last executing test programs: 1m11.034415282s ago: executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x240080, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300), 0xe) sendto$inet6(r1, &(0x7f0000000140)='T', 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) acct(&(0x7f0000000140)='./file0\x00') 1m9.374217717s ago: executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x240080, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x541b, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) acct(&(0x7f0000000140)='./file0\x00') 1m8.096192379s ago: executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000100)={{&(0x7f000008f000/0x3000)=nil, 0x3000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x208) 53.257938787s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 47.318345189s ago: executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) readv(r0, &(0x7f0000002500)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 37.783501495s ago: executing program 2: setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000240), 0x2, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801010021000000000000003b810000850000006d000000850000005000000095a858ef9b8de2fe69acb513dd5e7fe212829b4750b17af8cafec07b99f0f9a268d5a94f871786df4e0faa36"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x401, 0x0, 0x600, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x4}, {0x8, 0x2, @broadcast}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffeffff}]}, 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x40, 0x0, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x40}}, 0x0) socket$phonet(0x23, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0xc0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf0000000700"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) dup2(r6, r5) ppoll(&(0x7f0000000140)=[{r5}], 0x1, &(0x7f00000000c0), &(0x7f0000000180)={[0x1]}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = gettid() tkill(r7, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/stat\x00') fchdir(r8) 10.697270024s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"}) 9.793584432s ago: executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="75fa00002d3400000000000000000000000018010000202000002020a90aa481207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000064ea4a304000000b7030000000000008500000072000000959339b623990122f6fe8294fb896769e5ce82f2df2889b7c2bc2004db91b53c1d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[], 0xfe44, 0x0) clock_gettime(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1) 9.298647852s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0xd2, &(0x7f0000000040)=""/210}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3c, 0x4, 0xffff, 0x2010, r0, 0x4, '\x00', r1, r2, 0x5, 0x5, 0x2, 0xd}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = userfaultfd(0x80801) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000a0000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x4004556e, 0x1f8) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) recvfrom(r2, &(0x7f0000000400)=""/46, 0x2e, 0x40000020, &(0x7f00000004c0)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x80) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x0, @desc1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 8.804963932s ago: executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1) 8.54415961s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2008410, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x5549, &(0x7f0000003d80)="$eJzs3EtvG9UXAPA7TpP++/xHiAW7jlQhJVJt1elDsAvQiodIFfFYsALHdiy3tieKHSeEDRIsEQu+CQKJFUs+AwvW7BALEDskkOeOKaE8WtmJk/b3k8Zn5s74zLkjK9GZsRyAJ9Zi+stPSbgYzoQQ5kII55OQryfFkluN4ZkQwqUQQulPS1KM/zGwEEI4G0K4OEoecybFrs+uDC/f+PG1n7/+9vSpc59/9d3sZg3M2rMhhO5WXN/txpi1YrxbjNeG7Tx2rw+LGHd07xXbWYy7zY08w25tfFwtj9da8fhsa6c/ipudWn0UW+3NfHyrF0/YH7bGefI33K1t59uN5kYe2/0sj639WNfefvzbtt8fxDyNIt/7efowGIxjHG/uNeN8tu7lsd4bFOMxb9Zo7o3isIjF6UI96zTyOjYmudLH2+vt3s5eOmxu99tZL71RqT5Xqd4sV7ezRnPQvF6udRs3r6dLrc7osPKgWeuutrKs1WlW6ll3OV1q1evlajVdutXcaNd6abVauVa5Wr6xXKxdSV++83baaaRLo/hiu7ez0O70081sO43vWE5XKteeX04vV9M319bT9Tdu315bf+vdW+/ceWHt1ZeKgx4oK11aubqyUq5eLa9Ul4/B/Ef/dx9y/oNJ5v9xUfQjzD+Z7PLAv3v0D9gHC4dSCMDJ8UD/H/T/wOE76f1/mGb/P2qp9P//3f+WJu//J+p/j2v/f4LnDxNxgwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4In1/fwXr+Qri3H7XDF+oRh6qthOQgilEMJvf2MuLBzIOVfkmf+H4+f/UsM3ScgzjM5xuljOhhBWi+XX/x/2VQAAAIDH15cfXvo0duvxZXHWBXGU4k2b0vn3ppQvCSHML/4wpWyl0cvTU0qWf75Phb0pZctvYP1vSsniLbdT08r2UObG4aML9wfzCSUxlI60HAAA4EjMHQhH24UAAABwlD6ZdQHMRhLGjzLHz4Lzb97ff7R55sA+AAAA4ARKZl0AAAAAcOjy/t/v/wEAAMDjLf7+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzt3cJg6EYQD+bDA/+6NFq71vK3uDMraEPe4xUECaoATSQhqgBnJLCRFE2CMkRyCBsGOBnkfymLHR6xnw5RtLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2vRSrGZPD78fr83Z7q7TzGwAAACAYzbFalZ+mFT9r+n493ToZ+pnEZFHxLHavReDWmYv5RQnvl98GMNzRJmwv8YwbV8i4k/a3n60/SsAAADA/VovltOqWq+aSdcD4jNVizb5t78N5WURUUxeG0rL982vhsLK+7sf/xtKKxewRg2FVUtu/ePnBueGjC+6ZK+2SzMZzcs/sezlF8UBAAA3oV4JnKhCAAAAuAP/uh4A3cgOzeE547DapQeC41oPAAAAuEFZ1wMAAAAAWlfW/97/BwAAAPetev8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbdoUq9l6sZyeOj8/M2e7u05zMwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Z3/ebQCEwRgMmjd0KPsPizwBZZq76tNvpQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK81ydLYGm+SvdfG0fNIcnZqXJ0ad+fG0wdj9icAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYuX/eOIooAODv9m4vfwBhDHJhQEGigIbYl5CQEgqQRcFHQLKcczBcCCQuSGSB3ECFXKdBUCKEBDJdvkPqWEoTuhQujEQN2r1dZ5MYfFjH7sX+/aTZeXsezbzZO1l+3rUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABK2+/ES0kRt7PD1DAuX7uzs7aU9VuP9JlbG3dns5bFrf0W+ubt8Sc/2V6unpyaqZx8VX8yAAAAHA3tsr6PiHvp5kLWJ1N5/Z+WY7Ka//tnhnFZzz9a92/trB0vvjRb1v+//Xr/hd2FpobrZJMurwz684+n0vmftjjxnt13RCe/8vnvXtr5G5K8v/78dppfz9a3t2+/283DY3VkCwAcxOmyL4Ly56Gs7zWZGABHRqdSeJf1f3uq2ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6rC9Hk+VcSsiZjsP4szWztrSXv2tjbuzZTt/8+ZGdc5sijQillcG/bTGvUy6a9dvfLI4GPSvjhIk/2XwvsGpiBjrhAcJPhxhTMS/jyk+ntHcLv45aE1GGo0GSfH+TEo+4wzKz974Z27oGxIAAIdWWrSsrr+Xbi5kr7WmI/764eH6/7VKHCPW//c/On+nula1/u/VtsPJN7d6+bO5a9dvvLFyefFS/1L/0zfP9N7qnb1w7tyFuexazc8tR9KfbzpNAAAAnmDdolXr/2T68fv/JytxjFj/f/5d78vqWm31/54e3PRrOhMAAICjqLsbPffKn3+09hjR6nbji8XV1au94XH3/MzwWGu6B3SsaNX6vz3ddFYAAABAHbbXWw/d/79YiWPE+/9P//jiz9U52xFxIuJKRPRPL10ZXKxvOxOtjj9UzhfqNr1TAAAAmnKiaNX7/2n+/H+y+8hDEhGvvzqMy/91NUr9337v65+qa1Wf/z9b3xYnUjIzvB55PxPRmWk6IwAAAA6z40XLiv3f082Fj385+UHX8/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdfs7AAD//5X/Nho=") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 8.473173069s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400c00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) r3 = dup3(r1, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001340)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) ioctl$FITHAW(r3, 0xc0045878) pipe2$9p(&(0x7f0000000280), 0x0) rt_sigreturn() rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) timerfd_gettime(r1, &(0x7f0000000200)) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$TCSETAF(r7, 0x541b, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 7.623828711s ago: executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) readv(r0, &(0x7f0000002500)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 7.543819959s ago: executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xfffffffffffffe90) 7.494944671s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffa}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 7.068935568s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000c00)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x1e, 0x0, "555ba9fdb69a8750293564c80c27f8d87a88bd63c594852a890c0dcf80dad24a91e3c371002ef4d219f1b2cb59ac193c9228e4fcf02cac8601e3b58467789b1f02e74ab7291112b0cd9b7ae8ec82edaa"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x63}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='ext4_writepages_result\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff36cad0d17c36000020000000182c0000", @ANYRES32=r0, @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1000]}, &(0x7f0000000080), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x8, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 6.903730099s ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x406340, 0x0) flistxattr(r1, &(0x7f00000002c0)=""/160, 0xa0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = open(0x0, 0x400141042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendfile(r2, r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) userfaultfd(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="005e86"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) 6.185583706s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000800), 0xc, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 6.106287489s ago: executing program 0: socket(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) open$dir(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1}, 0x1c}}, 0x0) 5.425138872s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000800), 0xc, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 5.102375849s ago: executing program 2: setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000240), 0x2, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801010021000000000000003b810000850000006d000000850000005000000095a858ef9b8de2fe69acb513dd5e7fe212829b4750b17af8cafec07b99f0f9a268d5a94f871786df4e0faa36"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x401, 0x0, 0x600, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x4}, {0x8, 0x2, @broadcast}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffeffff}]}, 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x40, 0x0, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x40}}, 0x0) socket$phonet(0x23, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0xc0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf0000000700"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) dup2(r6, r5) ppoll(&(0x7f0000000140)=[{r5}], 0x1, &(0x7f00000000c0), &(0x7f0000000180)={[0x1]}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = gettid() tkill(r7, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/stat\x00') fchdir(r8) 4.854338806s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = creat(0x0, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x0, @local}, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, 0x200, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='vlan1\x00', 0x3, 0x8, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x25) 4.38145351s ago: executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsmount(r4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000640)='asymmetric\x00', &(0x7f0000000600)) keyctl$link(0x8, 0x0, r6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x8, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x1b0}, {&(0x7f0000000280)=""/85, 0x36}, {&(0x7f0000000fc0)=""/4096, 0xec}, {&(0x7f0000000400)=""/106, 0x5e}, {&(0x7f0000000740)=""/73, 0x82}, {&(0x7f0000000200)=""/77, 0x6d8}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x564}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x45) 3.494663491s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4bd, &(0x7f0000000f00)="$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") rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2}}) 1.542204562s ago: executing program 2: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009840)='./file1\x00', 0x14804, &(0x7f00000000c0), 0x41, 0x985d, &(0x7f000001c900)="$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") 1.245375095s ago: executing program 4: bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 980.633181ms ago: executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) syz_io_uring_complete(0x0) dup(0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100), 0x9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") listxattr(&(0x7f00000001c0)='./file1\x00', 0x0, 0x1e) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7fffffff}}, {@init_itable}, {@sb={'sb', 0x3d, 0x7}}, {@test_dummy_encryption}, {@nojournal_checksum}, {@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xae8}}, {@discard}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") pipe2$watch_queue(&(0x7f0000000040), 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000055c647379cb0114c1475272b8a3ffdc2b6b3302a13f419d051ec5f29408c358576dacfcbf9c5a1da4c46c400003a4e2158a601a715c500"/72, @ANYRES16=r0, @ANYBLOB="010000000000000000001c000000"], 0x18}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB], 0x34}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xc, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 620.251913ms ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffa}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 260.691906ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0xa0282, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) 0s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000c00)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x1e, 0x0, "555ba9fdb69a8750293564c80c27f8d87a88bd63c594852a890c0dcf80dad24a91e3c371002ef4d219f1b2cb59ac193c9228e4fcf02cac8601e3b58467789b1f02e74ab7291112b0cd9b7ae8ec82edaa"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x63}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='ext4_writepages_result\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff36cad0d17c36000020000000182c0000", @ANYRES32=r0, @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1000]}, &(0x7f0000000080), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x8, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. 2024/06/09 21:28:37 fuzzer started 2024/06/09 21:28:38 dialing manager at 10.128.0.169:30024 [ 186.698684][ T5043] cgroup: Unknown subsys name 'net' [ 187.008581][ T5043] cgroup: Unknown subsys name 'rlimit' [ 224.167196][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.174336][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/09 21:29:34 starting 5 executor processes [ 241.136433][ T5047] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 244.576439][ T5075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.603266][ T5078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.614204][ T5078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.622998][ T5078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.632399][ T5081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.632776][ T5078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.648401][ T5081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.654715][ T5078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.660294][ T5079] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.663876][ T5078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.682184][ T5078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.682563][ T5079] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 244.690597][ T5078] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.699614][ T5079] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.706186][ T5078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.723670][ T5079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.752434][ T5078] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 244.766490][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.023326][ T5075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.035455][ T5075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.046288][ T5075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.118279][ T5075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.130476][ T5075] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 245.148063][ T5075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.359076][ T5082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.368918][ T5082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.411144][ T5082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.482870][ T5082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.533890][ T5082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 245.560468][ T5082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.303021][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 246.432400][ T5071] chnl_net:caif_netlink_parms(): no params data found [ 246.822304][ T5075] Bluetooth: hci0: command tx timeout [ 246.827995][ T5075] Bluetooth: hci1: command tx timeout [ 246.895675][ T5075] Bluetooth: hci2: command tx timeout [ 247.285391][ T5084] chnl_net:caif_netlink_parms(): no params data found [ 247.352975][ T5075] Bluetooth: hci3: command tx timeout [ 247.397496][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 247.442775][ T5073] chnl_net:caif_netlink_parms(): no params data found [ 247.686397][ T5075] Bluetooth: hci4: command tx timeout [ 247.820194][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.828414][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.836596][ T5071] bridge_slave_0: entered allmulticast mode [ 247.846951][ T5071] bridge_slave_0: entered promiscuous mode [ 247.865602][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.876060][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.884168][ T5072] bridge_slave_0: entered allmulticast mode [ 247.893940][ T5072] bridge_slave_0: entered promiscuous mode [ 247.982741][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.990703][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.998806][ T5071] bridge_slave_1: entered allmulticast mode [ 248.008614][ T5071] bridge_slave_1: entered promiscuous mode [ 248.023426][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.031304][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.040251][ T5072] bridge_slave_1: entered allmulticast mode [ 248.049681][ T5072] bridge_slave_1: entered promiscuous mode [ 248.333816][ T5071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.355983][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.375427][ T5071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.493099][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.639844][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.649476][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.657583][ T5084] bridge_slave_0: entered allmulticast mode [ 248.667203][ T5084] bridge_slave_0: entered promiscuous mode [ 248.728048][ T5071] team0: Port device team_slave_0 added [ 248.737069][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.745241][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.753763][ T5084] bridge_slave_1: entered allmulticast mode [ 248.763463][ T5084] bridge_slave_1: entered promiscuous mode [ 248.819861][ T5071] team0: Port device team_slave_1 added [ 248.877061][ T5075] Bluetooth: hci0: command tx timeout [ 248.886375][ T5082] Bluetooth: hci1: command tx timeout [ 248.952924][ T5075] Bluetooth: hci2: command tx timeout [ 249.077795][ T5072] team0: Port device team_slave_0 added [ 249.237027][ T5072] team0: Port device team_slave_1 added [ 249.255010][ T5084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.302205][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.310138][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.318334][ T5090] bridge_slave_0: entered allmulticast mode [ 249.327853][ T5090] bridge_slave_0: entered promiscuous mode [ 249.385341][ T5084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.432639][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.433347][ T5075] Bluetooth: hci3: command tx timeout [ 249.439746][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.471921][ T5071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.485375][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.493513][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.501322][ T5090] bridge_slave_1: entered allmulticast mode [ 249.510686][ T5090] bridge_slave_1: entered promiscuous mode [ 249.521474][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.529682][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.537563][ T5073] bridge_slave_0: entered allmulticast mode [ 249.547080][ T5073] bridge_slave_0: entered promiscuous mode [ 249.628151][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.635715][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.663418][ T5071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.710759][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.718872][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.727063][ T5073] bridge_slave_1: entered allmulticast mode [ 249.735859][ T5073] bridge_slave_1: entered promiscuous mode [ 249.752614][ T5075] Bluetooth: hci4: command tx timeout [ 249.783095][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.790314][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.816836][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.836794][ T5084] team0: Port device team_slave_0 added [ 249.870797][ T5084] team0: Port device team_slave_1 added [ 249.955938][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.963327][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.989964][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.088987][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.164093][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.171310][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.198984][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.223164][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.281768][ T5073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.372807][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.380018][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.406528][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.468108][ T5073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.485787][ T5090] team0: Port device team_slave_0 added [ 250.547000][ T5071] hsr_slave_0: entered promiscuous mode [ 250.558176][ T5071] hsr_slave_1: entered promiscuous mode [ 250.631270][ T5090] team0: Port device team_slave_1 added [ 250.695315][ T5072] hsr_slave_0: entered promiscuous mode [ 250.705594][ T5072] hsr_slave_1: entered promiscuous mode [ 250.714869][ T5072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.723671][ T5072] Cannot create hsr debugfs directory [ 250.904996][ T5073] team0: Port device team_slave_0 added [ 250.965442][ T5082] Bluetooth: hci0: command tx timeout [ 250.967252][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.971060][ T5075] Bluetooth: hci1: command tx timeout [ 250.978151][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.978311][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.038774][ T5084] hsr_slave_0: entered promiscuous mode [ 251.048295][ T5075] Bluetooth: hci2: command tx timeout [ 251.056279][ T5084] hsr_slave_1: entered promiscuous mode [ 251.064876][ T5084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.073098][ T5084] Cannot create hsr debugfs directory [ 251.087329][ T5073] team0: Port device team_slave_1 added [ 251.150408][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.157780][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.184529][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.453677][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.460929][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.487414][ T5073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.529861][ T5075] Bluetooth: hci3: command tx timeout [ 251.631162][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.639886][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.666730][ T5073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.758033][ T5090] hsr_slave_0: entered promiscuous mode [ 251.769100][ T5090] hsr_slave_1: entered promiscuous mode [ 251.778231][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.786223][ T5090] Cannot create hsr debugfs directory [ 251.831966][ T5075] Bluetooth: hci4: command tx timeout [ 252.360407][ T5073] hsr_slave_0: entered promiscuous mode [ 252.371297][ T5073] hsr_slave_1: entered promiscuous mode [ 252.380774][ T5073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.388649][ T5073] Cannot create hsr debugfs directory [ 252.891128][ T5071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.921951][ T5071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.992279][ T5071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.032226][ T5075] Bluetooth: hci1: command tx timeout [ 253.037943][ T5082] Bluetooth: hci0: command tx timeout [ 253.049691][ T5071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.112260][ T5075] Bluetooth: hci2: command tx timeout [ 253.350045][ T5072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.388703][ T5072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.414692][ T5072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.439758][ T5084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.484893][ T5072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.507393][ T5084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.626050][ T5075] Bluetooth: hci3: command tx timeout [ 253.628976][ T5084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.687524][ T5084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.767133][ T5090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.833080][ T5090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.863238][ T5090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.897955][ T5090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.913340][ T5075] Bluetooth: hci4: command tx timeout [ 254.286381][ T5073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.360063][ T5073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.401314][ T5073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.471497][ T5073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.926806][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.023017][ T5071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.297366][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.341008][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.349727][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.423106][ T5071] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.463427][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.471253][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.610236][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.618166][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.700027][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.707942][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.792998][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.053544][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.071244][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.197593][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.205538][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.294427][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.302461][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.544238][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.690988][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.699069][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.779150][ T5073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.831325][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.839329][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.138925][ T5073] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.311194][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.319218][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.485563][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.493568][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.614206][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.179375][ T5084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.240811][ T5071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.374648][ T5072] veth0_vlan: entered promiscuous mode [ 259.560067][ T5072] veth1_vlan: entered promiscuous mode [ 259.597451][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.923192][ T5084] veth0_vlan: entered promiscuous mode [ 259.995334][ T5072] veth0_macvtap: entered promiscuous mode [ 260.151525][ T5072] veth1_macvtap: entered promiscuous mode [ 260.179067][ T5084] veth1_vlan: entered promiscuous mode [ 260.365680][ T5090] veth0_vlan: entered promiscuous mode [ 260.526330][ T5090] veth1_vlan: entered promiscuous mode [ 260.545378][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.606675][ T5073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.656020][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.770960][ T5084] veth0_macvtap: entered promiscuous mode [ 260.798915][ T5072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.808280][ T5072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.817703][ T5072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.826989][ T5072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.930165][ T5084] veth1_macvtap: entered promiscuous mode [ 261.117078][ T5090] veth0_macvtap: entered promiscuous mode [ 261.216812][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.227694][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.243501][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.318124][ T5090] veth1_macvtap: entered promiscuous mode [ 261.456312][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.469464][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.485130][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.537029][ T5073] veth0_vlan: entered promiscuous mode [ 261.638433][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.652538][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.663042][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.673892][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.689870][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.750188][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.765111][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.776197][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.787142][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.803398][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.831444][ T5073] veth1_vlan: entered promiscuous mode [ 261.864840][ T5084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.874185][ T5084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.883445][ T5084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.892732][ T5084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.938649][ T5090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.950337][ T5090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.959775][ T5090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.969130][ T5090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.284558][ T5073] veth0_macvtap: entered promiscuous mode [ 262.421061][ T5073] veth1_macvtap: entered promiscuous mode [ 262.783549][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.798965][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.811265][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.822060][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.832260][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.845191][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.863599][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.899855][ T5071] veth0_vlan: entered promiscuous mode [ 263.094704][ T5071] veth1_vlan: entered promiscuous mode [ 263.196492][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.208012][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.218475][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.229283][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.239559][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.250457][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.266254][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.504623][ T5073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.513971][ T5073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.523507][ T5073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.532822][ T5073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.648413][ T5071] veth0_macvtap: entered promiscuous mode [ 263.696289][ T5071] veth1_macvtap: entered promiscuous mode [ 263.987423][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.002815][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.014787][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.027056][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.037376][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.048264][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.058529][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.069384][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.094300][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.277621][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.289814][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.301433][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.315012][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.325172][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.336063][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.346329][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.357196][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.376727][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.647042][ T5071] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.656548][ T5071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.667861][ T5071] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.677162][ T5071] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.358116][ T5125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.366412][ T5125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.571456][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.588153][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.902664][ T3973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.910884][ T3973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.067258][ T4099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.075627][ T4099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.199838][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.208681][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.372283][ T5251] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.549602][ T5251] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.626724][ T3720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.635777][ T3720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.709031][ T5251] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.960206][ T5251] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.494644][ T4099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.503236][ T4099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.719022][ T5257] loop3: detected capacity change from 0 to 1024 [ 271.721312][ T5251] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.755809][ T5251] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.791975][ T5251] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.805315][ T5259] loop2: detected capacity change from 0 to 512 [ 271.822587][ T5251] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.866292][ T4099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.877361][ T4099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.963313][ T5259] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 271.980600][ T5259] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 271.993554][ T5259] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 272.106710][ T5259] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 272.187876][ T5259] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 272.278037][ T5259] EXT4-fs (loop2): Remounting filesystem read-only [ 272.291263][ T5259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.834694][ T3720] hfsplus: b-tree write err: -5, ino 4 [ 272.880618][ T5129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.889240][ T5129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.495476][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.503789][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.587183][ T5090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.643547][ T5268] loop1: detected capacity change from 0 to 32768 [ 273.701270][ T5268] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.517573][ T5268] XFS (loop1): Ending clean mount [ 274.520573][ T5284] loop3: detected capacity change from 0 to 2048 [ 274.532854][ T5288] loop4: detected capacity change from 0 to 256 [ 274.651530][ T5289] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 274.697546][ T5268] XFS (loop1): Quotacheck needed: Please wait. [ 274.701493][ T5288] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 274.759560][ T5284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.901311][ T5284] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz-executor.3: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 275.145578][ T5284] EXT4-fs (loop3): Remounting filesystem read-only [ 275.489455][ T5268] XFS (loop1): Quotacheck: Done. [ 275.582514][ T29] audit: type=1804 audit(1717968608.535:2): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1127151256/syzkaller.pu8Ojy/0/file0/bus" dev="loop1" ino=9292 res=1 errno=0 [ 275.608438][ T29] audit: type=1804 audit(1717968608.545:3): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1127151256/syzkaller.pu8Ojy/0/file0/bus" dev="loop1" ino=9292 res=1 errno=0 [ 275.789240][ T5293] loop2: detected capacity change from 0 to 32768 [ 275.806964][ T5293] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5293) [ 275.815142][ T29] audit: type=1804 audit(1717968608.675:4): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1127151256/syzkaller.pu8Ojy/0/file0/bus" dev="loop1" ino=9292 res=1 errno=0 [ 275.860592][ T5293] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 275.878129][ T5293] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 275.892354][ T5293] BTRFS info (device loop2): using free-space-tree [ 275.906258][ T5084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.182402][ T5073] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.394665][ T29] audit: type=1800 audit(1717968609.385:5): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 276.674936][ T5318] process 'syz-executor.0' launched './file0' with NULL argv: empty string added [ 276.699773][ T780] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 276.883443][ T5318] loop0: detected capacity change from 0 to 1024 [ 276.918999][ T5320] loop3: detected capacity change from 0 to 512 [ 276.987435][ T4217] hfsplus: b-tree write err: -5, ino 4 [ 277.163912][ T5125] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 277.256393][ T780] usb 5-1: New USB device found, idVendor=2586, idProduct=5a21, bcdDevice=35.62 [ 277.266005][ T780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.279885][ T780] usb 5-1: Product: syz [ 277.287716][ T780] usb 5-1: Manufacturer: syz [ 277.292809][ T780] usb 5-1: SerialNumber: syz [ 277.426120][ T780] usb 5-1: config 0 descriptor?? [ 277.466106][ T5090] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 278.001879][ T5327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.240577][ T780] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 278.263069][ T5327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.655612][ T5327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.744118][ T780] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.833047][ T780] usb 1-1: config 21 has an invalid interface number: 186 but max is 2 [ 278.847541][ T780] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 278.860272][ T780] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 3 [ 278.869776][ T780] usb 1-1: config 21 has no interface number 0 [ 278.876537][ T780] usb 1-1: config 21 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 278.887787][ T780] usb 1-1: config 21 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 278.989139][ T5327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.263971][ T780] usb 1-1: string descriptor 0 read error: -22 [ 279.270975][ T780] usb 1-1: New USB device found, idVendor=0f92, idProduct=0001, bcdDevice=7b.bc [ 279.283061][ T780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.377950][ T5329] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 279.502534][ T5336] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 279.731972][ T5327] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.767560][ T5327] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.797312][ T5327] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.975925][ T780] usb 5-1: USB disconnect, device number 2 [ 280.001453][ T5327] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.123650][ T5329] loop0: detected capacity change from 0 to 64 [ 280.380571][ T5329] syz-executor.0: attempt to access beyond end of device [ 280.380571][ T5329] loop0: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 280.396065][ T5329] Buffer I/O error on dev loop0, logical block 4096, async page read [ 280.404832][ T5329] syz-executor.0: attempt to access beyond end of device [ 280.404832][ T5329] loop0: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 280.418859][ T5329] Buffer I/O error on dev loop0, logical block 4096, async page read [ 280.500754][ T29] audit: type=1800 audit(1717968613.425:6): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 280.586518][ T5340] dummy0: entered promiscuous mode [ 280.602008][ T5340] batman_adv: batadv0: Adding interface: macsec1 [ 280.608617][ T5340] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.635318][ T5340] batman_adv: batadv0: Interface activated: macsec1 [ 280.917430][ T5342] loop2: detected capacity change from 0 to 1024 [ 280.936936][ T43] usb 1-1: USB disconnect, device number 2 [ 281.331671][ T5342] hfsplus: cannot replace xattr [ 281.385793][ T5344] loop4: detected capacity change from 0 to 2048 [ 281.430353][ T5341] loop1: detected capacity change from 0 to 32768 [ 281.465625][ T5341] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5341) [ 281.530875][ T5341] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 281.541894][ T5341] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 281.553947][ T5341] BTRFS info (device loop1): using free-space-tree [ 281.654791][ T5347] loop3: detected capacity change from 0 to 2048 [ 281.656595][ T5344] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.697653][ T5347] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 281.774616][ T5347] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 281.876550][ T4217] hfsplus: b-tree write err: -5, ino 4 [ 282.150256][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.160630][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.175923][ T29] audit: type=1804 audit(1717968615.105:7): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1127151256/syzkaller.pu8Ojy/2/bus/cgroup.controllers" dev="loop1" ino=263 res=1 errno=0 [ 282.427198][ T780] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 282.545747][ T5369] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 282.754188][ T780] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 282.923698][ T780] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 282.937744][ T780] usb 2-1: can't read configurations, error -61 [ 283.161756][ C0] hrtimer: interrupt took 271305 ns [ 283.194761][ T5374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.249139][ T780] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 283.584117][ T5367] loop2: detected capacity change from 0 to 40427 [ 283.609625][ T5367] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 283.618323][ T5367] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 283.704661][ T5367] F2FS-fs (loop2): Found nat_bits in checkpoint [ 284.067617][ T5367] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 284.078042][ T5367] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 284.124804][ T5073] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 284.680400][ T5371] loop3: detected capacity change from 0 to 4096 [ 284.734905][ T5371] ======================================================= [ 284.734905][ T5371] WARNING: The mand mount option has been deprecated and [ 284.734905][ T5371] and is ignored by this kernel. Remove the mand [ 284.734905][ T5371] option from the mount to silence this warning. [ 284.734905][ T5371] ======================================================= [ 285.617374][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.624240][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.708106][ T5371] ntfs3: loop3: Failed to read $AttrDef (-4). [ 286.953179][ T5405] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 287.644292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 287.681752][ T5404] loop0: detected capacity change from 0 to 32768 [ 287.721940][ T5404] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5404) [ 287.832971][ T5404] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 287.844596][ T5404] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 287.864805][ T5404] BTRFS info (device loop0): disk space caching is enabled [ 288.389852][ T5404] BTRFS info (device loop0): rebuilding free space tree [ 288.435186][ T5404] BTRFS info (device loop0): disabling free space tree [ 288.442747][ T5404] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 288.452987][ T5404] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 288.499341][ T5404] BTRFS info (device loop0): checking UUID tree [ 288.800301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 288.814314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 289.182168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.284519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.292968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.302100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.386911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.395405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.457886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 290.374391][ T5072] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.443934][ T5438] loop2: detected capacity change from 0 to 1024 [ 290.536803][ T5435] loop4: detected capacity change from 0 to 2048 [ 290.548588][ T2991] hfsplus: b-tree write err: -5, ino 4 [ 290.782759][ T5439] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.301817][ T5439] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 291.313276][ T5439] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 291.495074][ T5439] Remounting filesystem read-only [ 291.500883][ T3720] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 291.509212][ T3720] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 291.517050][ T3720] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 291.526351][ T3720] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 291.539858][ T3720] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 291.715237][ T3720] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 291.722580][ T3720] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 291.730164][ T3720] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 291.743814][ T3720] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 291.754415][ T3720] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 291.834833][ T5442] loop3: detected capacity change from 0 to 2048 [ 291.936905][ T5443] overlayfs: failed to resolve './file0': -2 [ 291.974086][ T5071] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 292.054047][ T5071] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 292.061112][ T5071] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 292.069088][ T5071] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 292.076974][ T5071] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 292.085326][ T5071] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 292.105599][ T5447] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.292934][ T5443] syz-executor.0 (5443) used greatest stack depth: 5168 bytes left [ 292.366651][ T5449] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.393091][ T5071] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 292.400241][ T5071] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 292.408209][ T5071] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 292.418137][ T5071] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 292.427605][ T5071] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 292.737881][ T5071] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 292.745106][ T5071] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 292.753038][ T5071] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 292.767014][ T5071] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 292.777704][ T5071] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 293.045765][ T5071] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 293.053154][ T5071] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 293.060746][ T5071] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 293.073596][ T5071] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 293.081219][ T5071] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 293.092031][ T5071] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 293.099464][ T5071] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 293.108923][ T5071] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 293.118952][ T5071] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 293.126836][ T5071] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 294.140407][ T29] audit: type=1326 audit(1717968627.105:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fc947cf69 code=0x0 [ 294.823759][ T5465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.461929][ T5487] loop2: detected capacity change from 0 to 32768 [ 297.600122][ T5487] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 297.609090][ T5487] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 297.640556][ T5487] gfs2: fsid=syz:syz.0: journal 0 mapped with 22 extents in 1ms [ 297.713458][ T5146] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 297.720505][ T5146] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 297.876843][ T5484] loop4: detected capacity change from 0 to 1024 [ 297.912075][ T5486] loop1: detected capacity change from 0 to 65536 [ 298.056786][ T5486] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 298.133501][ T2991] hfsplus: b-tree write err: -5, ino 4 [ 298.212228][ T5486] XFS (loop1): Ending clean mount [ 298.435135][ T5146] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 714ms [ 298.444343][ T5146] gfs2: fsid=syz:syz.0: jid=0: Done [ 298.449943][ T5487] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 299.174128][ T5073] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 299.914028][ T780] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 300.362430][ T780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.373981][ T780] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.387489][ T780] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.397226][ T780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.518201][ T780] usb 1-1: config 0 descriptor?? [ 300.784170][ T5516] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.113190][ T780] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 301.202760][ T5523] block nbd2: shutting down sockets [ 301.258198][ T780] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 301.457068][ T780] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 301.795395][ T780] usb 1-1: USB disconnect, device number 3 [ 302.384266][ T5519] loop4: detected capacity change from 0 to 4096 [ 302.485346][ T5519] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 302.824853][ T780] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 303.043182][ T5519] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 303.251345][ T5538] loop3: detected capacity change from 0 to 1024 [ 303.342210][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.353820][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.364500][ T780] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.374133][ T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.419869][ T3973] hfsplus: b-tree write err: -5, ino 4 [ 303.481142][ T780] usb 2-1: config 0 descriptor?? [ 304.422257][ T5071] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 304.942507][ T3497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.107777][ T3497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.222171][ T3497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.339107][ T3497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.688177][ T3497] bridge_slave_1: left allmulticast mode [ 305.694362][ T3497] bridge_slave_1: left promiscuous mode [ 305.701167][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.795427][ T3497] bridge_slave_0: left allmulticast mode [ 305.801396][ T3497] bridge_slave_0: left promiscuous mode [ 305.808938][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.352229][ T5557] loop2: detected capacity change from 0 to 4096 [ 306.447780][ T5557] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 306.622340][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.632651][ T780] usbhid 2-1:0.0: can't add hid device: -71 [ 306.639486][ T780] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 306.715547][ T780] usb 2-1: USB disconnect, device number 4 [ 306.733893][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.833619][ T3497] bond0 (unregistering): Released all slaves [ 307.043684][ T5557] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 307.080641][ T5557] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 308.008178][ T5571] loop3: detected capacity change from 0 to 32768 [ 308.029678][ T5571] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5571) [ 308.055247][ T5571] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 308.066780][ T5571] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 308.078463][ T5571] BTRFS info (device loop3): using free-space-tree [ 308.185434][ T5580] loop0: detected capacity change from 0 to 1024 [ 308.284269][ T5125] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 308.293030][ T3497] hsr_slave_0: left promiscuous mode [ 308.672477][ T4099] hfsplus: b-tree write err: -5, ino 4 [ 308.674582][ T3497] hsr_slave_1: left promiscuous mode [ 308.688862][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.696933][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.717901][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.726254][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.732897][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.748843][ T5125] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.763589][ T5125] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.773238][ T5125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.821996][ T5125] usb 2-1: config 0 descriptor?? [ 308.922286][ T3497] veth1_macvtap: left promiscuous mode [ 308.928217][ T3497] veth0_macvtap: left promiscuous mode [ 308.937130][ T3497] veth1_vlan: left promiscuous mode [ 308.947260][ T3497] veth0_vlan: left promiscuous mode [ 309.038201][ T5084] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 309.326810][ T5125] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 309.381364][ T5125] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 309.428856][ T5125] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 309.535902][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.551303][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.564898][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.580183][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.592817][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 309.602700][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.158987][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 310.238665][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 310.843184][ T4525] usb 2-1: USB disconnect, device number 5 [ 311.672758][ T5082] Bluetooth: hci0: command tx timeout [ 311.963186][ T5597] chnl_net:caif_netlink_parms(): no params data found [ 312.097824][ T5614] vivid-000: ================= START STATUS ================= [ 312.106180][ T5614] vivid-000: Brightness: 128 [ 312.111167][ T5614] vivid-000: Contrast: 128 [ 312.120559][ T5614] vivid-000: Saturation: 128 [ 312.126949][ T5614] vivid-000: Hue: 0 [ 312.131123][ T5614] vivid-000: Volume: 200 [ 312.135841][ T5614] vivid-000: Mute: false [ 312.140462][ T5614] vivid-000: Gain, Automatic: true [ 312.146409][ T5614] vivid-000: Gain: 100 inactive volatile [ 312.152749][ T5614] vivid-000: Horizontal Flip: false [ 312.158326][ T5614] vivid-000: Vertical Flip: false [ 312.163900][ T5614] vivid-000: Alpha Component: 0 [ 312.169135][ T5614] vivid-000: Boolean: true [ 312.174070][ T5614] vivid-000: Integer 32 Bits: 0 [ 312.179308][ T5614] vivid-000: Integer 64 Bits: 0 [ 312.184702][ T5614] vivid-000: Menu: Menu Item 3 [ 312.189833][ T5614] vivid-000: String: [ 312.194663][ T5614] vivid-000: Bitmask: 0x80002000 [ 312.199986][ T5614] vivid-000: Integer Menu: 5 [ 312.205209][ T5614] vivid-000: U32 1 Element Array: [1] 24 [ 312.211711][ T5614] vivid-000: U16 8x16 Matrix: [8][16] 24 [ 312.222103][ T5614] vivid-000: U8 2x3x4x5 Array: [2][3][4][5] 24 [ 312.229011][ T5614] vivid-000: Area: unknown type 262 [ 312.235936][ T5614] vivid-000: Read-Only Integer 32 Bits: 0 [ 312.242183][ T5614] vivid-000: U32 Dynamic Array: [100] 50 [ 312.248314][ T5614] vivid-000: U8 Pixel Array: [640][368] 128 [ 312.254988][ T5614] vivid-000: S32 2 Element Array: [2] 2 [ 312.261037][ T5614] vivid-000: S64 5 Element Array: [5] 4 [ 312.267295][ T5614] vivid-000: Power Present: 0x00000001 [ 312.273264][ T5614] vivid-000: Rx RGB Quantization Range: Automatic [ 312.280139][ T5614] vivid-000: Test Pattern: 75% Colorbar [ 312.286178][ T5614] vivid-000: OSD Text Mode: All [ 312.291407][ T5614] vivid-000: Horizontal Movement: No Movement [ 312.298213][ T5614] vivid-000: Vertical Movement: No Movement [ 312.304648][ T5614] vivid-000: Show Border: false [ 312.309882][ T5614] vivid-000: Show Square: false [ 312.315256][ T5614] vivid-000: Insert SAV Code in Image: false [ 312.325051][ T4525] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 312.334959][ T5614] vivid-000: Insert EAV Code in Image: false [ 312.341335][ T5614] vivid-000: Insert Video Guard Band: false [ 312.347889][ T5614] vivid-000: Sensor Flipped Horizontally: false [ 312.354681][ T5614] vivid-000: Sensor Flipped Vertically: false [ 312.361136][ T5614] vivid-000: Standard Aspect Ratio: 4x3 [ 312.367367][ T5614] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 312.375182][ T5614] vivid-000: Timestamp Source: End of Frame [ 312.381433][ T5614] vivid-000: Colorspace: sRGB [ 312.386699][ T5614] vivid-000: Transfer Function: Default [ 312.392769][ T5614] vivid-000: Y'CbCr Encoding: Default [ 312.398506][ T5614] vivid-000: Quantization: Default [ 312.404094][ T5614] vivid-000: Limited RGB Range (16-235): false [ 312.410636][ T5614] vivid-000: Apply Alpha To Red Only: false [ 312.417109][ T5614] vivid-000: Enable Capture Cropping: true [ 312.427957][ T5614] vivid-000: Enable Capture Composing: true [ 312.435564][ T5614] vivid-000: Enable Capture Scaler: true [ 312.441728][ T5614] vivid-000: Loop Video: false [ 312.446883][ T5614] vivid-000: Wrap Sequence Number: false [ 312.453166][ T5614] vivid-000: Wrap Timestamp: None [ 312.458571][ T5614] vivid-000: Maximum EDID Blocks: 2 [ 312.464255][ T5614] vivid-000: Fill Percentage of Frame: 100 [ 312.470449][ T5614] vivid-000: Reduced Framerate: false [ 312.477182][ T5614] vivid-000: HSV Encoding: Hue 0-179 [ 312.483775][ T5614] vivid-000: Standard Signal Mode: Current Standard [ 312.490750][ T5614] vivid-000: Standard: NTSC-M [ 312.496023][ T5614] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 312.504291][ T5614] vivid-000: DV Timings: 640x480p59 inactive [ 312.510711][ T5614] vivid-000: Percentage of Dropped Buffers: 0 [ 312.517490][ T5614] tpg source WxH: 640x360 (Y'CbCr) [ 312.522994][ T5614] tpg field: 1 [ 312.530735][ T5614] tpg crop: 640x360@0x0 [ 312.536545][ T5614] tpg compose: 640x360@0x0 [ 312.541272][ T5614] tpg colorspace: 8 [ 312.545430][ T5614] tpg transfer function: 0/0 [ 312.550272][ T5614] tpg Y'CbCr encoding: 0/0 [ 312.557453][ T5614] tpg quantization: 0/0 [ 312.562410][ T5614] tpg RGB range: 0/2 [ 312.566541][ T5614] vivid-000: ================== END STATUS ================== [ 313.142193][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 313.408960][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 313.723026][ T10] usb 3-1: New USB device found, idVendor=413c, idProduct=0bc2, bcdDevice=22.97 [ 313.732684][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.740994][ T10] usb 3-1: Product: syz [ 313.745697][ T10] usb 3-1: Manufacturer: syz [ 313.750604][ T10] usb 3-1: SerialNumber: syz [ 313.778064][ T5082] Bluetooth: hci0: command tx timeout [ 313.808643][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.816643][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.824629][ T5597] bridge_slave_0: entered allmulticast mode [ 313.834504][ T5597] bridge_slave_0: entered promiscuous mode [ 313.876779][ T10] usb 3-1: config 0 descriptor?? [ 313.954632][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.968400][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.976584][ T5597] bridge_slave_1: entered allmulticast mode [ 313.986429][ T5597] bridge_slave_1: entered promiscuous mode [ 314.130217][ T5623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.141499][ T5623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.200531][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.288304][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.317221][ T4525] usb 3-1: USB disconnect, device number 2 [ 314.646690][ T5597] team0: Port device team_slave_0 added [ 314.829903][ T5597] team0: Port device team_slave_1 added [ 315.352908][ T5642] loop3: detected capacity change from 0 to 32768 [ 315.364214][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.371832][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.403049][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.418035][ T5642] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5642) [ 315.477104][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.484604][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.515484][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.556594][ T5642] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 315.567360][ T5642] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 315.579097][ T5642] BTRFS info (device loop3): using free-space-tree [ 315.832474][ T5082] Bluetooth: hci0: command tx timeout [ 315.866164][ T5597] hsr_slave_0: entered promiscuous mode [ 315.926643][ T5597] hsr_slave_1: entered promiscuous mode [ 316.087837][ T5641] loop0: detected capacity change from 0 to 4096 [ 316.203880][ T5084] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 316.736062][ T5664] loop2: detected capacity change from 0 to 256 [ 316.785185][ T5664] FAT-fs (loop2): Unrecognized mount option "~odepace=862" or missing value [ 317.563741][ T5072] ntfs3: loop0: failed to convert name for inode 1e. [ 317.585762][ T5072] ntfs3: loop0: failed to convert name for inode 1e. [ 317.790393][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.876338][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.917299][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.922197][ T5082] Bluetooth: hci0: command tx timeout [ 318.092658][ T5673] loop3: detected capacity change from 0 to 512 [ 318.162951][ T5673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 318.176430][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.633391][ T5678] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 319.829841][ T5684] loop1: detected capacity change from 0 to 32768 [ 319.843633][ T5684] btrfs: Bad value for 'subvol' [ 320.500522][ T5686] loop2: detected capacity change from 0 to 32768 [ 320.520272][ T5686] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5686) [ 320.545369][ T5084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.598632][ T5686] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 320.611215][ T5686] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 320.627008][ T5686] BTRFS info (device loop2): using free-space-tree [ 320.634557][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.777107][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.838631][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.846577][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.934663][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.942728][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.477662][ T5090] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 321.584585][ T5597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.593172][ T5704] loop1: detected capacity change from 0 to 1024 [ 321.595585][ T5597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.795765][ T5704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.606101][ T5719] 9pnet_fd: Insufficient options for proto=fd [ 322.846404][ T5723] EXT4-fs warning (device loop1): empty_inline_dir:1818: bad inline directory (dir #12) - no `..' [ 323.629628][ T5075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.641267][ T5073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.653198][ T5075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.663206][ T5075] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.682626][ T5075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.731346][ T5075] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 323.744164][ T5075] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.903376][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.180868][ T5733] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 324.465935][ T5736] loop2: detected capacity change from 0 to 1024 [ 325.007565][ T4099] hfsplus: b-tree write err: -5, ino 4 [ 325.102204][ T5750] net_ratelimit: 44 callbacks suppressed [ 325.102287][ T5750] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 325.133870][ T5730] chnl_net:caif_netlink_parms(): no params data found [ 325.371100][ T5754] loop1: detected capacity change from 0 to 64 [ 325.932493][ T5082] Bluetooth: hci1: command tx timeout [ 326.474374][ T5761] IPVS: Scheduler module ip_vs_sip not found [ 326.716238][ T5597] veth0_vlan: entered promiscuous mode [ 326.844724][ T5597] veth1_vlan: entered promiscuous mode [ 326.972216][ T5082] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 326.980867][ T5082] Bluetooth: hci3: Injecting HCI hardware error event [ 326.990276][ T5082] Bluetooth: hci3: hardware error 0x00 [ 327.236436][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.244444][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.252582][ T5730] bridge_slave_0: entered allmulticast mode [ 327.262601][ T5730] bridge_slave_0: entered promiscuous mode [ 327.571720][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.585838][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.595954][ T5730] bridge_slave_1: entered allmulticast mode [ 327.605752][ T5730] bridge_slave_1: entered promiscuous mode [ 327.740980][ T5597] veth0_macvtap: entered promiscuous mode [ 327.743997][ T5769] loop1: detected capacity change from 0 to 32768 [ 327.766434][ T5769] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5769) [ 327.767409][ T5771] loop2: detected capacity change from 0 to 1024 [ 327.829341][ T5769] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 327.842324][ T5769] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 327.854062][ T5769] BTRFS info (device loop1): using free-space-tree [ 327.938940][ T5597] veth1_macvtap: entered promiscuous mode [ 328.017579][ T5075] Bluetooth: hci1: command tx timeout [ 328.163053][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.322931][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.334515][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.344929][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.355826][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.366038][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.376959][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.387174][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.402716][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.419882][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.440037][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.493809][ T5073] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 328.652966][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.663886][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.674823][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.685696][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.695884][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.711850][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.725161][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.737950][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.754510][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.923533][ T5730] team0: Port device team_slave_0 added [ 328.951198][ T5597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.960578][ T5597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.971411][ T5597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.983378][ T5597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.082423][ T5730] team0: Port device team_slave_1 added [ 329.125561][ T5082] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 329.396822][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.405773][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.436875][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.529504][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.538074][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.564617][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.021356][ T5730] hsr_slave_0: entered promiscuous mode [ 330.068399][ T5730] hsr_slave_1: entered promiscuous mode [ 330.082232][ T5082] Bluetooth: hci1: command tx timeout [ 330.129171][ T5730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.141902][ T5730] Cannot create hsr debugfs directory [ 331.296960][ T5810] loop3: detected capacity change from 0 to 40427 [ 331.356184][ T5810] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 331.364543][ T5810] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 331.378902][ T5814] loop2: detected capacity change from 0 to 1024 [ 331.493980][ T5810] F2FS-fs (loop3): Found nat_bits in checkpoint [ 331.701946][ T5814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.868424][ T5730] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.894723][ T5810] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 331.906369][ T5810] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 331.960437][ T5810] syz-executor.3: attempt to access beyond end of device [ 331.960437][ T5810] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 331.994769][ T5810] syz-executor.3: attempt to access beyond end of device [ 331.994769][ T5810] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 332.051913][ T5730] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.152008][ T5082] Bluetooth: hci1: command tx timeout [ 332.172231][ T5730] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.279285][ T5090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.421266][ T5730] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.694767][ T29] audit: type=1326 audit(1717968665.645:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5830 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77ef27cf69 code=0x0 [ 333.127236][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.166550][ T5833] loop1: detected capacity change from 0 to 2048 [ 333.199354][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.242784][ T5833] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 333.291899][ T5833] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.327186][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.423223][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 333.476848][ T5833] Zero length message leads to an empty skb [ 334.330773][ T5836] loop2: detected capacity change from 0 to 40427 [ 334.374560][ T5836] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 334.383286][ T5836] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 334.485349][ T5836] F2FS-fs (loop2): Found nat_bits in checkpoint [ 334.825683][ T5836] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 334.833276][ T5836] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 335.272192][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.521396][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.847866][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.855820][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.879309][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.887243][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.309189][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.479918][ T5862] loop1: detected capacity change from 0 to 32768 [ 337.495318][ T5862] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5862) [ 337.571787][ T5862] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 337.582603][ T5862] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 337.595169][ T5862] BTRFS info (device loop1): using free-space-tree [ 337.951384][ T5073] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 338.658453][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.952811][ T4525] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 339.232538][ T5730] veth0_vlan: entered promiscuous mode [ 339.272451][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.280571][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.395723][ T4525] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.406582][ T4525] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.418558][ T4525] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.429065][ T4525] usb 4-1: config 0 interface 0 has no altsetting 0 [ 339.436233][ T4525] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 339.446075][ T4525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.447990][ T5730] veth1_vlan: entered promiscuous mode [ 339.507340][ T4099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.516473][ T4099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.527011][ T4525] usb 4-1: config 0 descriptor?? [ 339.917414][ T5730] veth0_macvtap: entered promiscuous mode [ 340.000617][ T5730] veth1_macvtap: entered promiscuous mode [ 340.092849][ T780] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 340.204224][ T4525] usbhid 4-1:0.0: can't add hid device: -71 [ 340.211348][ T4525] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 340.270122][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.288922][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.296030][ T4525] usb 4-1: USB disconnect, device number 3 [ 340.301221][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.315928][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.326086][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.336941][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.347124][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.358086][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.368288][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.386076][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.405172][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.620724][ T5898] loop4: detected capacity change from 0 to 1024 [ 340.632848][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.644231][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.654738][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.665545][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.675805][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.693571][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.705682][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.718864][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.729580][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.740404][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.756540][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.857407][ T4217] hfsplus: b-tree write err: -5, ino 4 [ 340.902626][ T5903] fuse: Bad value for 'fd' [ 340.932692][ T5730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.942007][ T5730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.951095][ T5730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.964090][ T5730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.133904][ T29] audit: type=1804 audit(1717968674.065:10): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1127151256/syzkaller.pu8Ojy/28/file0" dev="sda1" ino=1960 res=1 errno=0 [ 341.546089][ T5912] Non-string source [ 341.652862][ T5913] tmpfs: Bad value for 'mpol' [ 341.836849][ T5917] loop2: detected capacity change from 0 to 64 [ 342.162283][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 342.273991][ T5921] loop4: detected capacity change from 0 to 128 [ 342.499604][ T5921] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.572495][ T5921] ext4 filesystem being mounted at /root/syzkaller-testdir4143867632/syzkaller.M76BNK/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 342.639016][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.650705][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.661153][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.674857][ T25] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 342.684390][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.740087][ T25] usb 2-1: config 0 descriptor?? [ 342.905513][ T5932] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 342.969342][ T5934] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.049525][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 343.096323][ T5597] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.297264][ T25] acrux 0003:1A34:0802.0003: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 343.310421][ T25] acrux 0003:1A34:0802.0003: no inputs found [ 343.316864][ T25] acrux 0003:1A34:0802.0003: Failed to enable force feedback support, error: -19 [ 343.343097][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 343.480372][ T25] usb 2-1: USB disconnect, device number 7 [ 343.498376][ T10] usb 4-1: config 28 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.510223][ T10] usb 4-1: config 28 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.522576][ T10] usb 4-1: config 28 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.536110][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 343.545608][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.150122][ T10] ryos 0003:1E7D:31CE.0004: unknown main item tag 0x0 [ 344.158201][ T10] ryos 0003:1E7D:31CE.0004: unknown main item tag 0x0 [ 344.223790][ T5082] Bluetooth: hci0: Malformed HCI Event [ 344.296842][ T10] ryos 0003:1E7D:31CE.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.3-1/input0 [ 344.391423][ T10] usb 4-1: USB disconnect, device number 4 [ 345.002169][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 345.413806][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 345.423720][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.504449][ T10] usb 2-1: config 0 descriptor?? [ 346.659002][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.895688][ T29] audit: type=1326 audit(1717968679.815:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10a507cf69 code=0x0 [ 347.068963][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.076427][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.090725][ T10] usb 2-1: Cannot set autoneg [ 347.098539][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 347.184111][ T10] usb 2-1: USB disconnect, device number 8 [ 347.591130][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.599642][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.174065][ T4525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.182527][ T4525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.850562][ T5980] pim6reg1: entered promiscuous mode [ 348.856523][ T5980] pim6reg1: entered allmulticast mode [ 349.794582][ T5983] loop0: detected capacity change from 0 to 4096 [ 349.881509][ T5983] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 349.925819][ T5983] ntfs3: loop0: mft corrupted [ 349.931078][ T5983] ntfs3: loop0: Failed to load $Volume (-22). [ 356.782932][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 356.933299][ T29] audit: type=1326 audit(1717968689.905:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ef27cf69 code=0x7ffc0000 [ 356.957143][ T29] audit: type=1326 audit(1717968689.925:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f77ef27cf69 code=0x7ffc0000 [ 356.986157][ T29] audit: type=1326 audit(1717968689.925:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ef27cf69 code=0x7ffc0000 [ 357.011036][ T29] audit: type=1326 audit(1717968689.935:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ef27cf69 code=0x7ffc0000 [ 357.302867][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 357.314368][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.327972][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.337752][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.445447][ T25] usb 3-1: config 0 descriptor?? [ 357.464823][ T6061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.499734][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 357.579367][ T6072] loop3: detected capacity change from 0 to 256 [ 358.027861][ T6072] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 358.241291][ T6078] loop4: detected capacity change from 0 to 512 [ 358.347281][ T6078] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.452767][ T6078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.678460][ T6078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.692169][ T6078] ext4 filesystem being mounted at /root/syzkaller-testdir4143867632/syzkaller.M76BNK/16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.065792][ T6078] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 359.100838][ T29] audit: type=1800 audit(1717968692.045:16): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 359.786475][ T5597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.874174][ T8] usb 3-1: USB disconnect, device number 4 [ 363.430887][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.797487][ T6120] loop1: detected capacity change from 0 to 1024 [ 364.026705][ T6120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.471963][ T5082] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 364.480830][ T5082] Bluetooth: hci4: Injecting HCI hardware error event [ 364.490690][ T5075] Bluetooth: hci4: hardware error 0x00 [ 365.149254][ T6133] bond0: entered promiscuous mode [ 365.154918][ T6133] bond_slave_0: entered promiscuous mode [ 365.169041][ T6133] bond_slave_1: entered promiscuous mode [ 365.595877][ T6134] loop0: detected capacity change from 0 to 1024 [ 365.720543][ T6134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.828927][ T6134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.497500][ T5730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.552685][ T5075] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 367.652492][ T6148] loop0: detected capacity change from 0 to 512 [ 367.898222][ T6148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.912458][ T6148] ext4 filesystem being mounted at /root/syzkaller-testdir3370249313/syzkaller.oO6NCu/8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.105370][ T6149] loop4: detected capacity change from 0 to 2048 [ 370.647962][ T5075] Bluetooth: hci2: command 0x0406 tx timeout [ 370.776968][ T5730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.832556][ T6149] NILFS (loop4): error -4 creating segctord thread [ 371.626646][ T6163] loop3: detected capacity change from 0 to 256 [ 371.812096][ T6163] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 372.748164][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.529530][ T6174] loop3: detected capacity change from 0 to 128 [ 374.564588][ T6174] VFS: could not find a valid V7 on loop3. [ 375.856103][ T6174] loop3: detected capacity change from 0 to 4096 [ 376.109948][ T6183] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.259747][ T6179] loop4: detected capacity change from 0 to 4096 [ 376.343687][ T29] audit: type=1800 audit(1717968709.195:17): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 376.540085][ T6179] NILFS (loop4): invalid segment: Checksum error in segment payload [ 376.548585][ T6179] NILFS (loop4): trying rollback from an earlier position [ 376.886519][ T6179] NILFS (loop4): recovery complete [ 376.995734][ T6185] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.142440][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.824000][ T6218] loop4: detected capacity change from 0 to 128 [ 388.868342][ T6218] VFS: could not find a valid V7 on loop4. [ 390.214505][ T6218] loop4: detected capacity change from 0 to 4096 [ 390.376439][ T6224] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.622259][ T29] audit: type=1800 audit(1717968723.515:18): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 392.130093][ T6120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.636338][ T5082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.697206][ T5082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.726156][ T5082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.757439][ T5082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.833421][ T5082] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 395.933036][ T5082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.230934][ T4217] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.387325][ T6237] loop3: detected capacity change from 0 to 2048 [ 397.466577][ T6237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.479807][ T4217] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.643016][ T6246] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 397.713966][ T4217] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.938093][ T4217] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.082035][ T5082] Bluetooth: hci5: command tx timeout [ 398.163380][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.198126][ T5084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.267618][ T6233] chnl_net:caif_netlink_parms(): no params data found [ 398.619881][ T4217] bridge_slave_1: left allmulticast mode [ 398.625858][ T4217] bridge_slave_1: left promiscuous mode [ 398.632521][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.712031][ T4217] bridge_slave_0: left allmulticast mode [ 398.718096][ T4217] bridge_slave_0: left promiscuous mode [ 398.725249][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.185093][ T5082] Bluetooth: hci5: command tx timeout [ 402.054323][ T4217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.123206][ T4217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.233715][ T5075] Bluetooth: hci5: command tx timeout [ 402.378128][ T4217] bond0 (unregistering): Released all slaves [ 402.507775][ T6256] loop4: detected capacity change from 0 to 1024 [ 402.926336][ T6256] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 402.935644][ T6256] EXT4-fs (loop4): Test dummy encryption mode enabled [ 403.061132][ T6256] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 403.734220][ T6256] loop4: detected capacity change from 0 to 1024 [ 403.846359][ T6256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.884570][ T4217] hsr_slave_0: left promiscuous mode [ 404.012826][ T4217] hsr_slave_1: left promiscuous mode [ 404.255193][ T4217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.263299][ T4217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.437906][ T5075] Bluetooth: hci5: command tx timeout [ 404.490215][ T4217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.498065][ T4217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.642297][ T4217] veth0_macvtap: left promiscuous mode [ 404.648220][ T4217] veth1_vlan: left promiscuous mode [ 404.654066][ T4217] veth0_vlan: left promiscuous mode [ 404.949236][ T5597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.204781][ T29] audit: type=1800 audit(1717968738.145:19): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1951 res=0 errno=0 [ 405.270888][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.321076][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.331039][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.365542][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.429275][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 405.440173][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.807447][ T29] audit: type=1800 audit(1717968738.755:20): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 405.873361][ T4217] team0 (unregistering): Port device team_slave_1 removed [ 405.920340][ T6280] loop4: detected capacity change from 0 to 512 [ 405.928198][ T4217] team0 (unregistering): Port device team_slave_0 removed [ 405.940940][ T6280] EXT4-fs: Mount option(s) incompatible with ext2 [ 406.416385][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.429900][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.437825][ T6233] bridge_slave_0: entered allmulticast mode [ 406.447280][ T6233] bridge_slave_0: entered promiscuous mode [ 406.696322][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.704682][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.712559][ T6233] bridge_slave_1: entered allmulticast mode [ 406.721047][ T6233] bridge_slave_1: entered promiscuous mode [ 407.078423][ T6286] loop3: detected capacity change from 0 to 128 [ 407.100258][ T6286] VFS: could not find a valid V7 on loop3. [ 407.160389][ T6233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.311867][ T6233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.522665][ T5075] Bluetooth: hci1: command tx timeout [ 407.822535][ T6233] team0: Port device team_slave_0 added [ 407.840917][ T6233] team0: Port device team_slave_1 added [ 408.130383][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.137872][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.165539][ T6233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.338045][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.345608][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.376707][ T6233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.548301][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.555242][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.769383][ T6276] chnl_net:caif_netlink_parms(): no params data found [ 408.936269][ T6286] loop3: detected capacity change from 0 to 4096 [ 409.103677][ T6295] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.325051][ T6233] hsr_slave_0: entered promiscuous mode [ 409.359972][ T6233] hsr_slave_1: entered promiscuous mode [ 409.382712][ T6233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.390649][ T6233] Cannot create hsr debugfs directory [ 409.433244][ T29] audit: type=1800 audit(1717968742.265:21): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 409.595476][ T5075] Bluetooth: hci1: command tx timeout [ 409.654502][ T6298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.674201][ T5075] Bluetooth: hci1: command tx timeout [ 412.083137][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.090970][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.099307][ T6276] bridge_slave_0: entered allmulticast mode [ 412.108057][ T6276] bridge_slave_0: entered promiscuous mode [ 412.220042][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.228010][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.236393][ T6276] bridge_slave_1: entered allmulticast mode [ 412.245258][ T6276] bridge_slave_1: entered promiscuous mode [ 412.816428][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.854633][ T6304] Cannot find add_set index 0 as target [ 412.942861][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.102909][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.113533][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.124697][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.194572][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.206911][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.218142][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.332268][ T6233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.453941][ T6233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.507949][ T6276] team0: Port device team_slave_0 added [ 413.533899][ T6233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.607163][ T6276] team0: Port device team_slave_1 added [ 413.623225][ T6233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.751955][ T5082] Bluetooth: hci1: command tx timeout [ 413.965605][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.973225][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.000309][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.174642][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.182167][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.214115][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.368856][ T6316] loop3: detected capacity change from 0 to 128 [ 414.457976][ T6316] FAT-fs (loop3): bogus number of reserved sectors [ 414.465131][ T6316] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 414.475129][ T6316] FAT-fs (loop3): Can't find a valid FAT filesystem [ 414.876715][ T4217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.056727][ T4217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.175640][ T6276] hsr_slave_0: entered promiscuous mode [ 415.200423][ T6276] hsr_slave_1: entered promiscuous mode [ 415.227750][ T6276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.241429][ T6276] Cannot create hsr debugfs directory [ 415.271994][ T5082] Bluetooth: hci2: command tx timeout [ 415.298120][ T4217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.460091][ T4217] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.868747][ T6233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.184304][ T4217] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.305783][ T4217] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.422563][ T4217] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.531286][ T6233] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.631003][ T4217] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.735172][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.743497][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.754925][ T6305] chnl_net:caif_netlink_parms(): no params data found [ 416.865937][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.873962][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.352593][ T5082] Bluetooth: hci2: command tx timeout [ 417.518773][ T4217] bridge_slave_1: left allmulticast mode [ 417.525119][ T4217] bridge_slave_1: left promiscuous mode [ 417.532072][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.573956][ T4217] bridge_slave_0: left allmulticast mode [ 417.579911][ T4217] bridge_slave_0: left promiscuous mode [ 417.593837][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.633428][ T4217] bridge_slave_1: left allmulticast mode [ 417.639402][ T4217] bridge_slave_1: left promiscuous mode [ 417.646363][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.672491][ T4217] bridge_slave_0: left allmulticast mode [ 417.678446][ T4217] bridge_slave_0: left promiscuous mode [ 417.685462][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.841873][ T4217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.863634][ T4217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.883675][ T4217] bond0 (unregistering): Released all slaves [ 418.914198][ T4217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.933682][ T4217] bond_slave_0: left promiscuous mode [ 418.984569][ T4217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.996517][ T4217] bond_slave_1: left promiscuous mode [ 419.009727][ T4217] bond0 (unregistering): Released all slaves [ 419.463180][ T5082] Bluetooth: hci2: command tx timeout [ 420.369005][ T6340] loop4: detected capacity change from 0 to 128 [ 420.424689][ T6340] VFS: could not find a valid V7 on loop4. [ 420.463648][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.471771][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.479748][ T6305] bridge_slave_0: entered allmulticast mode [ 420.489524][ T6305] bridge_slave_0: entered promiscuous mode [ 420.551113][ T6276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.723682][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.731293][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.740277][ T6305] bridge_slave_1: entered allmulticast mode [ 420.748964][ T6305] bridge_slave_1: entered promiscuous mode [ 420.765280][ T6276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.919027][ T4217] hsr_slave_0: left promiscuous mode [ 420.942324][ T4217] hsr_slave_1: left promiscuous mode [ 420.960714][ T4217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.971065][ T4217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.999148][ T4217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.007213][ T4217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.084040][ T4217] hsr_slave_0: left promiscuous mode [ 421.124354][ T4217] hsr_slave_1: left promiscuous mode [ 421.152935][ T4217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.160696][ T4217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.195874][ T4217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.204414][ T4217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.304333][ T4217] veth1_macvtap: left promiscuous mode [ 421.310152][ T4217] veth0_macvtap: left promiscuous mode [ 421.316357][ T4217] veth1_vlan: left promiscuous mode [ 421.322154][ T4217] veth0_vlan: left promiscuous mode [ 421.343440][ T4217] veth1_macvtap: left promiscuous mode [ 421.349358][ T4217] veth0_macvtap: left promiscuous mode [ 421.355716][ T4217] veth1_vlan: left promiscuous mode [ 421.361384][ T4217] veth0_vlan: left promiscuous mode [ 421.562258][ T5075] Bluetooth: hci2: command tx timeout [ 421.813827][ T6340] loop4: detected capacity change from 0 to 4096 [ 422.047206][ T6345] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 422.163804][ T29] audit: type=1800 audit(1717968755.115:22): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 422.632918][ T4217] team0 (unregistering): Port device team_slave_1 removed [ 422.655550][ T4217] team0 (unregistering): Port device team_slave_0 removed [ 423.456813][ T4217] team0 (unregistering): Port device team_slave_1 removed [ 423.483623][ T4217] team0 (unregistering): Port device team_slave_0 removed [ 424.017578][ T6276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 424.175200][ T6276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.429719][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.558854][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.596773][ T6233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.868514][ T6356] pimreg12: entered allmulticast mode [ 424.907292][ T6305] team0: Port device team_slave_0 added [ 424.982790][ T6305] team0: Port device team_slave_1 added [ 425.221275][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.229974][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.257744][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.342306][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.349514][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.378636][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.893802][ T6233] veth0_vlan: entered promiscuous mode [ 425.942594][ T6305] hsr_slave_0: entered promiscuous mode [ 425.988336][ T6305] hsr_slave_1: entered promiscuous mode [ 426.048472][ T6305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.056577][ T6305] Cannot create hsr debugfs directory [ 426.363016][ T6233] veth1_vlan: entered promiscuous mode [ 426.564363][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.856537][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.871249][ T6233] veth0_macvtap: entered promiscuous mode [ 427.016010][ T6233] veth1_macvtap: entered promiscuous mode [ 427.044950][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.052890][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.256624][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.264671][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.411058][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.424293][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.435306][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.446151][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.456364][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.467304][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.483467][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.751249][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.762341][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.772461][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.783302][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.793529][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.804663][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.820405][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.967964][ T6233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.977900][ T6233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.987205][ T6233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.996809][ T6233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.536768][ T6305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.664025][ T6305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.816064][ T6305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.882077][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 428.936093][ T6305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.949524][ T6395] loop3: detected capacity change from 0 to 128 [ 430.096780][ T6395] VFS: could not find a valid V7 on loop3. [ 430.710932][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.871338][ T6276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.978135][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.242876][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.250673][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.270448][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.278050][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.695134][ T6305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.705995][ T6305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.741202][ T6276] veth0_vlan: entered promiscuous mode [ 431.970487][ T6276] veth1_vlan: entered promiscuous mode [ 432.099121][ T6395] loop3: detected capacity change from 0 to 4096 [ 432.397714][ T6395] NILFS (loop3): error -4 creating segctord thread [ 432.443679][ T6276] veth0_macvtap: entered promiscuous mode [ 432.511135][ T6276] veth1_macvtap: entered promiscuous mode [ 432.770323][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.783010][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.794557][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.808317][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.818617][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.829436][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.839681][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.852889][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.869806][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.020706][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.032354][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.042772][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.055940][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.066874][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.077826][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.088097][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.098951][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.116646][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.361219][ T6276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.370513][ T6276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.379847][ T6276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.389138][ T6276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.891713][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.456632][ T6305] veth0_vlan: entered promiscuous mode [ 434.580172][ T6305] veth1_vlan: entered promiscuous mode [ 434.907559][ T6305] veth0_macvtap: entered promiscuous mode [ 434.942500][ T6305] veth1_macvtap: entered promiscuous mode [ 435.089653][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.103677][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.116082][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.128260][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.138512][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.149308][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.159463][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.170347][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.180507][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.191369][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.211065][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.296322][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.312701][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.323663][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.334552][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.344733][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.355585][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.366015][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.376811][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.389391][ T6305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.401116][ T6305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.420766][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.705331][ T6305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.718757][ T6305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.729793][ T6305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.739028][ T6305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.157328][ T5082] Bluetooth: hci0: command 0x0406 tx timeout [ 436.664282][ T3973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.673355][ T3973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.828356][ T6465] loop4: detected capacity change from 0 to 1024 [ 436.851447][ T6465] EXT4-fs: Ignoring removed orlov option [ 436.882245][ T6465] EXT4-fs (loop4): Test dummy encryption mode enabled [ 436.902309][ T3973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.910433][ T3973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.936843][ T6465] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 437.041020][ T6465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.988983][ T6464] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 438.294888][ T6464] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 438.332816][ T6465] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 438.955783][ T5597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.236824][ T6510] syz-executor.4 (pid 6510) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 441.066767][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.074945][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.336837][ T5125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.348271][ T5125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.957158][ T29] audit: type=1800 audit(1717968774.905:23): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 443.022135][ T5125] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 443.520587][ T3973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.528987][ T3973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.601662][ T5125] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 443.613557][ T5125] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 443.625358][ T5125] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 443.634943][ T5125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.737146][ T6540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 443.836350][ T3973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.845347][ T3973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.772787][ T5125] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 444.788092][ T5125] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input5 [ 444.899854][ T5125] usb 5-1: USB disconnect, device number 3 [ 445.109932][ T29] audit: type=1800 audit(1717968778.065:24): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1965 res=0 errno=0 [ 446.470823][ T6561] loop4: detected capacity change from 0 to 512 [ 446.582006][ T6561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 446.754257][ T6561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.767774][ T6561] ext4 filesystem being mounted at /root/syzkaller-testdir4143867632/syzkaller.M76BNK/57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.122661][ T6561] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 448.008591][ T5597] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.699235][ T6571] loop0: detected capacity change from 0 to 16 [ 448.814064][ T6571] erofs: (device loop0): mounted with root inode @ nid 36. [ 449.160475][ T6575] ===================================================== [ 449.168162][ T6575] BUG: KMSAN: uninit-value in __bpf_strtoull+0x245/0x5b0 [ 449.175607][ T6575] __bpf_strtoull+0x245/0x5b0 [ 449.180543][ T6575] bpf_strtol+0x7c/0x270 [ 449.185217][ T6575] ___bpf_prog_run+0x13fe/0xe0f0 [ 449.190412][ T6575] __bpf_prog_run96+0xb5/0xe0 [ 449.195485][ T6575] bpf_test_run+0x43e/0xc30 [ 449.200350][ T6575] bpf_prog_test_run_xdp+0xeaa/0x1a40 2024/06/09 21:33:02 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 449.206278][ T6575] bpf_prog_test_run+0x6b7/0xad0 [ 449.211654][ T6575] __sys_bpf+0x6aa/0xd90 [ 449.216137][ T6575] __x64_sys_bpf+0xa0/0xe0 [ 449.220873][ T6575] x64_sys_call+0x96b/0x3b50 [ 449.225915][ T6575] do_syscall_64+0xcf/0x1e0 [ 449.230707][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.237128][ T6575] [ 449.239578][ T6575] Local variable stack created at: [ 449.244997][ T6575] __bpf_prog_run96+0x45/0xe0 [ 449.250021][ T6575] bpf_test_run+0x43e/0xc30 [ 449.254957][ T6575] [ 449.257437][ T6575] CPU: 0 PID: 6575 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 449.267829][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 449.278244][ T6575] ===================================================== [ 449.285479][ T6575] Disabling lock debugging due to kernel taint [ 449.291966][ T6575] Kernel panic - not syncing: kmsan.panic set ... [ 449.298548][ T6575] CPU: 0 PID: 6575 Comm: syz-executor.4 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 449.310349][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 449.320614][ T6575] Call Trace: [ 449.324061][ T6575] [ 449.327137][ T6575] dump_stack_lvl+0x216/0x2d0 [ 449.332084][ T6575] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 449.338252][ T6575] dump_stack+0x1e/0x30 [ 449.342681][ T6575] panic+0x4e2/0xcd0 [ 449.346859][ T6575] ? kmsan_get_metadata+0xf1/0x1d0 [ 449.352422][ T6575] kmsan_report+0x2d5/0x2e0 [ 449.357286][ T6575] ? __msan_warning+0x95/0x120 [ 449.362270][ T6575] ? __bpf_strtoull+0x245/0x5b0 [ 449.367861][ T6575] ? bpf_strtol+0x7c/0x270 [ 449.372597][ T6575] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 449.378142][ T6575] ? __bpf_prog_run96+0xb5/0xe0 [ 449.383292][ T6575] ? bpf_test_run+0x43e/0xc30 [ 449.388240][ T6575] ? bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 449.394077][ T6575] ? bpf_prog_test_run+0x6b7/0xad0 [ 449.399548][ T6575] ? __sys_bpf+0x6aa/0xd90 [ 449.404266][ T6575] ? __x64_sys_bpf+0xa0/0xe0 [ 449.409169][ T6575] ? x64_sys_call+0x96b/0x3b50 [ 449.414288][ T6575] ? do_syscall_64+0xcf/0x1e0 [ 449.419234][ T6575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.425591][ T6575] ? kmsan_get_metadata+0x146/0x1d0 [ 449.431029][ T6575] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 449.437574][ T6575] ? kmsan_get_metadata+0x146/0x1d0 [ 449.443024][ T6575] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 449.449092][ T6575] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 449.455144][ T6575] ? stack_depot_save_flags+0x66d/0x6e0 [ 449.460985][ T6575] ? kmsan_get_metadata+0x146/0x1d0 [ 449.466421][ T6575] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 449.472979][ T6575] ? kmsan_get_metadata+0x146/0x1d0 [ 449.478422][ T6575] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 449.484525][ T6575] __msan_warning+0x95/0x120 [ 449.489333][ T6575] __bpf_strtoull+0x245/0x5b0 [ 449.494277][ T6575] ? bpf_strtol+0x5c/0x270 [ 449.499005][ T6575] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 449.504377][ T6575] bpf_strtol+0x7c/0x270 [ 449.508886][ T6575] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 449.514917][ T6575] ___bpf_prog_run+0x13fe/0xe0f0 [ 449.520095][ T6575] ? kmsan_get_metadata+0x146/0x1d0 [ 449.525521][ T6575] __bpf_prog_run96+0xb5/0xe0 [ 449.530423][ T6575] ? ktime_get+0x4c7/0x530 [ 449.535068][ T6575] ? __pfx___bpf_prog_run96+0x10/0x10 [ 449.540828][ T6575] bpf_test_run+0x43e/0xc30 [ 449.545578][ T6575] ? bpf_test_run+0x388/0xc30 [ 449.550609][ T6575] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 449.556643][ T6575] bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 449.562305][ T6575] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 449.568352][ T6575] bpf_prog_test_run+0x6b7/0xad0 [ 449.573514][ T6575] __sys_bpf+0x6aa/0xd90 [ 449.577985][ T6575] __x64_sys_bpf+0xa0/0xe0 [ 449.582590][ T6575] x64_sys_call+0x96b/0x3b50 [ 449.587403][ T6575] do_syscall_64+0xcf/0x1e0 [ 449.592151][ T6575] ? clear_bhb_loop+0x25/0x80 [ 449.597076][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.603217][ T6575] RIP: 0033:0x7f10a507cf69 [ 449.607811][ T6575] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 449.627630][ T6575] RSP: 002b:00007f10a5d750c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.636340][ T6575] RAX: ffffffffffffffda RBX: 00007f10a51b3f80 RCX: 00007f10a507cf69 [ 449.644477][ T6575] RDX: 0000000000000050 RSI: 0000000020000640 RDI: 000000000000000a [ 449.652702][ T6575] RBP: 00007f10a50da6fe R08: 0000000000000000 R09: 0000000000000000 [ 449.660864][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.669159][ T6575] R13: 000000000000000b R14: 00007f10a51b3f80 R15: 00007ffe3bbc6578 [ 449.677308][ T6575] [ 449.680595][ T6575] Kernel Offset: disabled [ 449.685109][ T6575] Rebooting in 86400 seconds..