last executing test programs: 18m56.958029179s ago: executing program 4 (id=131): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000780)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x7fff, 0x3, 0x101, 0xf0, 0x2}, 0x14) 18m55.730743039s ago: executing program 4 (id=136): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 18m54.878313123s ago: executing program 4 (id=140): socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0xa, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 18m53.90963826s ago: executing program 4 (id=144): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) set_mempolicy(0x2, &(0x7f0000000080)=0x7, 0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,us', @ANYRESDEC=0x0, @ANYRES8]) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000e00)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x23072d}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000340)=ANY=[], 0x28) 18m38.200736816s ago: executing program 32 (id=144): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) set_mempolicy(0x2, &(0x7f0000000080)=0x7, 0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,us', @ANYRESDEC=0x0, @ANYRES8]) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000e00)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x23072d}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000340)=ANY=[], 0x28) 8m33.986737932s ago: executing program 33 (id=2183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfe75) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = io_uring_setup(0x1d06, &(0x7f00000003c0)={0x0, 0x4, 0x2, 0x0, 0xa7}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) read$ptp(r1, &(0x7f00000005c0)=""/162, 0xa2) io_uring_enter(r3, 0x6252, 0xc09b, 0x0, &(0x7f0000000000)={[0x7ff]}, 0xfffffdfe) listen(r4, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c800, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYBLOB="f95d64de4c45b6ae1a8f14fc03bb51f7ccb38e1f4fb846c99eba09463b89e5a58a8111f21e698f006fd8a2da6d55b90062f7c80b6702ee5c472c3ca12acc9441447796296684ea21727a83ba2664ea4ca102150184c3bc5e6a96e165ced340fa657086f1f8f3458341e90bfdaf24d83ee41321ed903a0ed9a60fc386daa9619f9afedc7e4e91d7f893c8896c1f4806b40b6c94adcb9fe06988bdfbad09a6fe739acdce55178bc8ab3e798cda525a1a3e1562a5d8138cfce06564d8fd7184f621950e30c002bb81b60af492f327cedf0b3faa277bf93ac49466d16f207da04c280b0a4dd39ad3b1b6bdf3ea65f73fbe724be2834463", @ANYRES32, @ANYRESOCT], 0x2, 0x1ff, &(0x7f00000003c0)="$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") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x202, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r7, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r8, 0xfffffffffffffc01, 0x0) tee(r6, r8, 0x60000000000, 0xc) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000080)={0x0, 0x23d, 0x0, 0xa, 0xf7, '\x00\x00\x00\b\x00'}) 6m57.904091613s ago: executing program 5 (id=2397): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r0, &(0x7f0000005500), 0x0) 6m56.786067836s ago: executing program 5 (id=2400): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setrlimit(0x2, 0x0) 6m51.986251328s ago: executing program 5 (id=2406): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0x10000000}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x4, 0x2) close_range(r4, 0xffffffffffffffff, 0x3e00000000000000) 6m50.245239309s ago: executing program 5 (id=2410): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {}, {}, {}, {}, {}, {0x100}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000000)={[{@enospc_debug}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) 6m48.449584348s ago: executing program 5 (id=2413): r0 = socket(0x2b, 0x80801, 0x1) socket(0x1e, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6m48.230500074s ago: executing program 3 (id=2414): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/51, 0x33}, 0x9}], 0x1, 0x10002, 0x0) 6m47.105581977s ago: executing program 3 (id=2416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x21, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xad}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x2, 0x3, 0x4, 0x9, 0x7, 0xfffffffffffffffc, 0x6121d5fff95a690e}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x300}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0xf, 0xb, 0x4, 0x50, 0x8}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xc7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="6631c2aba970dfee441c7957169857c3c82fe712222ef03cb014d1e7b1a29c6cd0d0a79b71e003a83badd9cf9cb85910609fbe46c5c1978ab4fa49eafe840eeb281242a0ca49fd78085aa063b822e114ae003be865aae7d2d0d483602b19276bb8ca", 0x62) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x2, 0x8, 0x5, '\x00', 0x100000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m46.395553527s ago: executing program 5 (id=2417): openat$mice(0xffffffffffffff9c, 0x0, 0x80082) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1040}, 0x1, 0x0, 0x0, 0x40018}, 0x890) 6m45.554119112s ago: executing program 3 (id=2421): socket(0x11, 0x800000003, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) 6m44.99262828s ago: executing program 34 (id=2392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) close(0xffffffffffffffff) syz_io_uring_setup(0x2a1c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) 6m42.95392686s ago: executing program 3 (id=2426): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/51, 0x33}, 0x9}], 0x1, 0x10002, 0x0) 6m41.366379398s ago: executing program 3 (id=2431): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) syz_open_pts(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x6a) 6m38.358545546s ago: executing program 3 (id=2434): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0xe, 0x5, 0x0, 0x40}, 0x2, 0xdbb, &(0x7f00000002c0)={{0x6, 0xfffffff7, 0x7, 0x8001}, &(0x7f0000000300)={{0x6, 0x0, 0x3, 0x4}, &(0x7f0000000200)={{0x9, 0x3, 0x5, 0x401}}}}, 0x8, 0x0, 0xfd}}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r1], 0x0, &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) 6m30.271214082s ago: executing program 35 (id=2417): openat$mice(0xffffffffffffff9c, 0x0, 0x80082) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1040}, 0x1, 0x0, 0x0, 0x40018}, 0x890) 6m18.783480971s ago: executing program 36 (id=2434): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0xe, 0x5, 0x0, 0x40}, 0x2, 0xdbb, &(0x7f00000002c0)={{0x6, 0xfffffff7, 0x7, 0x8001}, &(0x7f0000000300)={{0x6, 0x0, 0x3, 0x4}, &(0x7f0000000200)={{0x9, 0x3, 0x5, 0x401}}}}, 0x8, 0x0, 0xfd}}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r1], 0x0, &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) 5m33.508835931s ago: executing program 2 (id=2502): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[], 0x13) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 5m31.529516356s ago: executing program 2 (id=2507): userfaultfd(0x80001) syz_usb_connect(0x3, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e7780) 5m27.682136316s ago: executing program 2 (id=2515): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r1 = fanotify_init(0x12, 0x80000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) 5m26.055310472s ago: executing program 2 (id=2518): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000940)="9a", 0x1}], 0x1}, 0xc0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1, 0x0, 0x0, 0x10000000}, 0x4525d) 5m25.342216442s ago: executing program 2 (id=2520): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5m24.624370072s ago: executing program 2 (id=2523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 5m9.109704488s ago: executing program 37 (id=2523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 4m25.397781372s ago: executing program 4 (id=2556): socket(0x1e, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m23.497439818s ago: executing program 4 (id=2624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4m7.824562959s ago: executing program 38 (id=2624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2m1.693869159s ago: executing program 8 (id=2823): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) 2m0.92804206s ago: executing program 8 (id=2825): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a00000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) 2m0.716496873s ago: executing program 8 (id=2827): semget(0x1, 0x3, 0xca1) 1m59.3942431s ago: executing program 8 (id=2829): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0xc842, &(0x7f00000023c0)=ANY=[], 0x7, 0x6f0, &(0x7f0000001200)="$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") sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f000000c1c0)={0x2020}, 0x2020) 1m57.280545473s ago: executing program 8 (id=2833): syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES64], 0x1, 0x9e79, &(0x7f000000fcc0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000140)) 1m55.902101952s ago: executing program 8 (id=2835): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) 1m53.792230351s ago: executing program 39 (id=2835): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) 24.893167596s ago: executing program 1 (id=2996): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000000)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa1000000a04140adac7cf7d4135900000007010000f8ffffffbfa400000000000007040000f0ffffffb702ab5362cf1f1044ad7f84da239768fc47f6449ec414a70d0bba93a79b837862b7df4329c393c5f00d312d5c", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440), 0x5, 0x504, &(0x7f0000001480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000140)={r7, 0xea, 0x8001, 0xc4a, 0x8}, &(0x7f00000001c0)=0x14) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x3) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 23.663469801s ago: executing program 0 (id=2999): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.652984839s ago: executing program 6 (id=3002): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x5a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001800000004"], 0x20) 21.120655535s ago: executing program 6 (id=3003): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x2, {0x0, 0x1}}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x40) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21.049750542s ago: executing program 0 (id=3005): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000010000000900000006000000ae00000000100000b9fa00000010000000000000000000000000000041ec08764a5a3ab02cb980cca25f282615c89583641b5872993d860fdeabe634eb8de5f84c24a4c0d22d648970053b835cef8c4d7f"]) 20.201315524s ago: executing program 6 (id=3006): openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f0000000180)={0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x0, 0x40000000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x48, 0xfffffffffffffffd) 20.200641486s ago: executing program 1 (id=3007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="6631c2aba970dfee441c7957169857c3c82fe712222ef03cb014d1e7b1a29c6cd0d0a79b71e003a83badd9cf9cb85910609fbe46c5c1978ab4fa49eafe840eeb281242a0ca49fd78085aa063b822e114ae003be865aae7d2d0d483602b19276bb8ca", 0x62) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x2, 0x8, 0x5, '\x00', 0x100000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.526693729s ago: executing program 6 (id=3009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r5, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, 0x0, 0x40000) ioctl(r3, 0x7, &(0x7f0000000100)="a25d975afe886b11f62038348bb919e124134c79def02bc38bc3053eee305075e350f17864b3e299d9f3140e742896487b88f6cf") socket$vsock_stream(0x28, 0x1, 0x0) socket$inet(0x2, 0x3, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc02063a1, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, 0x0, 0x2e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 16.556359404s ago: executing program 0 (id=3010): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r1, 0x101, 0x8, 0x0, 0x0) 16.359952499s ago: executing program 1 (id=3012): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) poll(&(0x7f0000000100)=[{r1, 0x21}, {0xffffffffffffffff, 0x782}], 0x2, 0xa) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) getpid() r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x5, 0x10) 13.950525257s ago: executing program 7 (id=3016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x2, {0x0, 0x1}}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x40) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 13.746824932s ago: executing program 0 (id=3017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) 13.125859247s ago: executing program 6 (id=3018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 11.698585125s ago: executing program 7 (id=3019): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000340)={0x0, 0x2, 0x1}, 0x18, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f00008b9000/0x3000)=nil) socket(0x1d, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unlink(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300), 0xff) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() 11.483668963s ago: executing program 1 (id=3020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, &(0x7f0000000040)) 11.030289303s ago: executing program 9 (id=3021): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0x800}) r3 = dup(r2) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) clock_gettime(0x0, 0x0) utimes(&(0x7f0000000180)='./file0\x00', 0x0) 9.274310317s ago: executing program 9 (id=3022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="6631c2aba970dfee441c7957169857c3c82fe712222ef03cb014d1e7b1a29c6cd0d0a79b71e003a83badd9cf9cb85910609fbe46c5c1978ab4fa49eafe840eeb281242a0ca49fd78085aa063b822e114ae003be865aae7d2d0d483602b19276bb8ca", 0x62) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x2, 0x8, 0x5, '\x00', 0x100000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.457520858s ago: executing program 0 (id=3023): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = eventfd(0x0) r1 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r1, 0x0, 0x2, r0}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$eventfd(r0, &(0x7f0000000080)=0x8, 0x8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x20, 0x48, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040850}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={r6, 0x2}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.877752213s ago: executing program 9 (id=3024): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x5a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001800000004"], 0x20) 6.74713084s ago: executing program 7 (id=3025): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 5.59617176s ago: executing program 7 (id=3026): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) 5.522468433s ago: executing program 9 (id=3027): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r1, 0x101, 0x8, 0x0, 0x0) 4.570919025s ago: executing program 7 (id=3028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007c8af8ff00000000bfa200000000000007020000f8ffffffb7030000feffffffb704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.521323614s ago: executing program 9 (id=3029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x2, {0x0, 0x1}}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 3.107635398s ago: executing program 6 (id=3030): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) poll(&(0x7f0000000100)=[{r1, 0x21}, {0xffffffffffffffff, 0x782}], 0x2, 0xa) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) getpid() r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x5, 0x10) 3.097581115s ago: executing program 0 (id=3031): setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB="d713f745ad0cba4e279a34c0414979daaea3a9e60d584b7322ff1c01dc50dc801b36f9e362"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x77b, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000700)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 2.574220021s ago: executing program 7 (id=3032): syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./bus\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5d8e, &(0x7f000000dd80)="$eJzs3U9vHGcdB/Df/vH6T2kaVagKEYc0hdJSmv8JlH9NOXCAA0goZxK5bhVwASUG0coirnxAnHgLcOmFQ98CL6CvAfECiGRz6oEwaLzPk4zX66xD4p21n89HcmZ+8+x4n8nX49n1zOwTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED86Ic/u9iJiJu/SwtORnwhehHdiMW6PhP1zPX8+H5EnIqd5ngpInrzEfX6O/+8EHElIj47EbG1vb5cL750wH5cvbB258GPf/CPP/5589Qv3v35J6PtP/3i5U//dC/i5E/e+vTBvWez7QAAAFCKqqqqTnqbfzq9v++23SkAYCry8b9K8nK1Wq1Wq9XHr26qxrvXLCJio7lO/ZrB6XgAOGI24vO2u0CL5F+0fkQ813YngJnWabsDHIqt7fXlTsq30zwenBm252tBduW/0Xl4f8d+00lGrzGZ1s/XZvTixX36szilPsySnH93NP+bw/ZBetxh5z8t++U/GN76NFn/2fepTTn/3mj+I45P/t2x+Zcq599/ovx78gcAAAAAgBmW//5/suXzv/NPvykH8rjzv2em1AcAAAAAAAAAeNaedvy/h4z/BwAAADOrfq9e+8uJR8v2+yy2evmNTsTzI48HCpNulllqux8AAAAAAAAAAAAAUJL+8BreG52IuYh4fmmpqqr6q2m0flJPu/5RV/r2Q8na/iUPAABDn50YuZe/E7EQETfSZ/3NLS0tVdXC4lK1VC3O59ezg/mFarHxvjZP62XzgwO8IO4PqvqbLTTWa5r0fnlS++j3q59rUPUO0LHpaDFwAIiI4dFoyxHpmKmqF6LtVzkcDfb/48f+z0G0/XMKAAAAHL6qqqpO+jjv0+mcf7ftTgEAU5GP/6PnBdRqtVqtVh+/uqka716ziIiN5jr1awbD8QPAEbMRn7fdBVok/6L1I+JU250AZlqn7Q5wKLa215c7Kd9O83iQxnfP14Lsyn+js7NeXn/cdJLRa0ym9fO1Gb14cZ/+vDSlPsySnH93NP+bw/ZBetxh5z8t++Vfb+fJFvrTtpx/bzT/Eccn/+7Y/EuV8+8/Uf49+QMAAAAAwAzLf/8/6fxv3mQAAAAAAAAAOHK2tteX832v+fz/l8c8zv2fx1POvyP/IuX8h/f/Lz5qGLkgp9eYv//Oo/z/vb2+/Mnav76UpzOf/1xvUD/3XKfb66drfqq59+J2rMZKXNjz+P6u9ot72ud2tV+a0H55T/ugbl/M7ediOX4dq/Huw/b5CRdGLUxorya05/x79v8i5fz7ja86/6XU3hmZ1u5/3N2z3zen457n+t/+8+revWv6NqP3cNua6u0720J/dv5PnhvEb++u3Dn3+1tra3cuRprsWnop0uQZy/nPpa+c/2uvDNvz7/3m/nr/48ET5z8rNqO/b/6vNObr7X19yn1rQ85/kL5y/vkINH7/P8r577//v9FCfwAAAAAAAAAAAAAAAOBxqqrauUX0ekRcS/f/tHVvJgAwXfn4XyV5uXrG6we7F7TeH7VarVYfibqpGu/tZhERf2+uU79m+MO4bwYAzLL/RsQ/2+4ErZF/wfLn/dXTr7TdGWCq7n740S9vra6u3Lnbdk8AAAAAAAAAgP9XHv/zTGP8553rgEbGjd41/us7cebIjv/ZHfR2xjpPG/RyPH7877Px+PG/+xOeb25C+2BC+/yE9oUJ7WNv9GjI+b+cMs75n04bVtL4r6+10J+25fzPprGec/5fG3lcM//qr0c5/+6u/M+vffCb83c//OjN2x/cen/l/ZVfXbxw7crlq1cuX716/r3bqysXhv+22OPDlfPPY1+7DrQsOf+cufzLkvP/aqrlX5ac/6upln9Zcv759Z78y5Lzz+995F+WnP/rqZZ/WXL+X0+1/MuS838j1fIvS87/G6mWf1ly/m+mWv5lyfmfS7X8y5LzP59q+Zcl55/PcMm/LDn/fGWD/MuS87+UavmXJed/OdXyL0vO/0qq5V+WnP/VVMu/LDn/a6mWf1ly/t9MtfzLkvP/VqrlX5ac/1upln9Zcv7fTrX8y5Lz/06q5V+WnP93Uy3/suT8v5dq+Zcl5//9VMu/LDn/t1Mt/7I8+vx/M2bMmMkzbf9mAgAAAAAAAAAAAABGTeNy4ra3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs3V2MXGd9P/Czb/baCcR/EkIIhtjOC4Zssrt+S0wwmJfwT0Nf0kBoaUMdY68dg9/iXedNUbM0aRtEpEZqL9KLUkAUIbVVogqpVEpRpCK1d+WqKDeolbjwRVIZCypRkWx1Zp7n8czseM469sQz5/l8kP3zzpwz88yZM7P7XfSdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArTZ+Yu5PR4qiKP80/lpXFJeX/15T7C6/XNxxqVcIAAAAXKjXG3//3RXpgt0r2Kllm399379/b2lpaan44plTb/z50lK6YkNRjK0uisZ10b/98hdLrdsETxWTI6MtX49W3P1YxfXjFddPVFy/quL61RXXT1Zcv+wALLOm+fuYxo3d0PjnuuYhLa4qJhrX3dBlr6dGVo+Oxt/lNIw09lmaOFAcKg4Xc8XMsn1GGv8ripc2lvd1VxHva7TlvtYXRXH6Z0/si2sYCcf4hqLtzhpan7vXPlZsOPOzJ/Z9Z+HVd3eblYdh2UqLYvOmcp1PF8XZX1cVI8XqdEziOkdb1rm+yzrH2tY50tiv/HfnOk+vcJ3xcU+Gdf6oxzrXh8sevb4oisXinNt0eqoYLdZ23Gs63pPNM6K8jfKpfEcxfl7nycYVnCflPj+9vv086Twn4/HfGI7J+DnW0Pp0vPaVVcuO+5s9T8pHPQjnannb95R3OjnZ+qvVtnO13OaJG899DnR97rqcA+lcbjkHNlWdA6OrxhrnwOjZNW9qOwdml+0zWow07uvUjb3PgemFI8en5x97/JZDR/YenDs4d3R2Zse2rdu3bd2+ffrAocNzM82/z++QDpG1xWg6BzeF95p4Dr6/Y9vWU3LpmxfvdTA5IK+D8rF/9qZyQZePFuc4x8ttnt584a+D9H2/5XUw3vI66Pqe2uV1ML6C10G5zenNK/ueOd7yp9sa+vVeuK7lHLiU3w/L+7z/A+d+L1wf1vXMB8/3++HYsnMgPqyR8NorL0k/703eHo7L8vPi2vKKy1YVJ+fnTtz66N6FhROzRRhviStbnqvO82Vty2Mqlp0vo+d9vuz+21/ddG2Xy9eFYzV5c+/nqtxm21Tv56rx7t79eLZduqUI4yJ7q49nt+9m5fFMWaLH8Sy3efqWC/9ZMOWSlve/iar3v7GJ8eb731g6GhNt73/Ln5qxxsqK4vQtK3v/mwh/3ur3v6sG5P2vPFb339r7HCi3eWb6fM+B8Z7vf9eHORLW84GQGCZbcv8bjesXm6dpy3NZed6Mj0+E82Y83mP7ebN12T7lrZX3vXnmzZ03m69vf67afm6p4XlTHqu/mOl93pTbvDx74e8da+I/W947VlWdAxNjq8r1TqSToPl+t7QmngO3FvuKY8XhYn/ap3yWy/ua2rKyc2BV+PNWv3dcMyDnQHmsnt/S+xwot/nh1ov7s9PmcEnapuVnp87fL5wr8187fvb2Og/bxc785To/ua3374bKbV7ddr45o/dxujlcclmX49T5+jnXOb2/eGuO0zVhnYe39/7dVLnNVTtWeD7tLorildlXGr/vCr/f/YeT//G9tt/7dvud8iuzr9w9fe+Pz2f9AAC8eW80/l5c1fxZs+X/sV7J//8PAAAADIWY+0fDTOR/AAAAqI2Y+8fCTOR/AAAAqI2Y+8fDTDLJ/w/evvOF158s0qcBLgXx+ngY7vlIc7vY8V4MX29YOqu8/OPfnnjhq0+u7L5Hi6L41d3v6br9gx+J62o6Htf5ofbLl7nmuhXd/wP3nd2u9fMTTu9s3n58PCs9DWJX+aXpLY3b3fDYbGO+fHfRmPcuPvNU8/abX8ftT21tbv9X4UNLdh8Yadt/c1jPDWFuCJ8pc8/us8ehnHG/F9a/71+u/NzZ+4v7jWx6e+NhPv+HzduNnxH13JXN7ePjPtf6//lr332h3P7RG7uv/8nR7us/FW73p2H+cldz+9Zj/tWW9f9xWH+8v7jfrd/6Qdf1v/iu5vYvhvPiG2F2rv9jf/be17s9X/F+dt/R3C/e/8z/bGvsF28v3n7n+iefnG07Hp23//KZ5u3sevjnY63bx8vj/UQP3NF+fo+E57etR14UxXf/pGg7zsWHm/v9U8f64+0dv6P7+m/uWOfxkesa+599POvaHtfX/2ZL18cb17P779e1PZ7n7gzH78z0D8vbPXVvOB/D9f/7o+btdX6W6Yt3tr/fxO2/sa75uo23N92x/uc61r94XXnsqtd/15nm+l/86Oq29e/+VDif7mrOqvUf/Osr2vb/5neaz8eJR6aOHps/eWh/y1FtfR2vnlyz9rLL3/b2K8J7aefXe44tPDh3YsPMhpmi2DCEHxnY7/V/K8z/bo7Fi38PTT/+efO8e/bTze9b7/9F8+vnwuUPhOczfn/8+l9OtJ2vnc/74keb80LX/8Gwjm4eWrP8snd97b+uW9ENn/rCSyf/8Y9e7fy5ID6e4++cbDy+5zde3bhu5OXm9Z3vV1X+853tr+ufjM805vfDcV0Kn8y86erm/XXefvxskmc/03z9xp/k4v5Fx+eJrBtrfxwXuv6fhJ9jfnBN+/tfPD++/2THpzmvK0bKJSyG94disXl93Coe72dPX931/uLn8BSL7z6fZZ7T/GPz04cPHT356PTC3PzC9Pxjj+85cuzk0YU9jc8u3fOlqv3Pvr7XNl7f++d2bCsar/ZjzdFnl3r9x+/bt/+2mZv2zx3Ye/LAwn3H504c3Dc/v29u//xNew8cmHukav9D+3fNbtm59bYtUwcP7d91+86dW3dOHTp6rFxGc1EVdsx8eeroiT2NXeZ3bds5u337tpmpI8f2z+26bWZm6mTV/o3vTVPl3g9PnZg7vHfh0JG5qflDj8/tmt25Y8eWyk9/PHL8wPyG6RMnj06fnJ87Md18LBsWGheX3/uq9icP88fC+12HkfDT+edv3pE+H7f07a+c86aam7T/eFq8Fj4LKn5/q/o65v6JMJNM8j8AAADkIOb+8MH/Z6+Q/wEAAKA2Yu5fHWYi/wMAAEBtxNw/GWaSSf7X/9f/1//X/9f/1//vJ/3/S9f/70b/v/1x6P/r/+v/6//TX4PW/4+5f01RZJn/AQAAIAcx968NM5H/AQAAoDZi7r8szET+BwAAgNqIuf/yMJNM8r/+v/6//v9g9f9HO25H/1//X/+/N/1//f9C//9Nu9T9+WFfv/6//j/VBq3/H3P/28JMMsn/AAAAkIO3NX7LO1m8vSjkfwAAAKipmPuvCDOR/wEAAKA2Yu5fF2aSSf7X/9f/1/8frP6///6//r/+//nR/9f/L/T/37RL3Z8f9vXr/+v/U23Q+v8x9/+/MJNM8j8AAADkIOb+d4SZyP8AAABQGzH3XxlmIv8DAABAbcTcf1WYSSb5X/9f/1//X/9f/1//v5/0//X/e9H/1/8f5vXr/+v/U23Q+v8x978zzCST/A8AAAA5iLn/6jAT+R8AAABqI+b+d4WZyP8AAABQGzH3XxNmkkn+1//X/9f/1//X/9f/7yf9f/3/XvT/9f+Hef36//r/VBu0/n/M/e8OM8kk/wMAAEAOYu6/NsxE/gcAAIDaiLn/PWEm8j8AAADURsz968NMMsn/+v/6//r/+v/6//r//aT/r//fi/6//v8wr1//X/+faoPW/4+5/71hJpnkfwAAAMhBzP3vCzOR/wEAAKA2Yu6/LsxE/gcAAIDaiLl/Q5hJJvlf/1//X/9f/1///yL1/yf0/7vR/9f/70X/X/9/mNev/6//T7Vu/f/Vl7D/H3P/xjCTTPI/AAAA5CDm/k1hJvI/AAAA1EbM/deHmcj/AAAAUBsx998QZpJJ/tf/1//X/9f/1//33//vJ/1//f9e9P/1/4d5/fr/+v9U69b/Ly5h/z/m/hvDTDLJ/wAAAJCDmPtvCjOR/wEAAKA2Yu5/f5iJ/A8AAAC1EXP/5jCTTPK//r/+v/6//r/+v/5/P+n/6//3ov+v/z/M69f/1/+n2qD1/2Pu/0CYSSb5HwAAAHIQc/8Hw0zkfwAAAKiNmPtvDjOR/wEAAKA2Yu6fCjPJJP/r/+v/6//r/+v/6//3k/6//n8v+v/6/8O8fv1//X+qDVr/P+b+W8JMMsn/AAAAkIOY+28NM5H/AQAAoDZi7p8OM5H/AQAAoDZi7p8JM8kk/+v/6//r/+v/6//r//eT/r/+fy/6//r/w7x+/X/9f6oNWv8/5v7ZMJNM8j8AAADkIOb+LWEm8j8AAADURsz9W8NM5H8AAACojZj7t4WZZJL/9f/1//X/9f/1//X/+0n/X/+/F/1//f9hXr/+v/4/1Qat/x9z//Ywk0zyPwAAAOQg5v4dYSbyPwAAANRGzP23hZnI/wAAAFAbMfffHmaSSf7X/9f/1//X/9f/1//vJ/1//f9e9P/1/4d5/fr/+v9UG7T+f8z9O8NMMsn/AAAAkIOY+z8UZiL/AwAAQG3E3H9HmIn8DwAAALURc/+Hw0wyyf/6//r/+v/6//r/+v/9pP+v/9+L/r/+/zCvX/9f/59qg9b/j7l/V5hJJvkfAAAAchBz/0fCTOR/AAAAqI2Y+z8aZiL/AwAAQG3E3L87zCST/K//r/+v/6//r/+v/99P+v/6/73o/+v/D/P69f/1/6k2aP3/mPs/FmaSSf4HAACAHMTc//EwE/kfAAAAaiPm/k+Emcj/AAAAUBsx938yzCST/K//r/+v/6//r/+v/99P+v/6/73o/+v/D/P69f/1/6k2aP3/mPvvDDPJJP8DAABADmLu/1SYifwPAAAAw+Kqqg1i7v//YSbyPwAAANRGzP13hZlkkv/1//X/9f/1/1P//8xDHY9E/1///8Lp/+v/96L/r/8/zOvX/9f/p9qg9f9j7v+1MJNM8j8AAADkIOb+u8NM5H8AAACojZj7Px1mIv8DAABAbcTc/+thJpnkf/1//X/9f/1///1//f9+0v/X/+9F/1//f5jXr/+v/0+1Qev/x9z/G2EmmeR/AAAAyEHM/b8ZZiL/AwAAQG3E3P9bYSbyPwAAANRGzP33hJlkkv/1//X/9f/1//X/9f/7Sf9f/78X/X/9/2Fev/6//j/VBq3/H3P/b4eZZJL/AQAAIAcx998bZiL/AwAAQG3E3P+ZMBP5HwAAAGoj5v7Phplkkv/1//X/9f/1//X/9f/7Sf9f/78X/X/9/2Fev/6//j/VBq3/H3P/fWEmmeR/AAAAyEHM/Z8LM5H/AQAAoDZi7v+dMBP5HwAAAGoj5v7fDTPJJP/r/+v/6//r/+v/6//30/D0/1/vea3+f5P+fzv9f/1//X/9f3obtP5/zP2fDzPJJP8DAABADmLu/70wE/kfAAAAaiPm/t8PM5H/AQAAoDZi7r8/zCST/K//r/+v/6//r/+v/99Pw9P/703/v0n/v53+v/6//r/+P70NWv8/5v4vhJlkkv8BAAAgBzH3/0GYifwPAAAAtRFz/54wE/kfAAAAaiPm/gfCTDLJ//r/+v/6//r/+v/6//2k/6//34v+v/7/MK9f/1//n2qD1v+PuX9vmEkm+R8AAAByEHP/F8NM5H8AAACojZj794WZyP8AAABQGzH37w8zyST/6//r/+v/6//r/+v/95P+v/5/L/r/+v/DvH79f/1/qg1a/z/m/rkwk0zyPwAAAOQg5v4DYSbyPwAAANRGzP0Hw0zkfwAAAKiNmPsfDDPJJP/r/+v/6//r/+v/6//3k/6//n8v+v/6/8O8fv1//X+qDVr/P+b+Q2EmmeR/AAAAyEHM/V8KM5H/AQAAoDZi7v9ymIn8DwAAALURc//hMJNM8r/+v/6//r/+v/6//n8/6f/r//ei/6//P8zr1//X/6faoPX/Y+4/EmaSSf4HAACAHMTcfzTMRP4HAACA2oi5/1iYifwPAAAAtRFz//Ewk0zyv/6//r/+v/6//r/+fz/p/+v/96L/r/8/zOvX/9f/p9qg9f9j7n8ozCST/A8AAAA5iLn/RJiJ/A8AAAC1EXP/fJiJ/A8AAAC1EXP/QphJJvlf/1//X/9f/1//X/+/n/T/9f970f/X/x/m9ev/6/9TbdD6/zH3nwwzyST/AwAAQA5i7n84zET+BwAAgNqIuf+RMBP5HwAAAGoj5v5Hw0wyyf/6//r/+v/6//r/+v/9pP+v/9+L/r/+/zCvX/9f/59qg9b/j7n/sTCTTPI//8feXezqcSZxHLY8lzWrua1hZmZmZmZmZmZmnkniwCJKXFWRIrn7xHLLb1c9z6ZW/vQuvDj/xU8NAADABLn7Hxq32P8AAADQRu7+h8Ut9j8AAAC0kbv/4XHLkP2v/9f/6//1//p//f+R9P/6/y36f/3/md+v/9f/s2+1/j93/yPiliH7HwAAACbI3f/IuMX+BwAAgDZy9z8qbrH/AQAAoI3c/Y+OW4bsf/2//l//r//X/+v/j6T/1/9v0f/r/8/8/in9/+Vr/Hv9PxexWv+fu/8xccuQ/Q8AAAAT5O5/bNxi/wMAAEAbufsfF7fY/wAAANBG7v7Hxy1D9r/+X/+v/9f/6//1/0fS/+v/t+j/9f9nfv+U/v9a9P9cxGr9f+7+J8QtQ/Y/AAAATJC7/4lxi/0PAAAAbeTuf1LcYv8DAABAG7n7nxy3DNn/+n/9v/5f/6//1/8fSf+v/9+i/9f/n/n9+v+L9v9X9n6Kxlbr/3P3PyVuGbL/AQAAYILc/U+NW+x/AAAAaCN3/9PiFvsfAAAA2sjd//S4Zcj+1//r//X/+n/9v/7/SPp//f8W/b/+/8zv1//7/j/7Vuv/c/c/I24Zsv8BAABggtz9z4xb7H8AAABoI3f/s+IW+x8AAADayN3/7LhlyP7X/+v/9f/6f/2//v9I+n/9/xb9v/7/zO/X/+v/2bda/5+7/zlxy5D9DwAAABPk7n9u3GL/AwAAQBu5+58Xt9j/AAAA0Ebu/ufHLUP2v/5f/6//1//r//X/R9L/6/+36P/1/2d+v/5f/8++1fr/3P0viFuG7H8AAACYIHf/C+MW+x8AAADayN3/orjF/gcAAIA2cve/OG4Zsv/1//p//b/+X/+v/z+S/l//v0X/r/8/8/v1//p/9q3W/+fuf0ncMmT/AwAAwAS5+18at9j/AAAA0Ebu/pfFLfY/AAAAtJG7/+Vxy5D9r//X/+v/9f/6f/3/kfT/+v8t+n/9/5nfr//X/7Nvtf4/d/8r4pYh+x8AAAAmyN3/yrjF/gcAAIA2cve/Km6x/wEAAKCN3P2vjluG7H/9v/5f/6//1//r/4+k/9f/b9H/6//P/H79v/6ffav1/7n7XxO3DNn/AAAAMEHu/tfGLfY/AAAAtJG7/3Vxi/0PAAAAbeTuf33cMmT/6//1//p//b/+X/9/JP2//n+L/l//f+b36//1/+xbrf/P3f+GuGXI/gcAAIAJcve/MW6x/wEAAKCN3P1vilvsfwAAAGgjd/+b45Yh+1//r//X/+v/9f/6/yPp//X/W/T/+v8zv1//r/9n32r9f+7+t8QtQ/Y/AAAATJC7/61xi/0PAAAAbeTuf1vcYv8DAABAG7n733713pehDtn/+n/9v/5f/6//1/8fSf+v/9+i/9f/n/n9+n/9P/tW6/9j9196R9wyZP8DAADABLn73xm32P8AAADQRu7+d8Ut9j8AAAC0kbv/3XHLkP2v/9f/6//1//p//f+R9P/6/y36f/3/md+v/9f/s2+1/j93/3viliH7HwAAACbI3f/euMX+BwAAgDZy978vbrH/AQAAoI3c/e+PW4bsf/2//l//r//X/+v/j6T/1/9v0f/r/8/8fv2//p99q/X/ufs/ELcM2f8AAAAwQe7+D8Yt9j8AAAC0kbv/Q3GL/Q8AAABt5O7/cNwyZP/r//X/+n/9v/5/sf7/nh/U/1+Y/l//f0n/f91udj9/9vfr//X/7Fut/8/d/5G4Zcj+BwAAgAly9380brH/AQAAoI3c/R+LW+x/AAAAaCN3/8fjliH7X/+v/9f/6//1/4v1/77//4Do//X/l/T/1+1m9/Nnf7/+X//PvtX6/9z9n4hbhux/AAAAmCB3/yfjFvsfAAAA2sjd/6m4xf4HAACANnL3fzpuGbL/9f/6f/2//n9u//+Qe/8r6f+Ppf/X/2/R/+v/z/x+/b/+n32r9f+5+z8TtwzZ/wAAADBB7v7Pxi32PwAAALSRu/9zcYv9DwAAAG3k7v983DJk/+v/9f/6f/3/3P7/Kv3/sfT/+v8t+n/9/5nfr//X/7Nvtf4/d/8X4pYh+x8AAAAmyN3/xbjF/gcAAIA2cvd/KW6x/wEAAKCN3P1fjluG7H/9v/5f/6//1//r/4+k/9f/b9H/6/9v/PsffFn/r/9nHav1/7n7vxK3DNn/AAAAMEHu/q/GLfY/AAAAtJG7/2txi/0PAAAAy7p/R7ond//X45Yh+1//r//X/+v/9f/6/yPp//X/W/T/+v8zv1//r/9n32r9f+7+b8QtQ/Y/AAAATJC7/5txi/0PAAAAbeTu/1bcYv8DAABAG7n7vx23DNn/+n/9v/5f/6//1/8fSf+v/9+i/1+z/3+Q/l//r//nBlmt/8/d/524Zcj+BwAAgAly9383brH/AQAAoI3c/d+LW+x/AAAAaCN3//fjliH7X/+v/9f/6//1//r/I+n/9f9b9P9r9v++/6//1/9zo6zW/+fu/0HcMmT/AwAAwAS5+38Yt9j/AAAA0Ebu/h/FLfY/AAAAtJG7/8dxy5D9r//X/+v/9f/6f/3/kfT/+v8t+n/9/5nfr//X/7Nvtf4/d/9P4pYh+x8AAAAmyN3/07jF/gcAAIA2cvf/LG6x/wEAAKCN3P0/j1uG7H/9v/5f/6//1//r/4+k/9f/b9H/6//P/H79v/6ffav1/7n7fxG3DNn/AAAAMEHu/l/GLfY/AAAAtJG7/1dxi/0PAAAAbeTu/3XcMmT/6//1//p//b/+X/9/JP2//n+L/l//f+b36//1/+xbrf/P3f+buPWH3JD9DwAAABPk7v9t3GL/AwAAQBu5+38Xt9j/AAAA0Ebu/t/HLUP2v/5f/6//1//r//X/R9L/6/+36P/1/2d+v/5f/8++1fr/3P1/iFuG7H8AAACYIHf/H+MW+x8AAADayN3/p7jF/gcAAIA2cvf/OW4Zsv/1//p//b/+X/+v/z+S/l//v0X/r/8/8/v1//p/9q3W/+fu/0vcMmT/AwAAwAS5+/8at9j/AAAA0Ebu/r/FLfY/AAAAtJG7/+9xy5D9r//X/+v/9f/6f/3/kfT/+v8t+n/9/5nfr//X/7Nvtf4/d/8/4pYh+x8AAAAmyN3/z7jF/gcAAIA2cvf/K26x/wEAAKCN3P3/jluG7H/9v/5f/6//1//r/4+k/9f/b9H/6//P/H79v/6ffav1/7n7/xO3DNn/AAAAMEHu/v/GLfY/AAAAtJG7/39xi/0PAAAAbeTu/3/cMmT/6//1//p//b/+X/9/JP2//n+L/l//f+b36//1/+xbrf/P3X9L3DJk/wMAAMAEuftvjVvsfwAAAGgjd/9tcYv9DwAAAG3k7r8StwzZ//p//b/+X/+v/9f/H0n/r//fov/X/5/5/fp//T/7Vuv/c/ffHrcM2f8AAAAwQe7+O+IW+x8AAADayN1/Z9xi/wMAAEAbufvviluG7H/9v/5f/6//1//r/4+k/9f/b9H/6//P/H79v/6ffav1/7n77w4AAP//sMlF1g==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000840)='.\x00', 0x1a4a438, &(0x7f0000000880)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") 2.048401732s ago: executing program 9 (id=3033): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) truncate(&(0x7f0000000380)='./file2\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[], 0x3da) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fallocate(r0, 0x10, 0x401, 0xce7) 2.029473026s ago: executing program 1 (id=3034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xad}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xc7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="6631c2aba970dfee441c7957169857c3c82fe712222ef03cb014d1e7b1a29c6cd0d0a79b71e003a83badd9cf9cb85910609fbe46c5c1978ab4fa49eafe840eeb281242a0ca49fd78085aa063b822e114ae003be865aae7d2d0d483602b19276bb8ca", 0x62) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x2, 0x8, 0x5, '\x00', 0x100000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=3035): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/234, 0xea, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x4a00, 0x0, 0x0, 0x3}}, 0x48) kernel console output (not intermixed with test programs): : Test dummy encryption mode enabled [ 1044.314832][T12584] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1044.351909][ T8] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1044.431665][T12584] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.601825][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1044.627303][ T8] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1044.637083][ T8] usb 2-1: config 0 has no interface number 0 [ 1044.644635][ T8] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1044.802327][ T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1044.812889][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.821247][ T8] usb 2-1: Product: syz [ 1044.826179][ T8] usb 2-1: Manufacturer: syz [ 1044.831093][ T8] usb 2-1: SerialNumber: syz [ 1044.995389][ T8] usb 2-1: config 0 descriptor?? [ 1045.008048][T12596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1045.466371][ T8] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1045.477724][ T8] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1045.523943][ T8] usb 2-1: USB disconnect, device number 65 [ 1045.549108][T12584] fscrypt (loop6): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 1045.637714][T12619] loop2: detected capacity change from 0 to 512 [ 1046.132827][T11955] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1046.170553][T12619] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 1047.005339][T12633] hsr0: entered promiscuous mode [ 1047.107491][T12633] hsr_slave_0: left promiscuous mode [ 1047.171226][T12633] hsr_slave_1: left promiscuous mode [ 1047.281267][T12633] hsr0 (unregistering): left promiscuous mode [ 1048.326885][T12648] loop6: detected capacity change from 0 to 64 [ 1048.407109][ T29] audit: type=1326 audit(2000000352.740:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.5.2379" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x0 [ 1052.243937][T12671] loop2: detected capacity change from 0 to 256 [ 1055.281981][ T29] audit: type=1326 audit(2000000359.640:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.3.2395" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x0 [ 1055.417419][ T1678] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1055.642391][ T1678] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 1055.650955][ T1678] usb 7-1: config 0 has no interface number 0 [ 1055.657616][ T1678] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1055.669043][ T1678] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1055.678906][ T1678] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.943865][ T1678] usb 7-1: config 0 descriptor?? [ 1056.003070][ T1678] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input29 [ 1056.208406][T12696] loop2: detected capacity change from 0 to 1024 [ 1056.394645][T12696] EXT4-fs: Ignoring removed orlov option [ 1056.400633][T12696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1056.712361][ T1678] usb 7-1: USB disconnect, device number 2 [ 1056.867628][T12696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 1056.990727][T12696] System zones: 0-1, 3-36 [ 1057.083032][T12696] EXT4-fs: error -4 creating inode table initialization thread [ 1057.182986][T12696] EXT4-fs (loop2): mount failed [ 1062.128505][T12742] loop6: detected capacity change from 0 to 4096 [ 1062.183116][T12742] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1062.794987][T12742] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1063.052017][ T29] audit: type=1326 audit(2000000367.400:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.5.2406" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x0 [ 1063.665734][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2408'. [ 1065.003717][ T5839] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1065.259699][ T5839] usb 7-1: device descriptor read/64, error -71 [ 1065.498491][T12766] loop5: detected capacity change from 0 to 32768 [ 1065.515444][T12766] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2410 (12766) [ 1065.548311][ T5839] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1065.548391][T12766] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1065.573218][T12766] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 1065.583499][T12766] BTRFS info (device loop5): using free-space-tree [ 1065.870202][ T5839] usb 7-1: device descriptor read/64, error -71 [ 1066.131857][ T5839] usb usb7-port1: attempt power cycle [ 1066.214723][ T6394] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1066.532632][ T5839] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1066.802711][ T5839] usb 7-1: device descriptor read/8, error -71 [ 1067.051920][ T5839] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1067.156949][ T5839] usb 7-1: device descriptor read/8, error -71 [ 1067.283464][ T5839] usb usb7-port1: unable to enumerate USB device [ 1069.964175][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2422'. [ 1069.973742][T12825] bridge_slave_1: left allmulticast mode [ 1069.979660][T12825] bridge_slave_1: left promiscuous mode [ 1069.986817][T12825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.423182][T12825] bridge_slave_0: left allmulticast mode [ 1070.429222][T12825] bridge_slave_0: left promiscuous mode [ 1070.438360][T12825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.852202][T10975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1070.863907][T10975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1070.875110][T10975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1070.998162][T10975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1071.014425][T10975] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1071.029516][T10975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1073.368050][ T5791] Bluetooth: hci3: command tx timeout [ 1073.681974][T11479] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1073.722145][T12830] chnl_net:caif_netlink_parms(): no params data found [ 1073.861708][T11479] usb 7-1: device descriptor read/64, error -71 [ 1074.191956][T11479] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1074.333291][T12856] loop3: detected capacity change from 0 to 4096 [ 1074.373715][T11479] usb 7-1: device descriptor read/64, error -71 [ 1074.541983][T11479] usb usb7-port1: attempt power cycle [ 1074.689575][T12865] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1075.142206][T11479] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1075.195844][T11479] usb 7-1: device descriptor read/8, error -71 [ 1075.425369][T12856] loop3: detected capacity change from 4096 to 64 [ 1075.446843][ T5791] Bluetooth: hci3: command tx timeout [ 1075.551902][T11479] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1075.638002][T11479] usb 7-1: device descriptor read/8, error -71 [ 1075.655525][T12830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.663616][T12830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.681859][T12830] bridge_slave_0: entered allmulticast mode [ 1075.692263][T12830] bridge_slave_0: entered promiscuous mode [ 1075.766167][T11479] usb usb7-port1: unable to enumerate USB device [ 1075.838905][T12830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.847481][T12830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.858682][T12830] bridge_slave_1: entered allmulticast mode [ 1075.869605][T12830] bridge_slave_1: entered promiscuous mode [ 1076.273445][T12830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.491052][T12830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.366659][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2436'. [ 1077.401143][T12830] team0: Port device team_slave_0 added [ 1077.516934][T12830] team0: Port device team_slave_1 added [ 1077.534266][ T5791] Bluetooth: hci3: command tx timeout [ 1078.078516][T12830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.085991][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.116521][T12830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.379952][T12830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.389722][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.422589][T12830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.241156][T12830] hsr_slave_0: entered promiscuous mode [ 1079.313527][T12830] hsr_slave_1: entered promiscuous mode [ 1079.603982][ T5791] Bluetooth: hci3: command tx timeout [ 1081.408500][T12905] loop6: detected capacity change from 0 to 4096 [ 1081.755779][T12911] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1081.913226][ T9762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.944421][ T29] audit: type=1800 audit(2000000386.300:83): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2442" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1082.656716][ T9762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.766165][T12830] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1082.973456][ T9762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.062486][T12830] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1083.134237][T12830] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1083.243948][T12830] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1083.437875][ T9762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.295087][ T9762] bridge_slave_1: left allmulticast mode [ 1084.303541][ T9762] bridge_slave_1: left promiscuous mode [ 1084.310416][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.433342][ T9762] bridge_slave_0: left allmulticast mode [ 1084.443412][ T9762] bridge_slave_0: left promiscuous mode [ 1084.450163][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.323467][ T9762] dvmrp0 (unregistering): left allmulticast mode [ 1085.440779][T12924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1085.536687][T12924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1085.553476][ T9762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.565193][T12924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1085.595435][T12924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1085.624088][T12924] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1085.638574][T12924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1085.650207][ T9762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.857958][ T9762] bond0 (unregistering): Released all slaves [ 1086.502008][T10975] Bluetooth: hci2: command 0x0406 tx timeout [ 1087.514243][ T9762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.529256][ T9762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.634857][ T9762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.642872][ T9762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.761839][ T9762] veth1_macvtap: left promiscuous mode [ 1087.767807][ T9762] veth0_macvtap: left promiscuous mode [ 1087.775056][ T9762] veth1_vlan: left promiscuous mode [ 1087.785115][ T9762] veth0_vlan: left promiscuous mode [ 1087.785270][ T5791] Bluetooth: hci0: command tx timeout [ 1089.446969][ T9762] team0 (unregistering): Port device team_slave_1 removed [ 1089.507943][ T9762] team0 (unregistering): Port device team_slave_0 removed [ 1089.562073][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.568818][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1089.847885][ T5791] Bluetooth: hci0: command tx timeout [ 1090.949130][T12830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.206879][T12830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.337058][ T4056] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.509813][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.517806][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.608513][ T4056] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.739549][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.747536][ T4816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.814197][ T4056] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.869856][T12923] chnl_net:caif_netlink_parms(): no params data found [ 1091.922445][ T5791] Bluetooth: hci0: command tx timeout [ 1092.047228][ T4056] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.982922][ T4056] bridge_slave_1: left allmulticast mode [ 1092.988908][ T4056] bridge_slave_1: left promiscuous mode [ 1092.996181][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.133034][ T4056] bridge_slave_0: left allmulticast mode [ 1093.139125][ T4056] bridge_slave_0: left promiscuous mode [ 1093.148393][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.796333][ T4056] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1093.920000][ T4056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.004332][ T4056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.016009][ T5791] Bluetooth: hci0: command tx timeout [ 1094.100271][ T4056] bond0 (unregistering): Released all slaves [ 1095.175323][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.183321][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.256449][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.264447][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.337994][ T4056] veth1_macvtap: left promiscuous mode [ 1095.344311][ T4056] veth0_macvtap: left promiscuous mode [ 1095.350249][ T4056] veth1_vlan: left promiscuous mode [ 1095.358430][ T4056] veth0_vlan: left promiscuous mode [ 1096.739494][ T4056] team0 (unregistering): Port device team_slave_1 removed [ 1096.844790][ T4056] team0 (unregistering): Port device team_slave_0 removed [ 1097.330480][T12924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1097.409884][T12924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1097.420698][T12924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1097.436827][T12924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1097.450453][T12924] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1097.461936][T12924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1097.637696][T12923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.646190][T12923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.656126][T12923] bridge_slave_0: entered allmulticast mode [ 1097.665949][T12923] bridge_slave_0: entered promiscuous mode [ 1098.068674][T12923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.076752][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.084901][T12923] bridge_slave_1: entered allmulticast mode [ 1098.094425][T12923] bridge_slave_1: entered promiscuous mode [ 1098.179756][T12830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.221018][T12995] dvmrp0: entered allmulticast mode [ 1098.713176][T12923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.807112][T12923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.551331][T12923] team0: Port device team_slave_0 added [ 1099.604036][ T5791] Bluetooth: hci4: command tx timeout [ 1099.684177][T12923] team0: Port device team_slave_1 added [ 1100.147051][T12923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.154502][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.183498][T12923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.401187][T12923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.408743][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.437765][T12923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.742963][T12990] chnl_net:caif_netlink_parms(): no params data found [ 1101.176282][T12923] hsr_slave_0: entered promiscuous mode [ 1101.286908][T12923] hsr_slave_1: entered promiscuous mode [ 1101.321818][T12923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1101.329761][T12923] Cannot create hsr debugfs directory [ 1101.728029][ T5791] Bluetooth: hci4: command tx timeout [ 1103.022584][T12923] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1103.149672][T12923] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1103.386190][T12923] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1103.495559][T12990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.503538][T12990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.511728][T12990] bridge_slave_0: entered allmulticast mode [ 1103.523278][T12990] bridge_slave_0: entered promiscuous mode [ 1103.558414][T12830] veth0_vlan: entered promiscuous mode [ 1103.567009][T12923] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1103.597626][T12990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.605644][T12990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.614031][T12990] bridge_slave_1: entered allmulticast mode [ 1103.623852][T12990] bridge_slave_1: entered promiscuous mode [ 1103.770344][ T5791] Bluetooth: hci4: command tx timeout [ 1103.852520][T12990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.896366][T12990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.779829][T12830] veth1_vlan: entered promiscuous mode [ 1104.941651][T12990] team0: Port device team_slave_0 added [ 1104.959344][T12990] team0: Port device team_slave_1 added [ 1105.636906][T12830] veth0_macvtap: entered promiscuous mode [ 1105.661099][T12830] veth1_macvtap: entered promiscuous mode [ 1105.780882][T12990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.789044][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.817856][T12990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.845488][T12990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.852819][ T5791] Bluetooth: hci4: command tx timeout [ 1105.859208][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.886254][T12990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.219764][T12830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.230645][T12830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.240991][T12830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.252958][T12830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.268777][T12830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.343373][T12990] hsr_slave_0: entered promiscuous mode [ 1106.366717][T12990] hsr_slave_1: entered promiscuous mode [ 1106.389785][T12990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1106.399084][T12990] Cannot create hsr debugfs directory [ 1106.466910][T12830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.477938][T12830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.489029][T12830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.499877][T12830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.515463][T12830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.705489][T12830] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.714741][T12830] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.726686][T12830] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.736885][T12830] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.342752][T12923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.847055][T12923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.071257][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.079146][ T4056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.175537][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.183453][ T4056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.611915][T12990] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1108.788771][T12990] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1108.950260][T12990] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1109.073797][T12990] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1110.544508][T13075] dvmrp0: entered allmulticast mode [ 1110.996725][T12990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.850235][T12990] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.884418][ T9744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.892245][ T9744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.941148][T12923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.154122][ T9744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.162027][ T9744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.727889][T13095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1113.734588][T13095] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1113.911250][T13095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1113.919107][T13095] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1113.978663][T13095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1113.987875][T13095] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1114.086192][T13095] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1114.128461][T13095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1114.136152][T13095] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1114.148162][T13095] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1114.160321][T13095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1114.168774][T13095] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1114.183725][T13095] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1115.044674][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1116.005087][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout [ 1116.012003][T12924] Bluetooth: hci2: command 0x0406 tx timeout [ 1116.171995][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 1116.242724][ T5791] Bluetooth: hci4: command 0x0c1a tx timeout [ 1116.276554][T12990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.407505][T12923] veth0_vlan: entered promiscuous mode [ 1116.590394][T12923] veth1_vlan: entered promiscuous mode [ 1117.123867][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1117.142208][T12923] veth0_macvtap: entered promiscuous mode [ 1117.305859][T12923] veth1_macvtap: entered promiscuous mode [ 1117.468931][T13136] loop6: detected capacity change from 0 to 128 [ 1117.574519][T13136] ADFS-fs (loop6): error: can't find an ADFS filesystem on dev loop6. [ 1117.600954][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.612318][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.623831][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.634990][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.645346][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.656179][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.671783][T12923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.731640][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.742558][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.752772][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.763707][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.773966][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.787202][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.803988][T12923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.827713][T12923] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.836986][T12923] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.847964][T12923] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.858202][T12923] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.084951][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout [ 1118.093858][T12924] Bluetooth: hci2: command 0x0406 tx timeout [ 1118.290074][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 1118.324673][ T5791] Bluetooth: hci4: command 0x0c1a tx timeout [ 1118.476268][T12943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.485190][T12943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.782594][ T9762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.790727][ T9762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.272042][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout [ 1120.321671][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 1120.379221][T13165] loop6: detected capacity change from 0 to 512 [ 1120.429071][ T5791] Bluetooth: hci4: command 0x0c1a tx timeout [ 1121.062916][T13163] loop7: detected capacity change from 0 to 32768 [ 1121.457518][T13165] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1121.481905][T13163] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2423 (13163) [ 1121.561262][T13165] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2474: invalid indirect mapped block 8 (level 2) [ 1121.698213][T13165] EXT4-fs (loop6): Remounting filesystem read-only [ 1121.713451][T13165] EXT4-fs (loop6): 1 truncate cleaned up [ 1121.721716][T13165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.873085][T13163] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1121.886591][T13163] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 1121.899497][T13163] BTRFS info (device loop7): using free-space-tree [ 1121.926636][T12990] veth0_vlan: entered promiscuous mode [ 1122.054404][T12990] veth1_vlan: entered promiscuous mode [ 1122.253226][T12990] veth0_macvtap: entered promiscuous mode [ 1122.277872][T12990] veth1_macvtap: entered promiscuous mode [ 1122.405678][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.416720][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.429967][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.442584][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.453311][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.464118][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.474434][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.485694][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.504285][T12990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.642614][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.653492][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.663878][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.674882][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.675144][T13165] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 1122.685045][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.685154][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.720399][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.733088][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.754506][T12990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.933433][T12990] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.945820][T12990] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.956086][T12990] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.966261][T12990] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.990154][T12830] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1124.123637][T11955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.023986][T13233] loop6: detected capacity change from 0 to 2048 [ 1127.834694][T13233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1127.851292][T13233] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.065249][T13233] fs-verity: sha512 using implementation "sha512-generic" [ 1128.105366][T13246] netlink: 'syz.2.2480': attribute type 9 has an invalid length. [ 1128.283243][T13233] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2481: bg 0: block 440: padding at end of block bitmap is not set [ 1128.445371][T13233] fs-verity (loop6, inode 13): ext4_end_enable_verity() failed with err -117 [ 1128.999344][T11955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.729461][ T9724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.737681][ T9724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.251054][ T4056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.260809][ T4056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.075762][ T9744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.084163][ T9744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.281805][T12928] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1134.492544][ T9718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.500758][ T9718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.506610][T13295] dvmrp0: entered allmulticast mode [ 1134.524517][T12928] usb 9-1: device descriptor read/64, error -71 [ 1134.874767][T12928] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1135.122835][T12928] usb 9-1: device descriptor read/64, error -71 [ 1135.263235][T12928] usb usb9-port1: attempt power cycle [ 1135.484770][T13306] binder_alloc: 13304: binder_alloc_buf, no vma [ 1135.860945][T13309] loop7: detected capacity change from 0 to 256 [ 1135.940037][T13309] exfat: Deprecated parameter 'namecase' [ 1135.953309][T13309] exfat: Deprecated parameter 'utf8' [ 1135.971929][T12928] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1136.005262][T12928] usb 9-1: device descriptor read/8, error -71 [ 1136.542293][T13309] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1136.592055][T12928] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1137.001589][T12928] usb 9-1: device descriptor read/8, error -71 [ 1137.187471][T12928] usb usb9-port1: unable to enumerate USB device [ 1138.110528][T13327] loop8: detected capacity change from 0 to 512 [ 1138.433347][T13323] loop9: detected capacity change from 0 to 32768 [ 1138.478455][T13327] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1138.489843][T13323] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2496 (13323) [ 1138.759090][T13323] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1138.769989][T13323] BTRFS info (device loop9): using sha256 (sha256-generic) checksum algorithm [ 1138.783937][T13323] BTRFS info (device loop9): using free-space-tree [ 1138.836147][T13327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1138.933712][T13327] System zones: 1-12 [ 1138.997336][T13327] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1139.072290][T13327] EXT4-fs (loop8): 1 truncate cleaned up [ 1139.083218][T13327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.458042][T13323] BTRFS error (device loop9): open_ctree failed [ 1141.054576][T12928] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1142.823832][T12923] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.066586][T12928] usb 9-1: device not accepting address 6, error -71 [ 1143.701692][ T8] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1143.861777][ T8] usb 3-1: device descriptor read/64, error -71 [ 1144.167555][ T8] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1144.329738][T13385] loop6: detected capacity change from 0 to 2048 [ 1144.383141][ T8] usb 3-1: device descriptor read/64, error -71 [ 1144.515164][ T8] usb usb3-port1: attempt power cycle [ 1144.835513][T13392] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1144.974337][ T8] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1145.036147][ T8] usb 3-1: device descriptor read/8, error -71 [ 1145.522789][ T8] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1145.691016][ T8] usb 3-1: device descriptor read/8, error -71 [ 1145.828100][ T8] usb usb3-port1: unable to enumerate USB device [ 1146.122249][ T5839] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1146.355435][ T5839] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1146.364878][ T5839] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.375600][ T5839] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1146.385067][ T5839] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1146.400647][ T5839] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1146.790068][ T5839] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1146.803738][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1146.813876][ T5839] usb 8-1: Product: syz [ 1146.818450][ T5839] usb 8-1: Manufacturer: syz [ 1146.892782][ T5839] cdc_wdm 8-1:1.0: skipping garbage [ 1146.898354][ T5839] cdc_wdm 8-1:1.0: skipping garbage [ 1146.921176][ T5839] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1146.927633][ T5839] cdc_wdm 8-1:1.0: Unknown control protocol [ 1147.398299][ T5839] usb 8-1: USB disconnect, device number 2 [ 1148.557026][T13416] loop6: detected capacity change from 0 to 4096 [ 1148.765874][T13420] dvmrp0: entered allmulticast mode [ 1148.817102][T13421] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1150.832045][T13443] loop7: detected capacity change from 0 to 2048 [ 1150.990661][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.000014][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.225338][T13452] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1152.527669][T13461] warning: `syz.9.2527' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1154.319801][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 1154.328236][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 1154.429009][T13473] ceph: No mds server is up or the cluster is laggy [ 1155.265783][T13482] loop6: detected capacity change from 0 to 4096 [ 1155.768444][T13489] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1155.871304][T13491] loop8: detected capacity change from 0 to 164 [ 1156.112786][T13491] rock: directory entry would overflow storage [ 1156.123205][T13491] rock: sig=0x66, size=4, remaining=3 [ 1156.562001][T13491] rock: directory entry would overflow storage [ 1156.568439][T13491] rock: sig=0x66, size=4, remaining=3 [ 1156.860389][T13500] loop6: detected capacity change from 0 to 2048 [ 1157.229858][T13501] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1160.959676][T13516] netlink: 'syz.9.2542': attribute type 4 has an invalid length. [ 1162.563001][T13549] loop9: detected capacity change from 0 to 164 [ 1162.688268][T13549] rock: directory entry would overflow storage [ 1162.695009][T13549] rock: sig=0x66, size=4, remaining=3 [ 1163.025224][T13554] rock: directory entry would overflow storage [ 1163.032100][T13554] rock: sig=0x66, size=4, remaining=3 [ 1163.203288][ T8] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1163.422607][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 1163.509207][ T8] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1163.517920][ T8] usb 7-1: config 0 has no interface number 0 [ 1163.524855][ T8] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1163.670144][ T8] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1163.680133][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.688964][ T8] usb 7-1: Product: syz [ 1163.693602][ T8] usb 7-1: Manufacturer: syz [ 1163.702463][ T8] usb 7-1: SerialNumber: syz [ 1163.835522][ T8] usb 7-1: config 0 descriptor?? [ 1163.845246][T13552] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1164.194242][ T8] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1164.213171][ T8] asix 7-1:0.188: probe with driver asix failed with error -71 [ 1164.443595][ T8] usb 7-1: USB disconnect, device number 11 [ 1165.686001][ T5791] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1167.872614][T12924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1167.885762][T12924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1167.901242][T12924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1168.065462][T12924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1168.077474][T12924] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1168.088472][T12924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1168.807219][T13597] loop7: detected capacity change from 0 to 16 [ 1168.932537][T13597] erofs (device loop7): mounted with root inode @ nid 36. [ 1170.140329][T13610] loop6: detected capacity change from 0 to 512 [ 1170.192418][ T5791] Bluetooth: hci5: command tx timeout [ 1170.256696][T13611] loop9: detected capacity change from 0 to 164 [ 1170.349000][T13589] chnl_net:caif_netlink_parms(): no params data found [ 1170.404435][T13611] rock: directory entry would overflow storage [ 1170.411056][T13611] rock: sig=0x66, size=4, remaining=3 [ 1170.790574][T13610] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1171.087551][T13611] rock: directory entry would overflow storage [ 1171.094380][T13611] rock: sig=0x66, size=4, remaining=3 [ 1171.143558][T13610] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2565: invalid indirect mapped block 8 (level 2) [ 1171.312344][T13610] EXT4-fs (loop6): Remounting filesystem read-only [ 1171.453832][T13610] EXT4-fs (loop6): 1 truncate cleaned up [ 1171.462364][T13610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.251562][ T5791] Bluetooth: hci5: command tx timeout [ 1172.269828][T13610] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 1173.296175][T11955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.343024][T13589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.351008][T13589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.360399][T13589] bridge_slave_0: entered allmulticast mode [ 1173.378359][T13589] bridge_slave_0: entered promiscuous mode [ 1173.432458][T13589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.440311][T13589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.448565][T13589] bridge_slave_1: entered allmulticast mode [ 1173.458581][T13589] bridge_slave_1: entered promiscuous mode [ 1174.296092][T13589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.321877][ T5791] Bluetooth: hci5: command tx timeout [ 1174.323017][T13589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.068593][T13589] team0: Port device team_slave_0 added [ 1176.200176][T13589] team0: Port device team_slave_1 added [ 1176.424892][ T5791] Bluetooth: hci5: command tx timeout [ 1177.032559][T13589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.039798][T13589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.066614][T13589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.371017][T13589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.380568][T13589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.408140][T13589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.985992][T13589] hsr_slave_0: entered promiscuous mode [ 1178.014718][T13589] hsr_slave_1: entered promiscuous mode [ 1178.329421][T13652] loop9: detected capacity change from 0 to 4096 [ 1178.702233][T13589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1178.712702][T13589] Cannot create hsr debugfs directory [ 1178.836553][T13652] NILFS (loop9): invalid segment: Checksum error in segment payload [ 1178.845140][T13652] NILFS (loop9): trying rollback from an earlier position [ 1179.156889][T13652] NILFS (loop9): recovery complete [ 1179.212316][T13658] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1179.810318][T13652] overlayfs: upper fs does not support tmpfile. [ 1179.818273][T13652] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1179.825931][T13652] overlayfs: failed to set xattr on upper [ 1179.832603][T13652] overlayfs: ...falling back to redirect_dir=nofollow. [ 1179.842019][T13652] overlayfs: ...falling back to index=off. [ 1179.848066][T13652] overlayfs: ...falling back to uuid=null. [ 1179.883231][T13661] loop7: detected capacity change from 0 to 164 [ 1179.932984][T13661] rock: directory entry would overflow storage [ 1179.941813][T13661] rock: sig=0x66, size=4, remaining=3 [ 1180.166032][T13661] rock: directory entry would overflow storage [ 1180.173645][T13661] rock: sig=0x66, size=4, remaining=3 [ 1180.611967][T13665] loop6: detected capacity change from 0 to 512 [ 1181.144999][T13665] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1181.502484][T13665] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2577: invalid indirect mapped block 8 (level 2) [ 1181.709234][T13665] EXT4-fs (loop6): Remounting filesystem read-only [ 1181.746176][T13665] EXT4-fs (loop6): 1 truncate cleaned up [ 1181.754611][T13665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1182.482770][T11955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.239182][ T29] audit: type=1326 audit(2000000487.560:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13691 comm="syz.7.2584" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02579 code=0x0 [ 1184.781083][T13589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1184.918459][T13589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1185.026782][T13589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1185.183159][T13589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1185.771176][T13712] loop6: detected capacity change from 0 to 164 [ 1186.160649][T13718] loop8: detected capacity change from 0 to 512 [ 1186.200245][T13589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.259301][T13589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.315832][T13271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.324013][T13271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.347884][T13271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.355840][T13271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.702129][T13712] rock: directory entry would overflow storage [ 1186.708662][T13712] rock: sig=0x66, size=4, remaining=3 [ 1186.904918][T13718] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1186.954872][T13718] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2591: invalid indirect mapped block 8 (level 2) [ 1187.039092][T13718] EXT4-fs (loop8): Remounting filesystem read-only [ 1187.142806][T13712] rock: directory entry would overflow storage [ 1187.152932][T13712] rock: sig=0x66, size=4, remaining=3 [ 1187.186366][T13718] EXT4-fs (loop8): 1 truncate cleaned up [ 1187.194556][T13718] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.633986][T13733] loop6: detected capacity change from 0 to 128 [ 1188.686985][T12923] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.726010][T13589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.833316][T13733] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1188.960091][T13733] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1189.082172][T13733] ext2 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.017669][T13740] evm: overlay not supported [ 1190.135239][T13741] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 1190.272140][T13741] overlayfs: failed to look up (file1) for ino (-5) [ 1191.049975][T11955] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1192.902283][ T29] audit: type=1326 audit(2000000496.490:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.6.2596" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 1193.295848][T13758] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1193.305121][T13758] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1193.309818][T13589] veth0_vlan: entered promiscuous mode [ 1193.314303][T13758] overlayfs: missing 'lowerdir' [ 1193.399971][T13589] veth1_vlan: entered promiscuous mode [ 1193.529343][T13589] veth0_macvtap: entered promiscuous mode [ 1193.555428][T13589] veth1_macvtap: entered promiscuous mode [ 1193.695111][T13589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.710342][T13589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.722413][T13589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.733405][T13589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.743808][T13589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.754798][T13589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.767494][T13589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.778810][T13589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.789200][T13589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.799953][T13589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.818435][T13589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.850566][T13589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.861639][T13589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.874638][T13589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.888447][T13589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.898707][T13589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.912985][T13589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.924255][T13589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.937078][T13589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.947396][T13589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.958359][T13589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.977815][T13589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.000668][T13589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.014690][T13589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.024980][T13589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.034287][T13589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.051871][T13770] loop9: detected capacity change from 0 to 512 [ 1196.382182][T13773] loop7: detected capacity change from 0 to 164 [ 1196.605971][T13773] rock: directory entry would overflow storage [ 1196.612624][T13773] rock: sig=0x66, size=4, remaining=3 [ 1196.853496][T13770] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1196.890385][T13773] rock: directory entry would overflow storage [ 1196.897091][T13773] rock: sig=0x66, size=4, remaining=3 [ 1197.022086][T13770] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2603: invalid indirect mapped block 8 (level 2) [ 1197.148374][T13770] EXT4-fs (loop9): Remounting filesystem read-only [ 1197.216136][T13770] EXT4-fs (loop9): 1 truncate cleaned up [ 1197.224342][T13770] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.918974][T12990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.407745][T13787] loop6: detected capacity change from 0 to 512 [ 1199.540146][T13787] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1199.547673][T13787] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1199.933577][T13787] EXT4-fs (loop6): 1 truncate cleaned up [ 1199.941646][T13787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.687919][T13817] loop7: detected capacity change from 0 to 164 [ 1203.507665][T13817] rock: directory entry would overflow storage [ 1203.514418][T13817] rock: sig=0x66, size=4, remaining=3 [ 1203.537478][T13817] rock: directory entry would overflow storage [ 1203.544162][T13817] rock: sig=0x66, size=4, remaining=3 [ 1206.840867][ T5791] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1207.169427][ T9762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.179724][ T9762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.648042][T11955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.695382][T13826] loop7: detected capacity change from 0 to 512 [ 1207.854222][T12943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.862570][T12943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.377710][T13826] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1208.477522][T13826] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2617: invalid indirect mapped block 8 (level 2) [ 1208.535603][T13826] EXT4-fs (loop7): Remounting filesystem read-only [ 1208.565379][T13826] EXT4-fs (loop7): 1 truncate cleaned up [ 1208.573620][T13826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1209.873066][T12830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.105334][T13840] loop7: detected capacity change from 0 to 4096 [ 1211.462435][T13847] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1211.765493][ T29] audit: type=1800 audit(2000000516.130:86): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2621" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1212.456450][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.463602][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1213.233170][T13856] loop7: detected capacity change from 0 to 164 [ 1213.310048][T13856] rock: directory entry would overflow storage [ 1213.317186][T13856] rock: sig=0x66, size=4, remaining=3 [ 1213.485584][T13856] rock: directory entry would overflow storage [ 1213.492288][T13856] rock: sig=0x66, size=4, remaining=3 [ 1214.406931][ T5791] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1215.567549][T13869] loop8: detected capacity change from 0 to 512 [ 1216.044990][T13869] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1216.524849][T13869] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2631: invalid indirect mapped block 8 (level 2) [ 1216.566002][T13869] EXT4-fs (loop8): Remounting filesystem read-only [ 1216.574211][T13869] EXT4-fs (loop8): 1 truncate cleaned up [ 1216.582455][T13869] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1217.176068][T12923] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.482146][T13891] loop6: detected capacity change from 0 to 4096 [ 1221.702598][T13899] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1222.162121][ T29] audit: type=1800 audit(2000000526.510:87): pid=13891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2633" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1222.328444][ T29] audit: type=1800 audit(2000000526.590:88): pid=13891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2633" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1223.833760][T13905] loop9: detected capacity change from 0 to 4096 [ 1223.977190][T13912] loop6: detected capacity change from 0 to 164 [ 1224.157912][T13915] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1224.454740][ T29] audit: type=1800 audit(2000000528.800:89): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2636" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 1224.538813][T13917] loop8: detected capacity change from 0 to 256 [ 1224.631931][T13912] rock: directory entry would overflow storage [ 1224.638377][T13912] rock: sig=0x66, size=4, remaining=3 [ 1224.720316][T13917] exfat: Deprecated parameter 'namecase' [ 1224.733655][T13917] exfat: Deprecated parameter 'utf8' [ 1224.863657][T13912] rock: directory entry would overflow storage [ 1224.870098][T13912] rock: sig=0x66, size=4, remaining=3 [ 1225.051595][T13917] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1226.034847][T13928] loop7: detected capacity change from 0 to 512 [ 1226.617127][T13928] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1227.249182][ T5791] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1227.259029][T13928] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2642: invalid indirect mapped block 8 (level 2) [ 1227.472684][T12924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1227.482761][T12924] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1227.505657][T12924] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1227.520343][T12924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1227.868524][T13928] EXT4-fs (loop7): Remounting filesystem read-only [ 1227.876695][T13928] EXT4-fs (loop7): 1 truncate cleaned up [ 1227.884858][T13928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1227.928662][T13931] loop6: detected capacity change from 0 to 32768 [ 1227.933014][T12924] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1227.973002][T12924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1228.754869][T12830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.473752][T13931] workqueue: Failed to create a rescuer kthread for wq "bcachefs_btree_write_sumit": -EINTR [ 1229.474138][T13931] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 1230.203186][ T5791] Bluetooth: hci1: command tx timeout [ 1230.609186][T13931] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 1232.522907][ T5791] Bluetooth: hci1: command tx timeout [ 1234.731756][T12924] Bluetooth: hci1: command tx timeout [ 1235.162171][T13941] chnl_net:caif_netlink_parms(): no params data found [ 1235.365740][T13969] loop9: detected capacity change from 0 to 4096 [ 1235.720733][T13978] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1235.964645][ T29] audit: type=1800 audit(2000000540.320:90): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2651" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 1236.814025][T12924] Bluetooth: hci1: command tx timeout [ 1236.987312][T13991] loop6: detected capacity change from 0 to 256 [ 1237.005315][T13991] exfat: Deprecated parameter 'namecase' [ 1237.012362][T13991] exfat: Deprecated parameter 'utf8' [ 1237.508084][T13993] loop7: detected capacity change from 0 to 164 [ 1237.537289][T13991] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1237.743651][T13993] rock: directory entry would overflow storage [ 1237.750276][T13993] rock: sig=0x66, size=4, remaining=3 [ 1237.758006][T13941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.766774][T13941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.775390][T13941] bridge_slave_0: entered allmulticast mode [ 1237.785517][T13941] bridge_slave_0: entered promiscuous mode [ 1238.028817][T13992] rock: directory entry would overflow storage [ 1238.035629][T13992] rock: sig=0x66, size=4, remaining=3 [ 1238.233845][T13941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.251262][T13941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.259775][T13941] bridge_slave_1: entered allmulticast mode [ 1238.273494][T13941] bridge_slave_1: entered promiscuous mode [ 1239.190646][T13941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.290720][T13941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.311729][T14002] loop8: detected capacity change from 0 to 512 [ 1239.934767][T13941] team0: Port device team_slave_0 added [ 1240.070916][T13941] team0: Port device team_slave_1 added [ 1240.266518][T14009] loop7: detected capacity change from 0 to 512 [ 1240.652390][T14009] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1240.741995][T14009] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2659: invalid indirect mapped block 8 (level 2) [ 1240.882192][T14009] EXT4-fs (loop7): Remounting filesystem read-only [ 1240.954881][T13941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.962239][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.992143][T13941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.132659][T14009] EXT4-fs (loop7): 1 truncate cleaned up [ 1241.140925][T14009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1241.158974][T13941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.166494][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.196229][T13941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.238219][T12924] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1241.470013][T14009] EXT4-fs: can't change dax mount option while remounting [ 1241.512357][T13941] hsr_slave_0: entered promiscuous mode [ 1241.665845][T13941] hsr_slave_1: entered promiscuous mode [ 1241.704333][T13941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1241.712897][T13941] Cannot create hsr debugfs directory [ 1242.114740][T12830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.669655][T14038] loop6: detected capacity change from 0 to 164 [ 1248.685535][T14038] rock: directory entry would overflow storage [ 1248.698683][T14038] rock: sig=0x66, size=4, remaining=3 [ 1252.876311][T14057] loop7: detected capacity change from 0 to 512 [ 1254.260889][ T9744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.290116][T14067] loop8: detected capacity change from 0 to 2048 [ 1255.737272][T14069] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1255.969620][ T9744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.381864][T12924] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1257.123300][T14065] loop6: detected capacity change from 0 to 8192 [ 1257.405316][ T9744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.572053][T13941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1257.772166][ T9744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.832197][T13941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1257.957846][T13941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1258.197980][T13941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1258.840791][ T9744] bridge_slave_1: left allmulticast mode [ 1258.846917][ T9744] bridge_slave_1: left promiscuous mode [ 1258.854004][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.182493][ T9744] bridge_slave_0: left allmulticast mode [ 1259.188472][ T9744] bridge_slave_0: left promiscuous mode [ 1259.198660][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.676825][T14089] loop8: detected capacity change from 0 to 32768 [ 1261.647947][T14100] loop6: detected capacity change from 0 to 512 [ 1261.764436][T14089] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2679 (14089) [ 1262.475087][T14089] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1262.486719][T14089] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 1262.496768][T14089] BTRFS info (device loop8): using free-space-tree [ 1262.504642][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1262.505814][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1262.522658][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1262.534876][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1262.545870][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1262.556121][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1262.566390][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1262.579533][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1262.590858][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1262.601037][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1262.612026][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1262.629451][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1262.642150][T14089] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1262.730283][T14089] BTRFS error (device loop8): open_ctree failed [ 1263.784589][ T9744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.854219][ T9744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.883602][ T9744] bond0 (unregistering): Released all slaves [ 1265.290272][T13941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.476762][T13941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.832410][T13941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1265.843359][T13941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1266.948735][T12942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.956797][T12942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.974599][T12942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.982530][T12942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.241832][ T9744] hsr_slave_0: left promiscuous mode [ 1267.289576][ T9744] hsr_slave_1: left promiscuous mode [ 1267.309936][T14147] loop7: detected capacity change from 0 to 256 [ 1267.342755][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.350675][ T9744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.372031][T14147] exfat: Deprecated parameter 'utf8' [ 1267.458833][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.466978][ T9744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.591077][ T9744] veth1_macvtap: left promiscuous mode [ 1267.599946][ T9744] veth0_macvtap: left promiscuous mode [ 1267.606336][ T9744] veth1_vlan: left promiscuous mode [ 1267.612070][ T9744] veth0_vlan: left promiscuous mode [ 1268.390626][T14147] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 1268.971579][ T9744] team0 (unregistering): Port device team_slave_1 removed [ 1269.095142][T12924] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1269.155037][ T9744] team0 (unregistering): Port device team_slave_0 removed [ 1269.690378][T14159] loop6: detected capacity change from 0 to 512 [ 1270.725464][T14159] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1270.871721][T14159] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2693: invalid indirect mapped block 8 (level 2) [ 1271.281709][T13941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.386402][T14159] EXT4-fs (loop6): Remounting filesystem read-only [ 1271.394458][T14159] EXT4-fs (loop6): 1 truncate cleaned up [ 1271.403829][T14159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1271.866423][T14159] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 1271.971824][ T9722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.288249][ T9722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.478689][T11955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.616986][ T9722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.875009][ T9722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.044354][T13941] veth0_vlan: entered promiscuous mode [ 1273.376300][T13941] veth1_vlan: entered promiscuous mode [ 1274.007914][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.014776][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.670133][ T9722] dvmrp0 (unregistering): left allmulticast mode [ 1274.817550][ T9722] bond0 (unregistering): Released all slaves [ 1275.084925][T13941] veth0_macvtap: entered promiscuous mode [ 1275.196502][T13941] veth1_macvtap: entered promiscuous mode [ 1276.151819][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.163945][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.174387][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.185303][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.196901][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.208170][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.218432][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.229511][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.244150][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.256290][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.271945][T13941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.485193][ T9722] veth1_macvtap: left promiscuous mode [ 1276.491058][ T9722] veth0_macvtap: left promiscuous mode [ 1276.498277][ T9722] veth1_vlan: left promiscuous mode [ 1276.505572][ T9722] veth0_vlan: left promiscuous mode [ 1280.770802][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.781857][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.792232][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.804464][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.815067][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.826001][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.836229][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.852131][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.863426][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.874377][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.889750][T13941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.351191][T13941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.364523][T13941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.374861][T13941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.384184][T13941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.531558][T14218] loop9: detected capacity change from 0 to 512 [ 1282.177095][T14218] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1282.730323][T14218] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2706: invalid indirect mapped block 8 (level 2) [ 1282.926999][T14218] EXT4-fs (loop9): Remounting filesystem read-only [ 1283.013052][T14218] EXT4-fs (loop9): 1 truncate cleaned up [ 1283.020881][T14218] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1283.747792][T14218] EXT4-fs (loop9): changing journal_checksum during remount not supported; ignoring [ 1286.147962][T12990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.003045][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1289.288301][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1289.304883][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1289.356454][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1289.369312][ T5791] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1289.380898][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1289.889093][ T5791] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1291.300490][ T4816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.523614][ T5791] Bluetooth: hci5: command tx timeout [ 1291.669790][ T4816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.975917][ T4816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.234221][ T4816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.242800][T14284] loop9: detected capacity change from 0 to 512 [ 1293.388990][ T4816] bridge_slave_1: left allmulticast mode [ 1293.395342][ T4816] bridge_slave_1: left promiscuous mode [ 1293.403687][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.492649][T14284] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1293.602945][ T5791] Bluetooth: hci5: command tx timeout [ 1293.605700][ T4816] bridge_slave_0: left allmulticast mode [ 1293.615230][ T4816] bridge_slave_0: left promiscuous mode [ 1293.622205][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.635748][T14284] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2717: invalid indirect mapped block 8 (level 2) [ 1293.724177][T14284] EXT4-fs (loop9): Remounting filesystem read-only [ 1294.383929][T14284] EXT4-fs (loop9): 1 truncate cleaned up [ 1294.394428][T14284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1294.865692][T14284] EXT4-fs (loop9): changing journal_checksum during remount not supported; ignoring [ 1295.403498][ T4816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.714267][ T4816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.734372][ T5791] Bluetooth: hci5: command tx timeout [ 1295.834451][ T4816] bond0 (unregistering): Released all slaves [ 1295.834607][T12990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.890330][T14260] chnl_net:caif_netlink_parms(): no params data found [ 1296.458227][ T4816] hsr_slave_0: left promiscuous mode [ 1296.524677][ T4816] hsr_slave_1: left promiscuous mode [ 1296.554631][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.563426][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.710208][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.722042][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.772097][ T4816] veth1_macvtap: left promiscuous mode [ 1296.779102][ T4816] veth0_macvtap: left promiscuous mode [ 1296.785509][ T4816] veth1_vlan: left promiscuous mode [ 1296.791160][ T4816] veth0_vlan: left promiscuous mode [ 1297.772443][ T5791] Bluetooth: hci5: command tx timeout [ 1301.077587][ T4816] team0 (unregistering): Port device team_slave_1 removed [ 1301.214478][ T4816] team0 (unregistering): Port device team_slave_0 removed [ 1302.859548][T14342] loop8: detected capacity change from 0 to 512 [ 1303.514937][T14342] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1303.541932][T14342] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2731: invalid indirect mapped block 8 (level 2) [ 1303.622927][T14342] EXT4-fs (loop8): Remounting filesystem read-only [ 1303.630806][T14342] EXT4-fs (loop8): 1 truncate cleaned up [ 1303.640004][T14342] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.760250][T14260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.768356][T14260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.776577][T14260] bridge_slave_0: entered allmulticast mode [ 1303.791115][T14260] bridge_slave_0: entered promiscuous mode [ 1303.974854][T14260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.988315][T14260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.996574][T14260] bridge_slave_1: entered allmulticast mode [ 1304.006373][T14260] bridge_slave_1: entered promiscuous mode [ 1304.018173][T14342] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring [ 1304.553082][T12923] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.587219][T14260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.744890][T14260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.242764][T14260] team0: Port device team_slave_0 added [ 1306.266802][T14260] team0: Port device team_slave_1 added [ 1306.880838][T14260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.890115][T14260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.918545][T14260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.217377][T14260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.226081][T14260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.253007][T14260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.514960][T14360] loop8: detected capacity change from 0 to 32768 [ 1307.562766][T14360] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2735 (14360) [ 1307.616500][T14360] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1307.627483][T14360] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 1307.639080][T14360] BTRFS info (device loop8): using free-space-tree [ 1308.153906][T14360] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1308.155009][T14360] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1308.165599][T14360] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1308.175816][T14360] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1308.190019][T14360] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1308.201820][T14360] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1308.211918][T14360] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1308.222795][T14360] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1308.234165][T14360] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1308.246801][T14360] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1308.419321][T14260] hsr_slave_0: entered promiscuous mode [ 1308.498396][T14260] hsr_slave_1: entered promiscuous mode [ 1308.508891][T14260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1308.517726][T14260] Cannot create hsr debugfs directory [ 1308.517752][T14360] BTRFS error (device loop8): open_ctree failed [ 1309.072995][T11479] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1309.300674][T11479] usb 8-1: Using ep0 maxpacket: 32 [ 1309.770804][T11479] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1309.781947][T11479] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.790304][T11479] usb 8-1: Product: syz [ 1309.795490][T11479] usb 8-1: Manufacturer: syz [ 1309.800413][T11479] usb 8-1: SerialNumber: syz [ 1310.066707][T11479] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1310.605599][T11479] gspca_stk1135: reg_w 0x2 err -110 [ 1310.612323][T11479] gspca_stk1135: serial bus timeout: status=0x00 [ 1310.618923][T11479] gspca_stk1135: Sensor write failed [ 1310.624659][T11479] gspca_stk1135: serial bus timeout: status=0x00 [ 1310.631737][T11479] gspca_stk1135: Sensor write failed [ 1310.637359][T11479] gspca_stk1135: serial bus timeout: status=0x00 [ 1310.649259][T11479] gspca_stk1135: Sensor read failed [ 1310.656074][T11479] gspca_stk1135: serial bus timeout: status=0x00 [ 1310.662938][T11479] gspca_stk1135: Sensor read failed [ 1310.668367][T11479] gspca_stk1135: Detected sensor type unknown (0x0) [ 1310.678491][T11479] gspca_stk1135: serial bus timeout: status=0x00 [ 1310.685341][T11479] gspca_stk1135: Sensor read failed [ 1310.690868][T11479] gspca_stk1135: serial bus timeout: status=0x00 [ 1310.697729][T11479] gspca_stk1135: Sensor read failed [ 1310.704782][T11479] gspca_stk1135: serial bus timeout: status=0x00 [ 1310.712147][T11479] gspca_stk1135: Sensor write failed [ 1310.717749][T11479] gspca_stk1135: serial bus timeout: status=0x00 [ 1310.725572][T11479] gspca_stk1135: Sensor write failed [ 1310.731577][T11479] stk1135 8-1:64.0: probe with driver stk1135 failed with error -110 [ 1311.137044][T14411] loop9: detected capacity change from 0 to 512 [ 1311.442312][T14411] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1311.531353][T14411] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2744: invalid indirect mapped block 8 (level 2) [ 1311.677570][T14411] EXT4-fs (loop9): Remounting filesystem read-only [ 1311.719506][T14411] EXT4-fs (loop9): 1 truncate cleaned up [ 1311.727991][T14411] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1312.083442][T11479] usb 8-1: USB disconnect, device number 3 [ 1312.290862][T14411] EXT4-fs (loop9): changing journal_checksum during remount not supported; ignoring [ 1312.650448][T14260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1312.784761][T14260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1312.825650][T14422] loop8: detected capacity change from 0 to 512 [ 1313.113768][T14260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1313.134416][T12990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.162033][T14422] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1313.533007][T14260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1313.664946][T14422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1313.892010][T14422] Quota error (device loop8): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1313.903012][T14422] EXT4-fs warning (device loop8): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1314.654180][T12923] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1315.016725][T14260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.074027][T14260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.202207][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.210069][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.228982][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.237011][ T4816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.845446][T14260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.601446][T14468] loop8: detected capacity change from 0 to 512 [ 1319.843539][T14468] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1319.925968][T14260] veth0_vlan: entered promiscuous mode [ 1319.994828][T14260] veth1_vlan: entered promiscuous mode [ 1320.113128][T14260] veth0_macvtap: entered promiscuous mode [ 1320.138569][T14260] veth1_macvtap: entered promiscuous mode [ 1320.217490][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.230179][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.240854][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.251885][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.262340][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.277449][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.288792][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.292938][T14468] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2758: invalid indirect mapped block 8 (level 2) [ 1320.299606][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.325014][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.337136][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.353107][T14260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.409452][T14468] EXT4-fs (loop8): Remounting filesystem read-only [ 1320.413776][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.427051][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.438613][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.449911][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.460243][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.462271][T14468] EXT4-fs (loop8): 1 truncate cleaned up [ 1320.475664][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.483342][T14468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1320.491091][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.513594][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.524057][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.536124][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.551891][T14260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.578920][T14260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.590233][T14260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.599630][T14260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.608974][T14260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.654477][T14468] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring [ 1322.307249][T14481] loop9: detected capacity change from 0 to 512 [ 1322.763937][T12923] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.765967][T14481] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1323.402422][T14481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1323.964834][T14481] Quota error (device loop9): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1323.975932][T14481] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1324.937472][T12990] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1329.479218][T14551] loop7: detected capacity change from 0 to 512 [ 1329.673464][T14551] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1330.446000][T14551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1331.012914][T14551] Quota error (device loop7): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1331.027864][T14551] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1331.323026][ T4816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.334629][ T4816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.849821][ T9762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.858207][ T9762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.579718][T14569] dvmrp0: entered allmulticast mode [ 1332.594519][T12830] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1335.896597][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.903785][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.122372][T14600] netlink: 592 bytes leftover after parsing attributes in process `syz.6.2786'. [ 1336.561651][T14603] loop9: detected capacity change from 0 to 512 [ 1336.725006][T14603] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1336.733887][T14603] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 1336.836895][T14603] EXT4-fs (loop9): 1 truncate cleaned up [ 1336.845247][T14603] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.122998][T14603] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1337.441882][T14605] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1337.760742][T12990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.587043][T14613] loop9: detected capacity change from 0 to 128 [ 1338.722114][T14613] VFS: Found a Xenix FS (block size = 1024) on device loop9 [ 1339.341478][T12990] sysv_free_block: flc_count > flc_size [ 1339.347427][T12990] sysv_free_block: flc_count > flc_size [ 1339.353811][T12990] sysv_free_block: flc_count > flc_size [ 1339.359594][T12990] sysv_free_block: flc_count > flc_size [ 1339.365625][T12990] sysv_free_block: flc_count > flc_size [ 1339.371593][T12990] sysv_free_block: flc_count > flc_size [ 1339.378952][T12990] sysv_free_block: flc_count > flc_size [ 1339.384945][T12990] sysv_free_block: flc_count > flc_size [ 1339.390724][T12990] sysv_free_block: flc_count > flc_size [ 1339.396767][T12990] sysv_free_block: flc_count > flc_size [ 1339.403788][T12990] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1340.171207][T14623] loop6: detected capacity change from 0 to 1024 [ 1342.528727][T14643] netlink: 592 bytes leftover after parsing attributes in process `syz.7.2800'. [ 1343.216573][T14648] loop0: detected capacity change from 0 to 512 [ 1343.560477][T14648] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1343.569238][T14648] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1343.928691][T14648] EXT4-fs (loop0): 1 truncate cleaned up [ 1343.936742][T14648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1344.164322][T14648] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1344.777530][T14260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.072013][ T1678] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1345.248870][ T1678] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1345.265179][ T1678] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1345.278006][ T1678] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1345.288265][ T1678] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.489962][T14662] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1345.628926][ T1678] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1347.775883][T14687] netlink: 592 bytes leftover after parsing attributes in process `syz.6.2813'. [ 1349.493443][ T1678] usb 10-1: USB disconnect, device number 2 [ 1350.196448][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2818'. [ 1350.211145][T14704] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2818'. [ 1352.924750][T14714] loop6: detected capacity change from 0 to 512 [ 1353.012069][T14714] EXT4-fs: Mount option(s) incompatible with ext3 [ 1353.681827][T14721] netlink: 592 bytes leftover after parsing attributes in process `syz.8.2825'. [ 1356.156795][T14739] loop8: detected capacity change from 0 to 1024 [ 1357.427042][ T4816] hfsplus: b-tree write err: -5, ino 4 [ 1359.194572][T14758] netlink: 592 bytes leftover after parsing attributes in process `syz.7.2837'. [ 1361.445638][T12924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1361.550297][T14772] loop6: detected capacity change from 0 to 1024 [ 1361.556216][T12924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1361.596003][T12924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1361.718367][T12924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1361.744556][T12924] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1361.849848][T12924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1361.948150][T14778] dvmrp0: entered allmulticast mode [ 1362.040826][T14772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1362.895672][T11955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.650911][T14788] loop9: detected capacity change from 0 to 128 [ 1363.746515][T14788] VFS: Found a Xenix FS (block size = 1024) on device loop9 [ 1364.322387][T12924] Bluetooth: hci0: command tx timeout [ 1364.364029][T12990] sysv_free_block: flc_count > flc_size [ 1364.370002][T12990] sysv_free_block: flc_count > flc_size [ 1364.376105][T12990] sysv_free_block: flc_count > flc_size [ 1364.382902][T12990] sysv_free_block: flc_count > flc_size [ 1364.388670][T12990] sysv_free_block: flc_count > flc_size [ 1364.394637][T12990] sysv_free_block: flc_count > flc_size [ 1364.405310][T12990] sysv_free_block: flc_count > flc_size [ 1364.412903][T12990] sysv_free_block: flc_count > flc_size [ 1364.418910][T12990] sysv_free_block: flc_count > flc_size [ 1364.424900][T12990] sysv_free_block: flc_count > flc_size [ 1364.431783][T12990] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1364.868728][T14769] chnl_net:caif_netlink_parms(): no params data found [ 1365.341858][T14805] netlink: 592 bytes leftover after parsing attributes in process `syz.0.2849'. [ 1366.474677][T12924] Bluetooth: hci0: command tx timeout [ 1368.521855][T12924] Bluetooth: hci0: command tx timeout [ 1368.852444][ T29] audit: type=1326 audit(2000000673.170:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.9.2854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1368.916507][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.924721][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.933044][T14769] bridge_slave_0: entered allmulticast mode [ 1368.946010][T14769] bridge_slave_0: entered promiscuous mode [ 1369.034723][ T29] audit: type=1326 audit(2000000673.270:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.9.2854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1369.057304][ T29] audit: type=1326 audit(2000000673.270:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.9.2854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1369.081089][ T29] audit: type=1326 audit(2000000673.270:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.9.2854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1369.104176][ T29] audit: type=1326 audit(2000000673.380:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.9.2854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1369.132189][ T29] audit: type=1326 audit(2000000673.390:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.9.2854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1369.154768][ T29] audit: type=1326 audit(2000000673.400:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.9.2854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1369.181789][ T29] audit: type=1326 audit(2000000673.400:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.9.2854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1369.204692][ T29] audit: type=1326 audit(2000000673.440:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.9.2854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1369.227930][T14769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.228571][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.229468][T14769] bridge_slave_1: entered allmulticast mode [ 1369.233434][T14769] bridge_slave_1: entered promiscuous mode [ 1369.366821][T14828] input: syz1 as /devices/virtual/input/input30 [ 1369.735669][T14831] loop7: detected capacity change from 0 to 128 [ 1369.792320][T14831] VFS: Found a Xenix FS (block size = 1024) on device loop7 [ 1369.988836][T14769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1370.192954][T14769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.677391][T12924] Bluetooth: hci0: command tx timeout [ 1370.864712][T12830] sysv_free_block: flc_count > flc_size [ 1370.870678][T12830] sysv_free_block: flc_count > flc_size [ 1370.876749][T12830] sysv_free_block: flc_count > flc_size [ 1370.882952][T12830] sysv_free_block: flc_count > flc_size [ 1370.888732][T12830] sysv_free_block: flc_count > flc_size [ 1370.895812][T12830] sysv_free_block: flc_count > flc_size [ 1370.911599][T12830] sysv_free_block: flc_count > flc_size [ 1370.918910][T12830] sysv_free_block: flc_count > flc_size [ 1370.925285][T12830] sysv_free_block: flc_count > flc_size [ 1370.931078][T12830] sysv_free_block: flc_count > flc_size [ 1370.938077][T12830] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1371.428940][T14769] team0: Port device team_slave_0 added [ 1371.535044][T14769] team0: Port device team_slave_1 added [ 1372.161652][T14769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.169006][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.200074][T14769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.223484][T14769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.231150][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.259936][T14769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.872465][T14769] hsr_slave_0: entered promiscuous mode [ 1373.085080][T14769] hsr_slave_1: entered promiscuous mode [ 1373.172246][T14769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.180114][T14769] Cannot create hsr debugfs directory [ 1373.565833][T14871] loop9: detected capacity change from 0 to 256 [ 1373.769593][T12924] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1374.180245][T14871] exFAT-fs (loop9): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1377.339180][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2875'. [ 1377.348899][T14894] bridge_slave_1: left allmulticast mode [ 1377.355163][T14894] bridge_slave_1: left promiscuous mode [ 1377.362356][T14894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.586064][T14894] bridge_slave_0: left allmulticast mode [ 1377.592496][T14894] bridge_slave_0: left promiscuous mode [ 1377.599795][T14894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.609899][T14769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1378.733553][T14769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1378.918040][T14769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1378.930187][T14898] loop7: detected capacity change from 0 to 32768 [ 1379.032419][T14769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1379.344739][T14898] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1381.028769][T14917] loop0: detected capacity change from 0 to 4096 [ 1381.303300][T14924] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1381.470293][T14769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.525209][T14898] XFS (loop7): Ending clean mount [ 1381.598674][T14898] XFS (loop7): Quotacheck needed: Please wait. [ 1381.881534][T14769] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.939971][T14928] loop6: detected capacity change from 0 to 64 [ 1382.011731][T14898] XFS (loop7): Quotacheck: Done. [ 1382.085639][T12942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.093590][T12942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.161511][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.169470][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.472288][T14769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1382.852418][T12830] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1385.480292][T14769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.244031][T14769] veth0_vlan: entered promiscuous mode [ 1386.286127][T14769] veth1_vlan: entered promiscuous mode [ 1386.441612][T14769] veth0_macvtap: entered promiscuous mode [ 1386.496328][T14769] veth1_macvtap: entered promiscuous mode [ 1386.618746][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.636716][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.647913][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.658839][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.669205][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.680186][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.691750][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.703060][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.713519][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.724448][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.739765][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.752048][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.768337][T14769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.790445][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.804141][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.815365][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.826320][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.836668][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.852362][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.864045][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.874961][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.885303][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.896200][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.907750][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.923775][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.940486][T14769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.969309][T14769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.979432][T14769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.988791][T14769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.998210][T14769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.553558][ T5791] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1397.579134][ T4056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.587394][ T4056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.620330][ T4588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.628578][ T4588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.796079][ T1678] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1397.909196][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.916194][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.127419][ T1678] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1398.139804][ T1678] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1398.150918][ T1678] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1398.160945][ T1678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.322788][T15028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1398.378669][ T1678] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1401.756857][T15051] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1403.298666][T11479] usb 1-1: USB disconnect, device number 47 [ 1408.748004][T15092] loop6: detected capacity change from 0 to 4096 [ 1408.828969][T15092] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1410.163349][T11479] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1410.387733][T15092] ntfs3(loop6): Failed to read $UpCase (-4). [ 1410.530809][T11479] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1410.543585][T11479] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1410.554847][T11479] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1410.566731][T11479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.829736][T15102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1410.920883][T11479] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1414.086017][T11479] usb 2-1: USB disconnect, device number 66 [ 1414.632699][T15141] kvm: kvm [15138]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 1415.346798][ T1678] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1415.711485][ T1678] usb 2-1: Using ep0 maxpacket: 16 [ 1416.534787][T12924] Bluetooth: hci5: command 0x0406 tx timeout [ 1416.598141][T11479] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1416.656214][ T1678] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 1416.666145][ T1678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.675882][ T1678] usb 2-1: Product: syz [ 1416.680364][ T1678] usb 2-1: Manufacturer: syz [ 1416.686948][ T1678] usb 2-1: SerialNumber: syz [ 1416.719120][ T1678] usb 2-1: config 0 descriptor?? [ 1416.818340][ T1678] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 1416.825322][ T1678] usb 2-1: No valid video chain found. [ 1416.964043][T11479] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1416.973165][T11479] usb 1-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 1416.983888][T11479] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1416.993578][T11479] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1417.005655][T11479] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 173, changing to 11 [ 1417.018999][T11479] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 17911, setting to 1024 [ 1417.107334][ T1678] usb 2-1: USB disconnect, device number 67 [ 1417.262206][T11479] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1417.277619][T11479] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1417.287835][T11479] usb 1-1: Product: syz [ 1417.292610][T11479] usb 1-1: Manufacturer: syz [ 1417.434321][T15156] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1417.460290][T11479] cdc_wdm 1-1:1.0: skipping garbage [ 1417.468332][T11479] cdc_wdm 1-1:1.0: skipping garbage [ 1417.480628][T11479] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1417.487075][T11479] cdc_wdm 1-1:1.0: Unknown control protocol [ 1417.739518][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1417.746611][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1417.754198][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1417.761126][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1417.772946][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1417.779881][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1417.791424][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1417.798364][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1417.805843][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1417.812763][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1417.825190][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1417.832204][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1417.840689][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1417.847594][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1417.858590][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1417.865519][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1417.879648][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1417.886585][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1417.896031][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1417.902960][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1418.017192][T15161] loop9: detected capacity change from 0 to 4096 [ 1418.158468][T15161] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1418.432326][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1418.441718][ T5839] usb 1-1: USB disconnect, device number 48 [ 1418.465116][T15156] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 1418.882655][T15161] overlay: Unknown parameter '/' [ 1421.430461][ T1678] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1421.687057][ T1678] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1421.698734][ T1678] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1421.709404][ T1678] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1421.720087][ T1678] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.812829][T15190] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1421.970545][ T1678] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1424.065406][T15220] loop7: detected capacity change from 0 to 4096 [ 1424.274622][T15220] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1425.494269][ T5839] usb 10-1: USB disconnect, device number 3 [ 1425.894320][T15220] overlay: Unknown parameter '/' [ 1426.636203][ T1678] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1426.902156][ T1678] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1426.915003][ T1678] usb 10-1: config 0 has no interface number 0 [ 1427.040831][ T1678] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1427.050664][ T1678] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.059527][ T1678] usb 10-1: Product: syz [ 1427.064155][ T1678] usb 10-1: Manufacturer: syz [ 1427.069127][ T1678] usb 10-1: SerialNumber: syz [ 1427.226521][ T1678] usb 10-1: config 0 descriptor?? [ 1427.508309][ T1678] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1427.645758][ T1678] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1427.658071][ T1678] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1427.666642][ T1678] usb 10-1: media controller created [ 1427.844928][ T1678] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1429.884752][ T1678] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1429.948466][T15249] kvm: kvm [15248]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 1430.214374][T15252] loop7: detected capacity change from 0 to 512 [ 1430.538325][T15252] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 1430.703042][ T1678] usb 10-1: USB disconnect, device number 4 [ 1431.779448][T15252] EXT4-fs (loop7): failed to open journal device unknown-block(11,127) -6 [ 1433.403285][ T5839] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1433.701597][ T5839] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1433.713321][ T5839] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1433.723836][ T5839] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1433.733368][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.058345][T15278] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1434.434879][ T5839] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1438.245740][T15310] loop6: detected capacity change from 0 to 128 [ 1438.388523][ T5839] usb 1-1: USB disconnect, device number 49 [ 1438.474899][T15310] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1438.653695][T15310] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1441.130244][T15332] loop1: detected capacity change from 0 to 4096 [ 1441.443408][T15332] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1444.266428][T15336] loop9: detected capacity change from 0 to 32768 [ 1444.266937][T15332] ntfs3(loop1): Failed to read $UpCase (-4). [ 1444.471766][T15336] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1444.480454][T15336] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1445.098626][T15336] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 3ms [ 1445.355423][ T1678] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1445.362735][ T1678] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1446.425889][ T1678] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 994ms [ 1446.437885][ T1678] gfs2: fsid=syz:syz.0: jid=0: Done [ 1446.482460][T15336] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1446.548492][T15336] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 1447.340891][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2991'. [ 1447.853209][T15362] veth0_macvtap: left promiscuous mode [ 1449.043664][T15159] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1449.104326][T15357] loop0: detected capacity change from 0 to 8192 [ 1449.295529][T15159] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1449.308583][T15159] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1449.319449][T15159] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1449.329042][T15159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.429763][T15357] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1449.496035][T15375] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1449.572671][T15159] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1450.213437][T15387] loop7: detected capacity change from 0 to 1024 [ 1450.523585][T15392] loop1: detected capacity change from 0 to 512 [ 1450.908477][T15387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1450.939568][T15392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.954148][T15392] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.815948][T12830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.613386][ T5839] usb 7-1: USB disconnect, device number 12 [ 1453.762326][T15409] loop7: detected capacity change from 0 to 4096 [ 1453.822740][T15409] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1454.016769][T15416] loop9: detected capacity change from 0 to 2048 [ 1454.395438][T15416] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1454.475353][T14769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.577686][T15421] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1459.060573][ T1678] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1459.196943][T15454] loop9: detected capacity change from 0 to 1024 [ 1459.320618][ T1678] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1459.333016][ T1678] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1459.343767][ T1678] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1459.353435][ T1678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.579776][T15454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1459.676642][T15451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1459.706768][ T1678] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.369383][T12990] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.363286][ T1678] usb 2-1: USB disconnect, device number 68 [ 1462.994108][T15484] loop7: detected capacity change from 0 to 256 [ 1463.584278][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1463.591135][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1463.824454][T15484] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1472.862165][T15538] loop9: detected capacity change from 0 to 512 [ 1473.905145][T15540] loop7: detected capacity change from 0 to 32768 [ 1474.059531][T15538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1474.073305][T15538] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1474.358810][T15159] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1474.367392][ T1678] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1474.382021][T15540] ERROR: (device loop7): diWrite: ixpxd invalid [ 1474.382021][T15540] [ 1474.428117][T15540] ERROR: (device loop7): remounting filesystem as read-only [ 1474.436226][T15540] ERROR: (device loop7): txAbort: [ 1474.436226][T15540] [ 1474.605238][ T29] audit: type=1800 audit(2000000772.849:100): pid=15538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3033" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1474.835882][T15540] ERROR: (device loop7): dtReadFirst: btstack overrun [ 1474.835882][T15540] [ 1474.845863][T15540] ERROR: (device loop7): remounting filesystem as read-only [ 1474.858138][T15540] btstack dump: [ 1474.863176][T15540] bn = 0, index = 0 [ 1474.867424][T15540] bn = 2c, index = 0 [ 1474.872023][T15540] bn = 0, index = 0 [ 1474.876254][T15540] bn = 2c, index = 0 [ 1474.880585][T15540] bn = 0, index = 0 [ 1474.884983][T15540] bn = 2c, index = 0 [ 1474.889323][T15540] bn = 0, index = 0 [ 1474.893603][T15540] ===================================================== [ 1474.901151][T15540] BUG: KMSAN: uninit-value in dtReadFirst+0x138b/0x13b0 [ 1474.908673][T15540] dtReadFirst+0x138b/0x13b0 [ 1474.913659][T15540] jfs_readdir+0x13a1/0x6450 [ 1474.918840][T15540] wrap_directory_iterator+0xf3/0x190 [ 1474.925903][T15540] shared_jfs_readdir+0x3c/0x50 [ 1474.931036][T15540] iterate_dir+0x5b3/0x9e0 [ 1474.936268][T15540] __se_compat_sys_getdents+0x16d/0x530 [ 1474.942413][T15540] __ia32_compat_sys_getdents+0x93/0xe0 [ 1474.948513][T15540] ia32_sys_call+0x2124/0x4180 [ 1474.953679][T15540] __do_fast_syscall_32+0xb0/0x110 [ 1474.959339][T15540] do_fast_syscall_32+0x38/0x80 [ 1474.968802][T15540] do_SYSENTER_32+0x1f/0x30 [ 1474.973621][T15540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1474.981800][T15540] [ 1474.984403][T15540] Local variable btstack created at: [ 1474.990103][T15540] jfs_readdir+0xe2/0x6450 [ 1474.994907][T15540] wrap_directory_iterator+0xf3/0x190 [ 1475.001011][T15540] [ 1475.003633][T15540] CPU: 0 UID: 0 PID: 15540 Comm: syz.7.3032 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 1475.014966][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1475.025516][T15540] ===================================================== [ 1475.034001][T15540] Disabling lock debugging due to kernel taint [ 1475.040321][T15540] Kernel panic - not syncing: kmsan.panic set ... [ 1475.046940][T15540] CPU: 0 UID: 0 PID: 15540 Comm: syz.7.3032 Tainted: G B 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 1475.059558][T15540] Tainted: [B]=BAD_PAGE [ 1475.063895][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1475.074161][T15540] Call Trace: [ 1475.077603][T15540] [ 1475.080736][T15540] dump_stack_lvl+0x216/0x2d0 [ 1475.085718][T15540] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1475.091793][T15540] dump_stack+0x1e/0x24 [ 1475.096218][T15540] panic+0x4e2/0xcf0 [ 1475.100391][T15540] ? kmsan_get_metadata+0x71/0x1c0 [ 1475.105774][T15540] kmsan_report+0x2c7/0x2d0 [ 1475.110527][T15540] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1475.116750][T15540] ? __msan_warning+0x95/0x120 [ 1475.121793][T15540] ? dtReadFirst+0x138b/0x13b0 [ 1475.126827][T15540] ? jfs_readdir+0x13a1/0x6450 [ 1475.131864][T15540] ? wrap_directory_iterator+0xf3/0x190 [ 1475.137711][T15540] ? shared_jfs_readdir+0x3c/0x50 [ 1475.143042][T15540] ? iterate_dir+0x5b3/0x9e0 [ 1475.147937][T15540] ? __se_compat_sys_getdents+0x16d/0x530 [ 1475.153970][T15540] ? __ia32_compat_sys_getdents+0x93/0xe0 [ 1475.159999][T15540] ? ia32_sys_call+0x2124/0x4180 [ 1475.165198][T15540] ? __do_fast_syscall_32+0xb0/0x110 [ 1475.170728][T15540] ? do_fast_syscall_32+0x38/0x80 [ 1475.175993][T15540] ? do_SYSENTER_32+0x1f/0x30 [ 1475.180997][T15540] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1475.187849][T15540] ? vprintk_default+0x3e/0x50 [ 1475.192901][T15540] ? vprintk+0xee/0xf0 [ 1475.197183][T15540] ? _printk+0x157/0x190 [ 1475.201743][T15540] ? kmsan_get_metadata+0x13e/0x1c0 [ 1475.207184][T15540] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1475.213256][T15540] __msan_warning+0x95/0x120 [ 1475.218144][T15540] dtReadFirst+0x138b/0x13b0 [ 1475.223033][T15540] ? __se_compat_sys_ioctl+0x391/0x1020 [ 1475.228901][T15540] jfs_readdir+0x13a1/0x6450 [ 1475.233785][T15540] ? is_mmconf_reserved+0x690/0x7c0 [ 1475.239268][T15540] ? add_kallsyms+0xc00/0x1640 [ 1475.244282][T15540] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1475.250377][T15540] ? plist_add+0xad8/0xc70 [ 1475.255153][T15540] ? kmsan_get_metadata+0x13e/0x1c0 [ 1475.260614][T15540] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1475.266715][T15540] ? __rcu_read_unlock+0x7b/0xe0 [ 1475.271981][T15540] ? aa_file_perm+0x3de/0x1780 [ 1475.277109][T15540] ? __se_compat_sys_ioctl+0x391/0x1020 [ 1475.282976][T15540] ? kmsan_get_metadata+0x13e/0x1c0 [ 1475.288418][T15540] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1475.295050][T15540] ? kmsan_get_metadata+0x13e/0x1c0 [ 1475.300491][T15540] ? kmsan_get_metadata+0x13e/0x1c0 [ 1475.305951][T15540] wrap_directory_iterator+0xf3/0x190 [ 1475.311622][T15540] ? __pfx_jfs_readdir+0x10/0x10 [ 1475.316833][T15540] shared_jfs_readdir+0x3c/0x50 [ 1475.321986][T15540] ? __pfx_shared_jfs_readdir+0x10/0x10 [ 1475.327844][T15540] iterate_dir+0x5b3/0x9e0 [ 1475.332545][T15540] ? kmsan_get_metadata+0x13e/0x1c0 [ 1475.338039][T15540] __se_compat_sys_getdents+0x16d/0x530 [ 1475.343900][T15540] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1475.350547][T15540] ? __pfx_compat_filldir+0x10/0x10 [ 1475.356049][T15540] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1475.362123][T15540] __ia32_compat_sys_getdents+0x93/0xe0 [ 1475.368002][T15540] ia32_sys_call+0x2124/0x4180 [ 1475.373021][T15540] __do_fast_syscall_32+0xb0/0x110 [ 1475.378390][T15540] ? irqentry_exit+0x16/0x60 [ 1475.383270][T15540] do_fast_syscall_32+0x38/0x80 [ 1475.388369][T15540] do_SYSENTER_32+0x1f/0x30 [ 1475.393102][T15540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1475.399769][T15540] RIP: 0023:0xf7f02579 [ 1475.404028][T15540] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1475.423918][T15540] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 000000000000008d [ 1475.432606][T15540] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001fc0 [ 1475.440815][T15540] RDX: 00000000000000b8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1475.448992][T15540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1475.457181][T15540] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1475.465368][T15540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1475.473583][T15540] [ 1475.477117][T15540] Kernel Offset: disabled [ 1475.481544][T15540] Rebooting in 86400 seconds..