last executing test programs: 53.85838526s ago: executing program 2 (id=3): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x4ba, 0x0, 0x0, 0x0, 0x0, 0x1, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 53.204542522s ago: executing program 2 (id=7): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) sendmmsg$inet(r1, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="1128c8a28e55f11baea93567ed6a6f0889796ae0cea40493b5b2523fe723bb5583275844a06d2f05e7b9243610e4812f5bbf8afb1d0b7fc8d80ca9ba4bf4eca9a69b79be02a03140d9d9c7e0d19bd8cb2e45eaab682fece8", 0x58}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000400)="f4591fb8b4a0cdcf79012de8b0293f71b9f32c20591843731d67fb921ed1115fe3964201270c42", 0x27}], 0x1, &(0x7f0000001440)=ANY=[@ANYBLOB]}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001640)="6ee7b25f8fef1fedc21d08d5908201c126448e10b5c875ab39056deb1bb98265056b6247ac584c521cca8ff19ba74627a06bce395b92", 0x36}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003b00)="cad199aa0456656a608222e84ee2f8889fdd8a42b287dcdb0cac6358d9832e5e3243aa7b0f297acd26cdd22c914cc2f26d36228c1c010fc372a132d562141e7d6dadbecd22dbb8feb5e12bcc2b086329f7584fd6fa5f278fb93a8d9b2a6616d90aa6761557c11caeebae91d631756a6d1fea4b960df1b43355", 0x79}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004180)=[@ip_tos_int={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_ttl={{0x10}}, @ip_tos_int={{0x10}}, @ip_tos_int={{0x10}}, @ip_tos_u8={{0xd}}], 0x68}}], 0x5, 0x0) 52.764586764s ago: executing program 2 (id=8): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/213, 0xd5) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x33d, @time={0x3, 0x2}, 0x9, {0x53}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0xc0bc5310, &(0x7f0000000300)={{}, {0x0, 0x3}}) tkill(r0, 0x7) 52.507664372s ago: executing program 32 (id=8): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/213, 0xd5) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x33d, @time={0x3, 0x2}, 0x9, {0x53}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0xc0bc5310, &(0x7f0000000300)={{}, {0x0, 0x3}}) tkill(r0, 0x7) 13.136087966s ago: executing program 0 (id=241): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 12.71009967s ago: executing program 0 (id=244): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x3, 0x3, 0x5, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4894}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000370463859759837f6d9400000000", @ANYRES32=r3, @ANYBLOB="cb140000000000002800128008000100736974001c000280080002000a01030206001000d506000006000f0002"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002080)=[{{&(0x7f0000000b00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x40}}], 0x1, 0x80) 11.911311732s ago: executing program 0 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 11.728332525s ago: executing program 0 (id=250): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010000, &(0x7f0000000200)={[{@nobarrier}, {}, {@session={'session', 0x3d, 0x9771}}, {@gid={'gid', 0x3d, 0xee01}}, {}, {@umask={'umask', 0x3d, 0x804}}]}, 0xff, 0x6de, &(0x7f0000000840)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x80d010, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10.911190886s ago: executing program 0 (id=265): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="009b7e91bf18cd9430f4e1ee26870d4e291b10f3af9c21afd779d0ef023223a551f81042fa1b4a3eac3fa71eab99124c75f5a0d624ae9caeb800"], 0x1, 0xdab, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x1010000, &(0x7f0000000a00)=ANY=[@ANYBLOB='utf8=0,utf8=1,uni_xlate=0,utf8=1,iocharset=iso8859-2,shortname=lowf8=0,umask=00000000000000000000000,shortname=lower,shortname=lower,shortname=win95,uni_xlate=0,rodir,shortnamN=lower,chec\x00\x00\x00\x00rict,iocharset=cp1250,\x00'/226], 0x1, 0x366, &(0x7f0000001e00)="$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") msync(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, &(0x7f0000000080)={@desc={0x100000, 0x0, @desc1}}) 10.019827988s ago: executing program 0 (id=259): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 10.01954023s ago: executing program 33 (id=259): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 9.642014164s ago: executing program 6 (id=273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='bbr\x00', 0x4) sendfile(r0, r1, 0x0, 0x8000002b) 9.36437892s ago: executing program 3 (id=261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r3, 0x8, 0x8, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) 8.24346546s ago: executing program 6 (id=264): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000cc0)) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 7.773923672s ago: executing program 3 (id=266): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = io_uring_setup(0x3c78, &(0x7f0000000080)) close(r1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r0, 0xff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.086662045s ago: executing program 3 (id=268): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x22, 0x0, 0x0, 0x6, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.431875533s ago: executing program 3 (id=270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x20003, @loopback, 0xffff}}, 0xfffffff3, 0x4, 0x0, 0x6, 0x16, 0x5, 0x3}, 0x9c) 5.092702522s ago: executing program 6 (id=277): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.700811894s ago: executing program 5 (id=279): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.529843074s ago: executing program 5 (id=280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) 4.192861144s ago: executing program 5 (id=281): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000300), 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) sendfile(r0, r0, 0x0, 0x7a680000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) sendfile(r1, r1, 0x0, 0x7a680000) 3.677687943s ago: executing program 4 (id=282): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b81af000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x2, 0x0, 0x0}) 3.446153487s ago: executing program 4 (id=283): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 3.123387812s ago: executing program 3 (id=284): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x11af, 0x0, 0x0, 0x0, 0x0) 2.725920616s ago: executing program 1 (id=286): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x2) 2.382423149s ago: executing program 4 (id=287): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000002000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) 2.144270788s ago: executing program 3 (id=288): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 2.144080971s ago: executing program 4 (id=289): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0x4147, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) 2.065007363s ago: executing program 5 (id=290): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0x4) 2.008717811s ago: executing program 1 (id=291): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000340)='memory.pressure\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000480)=0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x1, 0x20, 0x7ff}, 0x2f) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000004c0)=')', 0x1}]) 1.934847975s ago: executing program 6 (id=292): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x34029, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.691144312s ago: executing program 1 (id=293): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) shutdown(r0, 0x1) 1.397520119s ago: executing program 1 (id=294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fc}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000640)=""/38, 0x26}], 0x4}}], 0x2, 0x0, 0x0) 1.2048436s ago: executing program 6 (id=295): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab5, 0x0) 1.052500661s ago: executing program 1 (id=296): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x7}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14, 0x0, 0x0, 0x5}, 0x50) 1.00871957s ago: executing program 4 (id=297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd, 0x18}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) 728.795016ms ago: executing program 5 (id=298): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x0, r4, r5}) 623.40287ms ago: executing program 1 (id=299): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0], &(0x7f0000000040), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000040)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000240)}) 114.648462ms ago: executing program 6 (id=300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 86.27328ms ago: executing program 5 (id=301): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) 0s ago: executing program 4 (id=302): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc53502", 0x39}], 0x3}], 0x1, 0x840) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/116, 0x74}], 0x1}, 0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 85.160751][ T5831] cgroup: Unknown subsys name 'net' [ 85.278480][ T5831] cgroup: Unknown subsys name 'cpuset' [ 85.287905][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.852857][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.716402][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.724788][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.732725][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.741046][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.774811][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.774844][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.789401][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.797900][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.805881][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.806027][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.814051][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.821109][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.828891][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.834897][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.842938][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.849549][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.855613][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.863004][ T5864] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.869661][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.876707][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.884309][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.898249][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.903474][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.908626][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.912919][ T5848] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.920109][ T5866] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.928142][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.934580][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.941630][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.955262][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.957337][ T5864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.970125][ T5866] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.970245][ T5864] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.978329][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.985406][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.991459][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.632801][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.645354][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 90.660502][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 90.722982][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 90.839387][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.859439][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 90.946003][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.953950][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.961237][ T5843] bridge_slave_0: entered allmulticast mode [ 90.968913][ T5843] bridge_slave_0: entered promiscuous mode [ 90.977823][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.985231][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.992424][ T5843] bridge_slave_1: entered allmulticast mode [ 91.001195][ T5843] bridge_slave_1: entered promiscuous mode [ 91.061609][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.068971][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.076869][ T5854] bridge_slave_0: entered allmulticast mode [ 91.084362][ T5854] bridge_slave_0: entered promiscuous mode [ 91.128682][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.136069][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.143480][ T5846] bridge_slave_0: entered allmulticast mode [ 91.150728][ T5846] bridge_slave_0: entered promiscuous mode [ 91.158967][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.166215][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.173436][ T5846] bridge_slave_1: entered allmulticast mode [ 91.180572][ T5846] bridge_slave_1: entered promiscuous mode [ 91.187161][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.194537][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.201734][ T5842] bridge_slave_0: entered allmulticast mode [ 91.208936][ T5842] bridge_slave_0: entered promiscuous mode [ 91.221266][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.228785][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.236130][ T5854] bridge_slave_1: entered allmulticast mode [ 91.242974][ T5854] bridge_slave_1: entered promiscuous mode [ 91.291255][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.298888][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.312288][ T5842] bridge_slave_1: entered allmulticast mode [ 91.319236][ T5842] bridge_slave_1: entered promiscuous mode [ 91.356147][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.369683][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.405715][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.417603][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.475433][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.499425][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.507670][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.515891][ T5844] bridge_slave_0: entered allmulticast mode [ 91.523058][ T5844] bridge_slave_0: entered promiscuous mode [ 91.532944][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.540459][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.548031][ T5844] bridge_slave_1: entered allmulticast mode [ 91.555705][ T5844] bridge_slave_1: entered promiscuous mode [ 91.583977][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.591116][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.600087][ T5845] bridge_slave_0: entered allmulticast mode [ 91.607935][ T5845] bridge_slave_0: entered promiscuous mode [ 91.617610][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.668752][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.679290][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.687149][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.695091][ T5845] bridge_slave_1: entered allmulticast mode [ 91.702799][ T5845] bridge_slave_1: entered promiscuous mode [ 91.732858][ T5843] team0: Port device team_slave_0 added [ 91.758751][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.770811][ T5846] team0: Port device team_slave_0 added [ 91.785588][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.833019][ T5843] team0: Port device team_slave_1 added [ 91.841365][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.869869][ T5846] team0: Port device team_slave_1 added [ 91.906370][ T5854] team0: Port device team_slave_0 added [ 91.961073][ T54] Bluetooth: hci3: command tx timeout [ 91.989833][ T5842] team0: Port device team_slave_0 added [ 92.006250][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.024021][ T54] Bluetooth: hci0: command tx timeout [ 92.024031][ T5864] Bluetooth: hci4: command tx timeout [ 92.024222][ T5864] Bluetooth: hci5: command tx timeout [ 92.050202][ T5854] team0: Port device team_slave_1 added [ 92.076285][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.083376][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.114025][ T5864] Bluetooth: hci2: command tx timeout [ 92.119759][ T5864] Bluetooth: hci1: command tx timeout [ 92.134247][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.149620][ T5844] team0: Port device team_slave_0 added [ 92.174204][ T5842] team0: Port device team_slave_1 added [ 92.181697][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.194376][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.221789][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.235836][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.254288][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.261258][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.287567][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.307044][ T5844] team0: Port device team_slave_1 added [ 92.332868][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.340392][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.367266][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.408056][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.415419][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.442203][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.484336][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.491339][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.517646][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.548453][ T5845] team0: Port device team_slave_0 added [ 92.554912][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.561888][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.588504][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.619159][ T5843] hsr_slave_0: entered promiscuous mode [ 92.625950][ T5843] hsr_slave_1: entered promiscuous mode [ 92.633296][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.643471][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.669904][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.700470][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.708388][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.734924][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.767638][ T5845] team0: Port device team_slave_1 added [ 92.782652][ T5846] hsr_slave_0: entered promiscuous mode [ 92.789304][ T5846] hsr_slave_1: entered promiscuous mode [ 92.796082][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.803949][ T5846] Cannot create hsr debugfs directory [ 92.811678][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.818989][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.845573][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.913523][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.923930][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.950441][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.004100][ T5842] hsr_slave_0: entered promiscuous mode [ 93.011688][ T5842] hsr_slave_1: entered promiscuous mode [ 93.019382][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.027736][ T5842] Cannot create hsr debugfs directory [ 93.033796][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.041546][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.068151][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.100749][ T5844] hsr_slave_0: entered promiscuous mode [ 93.107671][ T5844] hsr_slave_1: entered promiscuous mode [ 93.114149][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.122593][ T5844] Cannot create hsr debugfs directory [ 93.182563][ T5854] hsr_slave_0: entered promiscuous mode [ 93.190407][ T5854] hsr_slave_1: entered promiscuous mode [ 93.200168][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.209158][ T5854] Cannot create hsr debugfs directory [ 93.342838][ T5845] hsr_slave_0: entered promiscuous mode [ 93.349443][ T5845] hsr_slave_1: entered promiscuous mode [ 93.356817][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.364500][ T5845] Cannot create hsr debugfs directory [ 93.682438][ T5846] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.726487][ T5846] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.755729][ T5846] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.776179][ T5846] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.803596][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.839139][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.849107][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.869211][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.903618][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.915516][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.926891][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.959941][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.024248][ T5864] Bluetooth: hci3: command tx timeout [ 94.051635][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.061749][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.089648][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.101055][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.108351][ T5864] Bluetooth: hci0: command tx timeout [ 94.113786][ T5864] Bluetooth: hci4: command tx timeout [ 94.113998][ T5855] Bluetooth: hci5: command tx timeout [ 94.159071][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.184420][ T5864] Bluetooth: hci1: command tx timeout [ 94.190157][ T5864] Bluetooth: hci2: command tx timeout [ 94.211517][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.242665][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.290543][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.333502][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.349102][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.390542][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.398035][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.450766][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.468131][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.484782][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.497113][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.525737][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.532995][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.577361][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.584537][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.606514][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.617952][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.631355][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.638517][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.675210][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.683291][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.723693][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.731077][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.790772][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.797911][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.855217][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.881753][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.988502][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.022136][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.029481][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.040456][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.047610][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.076651][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.142657][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.166460][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.219657][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.226859][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.283017][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.290198][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.335002][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.342238][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.387752][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.395273][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.466424][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.543088][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.702781][ T5842] veth0_vlan: entered promiscuous mode [ 95.737693][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.862749][ T5842] veth1_vlan: entered promiscuous mode [ 95.999366][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.075782][ T5844] veth0_vlan: entered promiscuous mode [ 96.108221][ T5864] Bluetooth: hci3: command tx timeout [ 96.126592][ T5842] veth0_macvtap: entered promiscuous mode [ 96.168141][ T5844] veth1_vlan: entered promiscuous mode [ 96.184122][ T5864] Bluetooth: hci4: command tx timeout [ 96.185796][ T5855] Bluetooth: hci5: command tx timeout [ 96.190015][ T5864] Bluetooth: hci0: command tx timeout [ 96.215448][ T5842] veth1_macvtap: entered promiscuous mode [ 96.238855][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.252337][ T5843] veth0_vlan: entered promiscuous mode [ 96.264087][ T5864] Bluetooth: hci1: command tx timeout [ 96.275128][ T5864] Bluetooth: hci2: command tx timeout [ 96.313462][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.335903][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.373133][ T5844] veth0_macvtap: entered promiscuous mode [ 96.381961][ T5843] veth1_vlan: entered promiscuous mode [ 96.409593][ T5844] veth1_macvtap: entered promiscuous mode [ 96.433045][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.482878][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.493232][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.503502][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.515990][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.524245][ T9] cfg80211: failed to load regulatory.db [ 96.592149][ T5846] veth0_vlan: entered promiscuous mode [ 96.608367][ T5846] veth1_vlan: entered promiscuous mode [ 96.691372][ T5854] veth0_vlan: entered promiscuous mode [ 96.707206][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.721746][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.733544][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.764482][ T5854] veth1_vlan: entered promiscuous mode [ 96.782573][ T5843] veth0_macvtap: entered promiscuous mode [ 96.812443][ T5845] veth0_vlan: entered promiscuous mode [ 96.823739][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.836375][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.850306][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.895375][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.898164][ T5843] veth1_macvtap: entered promiscuous mode [ 96.903878][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.925434][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.935849][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.946146][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.956377][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.981471][ T5845] veth1_vlan: entered promiscuous mode [ 97.013480][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.024544][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.034837][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.045660][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.057534][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.112385][ T5846] veth0_macvtap: entered promiscuous mode [ 97.123365][ T5845] veth0_macvtap: entered promiscuous mode [ 97.136038][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.138058][ T5854] veth0_macvtap: entered promiscuous mode [ 97.150484][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.164781][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.175956][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.186273][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.197229][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.209843][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.231811][ T5854] veth1_macvtap: entered promiscuous mode [ 97.240299][ T5846] veth1_macvtap: entered promiscuous mode [ 97.257946][ T5845] veth1_macvtap: entered promiscuous mode [ 97.291499][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.301434][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.314713][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.324107][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.346809][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.369155][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.399901][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.410489][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.421111][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.431435][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.452464][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.459328][ T5951] loop2: detected capacity change from 0 to 256 [ 97.474561][ T5951] ======================================================= [ 97.474561][ T5951] WARNING: The mand mount option has been deprecated and [ 97.474561][ T5951] and is ignored by this kernel. Remove the mand [ 97.474561][ T5951] option from the mount to silence this warning. [ 97.474561][ T5951] ======================================================= [ 97.477289][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.548562][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.559414][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.569409][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.579957][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.589898][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.600444][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.610367][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.620907][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.632999][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.643610][ T29] audit: type=1800 audit(1730848745.158:2): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=1048585 res=0 errno=0 [ 97.698428][ T5951] loop2: detected capacity change from 256 to 253 [ 97.709296][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.721375][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.735722][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.747125][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.758066][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.768555][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.780191][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.795681][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.813720][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.823902][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.834912][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.845587][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.856202][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.866305][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.876824][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.888660][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.912558][ T5846] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.921589][ T5846] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.930671][ T5846] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.939727][ T5846] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.958740][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.960335][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.977198][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.986028][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.994309][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.995332][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.019276][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.031073][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.042397][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.053373][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.063484][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.074967][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.086260][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.096867][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.109155][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.122228][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.135265][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.185015][ T5864] Bluetooth: hci3: command tx timeout [ 98.238114][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.246872][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.264900][ T5864] Bluetooth: hci5: command tx timeout [ 98.264943][ T54] Bluetooth: hci4: command tx timeout [ 98.287390][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.301879][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.312631][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.323431][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.333392][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.344652][ T54] Bluetooth: hci2: command tx timeout [ 98.344693][ T5864] Bluetooth: hci1: command tx timeout [ 98.350679][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.365939][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.377032][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.386952][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.397484][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.409089][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.447209][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.457177][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.466901][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.482114][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.515077][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.523132][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.525835][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.556552][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.587202][ T1328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.719821][ T1328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.772355][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.800734][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.939133][ T1328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.090680][ T1328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.117435][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.127094][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.135541][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.143038][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.163969][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.173630][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.182991][ T5942] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.205589][ T5959] Zero length message leads to an empty skb [ 99.211752][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.223513][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.257053][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.261040][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.275525][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.282892][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.293937][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.350523][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.368636][ T5942] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 99.382072][ T5942] usb 4-1: config 0 has no interface number 0 [ 99.387229][ T5965] loop1: detected capacity change from 0 to 128 [ 99.392876][ T5942] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=9e.3c [ 99.403645][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.411760][ T5942] usb 4-1: Product: syz [ 99.412644][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.416343][ T5942] usb 4-1: Manufacturer: syz [ 99.428562][ T5942] usb 4-1: SerialNumber: syz [ 99.476199][ T5965] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 99.510106][ T5942] usb 4-1: config 0 descriptor?? [ 99.547491][ T5965] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 99.570234][ T5942] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 99.604366][ T5942] dvb-usb: bulk message failed: -22 (3/0) [ 99.630280][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.645521][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.647214][ T1328] bridge_slave_1: left allmulticast mode [ 99.663266][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.668663][ T5965] sysv_count_free_inodes: unable to read inode table [ 99.683194][ T1328] bridge_slave_1: left promiscuous mode [ 99.687744][ T5965] sysv_count_free_inodes: unable to read inode table [ 99.691329][ T5942] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 99.706258][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.715031][ T5968] sysv_free_block: trying to free block not in datazone [ 99.717045][ T5942] usb 4-1: media controller created [ 99.747404][ T1328] bridge_slave_0: left allmulticast mode [ 99.757201][ T1328] bridge_slave_0: left promiscuous mode [ 99.762945][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.796769][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.878558][ T5942] DVB: Unable to find symbol mt352_attach() [ 99.886759][ T5942] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 99.896381][ T5942] dvb-usb: bulk message failed: -22 (3/0) [ 99.914719][ T5942] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 99.928461][ T5942] usb 4-1: USB disconnect, device number 2 [ 100.010131][ T5942] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 100.160861][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.173042][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.187297][ T1328] bond0 (unregistering): Released all slaves [ 100.464853][ T5843] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 100.781437][ T5987] loop1: detected capacity change from 0 to 1024 [ 100.840138][ T5987] hfsplus: unable to parse mount options [ 100.910212][ T5994] loop4: detected capacity change from 0 to 64 [ 101.175646][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.304258][ T54] Bluetooth: hci0: command tx timeout [ 101.421349][ T8] usb 2-1: config 1 has an invalid descriptor of length 159, skipping remainder of the config [ 101.436907][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.549259][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.590260][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 101.629368][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.694320][ T8] usb 2-1: SerialNumber: syz [ 102.001592][ T8] usb 2-1: 0:2 : does not exist [ 102.045434][ T8] usb 2-1: USB disconnect, device number 2 [ 102.087273][ T1328] hsr_slave_0: left promiscuous mode [ 102.259206][ T1328] hsr_slave_1: left promiscuous mode [ 102.278503][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.292382][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.300077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.331912][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18'. [ 102.357452][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.371766][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.403183][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.526040][ T1328] veth1_macvtap: left promiscuous mode [ 102.554978][ T1328] veth0_macvtap: left promiscuous mode [ 102.561965][ T1328] veth1_vlan: left promiscuous mode [ 102.574305][ T1328] veth0_vlan: left promiscuous mode [ 102.750484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.925684][ T6029] Bluetooth: MGMT ver 1.23 [ 102.930453][ T6029] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 102.955277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.394137][ T54] Bluetooth: hci0: command tx timeout [ 103.544095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.824477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.935541][ T6045] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.682593][ T6059] loop5: detected capacity change from 0 to 1024 [ 104.683596][ T6057] input: syz1 as /devices/virtual/input/input5 [ 104.962580][ T6059] EXT4-fs: Ignoring removed orlov option [ 105.011029][ T6059] EXT4-fs (loop5): Test dummy encryption mode enabled [ 105.043250][ T6039] loop3: detected capacity change from 0 to 40427 [ 105.083329][ T6039] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 105.100468][ T6039] F2FS-fs (loop3): invalid crc value [ 105.140626][ T6059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.183062][ T6039] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.220734][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 105.333154][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 105.424338][ T6039] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.464461][ T54] Bluetooth: hci0: command tx timeout [ 105.470440][ T6039] syz.3.26: attempt to access beyond end of device [ 105.470440][ T6039] loop3: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 105.513066][ T6077] loop0: detected capacity change from 0 to 2048 [ 105.543542][ T6077] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.577958][ T6077] EXT4-fs: Ignoring removed i_version option [ 105.619470][ T6059] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 105.621471][ T5844] syz-executor: attempt to access beyond end of device [ 105.621471][ T5844] loop3: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 105.647652][ T6077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.657257][ T5844] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 105.679960][ T5953] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.775310][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.825652][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.905907][ T5953] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 105.919769][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.932978][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.964260][ T6083] loop0: detected capacity change from 0 to 128 [ 106.003639][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 106.008876][ T6083] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 106.025145][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.039288][ T5953] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.061929][ T6083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.071766][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.155260][ T5953] usb 5-1: config 0 descriptor?? [ 106.181530][ T6074] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.206483][ T6083] process 'syz.0.40' launched './file1' with NULL argv: empty string added [ 106.610727][ T5953] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 106.621533][ T5953] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 106.643763][ T5953] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 106.824019][ T5906] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.998836][ T5908] usb 5-1: USB disconnect, device number 2 [ 107.031747][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.049276][ T5906] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.062922][ T5906] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.074078][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.078753][ T5906] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.098421][ T5906] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 107.106017][ T5960] bridge_slave_0: entered allmulticast mode [ 107.110119][ T6102] block nbd3: shutting down sockets [ 107.134195][ T5960] bridge_slave_0: entered promiscuous mode [ 107.154726][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.176406][ T6093] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.189222][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.196870][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.208743][ T5960] bridge_slave_1: entered allmulticast mode [ 107.225742][ T5960] bridge_slave_1: entered promiscuous mode [ 107.367032][ T6107] loop5: detected capacity change from 0 to 512 [ 107.454325][ T6112] loop1: detected capacity change from 0 to 128 [ 107.469005][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.505060][ T6112] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.536049][ T6112] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.574358][ T54] Bluetooth: hci0: command tx timeout [ 107.580684][ T6107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.686137][ T6107] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.714645][ T6107] Process accounting resumed [ 107.725908][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.769836][ T5843] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.793935][ T5910] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.823305][ T6107] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 107.933298][ T5960] team0: Port device team_slave_0 added [ 107.943985][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 107.961295][ T5960] team0: Port device team_slave_1 added [ 107.974351][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.003885][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.013703][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.026317][ T5906] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 108.038131][ T5906] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input7 [ 108.092542][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.122809][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 108.132078][ T5906] usb 1-1: USB disconnect, device number 2 [ 108.134333][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.142620][ T6125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.189240][ T5910] usb 4-1: config 0 descriptor?? [ 108.234684][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.236978][ T5910] hub 4-1:0.0: USB hub found [ 108.241659][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.319281][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.387361][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.432641][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.443793][ T5910] hub 4-1:0.0: 1 port detected [ 108.536345][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.803395][ T5960] hsr_slave_0: entered promiscuous mode [ 108.895455][ T5960] hsr_slave_1: entered promiscuous mode [ 108.943990][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.951722][ T5960] Cannot create hsr debugfs directory [ 109.089298][ T6142] loop0: detected capacity change from 0 to 8192 [ 109.277133][ T5910] hub 4-1:0.0: activate --> -90 [ 109.371547][ T6120] loop4: detected capacity change from 0 to 32768 [ 109.430380][ T5910] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 109.486350][ T5908] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.530964][ T6120] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 109.655131][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 109.670912][ T6120] XFS (loop4): Ending clean mount [ 109.675797][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.725252][ T29] audit: type=1804 audit(1730848757.258:3): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.48" name="/newroot/6/file0/bus" dev="loop4" ino=4425 res=1 errno=0 [ 109.738036][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.757677][ T5906] usb 4-1: USB disconnect, device number 3 [ 109.844308][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.880428][ T5845] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 109.926594][ T5908] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 109.964341][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.996803][ T5908] usb 2-1: config 0 descriptor?? [ 110.396650][ T5960] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 110.441950][ T5908] ryos 0003:1E7D:31CE.0002: ignoring exceeding usage max [ 110.459002][ T5960] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 110.478167][ T5908] ryos 0003:1E7D:31CE.0002: ignoring exceeding usage max [ 110.500817][ T5908] ryos 0003:1E7D:31CE.0002: usage index exceeded [ 110.526162][ T5908] ryos 0003:1E7D:31CE.0002: item 0 0 2 2 parsing failed [ 110.535288][ T5960] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 110.554179][ T5908] ryos 0003:1E7D:31CE.0002: parse failed [ 110.563138][ T5960] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 110.573927][ T5908] ryos 0003:1E7D:31CE.0002: probe with driver ryos failed with error -22 [ 110.745153][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.829417][ T5955] usb 2-1: USB disconnect, device number 3 [ 110.852750][ T6181] netlink: 'syz.4.56': attribute type 10 has an invalid length. [ 110.868965][ T6181] syz_tun: entered promiscuous mode [ 110.896313][ T6181] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 110.934207][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 110.954619][ T5906] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.965708][ T5906] usb 4-1: config 0 has no interface number 0 [ 110.990595][ T5906] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.026441][ T5906] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.061762][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.100846][ T5906] usb 4-1: config 0 descriptor?? [ 111.121215][ T5906] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.122499][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.300762][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.381950][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.389310][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.406596][ T5907] usb 4-1: USB disconnect, device number 4 [ 111.430984][ T5907] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 111.476703][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.483982][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.855866][ T6200] input: syz0 as /devices/virtual/input/input8 [ 111.870203][ T6203] loop4: detected capacity change from 0 to 512 [ 111.892155][ T6203] EXT4-fs: inline encryption not supported [ 111.911722][ T6203] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.004717][ T6203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.074105][ T6203] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.235668][ T6203] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.67: corrupted xattr block 32: bad e_name length [ 112.307550][ T29] audit: type=1800 audit(1730848759.818:4): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.67" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 112.361302][ T6223] loop3: detected capacity change from 0 to 512 [ 112.420710][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 112.421797][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.441019][ T6223] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.69: corrupted in-inode xattr: invalid ea_ino [ 112.565287][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.575153][ T6223] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.69: couldn't read orphan inode 15 (err -117) [ 112.623922][ T5953] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.629292][ T6223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.833918][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 112.847577][ T5953] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 112.913662][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.922105][ T5953] usb 2-1: Product: syz [ 112.926590][ T5953] usb 2-1: Manufacturer: syz [ 112.931238][ T5953] usb 2-1: SerialNumber: syz [ 113.000056][ T5953] usb 2-1: config 0 descriptor?? [ 113.013263][ T6243] loop5: detected capacity change from 0 to 128 [ 113.256060][ T5953] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 113.302821][ T5960] veth0_vlan: entered promiscuous mode [ 113.352259][ T6243] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.394644][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.418341][ T6243] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.474344][ T5960] veth1_vlan: entered promiscuous mode [ 113.566315][ T5960] veth0_macvtap: entered promiscuous mode [ 113.576843][ T5960] veth1_macvtap: entered promiscuous mode [ 113.593343][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.604025][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.614639][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.627013][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.637700][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.648204][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.658100][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.668706][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.678636][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.689219][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.700952][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.713902][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.724454][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.734409][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.745334][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.755370][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.766202][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.776370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.785670][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.796541][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.806615][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.818014][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.829773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.857707][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.897632][ T5960] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.923909][ T5960] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.937403][ T5960] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.946632][ T5960] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.059888][ T5846] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.411383][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.421960][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.547173][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.563891][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.644163][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.888244][ T25] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 114.901972][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.934265][ T25] usb 5-1: Product: syz [ 114.950640][ T25] usb 5-1: Manufacturer: syz [ 114.959592][ T5953] usb write operation failed. (-71) [ 114.965981][ T25] usb 5-1: SerialNumber: syz [ 114.971423][ T5953] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.012977][ T5953] dvbdev: DVB: registering new adapter (Terratec H7) [ 115.020383][ T25] r8152-cfgselector 5-1: Unknown version 0x0000 [ 115.026963][ T25] r8152-cfgselector 5-1: config 0 descriptor?? [ 115.030259][ T5953] usb 2-1: media controller created [ 115.060099][ T5953] usb read operation failed. (-71) [ 115.085748][ T5953] usb write operation failed. (-71) [ 115.105370][ T5953] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 115.199448][ T5953] usb 2-1: USB disconnect, device number 4 [ 115.552856][ T5942] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 115.842593][ T6296] loop3: detected capacity change from 0 to 4096 [ 115.999487][ T6272] loop0: detected capacity change from 0 to 32768 [ 116.007596][ T6296] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 116.156706][ T6272] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.397659][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 116.405295][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 116.442710][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 116.464903][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 116.544392][ T6323] ceph: No mds server is up or the cluster is laggy [ 116.618074][ T5942] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.654014][ T5907] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.798299][ T6272] XFS (loop0): Ending clean mount [ 116.824901][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 116.826512][ T5907] usb 2-1: config 0 has no interfaces? [ 116.858243][ T5942] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 116.874065][ T5942] usb 5-1: config 0 has no interface number 0 [ 116.885011][ T5907] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.895960][ T6272] XFS (loop0): Quotacheck needed: Please wait. [ 116.907463][ T5942] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 116.924082][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.948959][ T5942] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 116.980743][ T5907] usb 2-1: config 0 descriptor?? [ 116.999797][ T5942] usb 5-1: config 0 interface 41 has no altsetting 0 [ 117.038966][ T5942] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 117.070641][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.111196][ T6272] XFS (loop0): Quotacheck: Done. [ 117.118622][ T5942] usb 5-1: Product: syz [ 117.142334][ T5942] usb 5-1: Manufacturer: syz [ 117.157924][ T5942] usb 5-1: SerialNumber: syz [ 117.175724][ T5942] usb 5-1: config 0 descriptor?? [ 117.198036][ T6317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.209748][ T6317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.461745][ T6317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.497257][ T6317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.543034][ T5854] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.734418][ T5955] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.904312][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 117.930164][ T5955] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 117.954058][ T5955] usb 4-1: config 0 has no interface number 0 [ 117.967150][ T5955] usb 4-1: config 0 interface 12 has no altsetting 0 [ 117.986604][ T5955] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 118.013961][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.052728][ T5955] usb 4-1: Product: syz [ 118.057554][ T5955] usb 4-1: Manufacturer: syz [ 118.062231][ T5955] usb 4-1: SerialNumber: syz [ 118.123984][ T5955] usb 4-1: config 0 descriptor?? [ 118.151034][ T5942] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 118.478419][ T6358] loop6: detected capacity change from 0 to 32768 [ 118.577178][ T6358] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.642652][ T5942] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 118.657648][ T5942] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 118.696287][ T5942] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 118.731766][ T6387] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 118.784515][ T5942] usb 5-1: USB disconnect, device number 4 [ 118.995522][ T6358] XFS (loop6): Ending clean mount [ 119.061988][ T6358] XFS (loop6): Quotacheck needed: Please wait. [ 119.129482][ T6358] XFS (loop6): Quotacheck: Done. [ 119.182505][ T5907] usb 2-1: USB disconnect, device number 5 [ 119.605497][ T5955] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 119.613997][ T5955] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 119.640128][ T5955] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 119.670626][ T5955] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 119.717494][ T5955] usb 4-1: USB disconnect, device number 5 [ 119.734209][ T5960] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.096911][ T6423] loop1: detected capacity change from 0 to 256 [ 120.193339][ T29] audit: type=1800 audit(1730848767.718:5): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.118" name="file0" dev="loop1" ino=1048610 res=0 errno=0 [ 120.455378][ T6433] ip6t_srh: unknown srh invflags D6BC [ 120.749087][ T6439] loop6: detected capacity change from 0 to 2048 [ 120.880722][ T6439] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.115: bad orphan inode 8192 [ 120.901126][ T6439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.155784][ T5960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.190060][ T5906] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.385264][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.411663][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.453502][ T5906] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.472089][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.514649][ T5906] usb 2-1: SerialNumber: syz [ 121.754260][ T5906] usb 2-1: 0:2 : does not exist [ 121.800014][ T5906] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 121.911856][ T5906] usb 2-1: USB disconnect, device number 6 [ 122.135551][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.269338][ T6447] loop4: detected capacity change from 0 to 40427 [ 122.355186][ T6447] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 122.363078][ T6447] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 122.562084][ T6447] F2FS-fs (loop4): invalid crc value [ 122.660246][ T6447] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.858294][ T6487] loop6: detected capacity change from 0 to 40427 [ 123.094616][ T6487] loop6: detected capacity change from 0 to 512 [ 123.102486][ T6487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.115748][ T6487] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 123.129340][ T6447] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 123.137679][ T6447] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.183498][ T6496] loop1: detected capacity change from 0 to 4096 [ 123.235400][ T6487] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 123.250864][ T6487] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 123.264710][ T5955] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.272396][ T6487] EXT4-fs (loop6): 1 truncate cleaned up [ 123.279125][ T6487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.334739][ T6487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.517160][ T29] audit: type=1326 audit(1730848771.038:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.0.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4867f7e719 code=0x0 [ 123.636607][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.648989][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.703951][ T5955] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 123.713153][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.756790][ T5955] usb 6-1: config 0 descriptor?? [ 123.824011][ T5942] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.994771][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.022769][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.064786][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.093973][ T5942] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 124.123540][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.142904][ T5942] usb 4-1: config 0 descriptor?? [ 124.204637][ T5955] hid-multitouch 0003:0EEF:72D0.0003: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.5-1/input0 [ 124.484115][ T5291] usb 6-1: USB disconnect, device number 2 [ 124.596465][ T5942] gt683r_led 0003:1770:FF00.0004: item fetching failed at offset 1/5 [ 124.631048][ T5942] gt683r_led 0003:1770:FF00.0004: hid parsing failed [ 124.644654][ T5942] gt683r_led 0003:1770:FF00.0004: probe with driver gt683r_led failed with error -22 [ 124.862831][ T5906] usb 4-1: USB disconnect, device number 6 [ 125.417272][ T6527] loop6: detected capacity change from 0 to 40427 [ 125.467307][ T6527] F2FS-fs (loop6): invalid crc value [ 125.494205][ T6527] F2FS-fs (loop6): Found nat_bits in checkpoint [ 125.751689][ T6527] F2FS-fs (loop6): Start checkpoint disabled! [ 125.866245][ T6527] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 126.002284][ T6556] loop3: detected capacity change from 0 to 32768 [ 126.080834][ T6527] syz.6.147: attempt to access beyond end of device [ 126.080834][ T6527] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.103782][ T6556] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.223978][ T5953] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.341206][ T5844] ocfs2: Unmounting device (7,3) on (node local) [ 126.434696][ T5953] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 126.474584][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.509937][ T5953] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.541751][ T3552] kworker/u8:10: attempt to access beyond end of device [ 126.541751][ T3552] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 126.565299][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.587144][ T3552] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 126.634475][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.664322][ T5953] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.674334][ T3552] kworker/u8:10: attempt to access beyond end of device [ 126.674334][ T3552] loop6: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 126.683951][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.699018][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.708217][ T5953] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.719856][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.743864][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.753602][ T5953] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.778957][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.786984][ T3552] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 126.798151][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.819570][ T5953] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.840916][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.871960][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.895038][ T5953] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.930680][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.959932][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.986549][ T5953] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.010787][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.028958][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.048730][ T5953] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.089662][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.114737][ T5953] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 127.144639][ T5953] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 127.171887][ T5953] usb 2-1: Product: syz [ 127.198454][ T5953] usb 2-1: Manufacturer: syz [ 127.207671][ T5953] usb 2-1: SerialNumber: syz [ 127.222563][ T5953] usb 2-1: config 0 descriptor?? [ 127.251504][ T5953] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 127.791579][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.871656][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.033312][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 128.034779][ T5911] usb 2-1: USB disconnect, device number 7 [ 128.064303][ T5911] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 128.144545][ T6602] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.205965][ T6588] loop3: detected capacity change from 0 to 8192 [ 128.293538][ T6578] loop5: detected capacity change from 0 to 40427 [ 128.345118][ T6578] F2FS-fs (loop5): Invalid segment/section count (24 != 24 * 3) [ 128.374391][ T6578] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 128.382733][ T6578] F2FS-fs (loop5): heap/no_heap options were deprecated [ 128.394650][ T6578] F2FS-fs (loop5): Image doesn't support compression [ 128.464102][ T6578] F2FS-fs (loop5): invalid crc value [ 128.541867][ T6587] loop0: detected capacity change from 0 to 32768 [ 128.570160][ T6587] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.169 (6587) [ 128.595370][ T6578] F2FS-fs (loop5): Found nat_bits in checkpoint [ 128.621135][ T6587] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 128.666172][ T6587] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 128.700876][ T6587] BTRFS info (device loop0): disk space caching is enabled [ 128.724139][ T6587] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 128.870761][ T6578] F2FS-fs (loop5): Start checkpoint disabled! [ 129.139631][ T6587] BTRFS info (device loop0): rebuilding free space tree [ 129.143385][ T6578] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 129.173482][ T6578] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 129.308231][ T29] audit: type=1800 audit(1730848776.828:7): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.166" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 129.337123][ T6587] BTRFS info (device loop0): disabling free space tree [ 129.360127][ T29] audit: type=1800 audit(1730848776.828:8): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.166" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 129.381862][ T6587] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.407159][ T6578] syz.5.166: attempt to access beyond end of device [ 129.407159][ T6578] loop5: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 129.422312][ T6587] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.590427][ T6642] netlink: 'syz.1.181': attribute type 4 has an invalid length. [ 129.619730][ T6642] netlink: 'syz.1.181': attribute type 4 has an invalid length. [ 129.671921][ T6647] netlink: 'syz.1.181': attribute type 4 has an invalid length. [ 129.688014][ T29] audit: type=1326 audit(1730848777.208:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13d17e719 code=0x7ffc0000 [ 129.761831][ T6642] netlink: 126012 bytes leftover after parsing attributes in process `syz.1.181'. [ 129.813947][ T6647] netlink: 'syz.1.181': attribute type 4 has an invalid length. [ 129.831213][ T29] audit: type=1326 audit(1730848777.208:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13d17e719 code=0x7ffc0000 [ 129.873604][ T6647] netlink: 126012 bytes leftover after parsing attributes in process `syz.1.181'. [ 129.979654][ T6628] loop6: detected capacity change from 0 to 32768 [ 130.015067][ T29] audit: type=1326 audit(1730848777.218:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fe13d17e719 code=0x7ffc0000 [ 130.037539][ T29] audit: type=1326 audit(1730848777.218:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13d17e719 code=0x7ffc0000 [ 130.065697][ T6628] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.177 (6628) [ 130.079648][ T61] kworker/u8:4: attempt to access beyond end of device [ 130.079648][ T61] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 130.114313][ T6628] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.118783][ T5854] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 130.124771][ T6628] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 130.143647][ T6628] BTRFS info (device loop6): using free-space-tree [ 130.154534][ T61] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 130.161821][ T61] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 130.168922][ T61] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 130.528774][ T6669] loop3: detected capacity change from 0 to 16 [ 130.615025][ T6669] erofs: (device loop3): mounted with root inode @ nid 36. [ 130.711531][ T6661] loop4: detected capacity change from 0 to 32768 [ 130.781004][ T6661] (syz.4.186,6661,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.882928][ T6661] (syz.4.186,6661,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.897157][ T29] audit: type=1804 audit(1730848778.418:13): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.177" name="/newroot/16/bus/file1" dev="loop6" ino=260 res=1 errno=0 [ 131.009630][ T29] audit: type=1804 audit(1730848778.528:14): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.177" name="/newroot/16/bus/file1" dev="loop6" ino=260 res=1 errno=0 [ 131.114157][ T6661] JBD2: Ignoring recovery information on journal [ 131.340393][ T6661] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 131.578129][ T6628] syz.6.177 (6628) used greatest stack depth: 21056 bytes left [ 131.636134][ T6685] loop3: detected capacity change from 0 to 256 [ 131.713367][ T29] audit: type=1800 audit(1730848779.238:15): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.192" name="file0" dev="loop3" ino=1048614 res=0 errno=0 [ 131.739932][ T6661] (syz.4.186,6661,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 131.933606][ T5845] ocfs2: Unmounting device (7,4) on (node local) [ 132.490129][ T5960] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.613990][ T5906] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 132.684261][ T6707] trusted_key: syz.4.198 sent an empty control message without MSG_MORE. [ 132.793936][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 132.808945][ T5906] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 132.822883][ T5906] usb 6-1: config 0 has no interface number 0 [ 132.856736][ T5906] usb 6-1: config 0 interface 12 has no altsetting 0 [ 132.995290][ T5906] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 133.034365][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.039578][ T6711] loop3: detected capacity change from 0 to 40427 [ 133.073113][ T6711] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 133.081854][ T6711] F2FS-fs (loop3): Image doesn't support compression [ 133.092021][ T5906] usb 6-1: Product: syz [ 133.096841][ T6711] F2FS-fs (loop3): invalid crc value [ 133.102333][ T5906] usb 6-1: Manufacturer: syz [ 133.117415][ T5906] usb 6-1: SerialNumber: syz [ 133.166950][ T6719] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.325943][ T6711] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.335529][ T6726] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.342804][ T6726] overlayfs: failed to set xattr on upper [ 133.348652][ T6726] overlayfs: ...falling back to redirect_dir=nofollow. [ 133.355829][ T6726] overlayfs: ...falling back to index=off. [ 133.361663][ T6726] overlayfs: ...falling back to uuid=null. [ 133.368366][ T6726] overlayfs: ...falling back to xino=off. [ 133.413171][ T5906] usb 6-1: config 0 descriptor?? [ 133.560760][ T6711] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.930324][ T6711] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of __f2fs_tmpfile+0x81/0x470 [ 134.019563][ T6750] syz.0.209 uses obsolete (PF_INET,SOCK_PACKET) [ 134.262201][ T5844] syz-executor: attempt to access beyond end of device [ 134.262201][ T5844] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 134.332503][ T5844] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 134.380006][ T5844] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 134.634256][ T6766] loop0: detected capacity change from 0 to 256 [ 134.854000][ T29] audit: type=1800 audit(1730848782.368:16): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.212" name="file0" dev="loop0" ino=1048615 res=0 errno=0 [ 135.013698][ T6751] loop1: detected capacity change from 0 to 32768 [ 135.023379][ T6751] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.207 (6751) [ 135.091275][ T6751] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.122337][ T6751] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 135.205252][ T6751] BTRFS info (device loop1): using free-space-tree [ 135.257953][ T5906] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 135.284022][ T5906] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 135.291550][ T5906] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 135.305520][ T5906] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 135.360174][ T5906] usb 6-1: USB disconnect, device number 3 [ 135.717220][ T29] audit: type=1804 audit(1730848783.248:17): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.207" name="/newroot/34/bus/file1" dev="loop1" ino=260 res=1 errno=0 [ 135.797963][ T29] audit: type=1804 audit(1730848783.318:18): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.207" name="/newroot/34/bus/file1" dev="loop1" ino=260 res=1 errno=0 [ 136.532421][ T5843] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.577175][ T6820] block nbd0: shutting down sockets [ 136.787133][ T6827] loop6: detected capacity change from 0 to 512 [ 136.864966][ T6827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.901382][ T6827] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.048595][ T29] audit: type=1800 audit(1730848784.508:19): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.224" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 137.467307][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.475264][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.711444][ T6857] netlink: 'syz.1.235': attribute type 9 has an invalid length. [ 137.754923][ T6857] netlink: 134640 bytes leftover after parsing attributes in process `syz.1.235'. [ 138.124356][ T6873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.137350][ T5960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.246544][ T6877] loop0: detected capacity change from 0 to 16 [ 138.296752][ T6877] erofs: (device loop0): mounted with root inode @ nid 36. [ 138.458834][ T6882] tipc: Failed to remove unknown binding: 67,0,0/0:470306725/470306726 [ 138.572254][ T6885] loop1: detected capacity change from 0 to 512 [ 138.634772][ T6885] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.732926][ T6885] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b846c018, mo2=0002] [ 138.776639][ T6885] System zones: 1-12 [ 138.781845][ T6885] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 138.905787][ T6885] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 138.923250][ T6891] loop3: detected capacity change from 0 to 1024 [ 138.956266][ T6891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.059536][ T6891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.065245][ T6872] loop5: detected capacity change from 0 to 32768 [ 139.094771][ T6885] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #13: comm syz.1.243: casefold flag without casefold feature [ 139.122034][ T6885] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.243: couldn't read orphan inode 13 (err -117) [ 139.173862][ T6872] (syz.5.239,6872,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.215175][ T6885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.248497][ T6872] (syz.5.239,6872,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.418578][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.428121][ T6872] JBD2: Ignoring recovery information on journal [ 139.490382][ T6865] loop4: detected capacity change from 0 to 32768 [ 139.500627][ T6865] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.236 (6865) [ 139.529111][ T6865] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.574105][ T6865] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 139.603114][ T6865] BTRFS info (device loop4): using free-space-tree [ 139.632400][ T6872] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 139.675807][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.772991][ T6922] loop0: detected capacity change from 0 to 1024 [ 139.845879][ T29] audit: type=1804 audit(1730848787.378:20): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.236" name="/newroot/32/bus/file1" dev="loop4" ino=260 res=1 errno=0 [ 139.884071][ T6922] hfsplus: unable to find HFS+ superblock [ 139.999734][ T6872] (syz.5.239,6872,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 140.000485][ T29] audit: type=1804 audit(1730848787.528:21): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.236" name="/newroot/32/bus/file1" dev="loop4" ino=260 res=1 errno=0 [ 140.030133][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.477242][ T6950] loop6: detected capacity change from 0 to 256 [ 140.565572][ T29] audit: type=1800 audit(1730848788.098:22): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.253" name="file0" dev="loop6" ino=1048616 res=0 errno=0 [ 140.680997][ T6952] loop3: detected capacity change from 0 to 4096 [ 140.726546][ T5846] ocfs2: Unmounting device (7,5) on (node local) [ 140.983745][ T5845] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.984364][ T6959] loop5: detected capacity change from 0 to 4096 [ 141.030026][ T6959] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 141.229726][ T1328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.573229][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.586244][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.624821][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.649131][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.659241][ T5864] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 141.669288][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.867987][ T1328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.281975][ T6961] loop1: detected capacity change from 0 to 32768 [ 142.330338][ T6961] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.258 (6961) [ 142.457267][ T6961] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.467569][ T6961] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 142.476226][ T6961] BTRFS info (device loop1): using free-space-tree [ 142.484320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 142.504801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.584057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 142.988376][ T1328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.814418][ T54] Bluetooth: hci5: command tx timeout [ 144.197985][ T1328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.492738][ T7018] loop6: detected capacity change from 0 to 32768 [ 144.568946][ T5843] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.604289][ T7018] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.264 (7018) [ 144.673009][ T7018] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 144.751010][ T7018] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 144.821765][ T7018] BTRFS info (device loop6): disk space caching is enabled [ 144.875219][ T7018] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 145.011789][ T6964] chnl_net:caif_netlink_parms(): no params data found [ 145.035347][ T7030] loop5: detected capacity change from 0 to 4096 [ 145.310941][ T7030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.340977][ T1328] bridge_slave_1: left allmulticast mode [ 145.347235][ T1328] bridge_slave_1: left promiscuous mode [ 145.380985][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.444895][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.464994][ T7018] BTRFS info (device loop6): rebuilding free space tree [ 145.558790][ T7018] BTRFS info (device loop6): disabling free space tree [ 145.576611][ T1328] bridge_slave_0: left allmulticast mode [ 145.582285][ T1328] bridge_slave_0: left promiscuous mode [ 145.595434][ T7018] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.614027][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.647286][ T7018] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.651361][ T5906] usb 4-1: config 0 has no interfaces? [ 145.696273][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.726741][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.783668][ T5906] usb 4-1: config 0 descriptor?? [ 145.866861][ T54] Bluetooth: hci5: command tx timeout [ 145.900245][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.696733][ T5960] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 147.267546][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.306070][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.329781][ T1328] bond0 (unregistering): Released all slaves [ 147.367325][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 147.444763][ T5906] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 147.624584][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 147.632213][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.643856][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.661132][ T5906] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 147.683941][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.714694][ T5906] usb 7-1: config 0 descriptor?? [ 147.730160][ T5906] hub 7-1:0.0: USB hub found [ 147.867302][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.897147][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.917365][ T6964] bridge_slave_0: entered allmulticast mode [ 147.944101][ T54] Bluetooth: hci5: command tx timeout [ 147.949603][ T6964] bridge_slave_0: entered promiscuous mode [ 147.957323][ T5906] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 148.000478][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.033546][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.055759][ T6964] bridge_slave_1: entered allmulticast mode [ 148.058132][ T7084] loop5: detected capacity change from 0 to 32768 [ 148.089619][ T5955] usb 4-1: USB disconnect, device number 7 [ 148.098866][ T7084] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.281 (7084) [ 148.107344][ T6964] bridge_slave_1: entered promiscuous mode [ 148.160054][ T7084] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.195753][ T7084] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 148.226573][ T7084] BTRFS info (device loop5): using free-space-tree [ 148.285328][ T5906] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 148.413569][ T7115] Illegal XDP return value 4294967274 on prog (id 52) dev N/A, expect packet loss! [ 148.429404][ T5906] usb 7-1: USB disconnect, device number 2 [ 148.638216][ T29] audit: type=1804 audit(1730848796.168:23): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.281" name="/newroot/53/bus/file1" dev="loop5" ino=260 res=1 errno=0 [ 148.701789][ T29] audit: type=1804 audit(1730848796.228:24): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.281" name="/newroot/53/bus/file1" dev="loop5" ino=260 res=1 errno=0 [ 148.916691][ T7134] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.924493][ T7134] overlayfs: failed to set xattr on upper [ 148.930372][ T7134] overlayfs: ...falling back to redirect_dir=nofollow. [ 148.952250][ T7134] overlayfs: ...falling back to metacopy=off. [ 148.971463][ T7134] overlayfs: ...falling back to index=off. [ 148.996745][ T7134] overlayfs: ...falling back to uuid=null. [ 148.997827][ T6964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.017578][ T6964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.336760][ T1328] hsr_slave_0: left promiscuous mode [ 149.358613][ T5846] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.417128][ T1328] hsr_slave_1: left promiscuous mode [ 149.449574][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.513048][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.630649][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.672797][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.847834][ T1328] veth1_macvtap: left promiscuous mode [ 149.891442][ T1328] veth0_macvtap: left promiscuous mode [ 149.918856][ T1328] veth1_vlan: left promiscuous mode [ 149.938950][ T1328] veth0_vlan: left promiscuous mode [ 150.024236][ T54] Bluetooth: hci5: command tx timeout [ 150.534286][ T7161] futex_wake_op: syz.4.297 tries to shift op by -1; fix this program [ 150.661040][ T7161] Cannot find add_set index 0 as target [ 151.414142][ T7171] [ 151.416519][ T7171] ============================================ [ 151.422864][ T7171] WARNING: possible recursive locking detected [ 151.429030][ T7171] 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 Not tainted [ 151.436161][ T7171] -------------------------------------------- [ 151.442332][ T7171] syz.5.301/7171 is trying to acquire lock: [ 151.448249][ T7171] ffff88806a921a00 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0xb0/0x820 [ 151.457296][ T7171] [ 151.457296][ T7171] but task is already holding lock: [ 151.464669][ T7171] ffff88805d275200 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 151.473627][ T7171] [ 151.473627][ T7171] other info that might help us debug this: [ 151.481706][ T7171] Possible unsafe locking scenario: [ 151.481706][ T7171] [ 151.489166][ T7171] CPU0 [ 151.492462][ T7171] ---- [ 151.495791][ T7171] lock(&trie->lock); [ 151.499908][ T7171] lock(&trie->lock); [ 151.504016][ T7171] [ 151.504016][ T7171] *** DEADLOCK *** [ 151.504016][ T7171] [ 151.512168][ T7171] May be due to missing lock nesting notation [ 151.512168][ T7171] [ 151.520514][ T7171] 3 locks held by syz.5.301/7171: [ 151.525565][ T7171] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x24b/0x6c0 [ 151.535594][ T7171] #1: ffff88805d275200 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 151.545062][ T7171] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0 [ 151.554551][ T7171] [ 151.554551][ T7171] stack backtrace: [ 151.560966][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.5.301 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 151.571582][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.581658][ T7171] Call Trace: [ 151.584946][ T7171] [ 151.587888][ T7171] dump_stack_lvl+0x116/0x1f0 [ 151.592605][ T7171] print_deadlock_bug+0x2e3/0x410 [ 151.597686][ T7171] __lock_acquire+0x2185/0x3ce0 [ 151.602572][ T7171] ? __pfx___lock_acquire+0x10/0x10 [ 151.607798][ T7171] ? __lock_acquire+0xbdd/0x3ce0 [ 151.612769][ T7171] lock_acquire.part.0+0x11b/0x380 [ 151.617916][ T7171] ? trie_delete_elem+0xb0/0x820 [ 151.622894][ T7171] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 151.628560][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.634315][ T7171] ? rcu_is_watching+0x12/0xc0 [ 151.639120][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.644787][ T7171] ? trace_lock_acquire+0x14a/0x1d0 [ 151.650026][ T7171] ? trie_delete_elem+0xb0/0x820 [ 151.655004][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.660667][ T7171] ? lock_acquire+0x2f/0xb0 [ 151.665198][ T7171] ? trie_delete_elem+0xb0/0x820 [ 151.670179][ T7171] _raw_spin_lock_irqsave+0x3a/0x60 [ 151.675431][ T7171] ? trie_delete_elem+0xb0/0x820 [ 151.680424][ T7171] trie_delete_elem+0xb0/0x820 [ 151.685224][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.690888][ T7171] ? bpf_trace_run4+0x1d6/0x5a0 [ 151.695786][ T7171] bpf_prog_8c8ab8634bca3061+0x43/0x51 [ 151.701265][ T7171] bpf_trace_run4+0x248/0x5a0 [ 151.706077][ T7171] ? __pfx_bpf_trace_run4+0x10/0x10 [ 151.711319][ T7171] ? percpu_ref_get_many+0x1c/0xf0 [ 151.716472][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.722137][ T7171] ? __memcg_kmem_charge_page+0x218/0x420 [ 151.727890][ T7171] __alloc_pages_noprof+0x3a5/0x25a0 [ 151.733293][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.738957][ T7171] ? hlock_class+0x4e/0x130 [ 151.743497][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.749160][ T7171] ? __lock_acquire+0xbdd/0x3ce0 [ 151.754129][ T7171] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 151.759882][ T7171] ? __lock_acquire+0x163e/0x3ce0 [ 151.764934][ T7171] ? __pfx___lock_acquire+0x10/0x10 [ 151.770161][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.775827][ T7171] ? lock_acquire.part.0+0x11b/0x380 [ 151.781133][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.786803][ T7171] ? find_held_lock+0x2d/0x110 [ 151.791603][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.797268][ T7171] ? bpf_map_get_memcg.isra.0+0x190/0x670 [ 151.803032][ T7171] ___kmalloc_large_node+0x84/0x1b0 [ 151.808278][ T7171] __kmalloc_large_node_noprof+0x1c/0x70 [ 151.813958][ T7171] __kmalloc_node_noprof.cold+0x5/0x5f [ 151.819451][ T7171] ? bpf_map_kmalloc_node+0x98/0x4a0 [ 151.824871][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.830541][ T7171] bpf_map_kmalloc_node+0x98/0x4a0 [ 151.835699][ T7171] trie_update_elem+0x1ef/0xe00 [ 151.840588][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.846256][ T7171] ? trace_lock_acquire+0x14a/0x1d0 [ 151.851491][ T7171] ? bpf_map_update_value+0x24b/0x6c0 [ 151.856904][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.862568][ T7171] ? bpf_map_update_value+0x24b/0x6c0 [ 151.867988][ T7171] bpf_map_update_value+0x2c4/0x6c0 [ 151.873228][ T7171] map_update_elem+0x606/0x8f0 [ 151.878040][ T7171] ? __pfx_map_update_elem+0x10/0x10 [ 151.883363][ T7171] ? __might_fault+0xe3/0x190 [ 151.888081][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.893752][ T7171] __sys_bpf+0x14bb/0x49a0 [ 151.898311][ T7171] ? __pfx___sys_bpf+0x10/0x10 [ 151.903133][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.908886][ T7171] ? do_futex+0x123/0x350 [ 151.913253][ T7171] ? __pfx_do_futex+0x10/0x10 [ 151.917978][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.923649][ T7171] ? xfd_validate_state+0x5d/0x180 [ 151.928791][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.934457][ T7171] ? rcu_is_watching+0x12/0xc0 [ 151.939266][ T7171] __x64_sys_bpf+0x78/0xc0 [ 151.943707][ T7171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.949371][ T7171] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.954596][ T7171] do_syscall_64+0xcd/0x250 [ 151.959306][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.965267][ T7171] RIP: 0033:0x7fa62f17e719 [ 151.969698][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.989340][ T7171] RSP: 002b:00007fa62d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.997786][ T7171] RAX: ffffffffffffffda RBX: 00007fa62f335f80 RCX: 00007fa62f17e719 [ 152.005780][ T7171] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000002 [ 152.013783][ T7171] RBP: 00007fa62f1f139e R08: 0000000000000000 R09: 0000000000000000 [ 152.021785][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.029778][ T7171] R13: 0000000000000000 R14: 00007fa62f335f80 R15: 00007ffc9eff9d68 [ 152.037780][ T7171] [ 152.040856][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.356919][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 152.396519][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 152.710322][ T6964] team0: Port device team_slave_0 added [ 152.723143][ T6964] team0: Port device team_slave_1 added [ 152.790942][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.809776][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.842642][ T6964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.855733][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.862748][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.894749][ T6964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.051074][ T6964] hsr_slave_0: entered promiscuous mode [ 153.072098][ T6964] hsr_slave_1: entered promiscuous mode [ 153.093518][ T6964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.112226][ T6964] Cannot create hsr debugfs directory [ 153.369441][ T6964] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 153.381884][ T6964] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 153.392251][ T6964] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 153.407675][ T6964] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 153.497727][ T6964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.516384][ T6964] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.528569][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.535700][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.552547][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.559656][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.734154][ T6964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.978663][ T6964] veth0_vlan: entered promiscuous mode [ 153.998426][ T6964] veth1_vlan: entered promiscuous mode [ 154.046048][ T6964] veth0_macvtap: entered promiscuous mode [ 154.061474][ T6964] veth1_macvtap: entered promiscuous mode [ 154.082142][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.097769][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.110790][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.126948][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.137062][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.147772][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.159080][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.169801][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.179957][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.190916][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.206525][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.220379][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.232102][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.242142][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.256711][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.271208][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.281980][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.292047][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.302771][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.312830][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.326328][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.337911][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.350813][ T6964] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.360935][ T6964] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.370294][ T6964] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.380470][ T6964] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.429695][ T6964] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 154.457083][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.465676][ T6964] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 154.474896][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.500660][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.523888][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50