ T8442] ? inet_diag_dump_start_compat+0x20/0x20 [ 443.358987][ T8442] ? inet_diag_dump+0x50/0x50 [ 443.363637][ T8442] ? rcu_lock_release+0x20/0x20 [ 443.368463][ T8442] ? __copy_skb_header+0x47b/0x600 [ 443.373545][ T8442] ? dev_queue_xmit+0x20/0x20 [ 443.378197][ T8442] ? inet_diag_unregister+0xb0/0xb0 [ 443.383366][ T8442] sock_diag_rcv_msg+0xd5/0x400 [ 443.388192][ T8442] netlink_rcv_skb+0x1cf/0x410 [ 443.392933][ T8442] ? sock_diag_bind+0xa0/0xa0 [ 443.397596][ T8442] ? netlink_ack+0xb10/0xb10 [ 443.402199][ T8442] sock_diag_rcv+0x26/0x40 [ 443.406603][ T8442] netlink_unicast+0x7b6/0x980 [ 443.411450][ T8442] ? netlink_detachskb+0x90/0x90 [ 443.416361][ T8442] ? __virt_addr_valid+0x3bb/0x460 [ 443.421471][ T8442] ? 0xffffffff81000000 [ 443.425605][ T8442] ? __check_object_size+0x300/0x410 [ 443.430874][ T8442] ? bpf_lsm_netlink_send+0x5/0x10 [ 443.435965][ T8442] netlink_sendmsg+0xa30/0xd60 [ 443.440714][ T8442] ? netlink_getsockopt+0x5b0/0x5b0 [ 443.445887][ T8442] ? futex_wait+0x634/0x740 [ 443.450367][ T8442] ? aa_sock_msg_perm+0x91/0x150 [ 443.455279][ T8442] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 443.460537][ T8442] ? security_socket_sendmsg+0x7d/0xa0 [ 443.465971][ T8442] ? netlink_getsockopt+0x5b0/0x5b0 [ 443.471146][ T8442] ____sys_sendmsg+0x59e/0x8f0 [ 443.475885][ T8442] ? iovec_from_user+0x300/0x390 [ 443.480796][ T8442] ? __sys_sendmsg_sock+0x30/0x30 [ 443.485798][ T8442] ___sys_sendmsg+0x252/0x2e0 [ 443.490448][ T8442] ? __sys_sendmsg+0x260/0x260 [ 443.495191][ T8442] ? __fdget+0x191/0x220 [ 443.499406][ T8442] __se_sys_sendmsg+0x19a/0x260 [ 443.504228][ T8442] ? __x64_sys_sendmsg+0x80/0x80 [ 443.509141][ T8442] ? syscall_enter_from_user_mode+0x2e/0x240 [ 443.515099][ T8442] ? lockdep_hardirqs_on+0x94/0x130 [ 443.520269][ T8442] ? syscall_enter_from_user_mode+0x2e/0x240 [ 443.526222][ T8442] do_syscall_64+0x3b/0xb0 [ 443.530610][ T8442] ? clear_bhb_loop+0x15/0x70 [ 443.535261][ T8442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 443.541129][ T8442] RIP: 0033:0x7f1f0ce52f19 [ 443.545517][ T8442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.565095][ T8442] RSP: 002b:00007f1f0acc9058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.573486][ T8442] RAX: ffffffffffffffda RBX: 00007f1f0d018fa0 RCX: 00007f1f0ce52f19 [ 443.581447][ T8442] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 443.589407][ T8442] RBP: 00007f1f0cec6986 R08: 0000000000000000 R09: 0000000000000000 [ 443.597351][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.605295][ T8442] R13: 0000000000000000 R14: 00007f1f0d018fa0 R15: 00007ffe66205208 [ 443.613259][ T8442] [ 443.616343][ T8442] BUG: scheduling while atomic: syz.3.991/8442/0x00000002 [ 443.623440][ T8442] INFO: lockdep is turned off. [ 443.628174][ T8442] Modules linked in: [ 443.632055][ T8442] Preemption disabled at: [ 443.632060][ T8442] [<0000000000000000>] 0x0 [ 443.640768][ T8442] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 443.649499][ T8442] CPU: 0 PID: 8442 Comm: syz.3.991 Tainted: G W 5.15.173-syzkaller #0 [ 443.659015][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 443.669134][ T8442] Call Trace: [ 443.672409][ T8442] [ 443.675333][ T8442] dump_stack_lvl+0x1e3/0x2d0 [ 443.679989][ T8442] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 443.685596][ T8442] ? panic+0x860/0x860 [ 443.689640][ T8442] ? __wake_up_klogd+0xcc/0x100 [ 443.694557][ T8442] panic+0x318/0x860 [ 443.698428][ T8442] ? check_panic_on_warn+0x1d/0xa0 [ 443.703523][ T8442] ? fb_is_primary_device+0xd0/0xd0 [ 443.708701][ T8442] ? __wake_up_klogd+0xcc/0x100 [ 443.713523][ T8442] ? vprintk_emit+0xf5/0x150 [ 443.718089][ T8442] check_panic_on_warn+0x7e/0xa0 [ 443.723015][ T8442] __schedule_bug+0x1ba/0x220 [ 443.727664][ T8442] ? raw_spin_rq_unlock_irq+0x80/0x80 [ 443.733029][ T8442] __schedule+0x138a/0x45b0 [ 443.737511][ T8442] ? read_lock_is_recursive+0x10/0x10 [ 443.742854][ T8442] ? do_raw_spin_lock+0x14a/0x370 [ 443.747854][ T8442] ? print_irqtrace_events+0x210/0x210 [ 443.753284][ T8442] ? lock_release+0xb9/0x9a0 [ 443.757842][ T8442] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 443.763797][ T8442] ? release_firmware_map_entry+0x190/0x190 [ 443.769747][ T8442] ? __local_bh_enable_ip+0x164/0x1f0 [ 443.775111][ T8442] ? __lock_sock+0x1c3/0x320 [ 443.779696][ T8442] ? _local_bh_enable+0xa0/0xa0 [ 443.784523][ T8442] schedule+0x11b/0x1f0 [ 443.788650][ T8442] __lock_sock+0x1c8/0x320 [ 443.793051][ T8442] ? sk_page_frag_refill+0x1f0/0x1f0 [ 443.798314][ T8442] ? init_wait_entry+0xd0/0xd0 [ 443.803057][ T8442] ? __rwlock_init+0x140/0x140 [ 443.807792][ T8442] ? nla_put+0x12d/0x1e0 [ 443.812005][ T8442] ? skb_put+0x110/0x1f0 [ 443.816223][ T8442] ? nla_put+0x12d/0x1e0 [ 443.820435][ T8442] ? __lock_sock_fast+0x43/0xe0 [ 443.825260][ T8442] __lock_sock_fast+0x78/0xe0 [ 443.829907][ T8442] mptcp_diag_get_info+0x282/0xa10 [ 443.835007][ T8442] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 443.840182][ T8442] ? mptcp_diag_dump_one+0x280/0x280 [ 443.845437][ T8442] ? memset+0x1f/0x40 [ 443.849393][ T8442] ? nla_reserve_64bit+0x121/0x1c0 [ 443.854479][ T8442] inet_sk_diag_fill+0xf6a/0x1cb0 [ 443.859484][ T8442] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 443.865197][ T8442] ? __might_sleep+0xc0/0xc0 [ 443.869761][ T8442] ? inet_diag_bc_sk+0x19d/0x10d0 [ 443.874756][ T8442] ? __rwlock_init+0x140/0x140 [ 443.879493][ T8442] ? do_raw_spin_unlock+0x137/0x8b0 [ 443.884666][ T8442] mptcp_diag_dump+0xd1d/0x1330 [ 443.889496][ T8442] ? __netlink_dump_start+0x50f/0x6d0 [ 443.894842][ T8442] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 443.901402][ T8442] __inet_diag_dump+0x20e/0x3a0 [ 443.906236][ T8442] inet_diag_dump_compat+0x1bd/0x2d0 [ 443.911499][ T8442] ? inet_diag_dump_start_compat+0x20/0x20 [ 443.917279][ T8442] ? __alloc_skb+0x397/0x590 [ 443.921851][ T8442] netlink_dump+0x5a4/0xca0 [ 443.926329][ T8442] ? netlink_lookup+0x1d0/0x1d0 [ 443.931150][ T8442] ? __inet_diag_dump_start+0x8a/0x990 [ 443.936581][ T8442] ? __inet_diag_dump_start+0x831/0x990 [ 443.942099][ T8442] __netlink_dump_start+0x50f/0x6d0 [ 443.947273][ T8442] inet_diag_rcv_msg_compat+0x202/0x4e0 [ 443.952792][ T8442] ? inet_diag_unregister+0xb0/0xb0 [ 443.957961][ T8442] ? read_lock_is_recursive+0x10/0x10 [ 443.963303][ T8442] ? sock_diag_rcv_msg+0xb8/0x400 [ 443.968300][ T8442] ? __mutex_trylock_common+0x17e/0x2e0 [ 443.973819][ T8442] ? mutex_lock_io_nested+0x60/0x60 [ 443.978990][ T8442] ? __inet_diag_dump+0x3a0/0x3a0 [ 443.983995][ T8442] ? inet_diag_dump_start_compat+0x20/0x20 [ 443.989774][ T8442] ? inet_diag_dump+0x50/0x50 [ 443.994441][ T8442] ? rcu_lock_release+0x20/0x20 [ 443.999282][ T8442] ? __copy_skb_header+0x47b/0x600 [ 444.004369][ T8442] ? dev_queue_xmit+0x20/0x20 [ 444.009046][ T8442] ? inet_diag_unregister+0xb0/0xb0 [ 444.014218][ T8442] sock_diag_rcv_msg+0xd5/0x400 [ 444.019046][ T8442] netlink_rcv_skb+0x1cf/0x410 [ 444.023783][ T8442] ? sock_diag_bind+0xa0/0xa0 [ 444.028440][ T8442] ? netlink_ack+0xb10/0xb10 [ 444.033006][ T8442] sock_diag_rcv+0x26/0x40 [ 444.037396][ T8442] netlink_unicast+0x7b6/0x980 [ 444.042153][ T8442] ? netlink_detachskb+0x90/0x90 [ 444.047064][ T8442] ? __virt_addr_valid+0x3bb/0x460 [ 444.052148][ T8442] ? 0xffffffff81000000 [ 444.056284][ T8442] ? __check_object_size+0x300/0x410 [ 444.061563][ T8442] ? bpf_lsm_netlink_send+0x5/0x10 [ 444.066652][ T8442] netlink_sendmsg+0xa30/0xd60 [ 444.071399][ T8442] ? netlink_getsockopt+0x5b0/0x5b0 [ 444.076573][ T8442] ? futex_wait+0x634/0x740 [ 444.081053][ T8442] ? aa_sock_msg_perm+0x91/0x150 [ 444.085969][ T8442] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 444.091229][ T8442] ? security_socket_sendmsg+0x7d/0xa0 [ 444.096664][ T8442] ? netlink_getsockopt+0x5b0/0x5b0 [ 444.101839][ T8442] ____sys_sendmsg+0x59e/0x8f0 [ 444.106584][ T8442] ? iovec_from_user+0x300/0x390 [ 444.111517][ T8442] ? __sys_sendmsg_sock+0x30/0x30 [ 444.116519][ T8442] ___sys_sendmsg+0x252/0x2e0 [ 444.121193][ T8442] ? __sys_sendmsg+0x260/0x260 [ 444.125956][ T8442] ? __fdget+0x191/0x220 [ 444.130188][ T8442] __se_sys_sendmsg+0x19a/0x260 [ 444.135046][ T8442] ? __x64_sys_sendmsg+0x80/0x80 [ 444.139970][ T8442] ? syscall_enter_from_user_mode+0x2e/0x240 [ 444.145931][ T8442] ? lockdep_hardirqs_on+0x94/0x130 [ 444.151131][ T8442] ? syscall_enter_from_user_mode+0x2e/0x240 [ 444.157087][ T8442] do_syscall_64+0x3b/0xb0 [ 444.161481][ T8442] ? clear_bhb_loop+0x15/0x70 [ 444.166251][ T8442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.172126][ T8442] RIP: 0033:0x7f1f0ce52f19 [ 444.176516][ T8442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.196101][ T8442] RSP: 002b:00007f1f0acc9058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.204515][ T8442] RAX: ffffffffffffffda RBX: 00007f1f0d018fa0 RCX: 00007f1f0ce52f19 [ 444.212464][ T8442] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 444.220413][ T8442] RBP: 00007f1f0cec6986 R08: 0000000000000000 R09: 0000000000000000 [ 444.228370][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.236316][ T8442] R13: 0000000000000000 R14: 00007f1f0d018fa0 R15: 00007ffe66205208 [ 444.244267][ T8442] [ 444.247480][ T8442] Kernel Offset: disabled [ 444.251793][ T8442] Rebooting in 86400 seconds..